This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa File: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (raw, json) Hash identifier: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY= Subject key identifier: 15:12:36:9B:7E:5E:EF:EE:36:56:5A:9F:DD:BF:98:D8:D2:9E:64:B4 Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df Certificate serial: 019B7C11E7CB9B93540D2F7B9FD1F31B85EC Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa Signing time: Fri 02 Jan 2026 00:18:26 +0000 ROA not before: Fri 02 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51559 IP address blocks: 185.83.144.0/24 maxlen: 24 185.83.145.0/24 maxlen: 24 185.83.146.0/24 maxlen: 24 185.83.147.0/24 maxlen: 24 185.174.28.0/24 maxlen: 24 185.174.29.0/24 maxlen: 24 185.174.30.0/24 maxlen: 24 2a0b:8100::/48 maxlen: 48 2a0b:8100:1::/48 maxlen: 48 2a0b:8100:2::/48 maxlen: 48 2a0b:8100:3::/48 maxlen: 48 2a0b:8100:4::/48 maxlen: 48 2a0b:8100:5::/48 maxlen: 48 2a0b:8100:6::/48 maxlen: 48 2a0b:8100:7::/48 maxlen: 48 2a0b:8100:8::/48 maxlen: 48 2a0b:8100:9::/48 maxlen: 48 2a0b:8100:a::/48 maxlen: 48 2a0b:8100:b::/48 maxlen: 48 2a0b:8100:c::/48 maxlen: 48 2a0b:8100:d::/48 maxlen: 48 2a0b:8100:e::/48 maxlen: 48 2a0b:8100:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e7:cb:9b:93:54:0d:2f:7b:9f:d1:f3:1b:85:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df Validity Not Before: Jan 2 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1512369b7e5eefee36565a9fddbf98d8d29e64b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:be:ad:63:d2:5d:2f:ca:3a:97:fc:41:b8: e6:68:c7:11:6d:99:5e:ba:02:b8:f9:0f:a9:5e:97: b4:96:51:af:fb:fd:fb:61:86:92:f1:6b:c7:8f:6d: 9a:d4:6f:40:5b:14:0d:2a:1e:0a:ae:f9:89:94:8b: 7c:c8:3e:d4:85:c1:27:03:84:46:8f:bf:c5:46:41: 70:c6:a4:bd:07:1a:d2:f2:7b:45:40:6a:e3:f0:3d: ec:62:2d:9e:55:d5:30:3a:bd:36:c3:55:b9:4d:e7: 32:6b:a2:ef:b4:c7:7b:a0:cf:ee:bf:93:a9:96:c8: c7:5d:e6:d7:a6:e6:7d:80:92:12:8f:bd:bf:94:61: 9d:15:88:3a:69:3b:6f:19:c5:5f:46:61:3f:73:ff: 65:d3:9b:7c:89:b8:38:99:a4:10:fd:80:04:f0:19: a8:31:9b:90:8c:81:06:a1:12:34:2c:8a:05:18:bc: 9f:4b:46:5e:43:59:a6:d1:58:44:35:21:6e:43:61: b6:b8:a6:4a:03:8f:52:98:39:44:15:31:4d:14:a4: 3e:91:bb:e2:67:bb:09:ad:90:13:72:22:a7:04:ce: 07:cf:54:2d:c7:27:06:2b:68:f2:50:b3:ad:21:e2: e7:13:03:ac:e5:49:b9:bf:31:18:a3:b4:2f:4e:5e: e1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:12:36:9B:7E:5E:EF:EE:36:56:5A:9F:DD:BF:98:D8:D2:9E:64:B4 X509v3 Authority Key Identifier: keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.144.0/22 185.174.28.0-185.174.30.255 IPv6: 2a0b:8100::/44 