This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/frXVSAfLLcWbkseY__mFS0L0zLU.roa File: frXVSAfLLcWbkseY__mFS0L0zLU.roa (raw, json) Hash identifier: Li7p+R6fTKs1lWEGUZvQ0ac2+w7EMkBM2wl8tY4bk/s= Subject key identifier: 7E:B5:D5:48:07:CB:2D:C5:9B:92:C7:98:FF:F9:85:4B:42:F4:CC:B5 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019BBC7FEF599E11ED56DCA925CF9B1E8F91 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/frXVSAfLLcWbkseY__mFS0L0zLU.roa Signing time: Wed 14 Jan 2026 12:34:19 +0000 ROA not before: Wed 14 Jan 2026 12:34:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204154 IP address blocks: 45.86.47.0/24 maxlen: 24 46.17.107.0/24 maxlen: 24 185.172.129.0/24 maxlen: 24 185.200.191.0/24 maxlen: 24 2a04:5201:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:7f:ef:59:9e:11:ed:56:dc:a9:25:cf:9b:1e:8f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 14 12:34:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eb5d54807cb2dc59b92c798fff9854b42f4ccb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:91:45:a9:0b:f6:f7:0a:79:35:85:24:b3: 54:84:97:ad:29:d6:88:2a:cf:ee:bb:20:72:4f:6a: 77:20:05:fe:fd:cf:9b:d8:5e:3f:4c:10:ae:d6:b8: a0:d5:9b:b9:da:eb:f5:27:b3:1b:6f:f2:5f:db:f2: ed:84:3a:2c:b2:b0:40:8f:15:9b:fc:4d:99:75:8b: f9:bb:f3:45:bf:83:d4:65:d1:1f:36:69:3f:9f:cd: c6:70:8a:0d:2a:92:81:af:34:77:f5:69:00:03:a5: 6a:69:36:9d:8a:86:9a:64:d7:da:29:5b:19:4f:bc: 91:b4:9c:5b:5a:11:69:db:ce:a6:c3:ee:82:8b:77: ef:59:e4:ce:c9:30:05:ed:10:2a:df:5b:c3:17:ca: af:0e:b7:d3:ee:52:ea:13:a9:67:76:61:cc:f8:76: 85:0b:bf:c4:c6:6a:9f:cc:7c:2b:e0:4d:41:5c:ad: 14:fa:cf:c0:b2:7d:46:2c:90:1c:1f:19:d0:12:ed: bc:e0:9c:6c:ba:4c:08:a7:fe:64:c8:b8:78:b2:49: 5e:51:bb:4b:c2:20:bb:ec:f7:eb:16:14:65:9c:59: d5:34:bf:08:c5:fe:e4:86:97:8d:de:b7:5b:da:21: fe:e6:9e:ec:53:08:6e:6d:ac:65:e9:db:cc:9d:ff: 81:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B5:D5:48:07:CB:2D:C5:9B:92:C7:98:FF:F9:85:4B:42:F4:CC:B5 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/frXVSAfLLcWbkseY__mFS0L0zLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.47.0/24 46.17.107.0/24 185.172.129.0/24 185.200.191.0/24 IPv6: 2a04:5201:1::/48 Signature Algorithm: sha256WithRSAEncryption 0c:15:0d:d4:16:f6:a3:0d:34:e0:ea:23:19:ae:6e:be:92:8b: 5a:5c:5e:2b:7f:ca:88:f9:a2:e1:e4:9a:3d:01:e9:0c:73:f5: fe:a8:73:54:95:56:72:0b:45:27:cc:08:37:f5:a7:fc:d1:c6: 47:40:0b:1e:d6:16:30:fc:97:63:59:66:bf:24:50:9c:a3:4c: 50:8f:a6:f6:0a:29:6a:a1:02:a5:70:78:b2:bf:63:a1:8f:21: 77:9d:6f:94:0a:1a:d7:d0:99:97:7b:b6:4b:27:3f:73:ce:16: b3:0e:c8:84:b8:69:0a:1b:b2:4e:6f:d9:fb:9f:88:af:97:11: 52:e5:62:c6:72:70:72:5d:b2:8c:91:d2:16:67:d6:77:e5:fc: c6:46:03:ee:71:34:bf:f0:6b:95:12:01:fa:8a:57:b5:86:e9: 88:de:21:57:61:ec:76:bc:1d:13:58:ec:09:ae:80:98:94:18: c4:79:82:d2:4a:07:b1:bd:9f:83:09:87:cb:f3:79:ab:aa:c7: 20:88:8f:36:aa:95:3c:54:84:98:cb:72:db:00:57:25:1b:6c: 34:d0:22:7a:91:22:00:f1:c9:af:dd:cd:8d:dd:10:4f:af:69: f7:56:82:92:09:8b:2e:5a:4b:a1:64:eb:da:68:1e:b1:0f:6b: dc:d7:73:0e -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZu8f+9ZnhHtVtypJc+bHo+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTE0MTIzNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWI1ZDU0ODA3Y2IyZGM1OWI5MmM3OThmZmY5ODU0YjQyZjRjY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW+RRakL9vcKeTWFJLNUhJetKdaI Ks/uuyByT2p3IAX+/c+b2F4/TBCu1rig1Zu52uv1J7Mbb/Jf2/LthDossrBAjxWb /E2ZdYv5u/NFv4PUZdEfNmk/n83GcIoNKpKBrzR39WkAA6VqaTadioaaZNfaKVsZ T7yRtJxbWhFp286mw+6Ci3fvWeTOyTAF7RAq31vDF8qvDrfT7lLqE6lndmHM+HaF C7/ExmqfzHwr4E1BXK0U+s/Asn1GLJAcHxnQEu284JxsukwIp/5kyLh4skleUbtL wiC77PfrFhRlnFnVNL8Ixf7khpeN3rdb2iH+5p7sUwhubaxl6dvMnf+BLwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFH611UgHyy3Fm5LHmP/5hUtC9My1MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvZnJYVlNBZkxMY1dia3NlWV9fbUZTMEwwekxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALVYvAwQA LhFrAwQAuayBAwQAuci/MA8EAgACMAkDBwAqBFIBAAEwDQYJKoZIhvcNAQELBQAD ggEBAAwVDdQW9qMNNODqIxmubr6Si1pcXit/yoj5ouHkmj0B6Qxz9f6oc1SVVnIL RSfMCDf1p/zRxkdACx7WFjD8l2NZZr8kUJyjTFCPpvYKKWqhAqVweLK/Y6GPIXed b5QKGtfQmZd7tksnP3POFrMOyIS4aQobsk5v2fufiK+XEVLlYsZycHJdsoyR0hZn 1nfl/MZGA+5xNL/wa5USAfqKV7WG6YjeIVdh7Ha8HRNY7AmugJiUGMR5gtJKB7G9 n4MJh8vzeauqxyCIjzaqlTxUhJjLctsAVyUbbDTQInqRIgDxya/dzY3dEE+vafdW gpIJiy5aS6Fk69poHrEPa9zXcw4= -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:58 2026 by rpki-client