This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/frDx6maqwpFdsbhlxcMmFrttL0I.roa File: frDx6maqwpFdsbhlxcMmFrttL0I.roa (raw, json) Hash identifier: sAaL1XRVCAxgFQY7HpJXtsidkEm2o400k7w79WGxyVU= Subject key identifier: 7E:B0:F1:EA:66:AA:C2:91:5D:B1:B8:65:C5:C3:26:16:BB:6D:2F:42 Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Certificate serial: 019B7DCB568F31FD4583ACF94DC45A4D5F13 Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/frDx6maqwpFdsbhlxcMmFrttL0I.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42886 IP address blocks: 194.0.92.0/24 maxlen: 24 194.0.93.0/24 maxlen: 24 194.0.94.0/24 maxlen: 24 194.0.95.0/24 maxlen: 24 2001:67c:2dac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:56:8f:31:fd:45:83:ac:f9:4d:c4:5a:4d:5f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eb0f1ea66aac2915db1b865c5c32616bb6d2f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:be:01:4f:c7:7b:5e:11:10:26:52:bf:fb: c5:d5:68:30:09:38:c3:3d:4d:c4:08:a3:7e:ad:7d: 09:91:50:aa:8c:c7:cc:b3:6f:5d:80:4f:33:77:73: 6a:90:9c:f7:24:8b:29:b7:3d:4a:25:13:28:4a:67: 94:07:1d:8e:90:f8:36:9f:a1:fe:77:ed:ec:ed:69: f0:ca:31:a1:d0:7d:3d:b4:8b:2a:d4:78:59:5a:98: 6d:d4:4d:ad:05:17:20:26:4e:af:cf:aa:2f:b9:34: e3:99:9c:30:3f:56:d2:8b:09:c1:fd:a9:4b:2b:0f: b5:dc:9e:9b:e4:1d:1a:47:f4:e9:c2:4e:fb:b8:e6: ac:2a:47:f4:44:d4:ba:c3:c6:ae:8f:b8:58:44:58: b8:33:48:b8:54:55:0c:45:ec:73:52:a2:2c:e9:6d: 13:41:7f:98:d1:26:f1:72:8b:23:d8:13:b1:6e:20: 76:f2:02:fd:2d:87:1c:88:9a:17:70:f0:59:d0:15: af:30:02:60:db:2a:67:29:eb:d3:a0:7a:dc:2b:bf: 0e:42:c4:b4:ca:34:bd:ee:4f:5b:3c:94:ea:3f:8f: 96:8e:95:0e:40:76:17:f4:de:a1:a1:71:c0:eb:f5: ff:e8:46:c6:da:ef:a0:e6:8b:21:66:21:ab:43:40: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B0:F1:EA:66:AA:C2:91:5D:B1:B8:65:C5:C3:26:16:BB:6D:2F:42 X509v3 Authority Key Identifier: keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/frDx6maqwpFdsbhlxcMmFrttL0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.92.0/22 IPv6: 2001:67c:2dac::/48 Signature Algorithm: sha256WithRSAEncryption 74:1b:8b:87:3f:2f:34:65:cb:d1:0b:77:b6:0b:f5:69:7e:11: 9a:32:20:b1:8f:e4:e7:94:40:a4:be:e7:26:d9:3f:8a:9c:ea: 47:04:6f:e9:3d:aa:5a:f2:05:79:61:d7:8e:42:70:90:da:e0: 2e:9b:93:e5:25:45:1a:8d:54:c2:e4:a2:f1:66:ab:d1:65:b4: a4:eb:b6:c1:74:6d:96:44:ea:ae:32:d4:80:12:42:7f:53:f0: be:b6:97:23:a0:a9:29:f2:c8:32:46:8d:df:bb:c5:50:6a:06: 47:84:7c:14:6d:97:57:6c:66:26:b1:eb:70:68:ac:f2:ad:20: 80:00:6d:ae:af:de:4c:4a:47:b3:5b:dd:b8:50:5a:cc:da:ee: 06:46:f4:89:e3:75:c3:46:8b:5f:e9:c3:81:b9:9b:cc:f8:e3: ec:d0:a1:d9:0e:bb:eb:6e:d9:04:0e:1e:f5:9d:db:18:46:de: 43:35:87:91:58:d3:80:d8:99:bd:1d:eb:74:90:ac:1d:0c:73: da:f5:67:9d:e5:2a:f9:98:9e:17:e7:63:12:0c:ba:08:92:20: dc:c2:1f:be:58:8f:e4:64:67:5e:c0:f0:bb:9d:5e:d0:a7:6e: f6:41:93:02:ec:1e:ea:d6:21:7d:a3:e3:f5:9c:88:00:33:c4: b1:7e:03:3a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9y1aPMf1Fg6z5TcRaTV8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NzBiZjIzNzVkNTliYTgxYTk5NTVjMDdhMmYwYTIzMjY0 YjYxYTgwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWIwZjFlYTY2YWFjMjkxNWRiMWI4NjVjNWMzMjYxNmJiNmQyZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqC+AU/He14RECZSv/vF1WgwCTjD PU3ECKN+rX0JkVCqjMfMs29dgE8zd3NqkJz3JIsptz1KJRMoSmeUBx2OkPg2n6H+ d+3s7WnwyjGh0H09tIsq1HhZWpht1E2tBRcgJk6vz6ovuTTjmZwwP1bSiwnB/alL Kw+13J6b5B0aR/Tpwk77uOasKkf0RNS6w8auj7hYRFi4M0i4VFUMRexzUqIs6W0T QX+Y0Sbxcosj2BOxbiB28gL9LYcciJoXcPBZ0BWvMAJg2ypnKevToHrcK78OQsS0 yjS97k9bPJTqP4+WjpUOQHYX9N6hoXHA6/X/6EbG2u+g5oshZiGrQ0Ck9QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFH6w8epmqsKRXbG4ZcXDJha7bS9CMB8GA1UdIwQY MBaAFJdwvyN11ZuoGplVwHovCiMmS2GoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWIt OGQzNGY1NTc4MjJhLzEvZnJEeDZtYXF3cEZkc2JobHhjTW1GcnR0TDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWItOGQzNGY1NTc4MjJh LzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwgBcMA8E AgACMAkDBwAgAQZ8LawwDQYJKoZIhvcNAQELBQADggEBAHQbi4c/LzRly9ELd7YL 9Wl+EZoyILGP5OeUQKS+5ybZP4qc6kcEb+k9qlryBXlh145CcJDa4C6bk+UlRRqN VMLkovFmq9FltKTrtsF0bZZE6q4y1IASQn9T8L62lyOgqSnyyDJGjd+7xVBqBkeE fBRtl1dsZiax63BorPKtIIAAba6v3kxKR7Nb3bhQWsza7gZG9InjdcNGi1/pw4G5 m8z44+zQodkOu+tu2QQOHvWd2xhG3kM1h5FY04DYmb0d63SQrB0Mc9r1Z53lKvmY nhfnYxIMugiSINzCH75Yj+RkZ17A8LudXtCnbvZBkwLsHurWIX2j4/WciAAzxLF+ Azo= -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:13 2026 by rpki-client