This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/frbnQVPA6AMYX2oD_gTcyZulwfY.roa File: frbnQVPA6AMYX2oD_gTcyZulwfY.roa (raw, json) Hash identifier: N+i+LJivHuJoPXNh9pH2cdBw0saTiGMUT1bVhtTAkgs= Subject key identifier: 7E:B6:E7:41:53:C0:E8:03:18:5F:6A:03:FE:04:DC:C9:9B:A5:C1:F6 Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee Certificate serial: 019B7F138932832DC226F762F391CC035C32 Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/frbnQVPA6AMYX2oD_gTcyZulwfY.roa Signing time: Fri 02 Jan 2026 14:19:05 +0000 ROA not before: Fri 02 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42971 IP address blocks: 31.44.248.0/23 maxlen: 23 31.44.248.0/24 maxlen: 24 31.44.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:89:32:83:2d:c2:26:f7:62:f3:91:cc:03:5c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee Validity Not Before: Jan 2 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eb6e74153c0e803185f6a03fe04dcc99ba5c1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:c1:3e:7b:45:63:9c:cb:58:2a:52:3d:94: f2:dd:7c:f9:00:31:b8:3d:9f:0f:50:c2:a7:c4:95: 99:a3:cc:df:f6:54:1a:43:3f:0d:42:8c:d9:a5:86: 74:84:9e:ca:d8:9a:e9:0b:c3:8b:d0:c2:51:45:3d: 22:11:d8:f7:64:f8:7c:a6:5a:ed:bf:2f:2d:47:77: 20:fa:a5:f0:0d:f2:40:be:4a:87:a1:18:6e:3e:01: 4d:4b:16:ac:25:4c:0c:ec:00:70:68:b4:81:f1:a5: b7:12:c2:b2:c1:71:cb:49:c5:ac:b0:a6:1d:78:1e: 60:fa:78:64:0b:99:2c:d6:c5:24:09:13:fb:03:da: b6:33:20:68:9e:c0:64:63:b4:cf:da:1a:de:af:17: 9f:00:bd:2d:a1:ae:cc:df:6b:fb:b0:06:8e:03:df: 8e:18:a4:34:91:df:92:44:e9:cd:a6:d5:bb:f5:ac: 23:0f:db:24:d1:d1:63:45:0c:01:72:32:89:74:6b: 8e:d4:3b:b2:d8:ad:5d:3c:69:af:85:a1:c2:58:43: 2c:12:67:89:7c:ee:58:cc:3c:c4:19:03:44:8b:4e: 8b:7b:2a:5c:a2:d3:b2:4e:0b:62:c7:54:0a:74:ea: 76:d5:fb:44:34:b8:19:c4:6f:a4:d9:c8:01:03:92: 87:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B6:E7:41:53:C0:E8:03:18:5F:6A:03:FE:04:DC:C9:9B:A5:C1:F6 X509v3 Authority Key Identifier: keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/frbnQVPA6AMYX2oD_gTcyZulwfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.248.0/23 Signature Algorithm: sha256WithRSAEncryption be:7b:68:4b:f8:69:1c:33:98:99:20:4c:03:55:bc:0e:58:c1: 39:a6:5d:41:bf:4c:39:c6:64:9e:28:2b:15:59:7d:c7:7a:63: 64:e6:84:e5:ff:a5:e6:80:79:c4:cf:ee:19:a0:55:26:3e:6d: 62:c5:96:2d:5f:9a:85:15:75:85:ae:60:d8:97:62:b7:2e:de: 00:d1:6f:31:83:b3:eb:69:80:d6:31:60:e6:db:b5:1f:61:e8: c9:d6:29:36:ad:19:44:a7:93:d3:46:1d:4d:30:7b:21:03:e3: d8:8f:16:37:b1:24:7a:fd:33:d2:1e:7c:69:ed:1c:06:91:a1: 91:60:df:d4:39:73:89:c3:8d:a5:33:99:65:af:aa:69:c2:16: c1:07:a6:34:53:bc:ff:dc:9a:07:f3:f8:54:f5:ef:db:b4:6a: 93:dd:cc:08:06:88:7b:72:5e:b4:7d:21:0a:9e:f9:2c:bd:f0: 1f:4f:47:f4:56:61:8c:2f:65:c8:75:19:11:55:08:58:18:cc: 2d:b1:6b:82:85:27:45:b5:4e:a3:d6:4b:72:c1:f7:03:11:46: c9:02:9f:d7:35:48:07:3b:7f:9d:c6:cf:d1:7a:cb:59:48:03: 13:e9:be:d4:52:da:1a:15:6e:90:56:8b:ad:f4:e7:fe:a7:0b: d2:1c:5e:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E4kygy3CJvdi85HMA1wyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTU3MjdmMDdiNzU4Zjk4Njg0NzZjMTNjZjk3NzY1NGJm MzgwZWUwHhcNMjYwMTAyMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWI2ZTc0MTUzYzBlODAzMTg1ZjZhMDNmZTA0ZGNjOTliYTVjMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TLBPntFY5zLWCpSPZTy3Xz5ADG4 PZ8PUMKnxJWZo8zf9lQaQz8NQozZpYZ0hJ7K2JrpC8OL0MJRRT0iEdj3ZPh8plrt vy8tR3cg+qXwDfJAvkqHoRhuPgFNSxasJUwM7ABwaLSB8aW3EsKywXHLScWssKYd eB5g+nhkC5ks1sUkCRP7A9q2MyBonsBkY7TP2hrerxefAL0toa7M32v7sAaOA9+O GKQ0kd+SROnNptW79awjD9sk0dFjRQwBcjKJdGuO1Duy2K1dPGmvhaHCWEMsEmeJ fO5YzDzEGQNEi06LeypcotOyTgtix1QKdOp21ftENLgZxG+k2cgBA5KHawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH6250FTwOgDGF9qA/4E3MmbpcH2MB8GA1UdIwQY MBaAFAGVcn8Ht1j5hoR2wTz5d2VL84DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAt NjQ4MzhkZjM5NzdhLzEvZnJiblFWUEE2QU1ZWDJvRF9nVGN5WnVsd2ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAtNjQ4MzhkZjM5Nzdh LzEvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHyz4MA0G CSqGSIb3DQEBCwUAA4IBAQC+e2hL+GkcM5iZIEwDVbwOWME5pl1Bv0w5xmSeKCsV WX3HemNk5oTl/6XmgHnEz+4ZoFUmPm1ixZYtX5qFFXWFrmDYl2K3Lt4A0W8xg7Pr aYDWMWDm27UfYejJ1ik2rRlEp5PTRh1NMHshA+PYjxY3sSR6/TPSHnxp7RwGkaGR YN/UOXOJw42lM5llr6ppwhbBB6Y0U7z/3JoH8/hU9e/btGqT3cwIBoh7cl60fSEK nvksvfAfT0f0VmGML2XIdRkRVQhYGMwtsWuChSdFtU6j1ktywfcDEUbJAp/XNUgH O3+dxs/RestZSAMT6b7UUtoaFW6QVout9Of+pwvSHF6r -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:47 2026 by rpki-client