This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/FRuRXxuNQm-JvyXERoW5thoxpcA.roa File: FRuRXxuNQm-JvyXERoW5thoxpcA.roa (raw, json) Hash identifier: hsEvgyVR3TbSFnQqvOe0YaHjtr8cJR2KhsCKJEMysHI= Subject key identifier: 15:1B:91:5F:1B:8D:42:6F:89:BF:25:C4:46:85:B9:B6:1A:31:A5:C0 Certificate issuer: /CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8 Certificate serial: 019B7AC77C22311C2E83A725A274FEAE634A Authority key identifier: E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/FRuRXxuNQm-JvyXERoW5thoxpcA.roa Signing time: Thu 01 Jan 2026 18:17:32 +0000 ROA not before: Thu 01 Jan 2026 18:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 185.236.22.0/24 maxlen: 24 185.236.23.0/24 maxlen: 24 193.32.177.0/24 maxlen: 24 193.32.178.0/24 maxlen: 24 193.32.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:7c:22:31:1c:2e:83:a7:25:a2:74:fe:ae:63:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8 Validity Not Before: Jan 1 18:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=151b915f1b8d426f89bf25c44685b9b61a31a5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:5a:6e:c3:c1:25:47:fd:c6:5d:31:d6:55: 5c:06:6a:05:79:30:9e:78:4f:79:10:ee:c0:d6:53: 04:e2:8f:8c:3d:a5:bc:03:b8:3f:ab:b8:5d:85:9d: a4:b9:7e:d2:90:65:3b:a2:3e:5f:7c:b4:3d:ee:d9: f8:9a:ef:dc:ef:30:b8:9d:75:7d:ba:4f:ee:63:c9: 45:18:85:9f:74:c3:5e:54:43:74:cd:b3:8c:72:c8: 43:43:a6:33:e2:87:6a:d7:c4:b4:a6:9b:eb:80:eb: e7:ad:a7:4e:4b:a4:58:84:ff:75:f8:b1:ad:15:86: 0e:23:8f:03:30:fc:df:53:f1:e6:e1:07:e8:8c:4f: db:cc:49:1c:dd:fb:ed:2b:d9:13:c1:51:7c:11:07: 67:12:5f:ea:8a:71:02:01:85:8e:70:45:5a:28:34: 61:eb:3b:36:c9:53:e1:85:af:21:e9:7d:d9:ca:31: e0:81:ff:5c:ab:75:4a:22:4d:ba:c9:69:0d:b4:fc: 89:f6:7e:13:b3:97:6f:fb:8a:db:1c:6a:25:5d:c2: 75:c0:d7:5f:7b:69:4e:42:b5:74:68:f3:bf:fa:e1: 3d:12:2c:5a:73:81:da:5a:c0:f6:d7:b7:8c:89:15: 0f:d3:23:53:86:a8:ea:18:e3:57:74:df:ce:3b:9d: a8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:91:5F:1B:8D:42:6F:89:BF:25:C4:46:85:B9:B6:1A:31:A5:C0 X509v3 Authority Key Identifier: keyid:E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/FRuRXxuNQm-JvyXERoW5thoxpcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.22.0/23 193.32.177.0-193.32.179.255 Signature Algorithm: sha256WithRSAEncryption 58:15:9b:94:c2:fe:c3:7b:9f:a7:3f:ef:42:5a:2b:93:a4:c5: 09:e9:85:0b:d2:69:14:12:87:9b:29:bf:9d:c8:b4:a8:7c:75: