This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/fSZGjk9Dk0mcd_7taiWwjpJVUC0.roa File: fSZGjk9Dk0mcd_7taiWwjpJVUC0.roa (raw, json) Hash identifier: uw1MJIAkmSCILJza7BPkxBqFII488UuH/68xrq7Fpq8= Subject key identifier: 7D:26:46:8E:4F:43:93:49:9C:77:FE:ED:6A:25:B0:8E:92:55:50:2D Certificate issuer: /CN=59bff5f16ecb268b1597da1b3ad30af40fce7717 Certificate serial: 019B7DCB43097162EBDB0B39B97BE2BF8684 Authority key identifier: 59:BF:F5:F1:6E:CB:26:8B:15:97:DA:1B:3A:D3:0A:F4:0F:CE:77:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/fSZGjk9Dk0mcd_7taiWwjpJVUC0.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54113 IP address blocks: 185.199.108.0/22 maxlen: 22 185.199.108.0/24 maxlen: 24 185.199.109.0/24 maxlen: 24 185.199.110.0/24 maxlen: 24 185.199.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/Wb_18W7LJosVl9obOtMK9A_Odxc.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/Wb_18W7LJosVl9obOtMK9A_Odxc.mft rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:43:09:71:62:eb:db:0b:39:b9:7b:e2:bf:86:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59bff5f16ecb268b1597da1b3ad30af40fce7717 Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d26468e4f4393499c77feed6a25b08e9255502d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6c:68:d3:a0:d1:19:b2:11:00:6e:9a:fb:b5: ab:15:39:2c:9c:db:b7:3c:ea:a3:b7:f2:cc:5b:fe: 67:c9:d8:61:1d:27:bd:59:0b:22:f3:e4:30:24:e9: c8:3c:25:af:f3:4b:d3:ea:7b:a9:39:44:2c:69:a6: 4c:f4:36:b5:11:22:c9:2a:39:14:e2:c9:db:8a:96: 51:c7:fd:a1:b2:94:d3:5b:e6:a5:7d:c0:a6:ed:0f: 6d:4c:27:76:8a:b0:a8:8e:7b:d4:25:8e:3b:24:1e: a9:83:f3:84:3f:c5:69:eb:32:c1:a7:29:c8:42:62: c1:35:97:81:b3:b1:03:97:16:4f:c0:23:b3:1f:99: a6:7c:9c:2e:3e:96:b4:e5:18:09:8c:1c:d0:77:2d: fe:d9:0a:7d:ad:0a:8d:87:cf:64:9b:3c:b0:93:f7: 7b:3e:2f:93:ce:ca:ef:82:57:23:f5:85:59:36:6d: 5d:c2:05:cf:d0:8a:1b:0b:5d:53:c8:95:ba:22:cb: 77:18:9d:f0:e9:ff:cc:ff:6e:53:70:fd:18:eb:80: 64:3f:7e:d0:d9:6c:d3:e4:b6:95:50:53:6d:ed:51: b7:ff:0f:48:7c:1c:fc:0a:7e:b8:39:46:67:db:90: a2:8a:5f:f4:a8:d2:f7:98:7d:b8:0a:a3:b1:f7:c0: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:26:46:8E:4F:43:93:49:9C:77:FE:ED:6A:25:B0:8E:92:55:50:2D X509v3 Authority Key Identifier: keyid:59:BF:F5:F1:6E:CB:26:8B:15:97:DA:1B:3A:D3:0A:F4:0F:CE:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/fSZGjk9Dk0mcd_7taiWwjpJVUC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/Wb_18W7LJosVl9obOtMK9A_Odxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.108.