This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Fr-pYjA0DMeKObSDUxj7XCUGD5E.roa File: Fr-pYjA0DMeKObSDUxj7XCUGD5E.roa (raw, json) Hash identifier: NLBLl8XhEwUwmOEQuE68fLj2rtmpnyK8kpfDaShHB6o= Subject key identifier: 16:BF:A9:62:30:34:0C:C7:8A:39:B4:83:53:18:FB:5C:25:06:0F:91 Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Certificate serial: 019B7910D3095907B89983992B82859E5555 Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Fr-pYjA0DMeKObSDUxj7XCUGD5E.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203 IP address blocks: 149.250.0.0/16 maxlen: 16 192.109.236.0/24 maxlen: 24 195.203.0.0/17 maxlen: 17 195.203.128.0/17 maxlen: 17 195.203.152.0/23 maxlen: 23 195.203.156.0/22 maxlen: 22 217.27.0.0/23 maxlen: 23 217.27.2.0/23 maxlen: 23 217.27.4.0/24 maxlen: 24 217.27.6.0/24 maxlen: 24 217.27.7.0/24 maxlen: 24 2a03:5000:1::/48 maxlen: 48 2a03:5000:2::/48 maxlen: 48 2a03:5000:7::/48 maxlen: 48 2a03:5000:11::/48 maxlen: 48 2a03:5000:12::/48 maxlen: 48 2a03:5000:20::/48 maxlen: 48 2a03:5000:21::/48 maxlen: 48 2a03:5000:22::/48 maxlen: 48 2a03:5000:30::/48 maxlen: 48 2a03:5000:31::/48 maxlen: 48 2a03:5000:32::/48 maxlen: 48 2a03:5000:41::/48 maxlen: 48 2a03:5000:42::/48 maxlen: 48 2a03:5000:51::/48 maxlen: 48 2a03:5000:52::/48 maxlen: 48 2a03:5000:61::/48 maxlen: 48 2a03:5000:62::/48 maxlen: 48 2a03:5000:71::/48 maxlen: 48 2a03:5000:72::/48 maxlen: 48 2a03:5000:81::/48 maxlen: 48 2a03:5000:82::/48 maxlen: 48 2a03:5000:91::/48 maxlen: 48 2a03:5000:92::/48 maxlen: 48 2a03:5000:101::/48 maxlen: 48 2a03:5000:102::/48 maxlen: 48 2a03:5000:111::/48 maxlen: 48 2a03:5000:112::/48 maxlen: 48 2a03:5000:121::/48 maxlen: 48 2a03:5000:122::/48 maxlen: 48 2a03:5000:127::/48 maxlen: 48 2a03:5000:131::/48 maxlen: 48 2a03:5000:132::/48 maxlen: 48 2a03:5000:141::/48 maxlen: 48 2a03:5000:142::/48 maxlen: 48 2a03:5000:151::/48 maxlen: 48 2a03:5000:152::/48 maxlen: 48 2a03:5000:161::/48 maxlen: 48 2a03:5000:162::/48 maxlen: 48 2a03:5000:171::/48 maxlen: 48 2a03:5000:172::/48 maxlen: 48 2a03:5000:181::/48 maxlen: 48 2a03:5000:182::/48 maxlen: 48 2a03:5000:191::/48 maxlen: 48 2a03:5000:192::/48 maxlen: 48 2a03:5000:197::/48 maxlen: 48 2a03:5000:201::/48 maxlen: 48 2a03:5000:202::/48 maxlen: 48 2a03:5000:211::/48 maxlen: 48 2a03:5000:212::/48 maxlen: 48 2a03:5000:221::/48 maxlen: 48 2a03:5000:222::/48 maxlen: 48 2a03:5000:227::/48 maxlen: 48 2a03:5000:231::/48 maxlen: 48 2a03:5000:232::/48 maxlen: 48 2a03:5000:241::/48 maxlen: 48 2a03:5000:242::/48 maxlen: 48 2a03:5000:247::/48 maxlen: 48 2a03:5000:251::/48 maxlen: 48 2a03:5000:252::/48 maxlen: 48 2a03:5000:271::/48 maxlen: 48 2a03:5000:272::/48 maxlen: 48 2a03:5000:291::/48 maxlen: 48 2a03:5000:292::/48 maxlen: 48 2a03:5000:311::/48 maxlen: 48 2a03:5000:312::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d3:09:59:07:b8:99:83:99:2b:82:85:9e:55:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16bfa96230340cc78a39b4835318fb5c25060f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f3:b7:c8:73:36:89:cb:52:6f:e4:83:6f:0e: 