This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/FrLpwJYm_z0oYv8U7JLQ8P3KcbM.roa File: FrLpwJYm_z0oYv8U7JLQ8P3KcbM.roa (raw, json) Hash identifier: 8L9pbzjRhlXXYzdKFRwuzPzPptTX51ON4RUCMnWRonY= Subject key identifier: 16:B2:E9:C0:96:26:FF:3D:28:62:FF:14:EC:92:D0:F0:FD:CA:71:B3 Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9 Certificate serial: 019B7E38687909157DE92779370F839D40F0 Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/FrLpwJYm_z0oYv8U7JLQ8P3KcbM.roa Signing time: Fri 02 Jan 2026 10:19:44 +0000 ROA not before: Fri 02 Jan 2026 10:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198024 IP address blocks: 185.116.32.0/22 maxlen: 22 2a06:7b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:68:79:09:15:7d:e9:27:79:37:0f:83:9d:40:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9 Validity Not Before: Jan 2 10:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16b2e9c09626ff3d2862ff14ec92d0f0fdca71b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:0d:ef:ab:59:a0:21:3b:04:3f:53:6b:4f: 41:6b:f8:5c:92:cf:d2:3a:8d:bd:0c:5b:59:dc:3b: f2:d9:41:5a:e5:05:c3:16:b1:07:7e:f7:c4:1a:2c: d9:19:ab:f9:53:45:5d:86:8d:53:b9:c6:6a:a7:0c: 1f:67:8d:37:ea:c8:a4:77:a3:a9:66:03:49:96:42: 97:92:b3:55:da:c0:62:79:5f:bc:a0:74:fb:05:c7: db:70:85:3f:8f:61:ea:4e:57:e8:af:21:b1:a5:a3: c1:97:65:d4:a6:f7:f5:fe:a8:20:98:2d:18:ae:33: 4c:13:51:33:b8:ff:fb:c3:81:80:55:48:9f:0c:70: da:1b:54:97:f6:e3:1d:b2:27:e5:90:30:c6:10:f7: 39:02:b8:dc:c6:15:a8:5a:20:99:e9:de:46:79:a3: 42:7e:ce:7f:52:ee:5b:c9:14:06:82:11:85:f2:a4: 83:b1:b4:1c:f3:22:36:51:6e:1e:31:bc:4a:de:80: 58:d3:7c:95:67:2d:33:d0:d2:50:f6:b8:04:3d:f5: 9d:7a:c5:2b:46:fd:52:21:6e:28:52:f5:e2:33:30: de:39:64:f6:4e:78:47:03:b4:0e:79:98:b9:e6:6e: a2:22:9c:14:25:f4:02:ae:c7:9f:9c:b2:35:06:39: ca:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B2:E9:C0:96:26:FF:3D:28:62:FF:14:EC:92:D0:F0:FD:CA:71:B3 X509v3 Authority Key Identifier: keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/FrLpwJYm_z0oYv8U7JLQ8P3KcbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.32.0/22 IPv6: 2a06:7b40::/29 Signature Algorithm: sha256WithRSAEncryption 5a:93:92:90:fa:41:d5:0e:b3:82:05:c4:48:a3:ee:9f:86:7e: 7b:08:a4:9a:93:e7:8b:24:4e:98:bf:6c:96:e7:c7:4a:66:b1: d4:b4:4f:ae:17:b2:70:d9:3d:2e:d3:d8:fd:e3:30:3e:a7:26: 4c:60:b9:32:d8:b5:4c:af:7d:77:6f:53:7b:79:73:f8:17:c2: b6:ae:98:14:fb:ce:3a:51:29:6f:44:6d:c3:1a:f0:3b:34:6b: 56:de:f4:86:c6:ef:d0:19:7e:8f:b1:ed:21:99:fb:dc:6b:75: 4f:28:7b:35:84:b8:bc:03:33:39:27:55:64:9d:12:94:68:ed: 81:8a:4e:75:29:7f:29:58:7a:0d:0d:fa:2b:c9:5e:2c:f3:b9: dc:79:e7:57:b8:e4:a4:71:f3:fa:71:4f:79:a0:fd:8b:78:90: f8:09:bb:93:0d:29:b6:6f:b1:44:a7:50:c6:79:9e:6e:7d:b2: 27:c4:14:a2:5e:7e:fd:ae:e3:1a:3c:91:43:6d:9a:dc:69:32: 4b:60:15:54:a1:a4:dd:d8:28:4f:76:0a:49:f1:68:23:40:70: c3:79:15:fd:f4:2b:b4:b1:44:c0:8f:69:ac:68:9f:fe:58:72: 0f:bf:de:3e:30:ad:f1:e8:16:94:0c:8d:8e:32:bd:49:71:63: 08:6a:09:00 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OGh5CRV96Sd5Nw+DnUDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZTcxN2MyYWE5NjFhYWM0NTAzZjFiNDg0NjRkZjAyMzNj ZTNmYTkwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmIyZTljMDk2MjZmZjNkMjg2MmZmMTRlYzkyZDBmMGZkY2E3MWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor8N76tZoCE7BD9Ta09Ba/hcks/S Oo29DFtZ3Dvy2UFa5QXDFrEHfvfEGizZGav5U0Vdho1TucZqpwwfZ4036sikd6Op ZgNJlkKXkrNV2sBieV+8oHT7BcfbcIU/j2HqTlforyGxpaPBl2XUpvf1/qggmC0Y rjNME1EzuP/7w4GAVUifDHDaG1SX9uMdsiflkDDGEPc5ArjcxhWoWiCZ6d5GeaNC fs5/Uu5byRQGghGF8qSDsbQc8yI2UW4eMbxK3oBY03yVZy0z0NJQ9rgEPfWdesUr Rv1SIW4oUvXiMzDeOWT2TnhHA7QOeZi55m6iIpwUJfQCrsefnLI1BjnK3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBay6cCWJv89KGL/FOyS0PD9ynGzMB8GA1UdIwQY MBaAFI7nF8KqlhqsRQPxtIRk3wIzzj+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYt MzI5Y2I1MTZkOTM3LzEvRnJMcHdKWW1fejBvWXY4VTdKTFE4UDNLY2JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYtMzI5Y2I1MTZkOTM3 LzEvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXQgMA0E AgACMAcDBQMqBntAMA0GCSqGSIb3DQEBCwUAA4IBAQBak5KQ+kHVDrOCBcRIo+6f hn57CKSak+eLJE6Yv2yW58dKZrHUtE+uF7Jw2T0u09j94zA+pyZMYLky2LVMr313 b1N7eXP4F8K2rpgU+846USlvRG3DGvA7NGtW3vSGxu/QGX6Pse0hmfvca3VPKHs1 hLi8AzM5J1VknRKUaO2Bik51KX8pWHoNDforyV4s87nceedXuOSkcfP6cU95oP2L eJD4CbuTDSm2b7FEp1DGeZ5ufbInxBSiXn79ruMaPJFDbZrcaTJLYBVUoaTd2ChP dgpJ8WgjQHDDeRX99Cu0sUTAj2msaJ/+WHIPv94+MK3x6BaUDI2OMr1JcWMIagkA -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:01 2026 by rpki-client