Signature Algorithm: sha256WithRSAEncryption 92:fe:3c:78:14:af:ea:76:28:f6:20:cc:17:69:63:ed:f4:49: f9:74:91:48:73:55:47:52:15:ea:55:dd:2c:cc:cf:30:56:f5: 02:7b:47:ac:e0:a9:77:8a:cb:73:73:68:a2:7c:ac:52:0d:3b: 8f:6d:b6:51:ee:2c:11:2d:fd:1c:c1:16:2d:81:93:bc:8f:a6: 45:d4:52:e5:83:41:a7:05:6b:8e:29:be:47:35:2e:f6:a8:cc: 62:92:a1:00:dc:97:22:6c:ce:a9:77:71:f6:ff:ef:7b:b2:74: 05:22:0e:7f:91:d4:eb:32:da:3b:8a:7b:a9:79:9a:9d:fb:88: 4a:e5:d9:bf:5b:8c:a7:0d:54:c8:68:c9:46:46:f2:c6:63:71: b2:11:4c:5e:3c:c4:35:84:50:3f:42:89:3e:ae:51:45:39:71: 0e:69:35:0a:ca:36:d2:31:67:89:99:c4:49:31:50:fd:c1:64: d7:c8:76:69:53:0d:4a:e8:13:d9:9b:63:6b:e9:0f:04:ff:15: 9d:fd:f6:04:ce:1f:8e:b6:89:1c:ac:9c:d5:df:26:58:ff:07: 14:0c:db:2e:fa:7b:11:df:08:13:c4:5b:ee:02:68:5f:2e:52: 8f:ac:fd:69:81:20:cf:18:27:50:93:ec:73:4e:5d:02:75:56: 46:56:17:7d -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt8EefLm5NUDS97n9HzG4XsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTEzOGUxZmFjZjdiNjVkYmI1NzVmYTdkNDcyNDBjMjc4 YjM0ZGYwHhcNMjYwMTAyMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTEyMzY5YjdlNWVlZmVlMzY1NjVhOWZkZGJmOThkOGQyOWU2NGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkS+rWPSXS/KOpf8QbjmaMcRbZle ugK4+Q+pXpe0llGv+/37YYaS8WvHj22a1G9AWxQNKh4KrvmJlIt8yD7UhcEnA4RG j7/FRkFwxqS9BxrS8ntFQGrj8D3sYi2eVdUwOr02w1W5Tecya6LvtMd7oM/uv5Op lsjHXebXpuZ9gJISj72/lGGdFYg6aTtvGcVfRmE/c/9l05t8ibg4maQQ/YAE8Bmo MZuQjIEGoRI0LIoFGLyfS0ZeQ1mm0VhENSFuQ2G2uKZKA49SmDlEFTFNFKQ+kbvi Z7sJrZATciKnBM4Hz1QtxycGK2jyULOtIeLnEwOs5Um5vzEYo7QvTl7hJQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFBUSNpt+Xu/uNlZan92/mNjSnmS0MB8GA1UdIwQY MBaAFJ1ROOH6z3tl27V1+n1HJAwnizTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZFNDRmclBlMlhidFhYNmZVY2tEQ2VMTk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDAxZmYtODMyMy00Yjg5LWJlM2Qt YzJlZmViM2IzMmE1LzEvRlJJMm0zNWU3LTQyVmxxZjNiLVkyTktlWkxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDAxZmYtODMyMy00Yjg5LWJlM2QtYzJlZmViM2IzMmE1 LzEvblZFNDRmclBlMlhidFhYNmZVY2tEQ2VMTk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQCuVOQMAwD BAK5rhwDBAC5rh4wDwQCAAIwCQMHBCoLgQAAADANBgkqhkiG9w0BAQsFAAOCAQEA kv48eBSv6nYo9iDMF2lj7fRJ+XSRSHNVR1IV6lXdLMzPMFb1AntHrOCpd4rLc3No onysUg07j222Ue4sES39HMEWLYGTvI+mRdRS5YNBpwVrjim+RzUu9qjMYpKhANyX ImzOqXdx9v/ve7J0BSIOf5HU6zLaO4p7qXmanfuISuXZv1uMpw1UyGjJRkbyxmNx shFMXjzENYRQP0KJPq5RRTlxDmk1Cso20jFniZnESTFQ/cFk18h2aVMNSugT2Ztj a+kPBP8Vnf32BM4fjraJHKyc1d8mWP8HFAzbLvp7Ed8IE8Rb7gJoXy5Sj6z9aYEg zxgnUJPsc05dAnVWRlYXfQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:16 2026 by rpki-client