This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/frgCSXQtu91LEuIApic0Z9Sfzl8.roa File: frgCSXQtu91LEuIApic0Z9Sfzl8.roa (raw, json) Hash identifier: czvv8i1vZNOyOxKtmqkzs1JZvw6DGRphRq/5L2lg8L0= Subject key identifier: 7E:B8:02:49:74:2D:BB:DD:4B:12:E2:00:A6:27:34:67:D4:9F:CE:5F Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C6865E2BDB9BD7B6A76AD893B44B38 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/frgCSXQtu91LEuIApic0Z9Sfzl8.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42947 IP address blocks: 84.232.66.0/23 maxlen: 23 84.232.68.0/24 maxlen: 24 84.232.94.0/24 maxlen: 24 88.148.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:86:5e:2b:db:9b:d7:b6:a7:6a:d8:93:b4:4b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eb80249742dbbdd4b12e200a6273467d49fce5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:15:61:8d:29:b9:2e:3f:1c:28:2f:fe:c5: 77:74:0c:15:6c:e4:d4:cf:cd:97:e5:58:0a:b4:a9: 81:6b:5c:b3:8b:d3:06:6d:df:8f:83:f2:e5:24:16: 4a:86:69:64:a0:b7:03:13:a3:c9:49:d5:6c:67:48: 0d:c5:19:96:ee:4e:89:4d:e9:55:a5:a0:3e:c3:57: 52:b2:98:36:0d:ca:d7:d9:f6:73:f5:d1:19:f3:d0: d9:53:ae:26:9f:3f:c3:27:c0:9a:67:33:92:fc:cf: 68:04:20:bd:2c:a0:8d:ef:39:01:a8:aa:60:78:6c: f0:1c:36:e4:dd:32:92:ac:48:69:30:6d:ef:7f:1c: 5f:15:48:1f:e1:dc:c0:60:55:98:6f:8b:2f:7e:c1: de:e3:ab:e8:23:fa:23:12:db:79:2d:b9:f3:4e:0e: cb:e9:af:67:01:e5:b6:2e:d5:1e:c6:6b:35:c6:cf: 1e:bd:8a:fb:37:0b:cf:66:47:71:10:5f:26:52:47: 14:0f:bf:ac:9f:64:8c:c4:9f:31:6a:a0:04:e6:6a: aa:c7:2c:ed:ed:19:e5:3b:d9:46:a2:ca:c8:0e:16: 59:6f:0f:25:94:1a:30:0a:6a:f7:6d:63:64:2e:b5: dc:88:8d:e8:b3:f6:db:e2:9c:e4:72:3b:de:9a:2a: 10:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B8:02:49:74:2D:BB:DD:4B:12:E2:00:A6:27:34:67:D4:9F:CE:5F X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/frgCSXQtu91LEuIApic0Z9Sfzl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.66.0-84.232.68.255 84.232.94.0/24 88.148.8.0/23 Signature Algorithm: sha256WithRSAEncryption 69:60:dd:73:97:ee:e4:0e:be:cf:f3:2d:70:1d:bc:b3:9c:e9: e2:f3:04:a0:f1:35:59:6e:ec:86:6c:e1:52:38:a0:eb:a9:1e: fb:6a:17:ef:53:3d:c7:a6:ea:1c:fb:df:f5:8a:33:7a:3c:ac: 50:16:de:24:ea:e9:d1:02:a9:40:b4:ed:66:af:07:ad:93:1b: 91:76:26:48:69:b5:97:18:59:80:74:19:09:7c:05:f5:d2:43: 44:3a:fc:28:8d:c9:e1:47:71:86:2d:f3:35:52:7a:31:d9:7c: f8:b6:d6:ea:8c:fd:b8:39:92:07:ea:50:b4:02:95:ba:9a:f2: 51:d2:aa:c1:ab:c3:23:f5:7d:2b:30:1c:90:13:26:60:10:d2: 96:47:41:70:5a:64:40:33:46:24:2e:63:e2:f6:ea:a1:ac:33: 28:ec:4d:bd:c9:4f:57:92:23:e9:a9:99:96:90:f9:ca:90:26: 14:95:f0:30:65:80:55:6e:ec:76:49:6a:d9:bd:3c:d9:25:ba: 4a:46:b8:8d:ff:80:6d:66:48:da:bd:b5:61:48:17:36:81:99: 31:80:55:e1:b4:51:0e:37:50:b2:6a:8f:4e:44:b7:ab:e4:bd: 09:21:e7:59:0d:14:cf:61:d4:33:1a:bf:e3:27:46:ec:4d:10: 08:de:96:97 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3xoZeK9ub17anatiTtEs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWI4MDI0OTc0MmRiYmRkNGIxMmUyMDBhNjI3MzQ2N2Q0OWZjZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC4VYY0puS4/HCgv/sV3dAwVbOTU z82X5VgKtKmBa1yzi9MGbd+Pg/LlJBZKhmlkoLcDE6PJSdVsZ0gNxRmW7k6JTelV paA+w1dSspg2DcrX2fZz9dEZ89DZU64mnz/DJ8CaZzOS/M9oBCC9LKCN7zkBqKpg eGzwHDbk3TKSrEhpMG3vfxxfFUgf4dzAYFWYb4svfsHe46voI/ojEtt5LbnzTg7L 6a9nAeW2LtUexms1xs8evYr7NwvPZkdxEF8mUkcUD7+sn2SMxJ8xaqAE5mqqxyzt 7RnlO9lGosrIDhZZbw8llBowCmr3bWNkLrXciI3os/bb4pzkcjvemioQgwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFH64Akl0LbvdSxLiAKYnNGfUn85fMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvZnJnQ1NYUXR1OTFMRXVJQXBpYzBaOVNmemw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAFU6EID BABU6EQDBABU6F4DBAFYlAgwDQYJKoZIhvcNAQELBQADggEBAGlg3XOX7uQOvs/z LXAdvLOc6eLzBKDxNVlu7IZs4VI4oOupHvtqF+9TPcem6hz73/WKM3o8rFAW3iTq 6dECqUC07WavB62TG5F2JkhptZcYWYB0GQl8BfXSQ0Q6/CiNyeFHcYYt8zVSejHZ fPi21uqM/bg5kgfqULQClbqa8lHSqsGrwyP1fSswHJATJmAQ0pZHQXBaZEAzRiQu Y+L26qGsMyjsTb3JT1eSI+mpmZaQ+cqQJhSV8DBlgFVu7HZJatm9PNklukpGuI3/ gG1mSNq9tWFIFzaBmTGAVeG0UQ43ULJqj05Et6vkvQkh51kNFM9h1DMav+MnRuxN EAjelpc= -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:14 2026 by rpki-client