This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/fFg7BMRzleH625x9WdiXPcleSgg.roa File: fFg7BMRzleH625x9WdiXPcleSgg.roa (raw, json) Hash identifier: VJ0RLkXcuNA4Y8CWLeS6/R5pD7ua0+mj6mlNZsFqI9E= Subject key identifier: 7C:58:3B:04:C4:73:95:E1:FA:DB:9C:7D:59:D8:97:3D:C9:5E:4A:08 Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b Certificate serial: 019B7F13D8E63B3E4815B1617910B5270826 Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/fFg7BMRzleH625x9WdiXPcleSgg.roa Signing time: Fri 02 Jan 2026 14:19:25 +0000 ROA not before: Fri 02 Jan 2026 14:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395363 IP address blocks: 185.173.184.0/23 maxlen: 23 185.173.184.0/24 maxlen: 24 185.173.185.0/24 maxlen: 24 185.173.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:d8:e6:3b:3e:48:15:b1:61:79:10:b5:27:08:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b Validity Not Before: Jan 2 14:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c583b04c47395e1fadb9c7d59d8973dc95e4a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:f5:a7:1f:46:88:92:ff:33:3b:03:6a:db: 10:7e:bf:2c:28:53:63:21:df:53:58:98:06:61:7e: 49:cf:cf:eb:11:fe:51:9c:0b:a8:64:6b:1b:58:9a: c8:4f:65:76:cc:23:89:4e:68:0a:8b:9c:44:7b:63: 09:51:60:76:8f:e4:10:ab:a5:2c:2a:3c:48:70:1e: 1a:e1:41:e1:08:ec:71:a1:44:d2:b6:53:f5:7c:7a: c6:5f:d1:15:ac:63:fe:f7:5e:97:36:c1:85:03:7f: b4:d3:5b:6c:ff:ba:3a:58:f4:c1:8b:5f:ff:29:46: c1:5e:b3:d5:92:c0:7d:bd:f6:68:6b:31:01:0e:7a: b8:9f:aa:d5:32:8f:a5:9f:ac:43:1a:fd:29:b9:9d: 85:f4:47:51:59:6f:ce:d1:e7:87:b7:e5:9c:26:3b: 88:1b:77:93:eb:f7:17:91:7f:cc:ee:71:4b:68:0e: 89:be:4f:51:48:81:94:7e:5f:48:b2:9f:bd:f2:c2: 23:9c:48:ea:c9:cd:15:5a:36:cb:bb:44:f1:dc:5b: 8f:c1:8b:96:2b:02:ea:ab:80:c2:95:43:6a:95:a2: f8:48:1f:ef:e9:95:e1:8b:ff:6a:fa:93:dc:e0:41: c3:e2:f6:c3:d9:af:b1:70:7f:8c:14:78:cc:11:95: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:58:3B:04:C4:73:95:E1:FA:DB:9C:7D:59:D8:97:3D:C9:5E:4A:08 X509v3 Authority Key Identifier: keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/fFg7BMRzleH625x9WdiXPcleSgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.184.0-185.173.186.255 Signature Algorithm: sha256WithRSAEncryption 1a:25:aa:f8:25:7e:6e:3c:93:bb:26:ea:cd:25:56:37:09:a2: 88:17:01:9a:4f:7f:57:6c:f1:62:4e:f5:bf:b0:12:0d:f4:3d: 66:8d:67:ec:e1:30:2c:04:04:6e:06:1d:ab:a6:53:db:97:3e: 64:68:59:bb:ae:ef:a4:90:37:d9:3b:a3:56:54:51:f1:34:4d: e5:50:e4:4e:97:3a:5d:17:64:83:4c:35:fd:ca:36:b5:c9:0a: 9c:56:92:a0:54:da:df:dd:a5:c1:ec:1d:be:1a:c5:d9:44:ea: f2:54:75:4e:73:61:59:66:4c:f7:4b:05:29:55:3b:df:15:4f: 9b:3f:4c:8e:32:ab:8c:64:ca:91:df:3c:4e:d4:3e:aa:9b:49: 5a:14:29:2c:33:17:3e:55:54:26:0a:b3:89:38:21:ba:fb:ae: e0:c7:12:bb:4c:ad:e2:68:c9:98:cc:ff:03:4a:2b:38:bc:1d: 85:ab:dd:f7:28:44:ce:78:42:15:2a:b6:14:e8:ec:85:28:67: 39:e3:49:e8:d6:76:65:f4:5e:92:d3:df:28:3b:34:37:f1:93: 51:d6:0e:1b:8c:41:4e:4c:c6:67:a4:89:84:df:cf:e9:b7:a7: 2a:91:1d:6a:39:a3:0f:4f:27:61:ca:7d:17:16:52:56:05:c6: 04:1b:ab:ff -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/E9jmOz5IFbFheRC1JwgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NTYwYmVhMzkyZWFmNjkyMDhhYjcwNWVmNDA1Y2Y3ODY4 NDE3NmIwHhcNMjYwMTAyMTQxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzU4M2IwNGM0NzM5NWUxZmFkYjljN2Q1OWQ4OTczZGM5NWU0YTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuz1px9GiJL/MzsDatsQfr8sKFNj Id9TWJgGYX5Jz8/rEf5RnAuoZGsbWJrIT2V2zCOJTmgKi5xEe2MJUWB2j+QQq6Us KjxIcB4a4UHhCOxxoUTStlP1fHrGX9EVrGP+916XNsGFA3+001ts/7o6WPTBi1// KUbBXrPVksB9vfZoazEBDnq4n6rVMo+ln6xDGv0puZ2F9EdRWW/O0eeHt+WcJjuI G3eT6/cXkX/M7nFLaA6Jvk9RSIGUfl9Isp+98sIjnEjqyc0VWjbLu0Tx3FuPwYuW KwLqq4DClUNqlaL4SB/v6ZXhi/9q+pPc4EHD4vbD2a+xcH+MFHjMEZVUrQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHxYOwTEc5Xh+tucfVnYlz3JXkoIMB8GA1UdIwQY MBaAFARWC+o5Lq9pIIq3Be9AXPeGhBdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2Mt ZTFhY2EwMTA2MmZmLzEvZkZnN0JNUnpsZUg2MjV4OVdkaVhQY2xlU2dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2MtZTFhY2EwMTA2MmZm LzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5rbgD BAC5rbowDQYJKoZIhvcNAQELBQADggEBABolqvglfm48k7sm6s0lVjcJoogXAZpP f1ds8WJO9b+wEg30PWaNZ+zhMCwEBG4GHaumU9uXPmRoWbuu76SQN9k7o1ZUUfE0 TeVQ5E6XOl0XZINMNf3KNrXJCpxWkqBU2t/dpcHsHb4axdlE6vJUdU5zYVlmTPdL BSlVO98VT5s/TI4yq4xkypHfPE7UPqqbSVoUKSwzFz5VVCYKs4k4Ibr7ruDHErtM reJoyZjM/wNKKzi8HYWr3fcoRM54QhUqthTo7IUoZznjSejWdmX0XpLT3yg7NDfx k1HWDhuMQU5MxmekiYTfz+m3pyqRHWo5ow9PJ2HKfRcWUlYFxgQbq/8= -----END CERTIFICATE-----Generated at Sun Jan 25 12:00:15 2026 by rpki-client