This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/yLs8OPl8oziwieEbbfdCNTVMlCk.roa File: yLs8OPl8oziwieEbbfdCNTVMlCk.roa (raw, json) Hash identifier: YN8vE2F6YUz/M7MQ323DHctfvFexIsnM+ZcFWFilXs4= Subject key identifier: C8:BB:3C:38:F9:7C:A3:38:B0:89:E1:1B:6D:F7:42:35:35:4C:94:29 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED7D6FD09D054D02B4AFAEFC572801 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/yLs8OPl8oziwieEbbfdCNTVMlCk.roa Signing time: Fri 02 Jan 2026 04:18:17 +0000 ROA not before: Fri 02 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34577 IP address blocks: 85.187.19.0/24 maxlen: 24 85.187.19.5/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7d:6f:d0:9d:05:4d:02:b4:af:ae:fc:57:28:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8bb3c38f97ca338b089e11b6df74235354c9429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:12:33:e1:3a:aa:92:8e:25:63:66:7e:93: a4:3c:53:e7:f2:d7:05:2a:69:d0:22:0d:af:a8:25: 97:43:f5:91:f0:27:ab:35:f0:be:80:c1:df:eb:76: a2:04:7f:b3:16:67:d3:da:03:e7:c9:77:92:20:e7: f2:ae:d0:fe:67:37:b5:7d:63:14:a0:a4:84:7f:88: 67:eb:04:4b:c9:f0:47:09:ec:cf:9b:d6:42:8c:1c: a8:e5:38:a2:83:74:a1:4e:1d:b2:2a:97:fa:47:1b: 3d:7f:ef:b6:f2:6b:f5:93:ed:f6:50:99:4e:37:ee: 37:23:1a:ff:22:14:e5:dc:e2:91:69:bc:27:b0:13: 4b:86:00:dd:9c:db:ca:49:a9:4d:0e:f8:43:66:ad: 47:a6:7d:ac:65:4f:32:a5:d2:d1:2b:1d:68:6c:13: 44:a3:50:06:4d:59:a7:01:98:90:7f:a8:89:da:b1: b4:0c:42:e7:cb:91:7c:dc:6b:3e:35:19:5a:ed:ce: 4f:a4:f6:31:32:53:76:c6:2d:51:59:4a:d4:83:bb: 7a:99:8f:19:44:60:0a:74:c5:2a:37:e0:03:8a:95: 10:5a:84:51:2f:dd:b1:38:d0:f0:bf:35:4f:68:76: 10:f3:d7:51:68:c2:45:93:b8:f8:31:67:e5:c0:76: 6d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BB:3C:38:F9:7C:A3:38:B0:89:E1:1B:6D:F7:42:35:35:4C:94:29 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/yLs8OPl8oziwieEbbfdCNTVMlCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.19.0/24 Signature Algorithm: sha256WithRSAEncryption d6:9b:2d:93:9a:b9:39:e8:f5:f4:b5:1b:c5:37:1e:c1:df:b3: df:a7:96:3c:ac:c7:a6:6d:f3:fd:5e:81:1e:ed:42:16:2a:c0: a1:22:c6:ec:30:ef:4d:5c:9a:70:e6:41:87:78:00:23:f7:b6: e9:13:0d:d6:31:19:a7:e1:3d:b2:f5:ed:20:2e:5c:ee:b2:c5: e0:43:90:df:f7:89:7e:77:e7:42:c6:fc:c1:32:cb:e3:91:c1: 6d:85:28:52:e6:b9:25:c8:87:0c:1a:bb:d2:95:a2:3f:26:e9: 09:f8:4d:ec:f7:c2:30:33:ad:df:7a:5e:ea:59:ab:01:ef:0b: 95:d2:fa:5c:e3:ef:e7:fa:03:a4:2c:0d:c3:45:75:f3:1b:3f: 3a:d3:e1:ab:ef:9b:2c:f3:eb:ea:f0:42:64:c0:3a:a5:15:80: 0e:b3:4d:0a:9a:d5:65:29:1a:39:5e:6f:ca:95:f3:94:35:1e: 81:c1:22:df:9c:8c:33:70:03:a2:77:89:7c:b1:ea:64:3e:c3: ca:69:14:7c:61:11:4b:94:05:76:28:33:27:4e:41:e3:a5:18: a1:55:a2:6c:6d:f6:e8:12:8e:55:ae:65:63:0c:bf:95:d2:04: f6:35:0e:b4:1d:5f:55:c1:41:77:bc:54:cb:13:8a:9b:24:20: 0b:6b:9c:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87X1v0J0FTQK0r678VygBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGJiM2MzOGY5N2NhMzM4YjA4OWUxMWI2ZGY3NDIzNTM1NGM5NDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOQSM+E6qpKOJWNmfpOkPFPn8tcF KmnQIg2vqCWXQ/WR8CerNfC+gMHf63aiBH+zFmfT2gPnyXeSIOfyrtD+Zze1fWMU oKSEf4hn6wRLyfBHCezPm9ZCjByo5Tiig3ShTh2yKpf6Rxs9f++28mv1k+32UJlO N+43Ixr/IhTl3OKRabwnsBNLhgDdnNvKSalNDvhDZq1Hpn2sZU8ypdLRKx1obBNE o1AGTVmnAZiQf6iJ2rG0DELny5F83Gs+NRla7c5PpPYxMlN2xi1RWUrUg7t6mY8Z RGAKdMUqN+ADipUQWoRRL92xONDwvzVPaHYQ89dRaMJFk7j4MWflwHZtmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMi7PDj5fKM4sInhG233QjU1TJQpMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEveUxzOE9QbDhveml3aWVFYmJmZENOVFZNbENrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbsTMA0G CSqGSIb3DQEBCwUAA4IBAQDWmy2Tmrk56PX0tRvFNx7B37Pfp5Y8rMembfP9XoEe 7UIWKsChIsbsMO9NXJpw5kGHeAAj97bpEw3WMRmn4T2y9e0gLlzussXgQ5Df94l+ d+dCxvzBMsvjkcFthShS5rklyIcMGrvSlaI/JukJ+E3s98IwM63fel7qWasB7wuV 0vpc4+/n+gOkLA3DRXXzGz860+Gr75ss8+vq8EJkwDqlFYAOs00KmtVlKRo5Xm/K lfOUNR6BwSLfnIwzcAOid4l8sepkPsPKaRR8YRFLlAV2KDMnTkHjpRihVaJsbfbo Eo5VrmVjDL+V0gT2NQ60HV9VwUF3vFTLE4qbJCALa5wG -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:32 2026 by rpki-client