This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/fRqO_uDc374Erw8HQ_D2GcdMKuU.roa File: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (raw, json) Hash identifier: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk= Subject key identifier: 7D:1A:8E:FE:E0:DC:DF:BE:04:AF:0F:07:43:F0:F6:19:C7:4C:2A:E5 Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA52BBF2E4CD31FFAE87D29FD986E9F Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/fRqO_uDc374Erw8HQ_D2GcdMKuU.roa Signing time: Fri 02 Jan 2026 12:18:32 +0000 ROA not before: Fri 02 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29622 IP address blocks: 83.222.176.0/24 maxlen: 24 83.222.177.0/24 maxlen: 24 109.160.14.0/24 maxlen: 24 109.160.15.0/24 maxlen: 24 109.160.72.0/24 maxlen: 24 109.160.73.0/24 maxlen: 24 109.160.74.0/24 maxlen: 24 109.160.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2b:bf:2e:4c:d3:1f:fa:e8:7d:29:fd:98:6e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d1a8efee0dcdfbe04af0f0743f0f619c74c2ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:02:d3:35:fa:67:5d:5d:91:5f:1b:6a:f4: 08:73:55:d7:26:aa:cf:2d:3b:ba:71:e4:1c:b5:7c: 38:2d:72:c8:77:fb:01:0c:a0:24:06:6e:55:2a:5f: 5a:bc:4d:f3:34:3a:ab:5c:f7:b2:01:6b:e4:1f:42: b5:14:ae:5a:fd:68:c7:8c:80:f8:52:aa:52:4d:ee: 52:52:7d:45:f7:de:d7:e7:ff:55:14:32:7e:d3:b5: 5b:b5:0f:39:7c:ee:a2:e5:bc:d1:2d:42:2e:0c:95: 4f:fa:4d:85:9a:d6:fc:a6:78:73:3f:7f:39:0f:e1: 6f:a4:95:21:74:16:d0:d7:f1:58:7d:ef:92:02:86: a7:92:a2:17:8d:95:99:db:c5:99:54:4a:c7:66:85: 2b:3e:9f:33:0c:ae:b1:cd:07:92:92:7d:9a:9e:e6: 63:d7:08:66:5d:00:1c:98:d7:13:9c:81:dc:8c:8e: 20:ad:a2:69:db:93:15:1e:d3:15:3a:87:43:d2:44: 9b:16:f1:28:db:f1:0d:03:4a:51:dd:40:67:0c:23: 5f:bd:06:92:27:64:4a:55:b0:94:e7:d6:c9:05:cd: 54:2b:43:62:c3:a6:03:01:f6:4e:67:06:75:7d:02: ff:c3:2c:2c:32:88:da:42:e4:4a:73:e4:7b:2c:6f: f5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1A:8E:FE:E0:DC:DF:BE:04:AF:0F:07:43:F0:F6:19:C7:4C:2A:E5 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/fRqO_uDc374Erw8HQ_D2GcdMKuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.222.176.0/23 109.160.14.0/23 109.160.72.0/22 Signature Algorithm: sha256WithRSAEncryption 65:fa:ab:ca:e8:5b:e9:29:ba:69:c9:b8:3e:47:06:0f:03:25: db:8b:52:aa:05:d2:ae:54:13:07:f2:51:8c:4d:00:3d:f9:a3: 47:73:70:12:56:9f:37:95:fa:9c:49:a3:51:e7:c5:ba:f0:67: 1a:b6:5b:e3:a0:e0:17:c6:b1:53:b7:d6:dc:6e:50:e9:f4:e5: 2e:2a:87:9a:5c:d2:e4:ea:d0:91:07:f1:96:84:40:45:0a:fd: c6:cc:df:a2:3c:4f:95:ef:1a:5e:7d:f5:56:c3:b7:e3:88:a2: 8c:a0:65:ce:eb:f6:5d:0f:c3:3b:6a:7c:33:57:40:04:60:a4: 94:e9:e1:01:31:67:20:fb:f1:9d:08:a9:df:5f:d2:7a:5b:d6: 70:15:5f:d5:74:30:13:db:47:a6:15:a4:12:d2:f0:6a:c8:b0: 53:e3:f0:35:4c:85:78:3e:c5:72:78:0e:8d:97:4a:12:a6:98: 19:56:03:cc:58:96:4f:10:60:a9:33:2a:31:10:8e:7f:af:ea: 37:d9:03:25:aa:cc:de:59:8a:55:d8:9f:d0:7d:3b:f8:81:43: 82:ce:b5:d6:b3:aa:ae:eb:96:53:8f:c5:b1:6c:54:84:ba:5c: 7e:52:ff:7b:ee:99:e6:4b:48:f6:b1:33:3e:bb:6b:88:37:44: 5a:be:95:7e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pSu/LkzTH/rofSn9mG6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDFhOGVmZWUwZGNkZmJlMDRhZjBmMDc0M2YwZjYxOWM3NGMyYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LgC0zX6Z11dkV8bavQIc1XXJqrP LTu6ceQctXw4LXLId/sBDKAkBm5VKl9avE3zNDqrXPeyAWvkH0K1FK5a/WjHjID4 UqpSTe5SUn1F997X5/9VFDJ+07VbtQ85fO6i5bzRLUIuDJVP+k2Fmtb8pnhzP385 D+FvpJUhdBbQ1/FYfe+SAoankqIXjZWZ28WZVErHZoUrPp8zDK6xzQeSkn2anuZj 1whmXQAcmNcTnIHcjI4graJp25MVHtMVOodD0kSbFvEo2/ENA0pR3UBnDCNfvQaS J2RKVbCU59bJBc1UK0Niw6YDAfZOZwZ1fQL/wywsMojaQuRKc+R7LG/1jQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH0ajv7g3N++BK8PB0Pw9hnHTCrlMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvZlJxT191RGMzNzRFcnc4SFFfRDJHY2RNS3VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBU96wAwQB baAOAwQCbaBIMA0GCSqGSIb3DQEBCwUAA4IBAQBl+qvK6FvpKbppybg+RwYPAyXb i1KqBdKuVBMH8lGMTQA9+aNHc3ASVp83lfqcSaNR58W68GcatlvjoOAXxrFTt9bc blDp9OUuKoeaXNLk6tCRB/GWhEBFCv3GzN+iPE+V7xpeffVWw7fjiKKMoGXO6/Zd D8M7anwzV0AEYKSU6eEBMWcg+/GdCKnfX9J6W9ZwFV/VdDAT20emFaQS0vBqyLBT 4/A1TIV4PsVyeA6Nl0oSppgZVgPMWJZPEGCpMyoxEI5/r+o32QMlqszeWYpV2J/Q fTv4gUOCzrXWs6qu65ZTj8WxbFSEulx+Uv977pnmS0j2sTM+u2uIN0RavpV+ -----END CERTIFICATE-----Generated at Tue Jan 20 03:36:12 2026 by rpki-client