47:3a:61:ee:95:c5:41:4f:5c:c7:0f:55:93:90:07: da:22:ae:9b:03:f5:dd:f3:c5:1e:df:37:a0:ec:fc: e5:11:d6:f7:b0:d6:14:01:11:94:d5:43:57:3b:b1: 56:6d:5d:41:87:48:26:a0:a2:f7:af:ec:f1:6b:47: 41:ff:7a:fa:eb:e6:8a:18:cb:88:78:8d:57:58:bf: 40:61:38:e9:e8:6d:2e:16:61:5d:ec:69:b0:65:84: 71:63:1b:fc:f1:2c:43:94:a7:dd:f5:d1:df:97:58: e5:60:88:ee:b4:a6:76:17:05:0b:b7:e6:8d:88:c9: 17:57:0b:77:01:bf:d8:33:e5:6a:bd:58:fc:10:95: f9:75:72:d0:93:b2:71:99:65:55:ff:42:70:10:5a: 97:ef:ba:a0:e4:5c:61:bb:6f:d4:97:7d:c0:ff:83: 61:a1:9b:26:b0:00:0e:e2:96:50:6a:50:99:22:45: 83:9e:5b:32:df:67:00:58:41:83:b2:ef:09:03:ae: d2:27:c0:a2:41:6f:6d:e4:64:9b:8c:44:c3:cc:fd: cb:b1:6a:ae:96:b6:2c:9b:ba:69:bd:c1:29:ef:43: 52:65:90:67:b9:5b:19:e7:63:b6:08:de:80:9d:aa: bc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BF:A9:62:30:34:0C:C7:8A:39:B4:83:53:18:FB:5C:25:06:0F:91 X509v3 Authority Key Identifier: keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Fr-pYjA0DMeKObSDUxj7XCUGD5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.250.0.0/16 192.109.236.0/24 195.203.0.0/16 217.27.0.0-217.27.4.255 217.27.6.0/23 IPv6: 2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff 2a03:5000:7::/48 2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff 2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff 2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff 2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff 2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff 2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff 2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff 2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff 2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff 2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff 2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff 2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff 2a03:5000:127::/48 2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff 2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff 2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff 2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff 2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff 2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff 2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff 2a03:5000:197::/48 2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff 2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff 2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff 2a03:5000:227::/48 2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff 2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff 2a03:5000:247::/48 2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff 2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff 2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff 2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b0:b4:1e:a0:4e:a4:b1:ea:a9:b0:60:98:46:36:f1:36:b5:40: 