This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/fpYgYHcSe1IMtLQuQ8ZHZS6M188.roa File: fpYgYHcSe1IMtLQuQ8ZHZS6M188.roa (raw, json) Hash identifier: lFEjpgx0+Rqia9Wt28o4eVjHYzMi3xg620xweR16lkU= Subject key identifier: 7E:96:20:60:77:12:7B:52:0C:B4:B4:2E:43:C6:47:65:2E:8C:D7:CF Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Certificate serial: 019B7AC81961E68E7E18FADCFBCE506752CD Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/fpYgYHcSe1IMtLQuQ8ZHZS6M188.roa Signing time: Thu 01 Jan 2026 18:18:12 +0000 ROA not before: Thu 01 Jan 2026 18:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202364 IP address blocks: 185.119.108.0/24 maxlen: 24 185.119.109.0/24 maxlen: 24 185.119.110.0/24 maxlen: 24 185.119.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:19:61:e6:8e:7e:18:fa:dc:fb:ce:50:67:52:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Validity Not Before: Jan 1 18:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e96206077127b520cb4b42e43c647652e8cd7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:63:13:d6:97:0d:48:25:55:6d:09:2e:83:9c: 32:fc:f1:d2:76:42:5f:11:66:31:ac:25:c5:b0:33: f4:06:64:45:b8:3d:a2:d9:62:af:aa:82:24:26:50: 8c:96:85:53:ef:4b:0b:17:8a:4d:1c:31:87:75:2c: b9:7a:75:b9:ff:ad:42:1d:53:9c:99:90:58:90:44: 52:c6:a9:73:45:77:c5:34:11:15:1a:f7:e7:55:4a: cf:27:1f:f0:30:ae:c3:5a:ec:2d:86:f5:95:39:c5: df:4d:80:ab:d8:a3:28:d8:05:bc:82:d6:ac:6d:c5: 36:28:8b:e3:47:01:18:62:5a:85:ed:0b:34:79:ce: 1c:79:a7:e3:03:a4:82:d5:25:20:e9:c5:3a:3e:97: d9:3d:25:d7:cd:c2:48:2b:5e:a5:e0:3f:41:75:d8: 5e:df:d7:9d:08:f4:26:d8:5d:a0:8d:0c:3c:66:f9: 85:f5:11:70:e2:fa:62:c9:3c:b9:7c:55:4e:1a:fe: 93:f4:8e:fa:7b:74:da:45:97:6d:0f:05:66:55:ad: ec:75:23:37:89:4a:a2:ec:5c:fa:ba:b1:8a:3f:82: 1a:ba:7e:40:cb:fe:ae:23:dc:f4:5a:16:5f:17:43: 2b:3e:af:6f:5b:c7:df:b7:6d:20:a5:4a:a9:16:db: 9b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:96:20:60:77:12:7B:52:0C:B4:B4:2E:43:C6:47:65:2E:8C:D7:CF X509v3 Authority Key Identifier: keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/fpYgYHcSe1IMtLQuQ8ZHZS6M188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.108.0/22 Signature Algorithm: sha256WithRSAEncryption 33:1c:c5:13:55:11:d4:08:9d:37:cb:a7:3d:b7:d4:3e:76:87: 00:ef:d3:59:9c:33:6b:52:7e:04:7d:6b:43:f8:ec:d6:d1:4e: 17:6c:59:ba:43:a5:2d:30:d1:21:77:e0:b9:08:20:f6:5a:cd: 82:6a:f9:69:d3:0d:5f:8e:68:6c:20:f8:35:90:b7:9b:72:5e: 5d:8e:57:ce:59:62:41:ef:a0:b4:5c:66:32:32:8e:2e:1b:21: 27:2a:3b:ec:0a:44:05:a1:f3:3c:62:44:55:07:e9:cb:36:8c: e3:da:fd:ee:81:c9:45:56:0f:a5:7a:dc:17:d8:1e:f2:db:a8: 19:12:3c:bf:8c:51:af:0e:88:39:35:27:db:1f:b3:5b:64:c5: 4f:b0:17:41:f2:06:74:5f:93:af:d6:54:1c:39:63:40:fe:78: 98:95:df:a2:03:9e:fb:af:fa:c0:b3:37:2f:6f:f3:ee:6d:71: 1d:2c:4f:b3:06:aa:31:4f:fc:6c:ea:fc:1d:ba:74:ea:24:6f: 7d:d3:2b:6d:90:a2:07:b9:11:ea:3c:8f:9d:4c:e7:50:db:09: 83:7c:99:18:eb:d2:91:70:b7:44:96:b4:7e:93:cd:f6:ac:78: 54:11:fb:96:69:9f:1d:ca:6f:61:cc:2e:cb:c5:52:68:2d:bf: 83:af:cc:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBlh5o5+GPrc+85QZ1LNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk ZjI3ZTkwHhcNMjYwMTAxMTgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTk2MjA2MDc3MTI3YjUyMGNiNGI0MmU0M2M2NDc2NTJlOGNkN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WMT1pcNSCVVbQkug5wy/PHSdkJf EWYxrCXFsDP0BmRFuD2i2WKvqoIkJlCMloVT70sLF4pNHDGHdSy5enW5/61CHVOc mZBYkERSxqlzRXfFNBEVGvfnVUrPJx/wMK7DWuwthvWVOcXfTYCr2KMo2AW8gtas bcU2KIvjRwEYYlqF7Qs0ec4ceafjA6SC1SUg6cU6PpfZPSXXzcJIK16l4D9Bddhe 39edCPQm2F2gjQw8ZvmF9RFw4vpiyTy5fFVOGv6T9I76e3TaRZdtDwVmVa3sdSM3 iUqi7Fz6urGKP4Iaun5Ay/6uI9z0WhZfF0MrPq9vW8fft20gpUqpFtub0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH6WIGB3EntSDLS0LkPGR2UujNfPMB8GA1UdIwQY MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt MjNiYTRhOTFhMTA1LzEvZnBZZ1lIY1NlMUlNdExRdVE4WkhaUzZNMTg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1 LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXdsMA0G CSqGSIb3DQEBCwUAA4IBAQAzHMUTVRHUCJ03y6c9t9Q+docA79NZnDNrUn4EfWtD +OzW0U4XbFm6Q6UtMNEhd+C5CCD2Ws2Cavlp0w1fjmhsIPg1kLebcl5djlfOWWJB 76C0XGYyMo4uGyEnKjvsCkQFofM8YkRVB+nLNozj2v3ugclFVg+letwX2B7y26gZ Ejy/jFGvDog5NSfbH7NbZMVPsBdB8gZ0X5Ov1lQcOWNA/niYld+iA577r/rAszcv b/PubXEdLE+zBqoxT/xs6vwdunTqJG990yttkKIHuRHqPI+dTOdQ2wmDfJkY69KR cLdElrR+k832rHhUEfuWaZ8dym9hzC7LxVJoLb+Dr8xt -----END CERTIFICATE-----Generated at Sat Feb 7 04:04:28 2026 by rpki-client