f4:92:6f:93:9a:9c:8d:6e:8a:55:ba:44:1f:4b:39:8a:25:61: 27:95:2a:15:c1:19:8d:46:41:51:cf:b1:ef:13:0d:fc:7a:23: 84:d5:0c:88:66:21:08:1f:3d:db:e3:c3:b0:1c:fd:ba:da:bb: e9:b0:7f:a5:c7:b0:bd:b1:fd:07:05:ba:8e:0a:d7:cc:50:75: 41:0b:2d:74:60:a6:1e:d9:5e:29:ef:07:d1:c7:1d:4f:eb:f0: f4:02:8f:a0:df:05:2a:72:55:37:5c:fe:ff:aa:b1:2f:eb:54: ab:66:be:4f:4d:8f:a6:f7:20:56:ee:65:79:5c:9e:fc:72:eb: 86:52:e6:27:a6:1f:d1:dd:da:6f:a8:35:01:d3:61:2d:4e:82: 43:01:58:1f:e9:ae:8c:2b:bb:aa:bd:32:a7:c5:13:9b:ae:78: fa:c6:36:58:ec:7e:61:9b:c6:e2:df:7b:5e:37:94:27:f9:e7: bd:b4:77:89:78:ca:c9:fc:4f:63:e4:74:85:0d:4c:77:ec:17: 1d:56:08:cb:0e:12:d9:29:a2:04:53:65:29:99:d4:f5:02:7b: c8:4a:c3:5d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6x3wiMRwug6clonT+rmNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2RmYTEzNGQzYzhkNDY4ZGNlNWIzNzQzNWY5OWUzMjNk YWUwZTgwHhcNMjYwMTAxMTgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTFiOTE1ZjFiOGQ0MjZmODliZjI1YzQ0Njg1YjliNjFhMzFhNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL1absPBJUf9xl0x1lVcBmoFeTCe eE95EO7A1lME4o+MPaW8A7g/q7hdhZ2kuX7SkGU7oj5ffLQ97tn4mu/c7zC4nXV9 uk/uY8lFGIWfdMNeVEN0zbOMcshDQ6Yz4odq18S0ppvrgOvnradOS6RYhP91+LGt FYYOI48DMPzfU/Hm4QfojE/bzEkc3fvtK9kTwVF8EQdnEl/qinECAYWOcEVaKDRh 6zs2yVPhha8h6X3ZyjHggf9cq3VKIk26yWkNtPyJ9n4Ts5dv+4rbHGolXcJ1wNdf e2lOQrV0aPO/+uE9Eixac4HaWsD217eMiRUP0yNThqjqGONXdN/OO52ozwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBUbkV8bjUJvib8lxEaFubYaMaXAMB8GA1UdIwQY MBaAFON9+hNNPI1Gjc5bN0NfmeMj2uDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDMzNkUwMDhqVWFOemxzM1ExLVo0eVBhNE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMWI0NDctNDM1Mi00ZmQxLTljMjct NWY0YTcwNzEyYzIzLzEvRlJ1Ulh4dU5RbS1KdnlYRVJvVzV0aG94cGNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jMWI0NDctNDM1Mi00ZmQxLTljMjctNWY0YTcwNzEyYzIz LzEvNDMzNkUwMDhqVWFOemxzM1ExLVo0eVBhNE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBuewWMAwD BADBILEDBALBILAwDQYJKoZIhvcNAQELBQADggEBAFgVm5TC/sN7n6c/70JaK5Ok xQnphQvSaRQSh5spv53ItKh8dfSSb5OanI1uilW6RB9LOYolYSeVKhXBGY1GQVHP se8TDfx6I4TVDIhmIQgfPdvjw7Ac/brau+mwf6XHsL2x/QcFuo4K18xQdUELLXRg ph7ZXinvB9HHHU/r8PQCj6DfBSpyVTdc/v+qsS/rVKtmvk9Nj6b3IFbuZXlcnvxy 64ZS5iemH9Hd2m+oNQHTYS1OgkMBWB/prowru6q9MqfFE5uuePrGNljsfmGbxuLf e143lCf55720d4l4ysn8T2PkdIUNTHfsFx1WCMsOEtkpogRTZSmZ1PUCe8hKw10= -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:57 2026 by rpki-client