This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/fGMBgR4dRlgN7od53q3XJYWFyYQ.roa File: fGMBgR4dRlgN7od53q3XJYWFyYQ.roa (raw, json) Hash identifier: w9q5mkecYPBNy8Mimx20Bl4XPGkfo1gV/P3fG9sJ0A4= Subject key identifier: 7C:63:01:81:1E:1D:46:58:0D:EE:87:79:DE:AD:D7:25:85:85:C9:84 Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f Certificate serial: 019B7C7F8F852995484B22C772C5FFD167C8 Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/fGMBgR4dRlgN7od53q3XJYWFyYQ.roa Signing time: Fri 02 Jan 2026 02:18:13 +0000 ROA not before: Fri 02 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206519 IP address blocks: 185.184.84.0/24 maxlen: 24 185.184.85.0/24 maxlen: 24 185.184.86.0/24 maxlen: 24 185.184.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:8f:85:29:95:48:4b:22:c7:72:c5:ff:d1:67:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f Validity Not Before: Jan 2 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c6301811e1d46580dee8779deadd7258585c984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7c:3a:39:e6:d5:a3:d2:a4:fd:34:58:a4:08: c9:05:e8:5a:1a:c8:01:95:d1:d9:53:3a:83:cb:ed: 53:0b:79:59:ee:61:1f:40:d5:2d:3a:85:1e:96:ce: f4:5d:1d:9b:8b:ec:74:57:dc:c7:16:ba:3d:d0:b4: d2:65:15:90:0a:34:08:d2:e8:3f:5c:81:ab:9e:20: 61:14:c0:54:ce:44:9b:85:62:22:5a:14:2c:94:8c: 25:75:ee:16:1d:74:0b:04:8f:7e:35:eb:d0:e1:aa: 58:9a:ff:77:c9:da:a7:ad:50:64:01:e9:38:99:b4: 7b:6b:8d:00:e6:2f:38:cb:b6:c9:3e:a3:c8:88:6c: f1:da:c2:9d:70:21:48:31:3e:c5:19:b7:fb:60:99: 8e:1a:92:32:de:a9:41:16:2d:87:b7:ee:24:df:50: 0b:ac:52:4f:3f:0d:c4:a1:d7:7c:98:4e:27:d2:0a: a1:ec:bc:f8:64:39:60:b1:37:f1:2d:6c:b8:d3:f5: 49:0f:a2:43:4f:d5:40:96:92:9a:7c:d1:68:ef:3c: c7:d0:72:e0:73:7c:db:c3:33:a9:f0:ed:7b:db:4c: 69:66:eb:c6:23:bf:a5:4c:c7:0a:6d:ff:42:83:3a: 5a:a1:a8:bd:92:a5:04:d5:65:70:70:33:81:c8:a4: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:63:01:81:1E:1D:46:58:0D:EE:87:79:DE:AD:D7:25:85:85:C9:84 X509v3 Authority Key Identifier: keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/fGMBgR4dRlgN7od53q3XJYWFyYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.84.0/22 Signature Algorithm: sha256WithRSAEncryption c2:fa:71:98:f8:f2:e1:6f:b2:37:d8:db:25:7d:48:3b:2b:88: ea:98:b7:09:de:c5:db:eb:46:7d:d2:bc:e6:c9:a0:14:83:65: 73:02:0d:93:f2:d2:8c:64:0d:5e:04:20:07:9d:96:22:df:af: 18:1c:7e:ef:7a:02:eb:a9:6c:03:f4:06:83:10:75:66:bd:25: c9:42:06:25:6d:28:b3:a6:9b:56:34:03:a6:6c:67:d3:b0:89: 8d:79:01:06:33:b8:81:79:30:24:3f:40:89:ce:d3:ff:e8:0d: fe:b4:e1:b5:6f:a1:6a:f8:34:d0:82:35:52:2a:4f:eb:bb:7a: 88:ea:1a:83:5f:80:38:a4:37:c1:f3:db:26:aa:ad:83:5f:e2: 55:b4:fc:ac:5a:11:82:39:58:da:22:c5:a2:4b:83:5d:50:05: d4:3c:d3:5c:62:f1:42:d6:f1:dc:f8:7e:c7:fe:42:cc:75:3c: f9:34:55:9f:fe:1d:08:10:44:eb:e9:59:f9:fa:2d:85:9f:6b: b4:a1:9b:4e:78:33:fa:98:da:c3:32:10:d2:f4:ce:00:75:ef: c8:95:ff:68:e9:d0:b8:63:a3:1f:ce:6a:4a:26:e5:fc:74:59: 5b:db:91:79:1d:50:9e:dd:76:1d:4f:b4:24:13:07:b1:b5:7f: 4e:c8:91:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f4+FKZVISyLHcsX/0WfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODg0ZjkyYWZlYjU4ZmZhYjI2NDg3YjIzMjA1ZmUwZDVk YThhOWYwHhcNMjYwMTAyMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzYzMDE4MTFlMWQ0NjU4MGRlZTg3NzlkZWFkZDcyNTg1ODVjOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnw6OebVo9Kk/TRYpAjJBehaGsgB ldHZUzqDy+1TC3lZ7mEfQNUtOoUels70XR2bi+x0V9zHFro90LTSZRWQCjQI0ug/ XIGrniBhFMBUzkSbhWIiWhQslIwlde4WHXQLBI9+NevQ4apYmv93ydqnrVBkAek4 mbR7a40A5i84y7bJPqPIiGzx2sKdcCFIMT7FGbf7YJmOGpIy3qlBFi2Ht+4k31AL rFJPPw3Eodd8mE4n0gqh7Lz4ZDlgsTfxLWy40/VJD6JDT9VAlpKafNFo7zzH0HLg c3zbwzOp8O1720xpZuvGI7+lTMcKbf9Cgzpaoai9kqUE1WVwcDOByKThaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHxjAYEeHUZYDe6Hed6t1yWFhcmEMB8GA1UdIwQY MBaAFNmIT5Kv61j/qyZIeyMgX+DV2oqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYt NzY1MzMyNDVmMmJlLzEvZkdNQmdSNGRSbGdON29kNTNxM1hKWVdGeVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYtNzY1MzMyNDVmMmJl LzEvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubhUMA0G CSqGSIb3DQEBCwUAA4IBAQDC+nGY+PLhb7I32NslfUg7K4jqmLcJ3sXb60Z90rzm yaAUg2VzAg2T8tKMZA1eBCAHnZYi368YHH7vegLrqWwD9AaDEHVmvSXJQgYlbSiz pptWNAOmbGfTsImNeQEGM7iBeTAkP0CJztP/6A3+tOG1b6Fq+DTQgjVSKk/ru3qI 6hqDX4A4pDfB89smqq2DX+JVtPysWhGCOVjaIsWiS4NdUAXUPNNcYvFC1vHc+H7H /kLMdTz5NFWf/h0IEETr6Vn5+i2Fn2u0oZtOeDP6mNrDMhDS9M4Ade/Ilf9o6dC4 Y6MfzmpKJuX8dFlb25F5HVCe3XYdT7QkEwextX9OyJHh -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:03 2026 by rpki-client