This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/FRaMmOwBTjIIfxBPwTcTpOC8yWc.roa File: FRaMmOwBTjIIfxBPwTcTpOC8yWc.roa (raw, json) Hash identifier: +/2H7w7SpASfiSQI01UVF2TwrgFjuhQ5MMGsI9JlGrk= Subject key identifier: 15:16:8C:98:EC:01:4E:32:08:7F:10:4F:C1:37:13:A4:E0:BC:C9:67 Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Certificate serial: 019B79ECBBCE71E5D7E52141EFBC6BCB7BC3 Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/FRaMmOwBTjIIfxBPwTcTpOC8yWc.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44592 IP address blocks: 91.207.236.0/24 maxlen: 24 91.223.95.0/24 maxlen: 24 2a0a:64c0::/32 maxlen: 32 2a0e:9640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bb:ce:71:e5:d7:e5:21:41:ef:bc:6b:cb:7b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15168c98ec014e32087f104fc13713a4e0bcc967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:1c:4b:24:b0:eb:76:06:80:fd:da:43:02: d7:37:8b:f2:1c:a8:0c:57:ca:42:c6:ae:51:43:37: 3f:51:ec:bd:d9:a3:74:1a:9e:f2:f0:59:fd:d7:fd: 54:e8:be:7f:19:6a:53:82:e7:9d:60:13:e7:ab:a8: 85:65:57:55:8d:48:d1:62:ba:6d:d2:58:03:b7:da: ea:3a:4b:2f:28:34:27:6b:c9:be:56:e0:c3:0b:a1: 5c:1a:e5:f3:80:f1:de:f3:50:07:b5:08:4c:34:7d: fc:55:c5:6b:48:6d:09:9f:77:2e:89:75:77:c0:ce: 27:13:fa:d0:f8:79:d4:60:5f:38:ea:22:f6:aa:ab: 85:76:f4:8c:41:d0:b9:e5:86:91:e4:66:fc:82:f0: e8:a0:c6:0e:ed:2d:d8:05:cd:3b:44:e2:4d:cf:31: 29:57:91:91:f4:fc:38:32:4f:a8:3e:2e:bd:ff:2c: bf:f8:b2:93:96:d4:59:b7:8d:ea:3b:5a:b1:e1:25: 73:6a:77:bb:f5:cc:5c:7c:cb:75:2d:b4:c4:7d:76: 6d:6a:20:2d:38:e8:38:0a:b3:32:5d:3a:90:15:5c: 16:56:26:8c:72:58:8c:68:51:ca:a0:01:c4:b9:7d: 5a:10:aa:87:41:5f:ad:a0:9e:5a:59:e9:40:da:ac: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:16:8C:98:EC:01:4E:32:08:7F:10:4F:C1:37:13:A4:E0:BC:C9:67 X509v3 Authority Key Identifier: keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/FRaMmOwBTjIIfxBPwTcTpOC8yWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.236.0/24 91.223.95.0/24 IPv6: 2a0a:64c0::/32 2a0e:9640::/29 Signature Algorithm: sha256WithRSAEncryption 41:71:78:41:19:b8:1f:fe:bf:da:65:76:df:30:12:17:ca:ea: 10:02:8a:68:83:9e:66:64:54:d8:11:60:6f:0f:95:b0:f9:e4: d4:bd:60:b5:f1:a1:21:84:e2:43:ae:44:46:b4:7e:f2:51:6c: 33:eb:f9:27:e2:0b:bf:d2:14:46:b9:2c:32:89:74:42:ad:bc: 6d:67:9a:d8:93:fd:dd:b3:cb:4f:80:53:e1:d7:62:cc:cf:71: c3:97:ec:1d:74:3a:cd:da:59:42:12:6e:4e:be:60:6e:37:53: 79:02:49:8f:81:99:f1:cc:3c:dd:4c:fd:ed:01:64:2f:e3:57: e6:ff:66:42:91:37:04:cc:dd:9a:6f:0c:14:81:33:3c:82:3b: 3a:07:7c:11:f8:e3:69:07:3e:6f:3d:e2:76:77:1b:11:76:11: 70:1b:37:d8:6f:e3:67:9f:f9:46:85:5e:05:55:68:cc:0e:9f: 19:55:f4:de:f0:0f:51:54:9a:b2:c0:82:51:fd:2c:32:67:82: f2:12:47:25:1c:66:e4:40:e6:6c:02:ee:2d:0b:d7:2d:a8:3b: 9e:61:19:f1:a8:b3:fd:4c:db:78:c8:dc:24:7f:a2:14:43:aa: d4:aa:70:8d:68:3f:af:58:b4:0a:37:cc:2f:d9:21:7c:8d:7e: 62:6d:7a:6c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt57LvOceXX5SFB77xry3vDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZjJmNTQ1ZGRiMjM0ZTM4M2QzNmI4YThkNmI1NmEzOGRk NzJmODkwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTE2OGM5OGVjMDE0ZTMyMDg3ZjEwNGZjMTM3MTNhNGUwYmNjOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswgcSySw63YGgP3aQwLXN4vyHKgM V8pCxq5RQzc/Uey92aN0Gp7y8Fn91/1U6L5/GWpTguedYBPnq6iFZVdVjUjRYrpt 0lgDt9rqOksvKDQna8m+VuDDC6FcGuXzgPHe81AHtQhMNH38VcVrSG0Jn3cuiXV3 wM4nE/rQ+HnUYF846iL2qquFdvSMQdC55YaR5Gb8gvDooMYO7S3YBc07ROJNzzEp V5GR9Pw4Mk+oPi69/yy/+LKTltRZt43qO1qx4SVzane79cxcfMt1LbTEfXZtaiAt OOg4CrMyXTqQFVwWViaMcliMaFHKoAHEuX1aEKqHQV+toJ5aWelA2qwF7wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBUWjJjsAU4yCH8QT8E3E6TgvMlnMB8GA1UdIwQY MBaAFODy9UXdsjTjg9Nrio1rVqON1y+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYt OGNhNmMzM2QxNGJiLzEvRlJhTW1Pd0JUaklJZnhCUHdUY1RwT0M4eVdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYtOGNhNmMzM2QxNGJi LzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAW8/sAwQA W99fMBQEAgACMA4DBQAqCmTAAwUDKg6WQDANBgkqhkiG9w0BAQsFAAOCAQEAQXF4 QRm4H/6/2mV23zASF8rqEAKKaIOeZmRU2BFgbw+VsPnk1L1gtfGhIYTiQ65ERrR+ 8lFsM+v5J+ILv9IURrksMol0Qq28bWea2JP93bPLT4BT4ddizM9xw5fsHXQ6zdpZ QhJuTr5gbjdTeQJJj4GZ8cw83Uz97QFkL+NX5v9mQpE3BMzdmm8MFIEzPII7Ogd8 EfjjaQc+bz3idncbEXYRcBs32G/jZ5/5RoVeBVVozA6fGVX03vAPUVSassCCUf0s MmeC8hJHJRxm5EDmbALuLQvXLag7nmEZ8aiz/UzbeMjcJH+iFEOq1KpwjWg/r1i0 CjfML9khfI1+Ym16bA== -----END CERTIFICATE-----Generated at Mon Jan 19 17:48:57 2026 by rpki-client