4a:72:18:aa:69:6f:ed:82:fc:e6:8a:ba:e1:e3:76:04:64:fb: b2:a0:af:83:eb:45:0e:4f:aa:bf:47:93:93:f0:73:f8:45:33: 22:99:00:f1:57:37:ab:c9:20:be:d8:3f:be:0b:bf:88:03:f0: 12:69:56:96:41:a3:a4:4c:96:43:69:b1:ce:02:a9:11:bb:5d: f6:6a:ea:c0:dc:40:3f:4c:58:c8:f5:0b:b6:43:29:86:21:0e: f9:21:90:bc:4c:7d:74:c3:71:59:8b:f6:45:71:4f:bb:e7:f7: 94:60:f3:6c:d7:6a:9a:75:51:7c:00:11:c0:21:fb:0e:26:c5: 38:69:9c:c1:78:af:2b:26:c9:b2:cb:97:96:60:11:f9:f2:2f: 4f:98:d8:f9:21:97:49:03:9e:0f:ae:86:45:5b:e6:0e:f0:96: 8d:fc:06:1a:03:6a:ce:e9:32:4a:5f:b5:c0:51:1c:4f:9d:07: a1:bf:3d:6a:5d:3a:5c:b8:79:68:7e:f8:17:4d:5b:0f:90:4d: 48:13:a1:49:44:5d:95:98:35:5f:fd:d6:00:4a:7c:91:cb:90: 33:de:23:53:d6:32:ea:4b:8d:df:ad:b9:d2:ec:46:08:29:dd: 5e:a6:af:84 -----BEGIN CERTIFICATE----- MIIHnTCCBoWgAwIBAgISAZt5ENMJWQe4mYOZK4KFnlVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm MmNmNGUwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmJmYTk2MjMwMzQwY2M3OGEzOWI0ODM1MzE4ZmI1YzI1MDYwZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvO3yHM2ictSb+SDbw5HOmHulcVB T1zHD1WTkAfaIq6bA/Xd88Ue3zeg7PzlEdb3sNYUARGU1UNXO7FWbV1Bh0gmoKL3 r+zxa0dB/3r66+aKGMuIeI1XWL9AYTjp6G0uFmFd7GmwZYRxYxv88SxDlKfd9dHf l1jlYIjutKZ2FwULt+aNiMkXVwt3Ab/YM+VqvVj8EJX5dXLQk7JxmWVV/0JwEFqX 77qg5Fxhu2/Ul33A/4NhoZsmsAAO4pZQalCZIkWDnlsy32cAWEGDsu8JA67SJ8Ci QW9t5GSbjETDzP3LsWqulrYsm7ppvcEp70NSZZBnuVsZ52O2CN6Anaq8+QIDAQAB o4IEqTCCBKUwHQYDVR0OBBYEFBa/qWIwNAzHijm0g1MY+1wlBg+RMB8GA1UdIwQY MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt ODY0MjM4YmMwNDliLzEvRnItcFlqQTBETWVLT2JTRFV4ajdYQ1VHRDVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICvQYIKwYBBQUHAQcBAf8EggKsMIICqDApBAIAATAjAwMA lfoDBADAbewDAwDDyzALAwMA2RsDBADZGwQDBAHZGwYwggJ5BAIAAjCCAnEwEgMH ACoDUAAAAQMHACoDUAAAAgMHACoDUAAABzASAwcAKgNQAAARAwcAKgNQAAASMBID BwUqA1AAACADBwAqA1AAACIwEgMHBCoDUAAAMAMHACoDUAAAMjASAwcAKgNQAABB AwcAKgNQAABCMBIDBwAqA1AAAFEDBwAqA1AAAFIwEgMHACoDUAAAYQMHACoDUAAA YjASAwcAKgNQAABxAwcAKgNQAAByMBIDBwAqA1AAAIEDBwAqA1AAAIIwEgMHACoD UAAAkQMHACoDUAAAkjASAwcAKgNQAAEBAwcAKgNQAAECMBIDBwAqA1AAAREDBwAq A1AAARIwEgMHACoDUAABIQMHACoDUAABIgMHACoDUAABJzASAwcAKgNQAAExAwcA KgNQAAEyMBIDBwAqA1AAAUEDBwAqA1AAAUIwEgMHACoDUAABUQMHACoDUAABUjAS AwcAKgNQAAFhAwcAKgNQAAFiMBIDBwAqA1AAAXEDBwAqA1AAAXIwEgMHACoDUAAB gQMHACoDUAABgjASAwcAKgNQAAGRAwcAKgNQAAGSAwcAKgNQAAGXMBIDBwAqA1AA AgEDBwAqA1AAAgIwEgMHACoDUAACEQMHACoDUAACEjASAwcAKgNQAAIhAwcAKgNQ AAIiAwcAKgNQAAInMBIDBwAqA1AAAjEDBwAqA1AAAjIwEgMHACoDUAACQQMHACoD UAACQgMHACoDUAACRzASAwcAKgNQAAJRAwcAKgNQAAJSMBIDBwAqA1AAAnEDBwAq A1AAAnIwEgMHACoDUAACkQMHACoDUAACkjASAwcAKgNQAAMRAwcAKgNQAAMSMA0G CSqGSIb3DQEBCwUAA4IBAQCwtB6gTqSx6qmwYJhGNvE2tUBKchiqaW/tgvzmirrh 43YEZPuyoK+D60UOT6q/R5OT8HP4RTMimQDxVzerySC+2D++C7+IA/ASaVaWQaOk TJZDabHOAqkRu132aurA3EA/TFjI9Qu2QymGIQ75IZC8TH10w3FZi/ZFcU+75/eU YPNs12qadVF8ABHAIfsOJsU4aZzBeK8rJsmyy5eWYBH58i9PmNj5IZdJA54ProZF W+YO8JaN/AYaA2rO6TJKX7XAURxPnQehvz1qXTpcuHlofvgXTVsPkE1IE6FJRF2V mDVf/dYASnyRy5Az3iNT1jLqS43frbnS7EYIKd1epq+E -----END CERTIFICATE-----Generated at Thu Jan 22 09:48:29 2026 by rpki-client