This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/frGFEFnYHlwmSdEkEqNzcEerZos.roa
File: frGFEFnYHlwmSdEkEqNzcEerZos.roa (raw, json)
Hash identifier: CqpfiWHaI8Kpucdq3i4AO0nS9qt5T6lpy/A13dF/CwU=
Subject key identifier: 7E:B1:85:10:59:D8:1E:5C:26:49:D1:24:12:A3:73:70:47:AB:66:8B
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019B7C1189621ACD82D75F9E178A687BDE8F
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/frGFEFnYHlwmSdEkEqNzcEerZos.roa
Signing time: Fri 02 Jan 2026 00:18:02 +0000
ROA not before: Fri 02 Jan 2026 00:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214061
IP address blocks: 83.142.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:89:62:1a:cd:82:d7:5f:9e:17:8a:68:7b:de:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 00:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7eb1851059d81e5c2649d12412a3737047ab668b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:be:66:03:92:27:3f:4a:29:e9:b0:db:d5:
eb:27:3f:f1:01:35:25:3b:c9:c1:77:b7:02:15:10:
2a:b4:37:74:08:d0:b2:6a:f0:f8:82:b9:bf:f3:ff:
31:d7:6f:24:8a:d9:06:82:e5:e6:18:bc:30:f5:f0:
23:92:3b:b2:ff:06:a3:1e:bc:1a:e2:ad:4f:11:3c:
b6:7e:e2:db:5f:dd:be:a1:73:50:94:79:76:f7:b0:
91:b3:eb:c8:cf:d8:f4:12:ee:61:af:6b:a2:9b:42:
fa:0b:0f:d7:69:2c:03:3e:cf:1b:fb:d0:ce:b3:e1:
44:0f:4c:88:f7:2b:a6:a3:a1:81:13:14:ee:d7:eb:
dc:62:18:54:f2:90:b6:57:22:ca:19:53:62:2b:98:
4b:54:cd:f9:31:96:3d:ec:6d:95:d4:7b:ed:7b:4f:
87:69:fc:4e:01:8f:19:70:4a:42:92:5f:c2:25:78:
05:a7:80:be:40:4e:a4:fd:ab:1f:bd:dd:c1:56:63:
47:c0:52:6b:fe:72:b3:b5:ba:5e:fe:f1:ca:c9:cf:
91:c3:9d:06:3b:81:dd:c0:a2:62:84:21:98:58:1f:
bd:fb:a2:1f:db:31:9f:5d:98:fc:ff:f5:fb:99:d7:
ca:3a:3b:95:3b:df:75:5c:4a:c3:a5:06:fe:5f:0b:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B1:85:10:59:D8:1E:5C:26:49:D1:24:12:A3:73:70:47:AB:66:8B
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/frGFEFnYHlwmSdEkEqNzcEerZos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:40:f4:bd:42:fb:f0:c1:e5:0b:9d:f1:59:2d:f8:e4:6c:2c:
99:c7:a1:2e:24:ee:70:75:af:2b:90:c2:1d:57:87:c5:53:4c:
43:c9:40:2b:26:d0:ae:56:df:f8:c8:c7:45:d2:c5:2f:38:d9:
bd:18:87:ff:dc:00:68:fa:aa:10:b7:7f:68:29:ea:fb:fa:c2:
eb:98:ee:ea:ec:62:f1:b2:b6:0b:08:f5:0b:a0:9e:ae:fe:aa:
71:65:94:0b:01:80:f8:34:2c:ea:3e:74:84:b6:2d:db:52:b2:
0e:bd:b2:51:96:4c:51:f6:3f:b1:37:da:4a:8b:31:07:7c:3c:
1b:f2:a3:e4:83:16:bf:ca:d7:20:80:99:c0:1f:8e:af:42:d3:
6c:dd:b5:ef:69:48:98:5f:fa:c7:e6:ac:ec:8f:b5:26:f3:48:
62:7f:65:9b:2c:1f:06:a1:56:96:2e:f7:52:cc:17:24:b2:c6:
ec:ee:72:12:57:74:6e:b4:88:d8:ae:4e:1b:8c:da:df:87:ff:
09:9a:22:91:cf:64:0d:c3:ca:7c:ea:66:51:ee:35:47:9e:8a:
3c:00:7c:44:e8:f1:85:aa:1e:13:26:ac:3d:9d:7f:58:2b:7f:
ea:e2:ba:c9:69:6d:1e:85:f9:01:94:91:ba:28:8b:4f:4a:98:
b4:7f:93:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8EYliGs2C11+eF4poe96PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjYwMTAyMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWIxODUxMDU5ZDgxZTVjMjY0OWQxMjQxMmEzNzM3MDQ3YWI2NjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFi+ZgOSJz9KKemw29XrJz/xATUl
O8nBd7cCFRAqtDd0CNCyavD4grm/8/8x128kitkGguXmGLww9fAjkjuy/wajHrwa
4q1PETy2fuLbX92+oXNQlHl297CRs+vIz9j0Eu5hr2uim0L6Cw/XaSwDPs8b+9DO
s+FED0yI9yumo6GBExTu1+vcYhhU8pC2VyLKGVNiK5hLVM35MZY97G2V1Hvte0+H
afxOAY8ZcEpCkl/CJXgFp4C+QE6k/asfvd3BVmNHwFJr/nKztbpe/vHKyc+Rw50G
O4HdwKJihCGYWB+9+6If2zGfXZj8//X7mdfKOjuVO991XErDpQb+XwuDtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6xhRBZ2B5cJknRJBKjc3BHq2aLMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvZnJHRkVGbllIbHdtU2RFa0VxTnpjRWVyWm9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU47VMA0G
CSqGSIb3DQEBCwUAA4IBAQBOQPS9QvvwweULnfFZLfjkbCyZx6EuJO5wda8rkMId
V4fFU0xDyUArJtCuVt/4yMdF0sUvONm9GIf/3ABo+qoQt39oKer7+sLrmO7q7GLx
srYLCPULoJ6u/qpxZZQLAYD4NCzqPnSEti3bUrIOvbJRlkxR9j+xN9pKizEHfDwb
8qPkgxa/ytcggJnAH46vQtNs3bXvaUiYX/rH5qzsj7Um80hif2WbLB8GoVaWLvdS
zBckssbs7nISV3RutIjYrk4bjNrfh/8JmiKRz2QNw8p86mZR7jVHnoo8AHxE6PGF
qh4TJqw9nX9YK3/q4rrJaW0ehfkBlJG6KItPSpi0f5NU
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:14:44 2026 by rpki-client