This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/fG_MHdby_nLE5ZGMRHpibCucZPM.roa File: fG_MHdby_nLE5ZGMRHpibCucZPM.roa (raw, json) Hash identifier: xzKYElD8ASOCRWMiy2dcBNcrQGCFmkO6wS64PlSEvB0= Subject key identifier: 7C:6F:CC:1D:D6:F2:FE:72:C4:E5:91:8C:44:7A:62:6C:2B:9C:64:F3 Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db Certificate serial: 019B7D5CB8CEEF6818BFC005BE139E98A040 Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/fG_MHdby_nLE5ZGMRHpibCucZPM.roa Signing time: Fri 02 Jan 2026 06:19:47 +0000 ROA not before: Fri 02 Jan 2026 06:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204280 IP address blocks: 185.107.184.0/22 maxlen: 22 185.107.184.0/23 maxlen: 23 185.107.186.0/23 maxlen: 23 185.107.186.0/24 maxlen: 24 185.107.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b8:ce:ef:68:18:bf:c0:05:be:13:9e:98:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c6fcc1dd6f2fe72c4e5918c447a626c2b9c64f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:c8:03:df:d9:26:a6:13:5b:03:e8:50:14: 95:93:e4:68:4b:b9:0a:16:05:37:a5:27:22:57:f7: 9a:09:a9:30:68:3c:e6:b1:01:42:b4:3a:7c:34:4d: ff:e1:73:67:75:bd:1d:96:3e:78:dd:c4:9d:bb:db: 9d:92:2e:d1:72:d3:4c:58:fa:b5:b6:6a:bb:c4:10: 41:d1:da:b4:e8:f7:b0:23:7a:1c:c0:8c:44:3f:94: 93:ec:b9:48:cd:ab:39:6a:06:fa:ae:02:d6:9d:3f: 84:85:44:de:c5:af:3c:f3:77:76:00:41:6e:ea:e4: 05:dc:37:72:8b:36:9e:bb:e1:6e:d6:d0:55:cd:4b: 69:bc:d8:5d:46:5d:b5:b9:8e:42:dc:ab:8a:f3:29: e7:da:7a:6a:63:72:62:fb:88:b5:ca:bd:fb:c6:d1: 73:39:b3:5d:7f:f9:1e:c0:84:65:35:d0:9a:f1:e1: cc:3f:bd:28:74:33:f1:08:1b:22:fc:60:42:4b:7c: eb:29:36:02:38:28:12:4b:3b:df:dd:d2:1f:b7:c9: f7:64:b0:06:71:17:6c:77:bf:86:b8:82:b4:63:1f: 45:88:97:5c:58:d0:e5:bc:0a:3f:de:82:19:e1:48: 6b:66:70:55:91:45:c5:aa:fd:7d:6b:38:1c:2c:85: ab:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6F:CC:1D:D6:F2:FE:72:C4:E5:91:8C:44:7A:62:6C:2B:9C:64:F3 X509v3 Authority Key Identifier: keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/fG_MHdby_nLE5ZGMRHpibCucZPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.184.0/22 Signature Algorithm: sha256WithRSAEncryption 41:38:a2:4e:79:4b:ba:4d:52:8e:a7:ba:54:aa:17:4a:89:6a: 00:1f:d9:c8:1d:4b:64:d0:d4:77:2b:3d:1d:0c:54:7f:e9:f1: b0:42:7e:0e:6b:4f:44:0b:45:e2:33:25:5c:14:00:6d:6a:b4: 7f:93:c6:2b:10:eb:c3:66:e5:ca:87:5e:0e:6b:ce:30:cb:59: 7c:5e:49:60:d6:b4:96:70:07:80:bc:d6:d0:89:06:1a:4a:ff: 4d:37:43:b3:55:09:14:3c:1e:b7:19:8a:19:3d:05:75:52:de: dc:a7:ca:46:a1:ab:cc:d5:13:f0:e2:1c:5c:4d:f4:21:f0:9e: 80:b0:b5:53:b7:34:c0:52:fb:c5:90:bf:eb:fb:83:b2:44:05: 08:2e:1d:76:05:f1:23:11:42:2e:39:f2:c7:e1:43:c2:1b:51: ad:2d:9d:35:9a:e0:55:06:5c:59:3e:3a:30:2b:cf:65:95:9d: 37:1f:fe:d2:f0:f3:5a:56:35:e4:c6:dc:9b:68:b3:d5:fb:f2: 2a:2f:92:5b:5b:e6:85:e1:8e:22:19:f3:5a:b3:f7:62:85:86: 31:6f:8e:79:dc:b1:d0:e5:c5:5d:11:d1:86:9b:8d:17:fc:6b: b4:e4:ba:2b:8b:4e:72:37:22:98:97:a1:bf:d4:3a:f0:b4:b1: 7a:ee:52:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XLjO72gYv8AFvhOemKBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDg0ZGRhYzUwYzU5YWVjYWYwNmIwOWI4NTczYTg2MmEw ZWEzZGIwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzZmY2MxZGQ2ZjJmZTcyYzRlNTkxOGM0NDdhNjI2YzJiOWM2NGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/PIA9/ZJqYTWwPoUBSVk+RoS7kK FgU3pSciV/eaCakwaDzmsQFCtDp8NE3/4XNndb0dlj543cSdu9udki7RctNMWPq1 tmq7xBBB0dq06PewI3ocwIxEP5ST7LlIzas5agb6rgLWnT+EhUTexa8883d2AEFu 6uQF3Ddyizaeu+Fu1tBVzUtpvNhdRl21uY5C3KuK8ynn2npqY3Ji+4i1yr37xtFz ObNdf/kewIRlNdCa8eHMP70odDPxCBsi/GBCS3zrKTYCOCgSSzvf3dIft8n3ZLAG cRdsd7+GuIK0Yx9FiJdcWNDlvAo/3oIZ4UhrZnBVkUXFqv19azgcLIWrDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHxvzB3W8v5yxOWRjER6YmwrnGTzMB8GA1UdIwQY MBaAFA3YTdrFDFmuyvBrCbhXOoYqDqPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMt Y2RlZTk5OTVlOWU3LzEvZkdfTUhkYnlfbkxFNVpHTVJIcGliQ3VjWlBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMtY2RlZTk5OTVlOWU3 LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWu4MA0G CSqGSIb3DQEBCwUAA4IBAQBBOKJOeUu6TVKOp7pUqhdKiWoAH9nIHUtk0NR3Kz0d DFR/6fGwQn4Oa09EC0XiMyVcFABtarR/k8YrEOvDZuXKh14Oa84wy1l8Xklg1rSW cAeAvNbQiQYaSv9NN0OzVQkUPB63GYoZPQV1Ut7cp8pGoavM1RPw4hxcTfQh8J6A sLVTtzTAUvvFkL/r+4OyRAUILh12BfEjEUIuOfLH4UPCG1GtLZ01muBVBlxZPjow K89llZ03H/7S8PNaVjXkxtybaLPV+/IqL5JbW+aF4Y4iGfNas/dihYYxb4553LHQ 5cVdEdGGm40X/Gu05Lori05yNyKYl6G/1DrwtLF67lIX -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:31 2026 by rpki-client