This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/FR3UBn5KPXzTK7AoCi7vzzQT2-Q.roa File: FR3UBn5KPXzTK7AoCi7vzzQT2-Q.roa (raw, json) Hash identifier: c0/ua5bvvPZQRgQj4cn42MZKs5khsQRSdk9r45hPnqk= Subject key identifier: 15:1D:D4:06:7E:4A:3D:7C:D3:2B:B0:28:0A:2E:EF:CF:34:13:DB:E4 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA556BF31EDD7420A74FEA3E170598C Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/FR3UBn5KPXzTK7AoCi7vzzQT2-Q.roa Signing time: Thu 01 Jan 2026 22:19:51 +0000 ROA not before: Thu 01 Jan 2026 22:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 45.91.22.0/24 maxlen: 24 45.128.198.0/24 maxlen: 24 45.130.141.0/24 maxlen: 24 2a07:e342::/32 maxlen: 48 2a0f:2740::/29 maxlen: 48 2a0f:e383::/32 maxlen: 48 2a0f:e384::/32 maxlen: 48 2a0f:e385::/32 maxlen: 48 2a0f:e387::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:56:bf:31:ed:d7:42:0a:74:fe:a3:e1:70:59:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=151dd4067e4a3d7cd32bb0280a2eefcf3413dbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c7:51:a6:dc:f9:67:69:17:52:2a:18:90:d1: e5:db:d8:5e:ba:cf:31:c6:08:6c:96:52:79:f3:96: 99:8f:91:07:93:83:70:2c:8e:88:35:45:9b:af:5b: fd:b0:64:b3:4a:09:d7:8f:c5:4d:99:bf:c8:47:73: 4b:83:62:5b:45:77:c9:19:d1:a8:4a:8a:9c:6c:a2: f4:e0:dd:d5:94:46:1b:bb:ad:9f:fe:98:1e:ee:52: e4:3d:95:ed:30:bd:ee:6d:04:6f:32:62:27:06:bb: b1:6b:b6:0f:39:9c:80:08:38:9b:16:34:f6:5e:0a: 3d:c9:f0:6a:2a:33:b8:fe:08:84:f0:57:69:40:eb: 7f:65:32:26:1f:7a:15:9d:32:e2:3a:0b:fd:8b:fc: cf:4c:8d:d9:a2:b3:6b:59:95:d7:ec:56:a7:1c:b7: db:6c:80:9b:34:26:6f:d4:a3:f1:d2:0b:e6:46:24: 1c:c7:fd:25:92:e3:ad:30:af:3c:d2:38:db:fe:25: 3a:27:d3:f3:c4:eb:6b:4f:14:2e:e2:1e:f2:45:12: 95:3b:71:2f:fb:3f:19:60:5f:fe:de:97:02:00:8d: a3:66:22:c6:5c:36:55:a1:7b:fd:ca:8e:1b:ef:43: 28:16:03:ff:cc:68:42:ba:81:d5:11:3c:54:5c:c9: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1D:D4:06:7E:4A:3D:7C:D3:2B:B0:28:0A:2E:EF:CF:34:13:DB:E4 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/FR3UBn5KPXzTK7AoCi7vzzQT2-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.22.0/24 45.128.198.0/24 45.130.141.0/24 IPv6: 2a07:e342::/32 2a0f:2740::/29 2a0f:e383::-2a0f:e385:ffff:ffff:ffff:ffff:ffff:ffff 2a0f:e387::/32 Signature Algorithm: sha256WithRSAEncryption 07:26:dd:51:5b:63:54:bb:6d:18:e1:88:ee:5d:04:5c:80:b1: e0:f5:6f:23:67:47:14:6d:d2:63:0f:1f:1a:3a:dc:b7:b5:47: e3:6d:2d:6c:40:56:f3:66:73:bb:2d:6e:5c:e1:12:96:0e:c3: 41:fd:95:27:0d:5e:6e:5e:69:10:ed:5f:7c:b4:17:66:e3:ea: 40:af:a8:f3:c7:90:c5:6d:3b:51:18:f8:59:ff:84:9f:2a:20: 2d:da:7d:e6:e8:5d:9d:55:aa:e3:f5:a5:c1:7a:9f:3d:27:d1: 03:e5:80:43:53:15:44:60:06:5f:a3:2d:1d:44:a5:7d:91:b3: b0:8d:a5:63:5b:9a:10:32:2e:8c:ae:a7:54:50:d5:80:f6:d9: 0b:5f:d7:1c:f2:58:32:60:b0:96:9c:63:98:8b:10:c9:6f:1e: bc:2d:e1:e5:de:f8:e0:2e:7b:c6:cd:e5:9f:01:33:f7:e7:f8: 59:0e:5d:a5:a5:a9:42:0b:a2:99:48:e3:de:bb:1a:bc:6e:9c: 71:ce:6d:b2:40:03:59:d6:47:b1:49:12:27:a8:67:18:d6:e4: 44:8c:d4:67:e6:94:5a:05:e7:fe:5b:a1:4c:b9:93:f4:99:3a: 75:b7:81:c7:46:cd:f7:ab:4e:41:ad:d2:b8:4a:67:46:1b:9f: 59:2b:a6:f3 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt7pVa/Me3XQgp0/qPhcFmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTFkZDQwNjdlNGEzZDdjZDMyYmIwMjgwYTJlZWZjZjM0MTNkYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48dRptz5Z2kXUioYkNHl29heus8x xghsllJ585aZj5EHk4NwLI6INUWbr1v9sGSzSgnXj8VNmb/IR3NLg2JbRXfJGdGo SoqcbKL04N3VlEYbu62f/pge7lLkPZXtML3ubQRvMmInBruxa7YPOZyACDibFjT2 Xgo9yfBqKjO4/giE8FdpQOt/ZTImH3oVnTLiOgv9i/zPTI3ZorNrWZXX7FanHLfb bICbNCZv1KPx0gvmRiQcx/0lkuOtMK880jjb/iU6J9PzxOtrTxQu4h7yRRKVO3Ev +z8ZYF/+3pcCAI2jZiLGXDZVoXv9yo4b70MoFgP/zGhCuoHVETxUXMlAbwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFBUd1AZ+Sj180yuwKAou7880E9vkMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvRlIzVUJuNUtQWHpUSzdBb0NpN3Z6elFUMi1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzAYBAIAATASAwQALVsWAwQA LYDGAwQALYKNMCsEAgACMCUDBQAqB+NCAwUDKg8nQDAOAwUAKg/jgwMFASoP44QD BQAqD+OHMA0GCSqGSIb3DQEBCwUAA4IBAQAHJt1RW2NUu20Y4YjuXQRcgLHg9W8j Z0cUbdJjDx8aOty3tUfjbS1sQFbzZnO7LW5c4RKWDsNB/ZUnDV5uXmkQ7V98tBdm 4+pAr6jzx5DFbTtRGPhZ/4SfKiAt2n3m6F2dVarj9aXBep89J9ED5YBDUxVEYAZf oy0dRKV9kbOwjaVjW5oQMi6MrqdUUNWA9tkLX9cc8lgyYLCWnGOYixDJbx68LeHl 3vjgLnvGzeWfATP35/hZDl2lpalCC6KZSOPeuxq8bpxxzm2yQANZ1kexSRInqGcY 1uREjNRn5pRaBef+W6FMuZP0mTp1t4HHRs33q05BrdK4SmdGG59ZK6bz -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:31 2026 by rpki-client