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:bc:6c:f6:ea:73:d8:8b:be:54:82:f0:0d:6a:8f:0f:6b:5b: d1:2f:d6:67:5c:d8:1f:4e:10:53:6c:d4:3c:68:f3:70:97:2d: 3b:b0:f6:17:32:31:37:76:4e:d5:ab:8b:02:ef:b1:0a:92:cf: a7:6b:67:89:1f:1d:8c:f0:6f:8d:30:d8:ae:29:7e:aa:42:28: 9d:83:04:98:e2:b9:95:e7:4f:aa:98:64:f6:ab:ea:00:9a:d9: 36:6e:71:48:6a:21:a4:fe:59:e8:1f:8f:e3:1d:a3:d2:d8:86: 6a:89:45:3b:b2:e4:30:c6:41:f5:b8:1f:fa:2c:6b:bf:1f:b4: 71:79:7a:42:d6:f5:cc:ab:b9:b9:55:59:86:b5:25:16:33:e6: 70:96:00:92:48:4a:71:ae:f3:44:2e:5f:c1:d0:0b:4f:88:a4: 1e:b6:82:48:a7:5b:18:c7:ce:87:67:0f:a0:2f:c0:bf:78:40: 1e:7d:1c:c1:45:27:a4:5a:89:64:0a:8f:5d:4c:1b:eb:73:10: 29:ce:51:4b:1e:47:4b:26:bd:8f:ca:87:fd:cf:25:82:9d:82: 87:42:4b:e1:e9:f2:31:96:e7:38:4b:21:75:dc:8b:45:a0:f6: 08:65:8c:2c:d9:43:14:a0:18:36:27:46:b5:d3:06:7e:58:77: 2f:ac:c5:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0MJcWLr2ws5uXviv4aEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YmZmNWYxNmVjYjI2OGIxNTk3ZGExYjNhZDMwYWY0MGZj ZTc3MTcwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDI2NDY4ZTRmNDM5MzQ5OWM3N2ZlZWQ2YTI1YjA4ZTkyNTU1MDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGxo06DRGbIRAG6a+7WrFTksnNu3 POqjt/LMW/5nydhhHSe9WQsi8+QwJOnIPCWv80vT6nupOUQsaaZM9Da1ESLJKjkU 4snbipZRx/2hspTTW+alfcCm7Q9tTCd2irCojnvUJY47JB6pg/OEP8Vp6zLBpynI QmLBNZeBs7EDlxZPwCOzH5mmfJwuPpa05RgJjBzQdy3+2Qp9rQqNh89kmzywk/d7 Pi+Tzsrvglcj9YVZNm1dwgXP0IobC11TyJW6Ist3GJ3w6f/M/25TcP0Y64BkP37Q 2WzT5LaVUFNt7VG3/w9IfBz8Cn64OUZn25Ciil/0qNL3mH24CqOx98CltQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH0mRo5PQ5NJnHf+7WolsI6SVVAtMB8GA1UdIwQY MBaAFFm/9fFuyyaLFZfaGzrTCvQPzncXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JfMThXN0xKb3NWbDlvYk90TUs5QV9PZHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZDU0ODAtNjBhNy00MTkzLWJmMzQt YmQ4NDliMDRkMTBhLzEvZlNaR2prOURrMG1jZF83dGFpV3dqcEpWVUMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83ZDU0ODAtNjBhNy00MTkzLWJmMzQtYmQ4NDliMDRkMTBh LzEvV2JfMThXN0xKb3NWbDlvYk90TUs5QV9PZHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucdsMA0G CSqGSIb3DQEBCwUAA4IBAQBtvGz26nPYi75UgvANao8Pa1vRL9ZnXNgfThBTbNQ8 aPNwly07sPYXMjE3dk7Vq4sC77EKks+na2eJHx2M8G+NMNiuKX6qQiidgwSY4rmV 50+qmGT2q+oAmtk2bnFIaiGk/lnoH4/jHaPS2IZqiUU7suQwxkH1uB/6LGu/H7Rx eXpC1vXMq7m5VVmGtSUWM+ZwlgCSSEpxrvNELl/B0AtPiKQetoJIp1sYx86HZw+g L8C/eEAefRzBRSekWolkCo9dTBvrcxApzlFLHkdLJr2Pyof9zyWCnYKHQkvh6fIx luc4SyF13ItFoPYIZYws2UMUoBg2J0a10wZ+WHcvrMXi -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:44 2026 by rpki-client