This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/frya0jA5P_fi8uygo2aIO2RW1ZQ.roa File: frya0jA5P_fi8uygo2aIO2RW1ZQ.roa (raw, json) Hash identifier: V1yhc9udgYV2uaOOmzTxwzsxFa2raTN+Q6jBXM4XvRY= Subject key identifier: 7E:BC:9A:D2:30:39:3F:F7:E2:F2:EC:A0:A3:66:88:3B:64:56:D5:94 Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee Certificate serial: 019BFE5A9E980C117DD80A9C5723D658D2A0 Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/frya0jA5P_fi8uygo2aIO2RW1ZQ.roa Signing time: Tue 27 Jan 2026 07:28:30 +0000 ROA not before: Tue 27 Jan 2026 07:28:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43606 IP address blocks: 94.131.238.0/24 maxlen: 24 157.22.235.0/24 maxlen: 24 157.22.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:5a:9e:98:0c:11:7d:d8:0a:9c:57:23:d6:58:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee Validity Not Before: Jan 27 07:28:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ebc9ad230393ff7e2f2eca0a366883b6456d594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:da:c6:b5:12:43:95:5b:ac:46:c5:5d:83: 33:c3:8e:c1:de:13:8f:f3:8d:53:2f:31:12:70:1e: c8:2a:8d:32:7d:77:c8:a3:df:a0:fe:3a:a7:3d:ca: aa:15:08:b4:3e:d1:00:7d:10:74:ea:ce:08:ae:ed: 7b:ae:60:05:31:fb:83:17:1e:32:a4:84:2d:23:9a: 44:b4:63:89:64:af:ca:35:4f:03:04:cc:7e:9d:d6: 95:5c:b3:8d:97:ce:c8:a7:00:01:dd:5a:ca:e0:27: ed:6c:b9:d0:86:fb:d0:7e:24:49:a3:72:96:d5:25: 25:0f:f7:ef:e2:e0:01:62:de:b1:32:79:f7:43:1e: 08:df:16:1d:20:66:c0:10:1b:64:8a:bf:92:36:a0: 60:63:f0:2c:1e:42:6b:7c:58:8b:41:e2:48:cf:90: d0:a8:39:4c:20:69:85:7c:3f:26:50:8b:7f:9d:26: 0b:a6:42:70:f8:bf:63:be:18:4a:1d:56:46:00:1d: ff:d1:cc:b8:3d:30:49:4a:9b:b3:33:e1:a3:1d:ac: 47:cb:b2:79:fb:3a:b5:9a:bc:e9:ef:24:46:1a:12: 7f:3c:a9:43:de:d4:7a:cd:43:7b:21:d7:d9:3a:0c: f5:c1:7a:ad:34:ef:4f:1f:d2:c5:1e:b2:e6:d0:4a: 46:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BC:9A:D2:30:39:3F:F7:E2:F2:EC:A0:A3:66:88:3B:64:56:D5:94 X509v3 Authority Key Identifier: keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/frya0jA5P_fi8uygo2aIO2RW1ZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.238.0/24 157.22.235.0-157.22.236.255 Signature Algorithm: sha256WithRSAEncryption 60:8a:a8:3a:c7:ee:7c:6a:b1:d1:40:ee:17:8b:4b:7d:60:85: a7:dd:56:9c:ef:1f:79:8c:1a:22:e6:cd:47:2e:2a:bc:22:bd: 8a:45:fe:9b:a3:54:de:72:1b:1d:19:36:b1:14:4a:e4:e3:17: 66:47:70:a7:94:84:aa:a3:e4:6d:53:13:bf:82:2a:3f:dc:47: df:ef:6c:48:01:11:14:a1:3e:35:d9:51:e3:5a:a2:1f:7c:b1: bf:a7:1b:00:c6:09:76:80:db:97:f9:3b:a0:a1:8f:3e:3b:f0: 7c:34:0d:40:7a:a7:ae:40:30:48:f0:80:27:69:3b:8a:43:a6: 07:f6:91:fc:30:7a:a6:d8:0d:a6:bd:87:7a:ff:1e:df:cf:54: b0:19:99:75:a1:28:d5:4c:63:3a:c3:13:8f:40:c8:f6:4c:cf: 88:2e:d3:62:b6:72:b2:97:cc:c3:b2:0e:bf:bb:8f:da:bc:ef: aa:18:6b:10:b2:67:92:97:66:30:bb:cb:36:6d:b3:4f:f4:77: e8:eb:69:9a:1a:42:1f:b0:ec:14:40:89:e8:11:0c:02:25:7d: d7:8c:8a:0c:d3:a7:06:d6:25:b3:7b:3c:e4:a9:cd:3d:89:01: 67:1a:0a:9e:f7:c9:bf:fa:40:1c:3a:71:c4:ee:0c:5d:36:3b: 22:de:a4:8b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZv+Wp6YDBF92AqcVyPWWNKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2M2NjVlNTFjYzRjYjVjYWYwNWI4Mjk0ODQzZTI3MzNh MTNkZWUwHhcNMjYwMTI3MDcyODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWJjOWFkMjMwMzkzZmY3ZTJmMmVjYTBhMzY2ODgzYjY0NTZkNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxPaxrUSQ5VbrEbFXYMzw47B3hOP 841TLzEScB7IKo0yfXfIo9+g/jqnPcqqFQi0PtEAfRB06s4Iru17rmAFMfuDFx4y pIQtI5pEtGOJZK/KNU8DBMx+ndaVXLONl87IpwAB3VrK4CftbLnQhvvQfiRJo3KW 1SUlD/fv4uABYt6xMnn3Qx4I3xYdIGbAEBtkir+SNqBgY/AsHkJrfFiLQeJIz5DQ qDlMIGmFfD8mUIt/nSYLpkJw+L9jvhhKHVZGAB3/0cy4PTBJSpuzM+GjHaxHy7J5 +zq1mrzp7yRGGhJ/PKlD3tR6zUN7IdfZOgz1wXqtNO9PH9LFHrLm0EpGZwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFH68mtIwOT/34vLsoKNmiDtkVtWUMB8GA1UdIwQY MBaAFEw8Zl5RzEy1yvBbgpSEPiczoT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUt MWE2NWI5MWJlZTU4LzEvZnJ5YTBqQTVQX2ZpOHV5Z28yYUlPMlJXMVpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUtMWE2NWI5MWJlZTU4 LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAXoPuMAwD BACdFusDBACdFuwwDQYJKoZIhvcNAQELBQADggEBAGCKqDrH7nxqsdFA7heLS31g hafdVpzvH3mMGiLmzUcuKrwivYpF/pujVN5yGx0ZNrEUSuTjF2ZHcKeUhKqj5G1T E7+CKj/cR9/vbEgBERShPjXZUeNaoh98sb+nGwDGCXaA25f5O6Chjz478Hw0DUB6 p65AMEjwgCdpO4pDpgf2kfwweqbYDaa9h3r/Ht/PVLAZmXWhKNVMYzrDE49AyPZM z4gu02K2crKXzMOyDr+7j9q876oYaxCyZ5KXZjC7yzZts0/0d+jraZoaQh+w7BRA iegRDAIlfdeMigzTpwbWJbN7POSpzT2JAWcaCp73yb/6QBw6ccTuDF02OyLepIs= -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:03 2026 by rpki-client