This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/frcMsmbURM5svgFCiC96KPy_qUg.roa File: frcMsmbURM5svgFCiC96KPy_qUg.roa (raw, json) Hash identifier: gQ6iQxM2JB5Q1G49ysgrForIuJxpTNC/TAZbRlINdCQ= Subject key identifier: 7E:B7:0C:B2:66:D4:44:CE:6C:BE:01:42:88:2F:7A:28:FC:BF:A9:48 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C133368C040B744850A76AB001D2E00 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/frcMsmbURM5svgFCiC96KPy_qUg.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14576 IP address blocks: 5.183.252.0/24 maxlen: 24 45.10.167.0/24 maxlen: 24 77.220.192.0/24 maxlen: 24 77.220.195.0/24 maxlen: 24 194.104.8.0/24 maxlen: 24 213.108.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:33:68:c0:40:b7:44:85:0a:76:ab:00:1d:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eb70cb266d444ce6cbe0142882f7a28fcbfa948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:b2:c7:c8:09:45:3d:b3:87:4b:55:50:1b: fa:a8:95:1a:8a:78:cc:fe:e1:d5:05:39:f0:bf:e1: bc:ec:2c:00:a4:ef:af:e6:d1:91:6a:a9:4f:3b:07: 46:e6:4f:08:50:1e:25:53:91:26:c0:7d:2d:ce:f2: 15:9a:db:2d:a6:d0:13:c1:f8:9f:bc:e0:1f:b0:75: e1:b6:42:b4:32:8c:64:6a:2d:de:a7:05:9d:22:e6: 62:1d:b7:75:5a:9c:7e:c3:28:6c:48:ce:58:f8:e7: 85:3a:39:e5:c4:27:74:0e:09:3c:d2:a2:c6:af:68: 6b:a8:15:bf:91:2d:48:70:12:08:53:59:0f:76:96: 8f:57:dc:73:2f:88:95:6c:d7:4e:af:6c:53:7a:f5: f1:e5:62:d9:ec:6d:68:93:88:16:ab:3c:f9:35:d3: 82:ec:9c:76:a3:aa:21:6d:54:fd:a3:38:80:2c:41: 95:98:53:fc:15:46:2b:f1:89:c1:52:81:f3:61:74: aa:3d:c4:94:6f:f9:4b:99:a7:7c:fc:03:f9:b6:3d: 72:13:8e:5a:85:b0:55:6a:bb:64:fb:d4:f7:4b:23: 7e:f3:62:c8:23:e4:55:74:68:85:c2:25:21:4c:d6: 8f:41:de:da:e2:98:23:e9:be:42:58:63:f9:44:da: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B7:0C:B2:66:D4:44:CE:6C:BE:01:42:88:2F:7A:28:FC:BF:A9:48 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/frcMsmbURM5svgFCiC96KPy_qUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.252.0/24 45.10.167.0/24 77.220.192.0/24 77.220.195.0/24 194.104.8.0/24 213.108.0.0/24 Signature Algorithm: sha256WithRSAEncryption 36:48:11:c5:55:77:c1:25:6f:c2:39:c4:b3:fd:f3:2f:fb:66: 9c:53:69:49:0a:cf:f3:ff:d5:6d:41:57:53:24:23:71:22:ab: 3b:b4:d8:17:22:03:ca:32:66:63:71:9c:76:8c:cb:4a:21:06: 8a:ea:07:ca:a5:fb:7a:d4:ef:4d:f9:d8:c9:bb:dc:8a:90:a5: 0b:00:a5:a6:83:11:5c:6d:13:1d:54:b6:0a:10:af:88:02:c2: 1c:de:4e:33:56:14:7c:f6:a8:a2:1d:ba:41:d7:21:a4:c6:52: 3d:4a:d4:92:0c:92:b7:8b:1c:95:ff:e5:40:33:4a:54:7d:30: e6:ca:16:21:2c:77:62:58:6e:8f:18:cb:5c:68:3d:0e:d5:d1: 08:38:42:43:e9:ea:26:95:f8:07:8e:d3:8e:ed:a8:ae:a8:27: 99:66:4f:f4:ab:78:1a:61:12:12:66:10:66:19:46:52:bd:25: 38:7f:76:79:c8:77:22:44:a2:39:32:07:64:a5:6f:de:68:d7: 6d:0f:0a:1b:23:1c:bf:82:e2:e7:50:3c:ca:74:39:df:25:ec: b9:9a:9e:d3:fa:83:4d:06:62:e9:62:59:c7:f9:70:b4:28:30: fa:ea:a4:fa:8a:fa:02:2c:d1:d3:c8:15:cc:42:91:46:35:81: 07:c5:06:d3 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8EzNowEC3RIUKdqsAHS4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWI3MGNiMjY2ZDQ0NGNlNmNiZTAxNDI4ODJmN2EyOGZjYmZhOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b6yx8gJRT2zh0tVUBv6qJUainjM /uHVBTnwv+G87CwApO+v5tGRaqlPOwdG5k8IUB4lU5EmwH0tzvIVmtstptATwfif vOAfsHXhtkK0Moxkai3epwWdIuZiHbd1Wpx+wyhsSM5Y+OeFOjnlxCd0Dgk80qLG r2hrqBW/kS1IcBIIU1kPdpaPV9xzL4iVbNdOr2xTevXx5WLZ7G1ok4gWqzz5NdOC 7Jx2o6ohbVT9oziALEGVmFP8FUYr8YnBUoHzYXSqPcSUb/lLmad8/AP5tj1yE45a hbBVartk+9T3SyN+82LII+RVdGiFwiUhTNaPQd7a4pgj6b5CWGP5RNoArQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFH63DLJm1ETObL4BQogveij8v6lIMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvZnJjTXNtYlVSTTVzdmdGQ2lDOTZLUHlfcVVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABbf8AwQA LQqnAwQATdzAAwQATdzDAwQAwmgIAwQA1WwAMA0GCSqGSIb3DQEBCwUAA4IBAQA2 SBHFVXfBJW/COcSz/fMv+2acU2lJCs/z/9VtQVdTJCNxIqs7tNgXIgPKMmZjcZx2 jMtKIQaK6gfKpft61O9N+djJu9yKkKULAKWmgxFcbRMdVLYKEK+IAsIc3k4zVhR8 9qiiHbpB1yGkxlI9StSSDJK3ixyV/+VAM0pUfTDmyhYhLHdiWG6PGMtcaD0O1dEI OEJD6eomlfgHjtOO7aiuqCeZZk/0q3gaYRISZhBmGUZSvSU4f3Z5yHciRKI5Mgdk pW/eaNdtDwobIxy/guLnUDzKdDnfJey5mp7T+oNNBmLpYlnH+XC0KDD66qT6ivoC LNHTyBXMQpFGNYEHxQbT -----END CERTIFICATE-----Generated at Tue Jan 20 19:51:23 2026 by rpki-client