This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/frvooIXI0spMsdwwLhMi1BanYsg.roa File: frvooIXI0spMsdwwLhMi1BanYsg.roa (raw, json) Hash identifier: pABU3Dqr2P48klsoUZB26bEkHa7gjlst9UNAnT2zGX0= Subject key identifier: 7E:BB:E8:A0:85:C8:D2:CA:4C:B1:DC:30:2E:13:22:D4:16:A7:62:C8 Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca Certificate serial: 019ADF6E2256432741CA1C8DB194646E3035 Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/frvooIXI0spMsdwwLhMi1BanYsg.roa Signing time: Tue 02 Dec 2025 14:18:48 +0000 ROA not before: Tue 02 Dec 2025 14:18:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29119 IP address blocks: 217.197.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:6e:22:56:43:27:41:ca:1c:8d:b1:94:64:6e:30:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca Validity Not Before: Dec 2 14:18:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7ebbe8a085c8d2ca4cb1dc302e1322d416a762c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:dd:51:6c:64:30:4c:39:0b:c6:82:11:7d: c9:74:2e:57:64:65:95:b6:ce:9c:21:12:36:c0:7f: 7a:00:11:56:94:95:f5:05:9a:ba:5d:77:1a:57:99: ab:73:86:b7:c6:b4:b9:52:5a:ed:12:12:e5:62:8e: bb:04:4e:d5:b4:c1:d8:60:49:2f:f6:1b:88:fb:04: 81:cb:c4:a1:ca:a9:89:0a:79:cf:14:b6:db:a7:8d: f4:4a:ab:96:45:91:7d:a6:ae:94:b1:21:d7:91:04: a5:55:81:71:ef:4a:64:56:38:de:d6:bc:6a:8e:0a: 4d:cc:45:60:b4:b0:76:31:3c:40:2f:a6:9b:04:8a: c5:55:5e:cb:37:bf:3c:32:7a:96:47:90:31:67:03: 23:b0:4c:a3:5c:76:71:86:a2:79:fd:3c:2e:3f:d9: 3c:1d:b9:cd:66:7b:12:0c:1a:7a:82:d3:c9:3c:5c: 67:54:63:5d:19:cc:42:6b:ea:38:2b:c4:f6:c0:2e: bd:d2:f4:c7:02:c5:40:c6:77:29:80:b6:c8:c3:39: a8:bd:ed:18:a4:52:12:29:d1:5d:fd:d3:46:e2:e7: c1:21:59:3d:95:88:b5:00:55:a5:09:f9:25:be:ce: 93:c5:f8:bc:04:b8:f7:c6:e1:a5:26:7f:f0:0f:c6: 43:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BB:E8:A0:85:C8:D2:CA:4C:B1:DC:30:2E:13:22:D4:16:A7:62:C8 X509v3 Authority Key Identifier: keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/frvooIXI0spMsdwwLhMi1BanYsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.197.111.0/24 Signature Algorithm: sha256WithRSAEncryption 62:50:f4:e1:d9:1b:36:63:e4:bb:09:c3:a0:b4:86:e8:59:1d: 75:d1:20:a9:e1:8d:c4:1b:c3:39:cd:2a:d8:5f:34:e3:1e:5a: e3:4f:af:ec:e6:84:e4:fc:40:17:90:29:01:5b:f4:af:e3:4b: 52:4b:f0:2c:78:2f:fb:be:a3:d5:ad:db:f5:b2:82:90:b7:36: 24:ee:cf:93:a7:48:cd:74:8f:01:82:d1:e4:84:45:3f:f1:8e: 7c:d0:f6:bf:e6:5f:cf:ca:8d:9c:c4:89:68:77:fd:aa:ca:c2: c1:3b:38:cd:c2:b2:99:7a:61:cb:67:f2:e9:8c:07:96:b1:6c: 53:e8:4c:fd:c1:ef:94:fc:06:de:d9:e6:d6:2b:1a:89:24:da: 7d:fa:0e:56:08:6f:0f:67:bd:7e:90:4f:39:08:57:45:87:04: 95:a1:48:13:cc:50:53:7a:b2:6b:96:c8:1b:4b:45:7b:da:29: ff:fc:a1:45:7b:fd:89:82:00:dc:c4:21:8d:d9:e8:e5:7d:bf: e1:fd:fa:9e:15:2c:ee:e8:81:83:9e:4e:d6:da:0a:ab:d0:cb: 57:bb:87:36:18:65:4f:4e:31:d3:7c:c2:c4:09:3e:d7:4a:dd: f8:29:7b:26:42:82:3a:1c:13:16:db:ea:cd:7b:ad:b8:f2:21: ba:44:0d:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrfbiJWQydByhyNsZRkbjA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy Mjk5Y2EwHhcNMjUxMjAyMTQxODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWJiZThhMDg1YzhkMmNhNGNiMWRjMzAyZTEzMjJkNDE2YTc2MmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy97dUWxkMEw5C8aCEX3JdC5XZGWV ts6cIRI2wH96ABFWlJX1BZq6XXcaV5mrc4a3xrS5UlrtEhLlYo67BE7VtMHYYEkv 9huI+wSBy8ShyqmJCnnPFLbbp430SquWRZF9pq6UsSHXkQSlVYFx70pkVjje1rxq jgpNzEVgtLB2MTxAL6abBIrFVV7LN788MnqWR5AxZwMjsEyjXHZxhqJ5/TwuP9k8 HbnNZnsSDBp6gtPJPFxnVGNdGcxCa+o4K8T2wC690vTHAsVAxncpgLbIwzmove0Y pFISKdFd/dNG4ufBIVk9lYi1AFWlCfklvs6Txfi8BLj3xuGlJn/wD8ZDWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH676KCFyNLKTLHcMC4TItQWp2LIMB8GA1UdIwQY MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt ZWE3YWU3MmJkMzJkLzEvZnJ2b29JWEkwc3BNc2R3d0xoTWkxQmFuWXNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cVvMA0G CSqGSIb3DQEBCwUAA4IBAQBiUPTh2Rs2Y+S7CcOgtIboWR110SCp4Y3EG8M5zSrY XzTjHlrjT6/s5oTk/EAXkCkBW/Sv40tSS/AseC/7vqPVrdv1soKQtzYk7s+Tp0jN dI8BgtHkhEU/8Y580Pa/5l/Pyo2cxIlod/2qysLBOzjNwrKZemHLZ/LpjAeWsWxT 6Ez9we+U/Abe2ebWKxqJJNp9+g5WCG8PZ71+kE85CFdFhwSVoUgTzFBTerJrlsgb S0V72in//KFFe/2JggDcxCGN2ejlfb/h/fqeFSzu6IGDnk7W2gqr0MtXu4c2GGVP TjHTfMLECT7XSt34KXsmQoI6HBMW2+rNe6248iG6RA2d -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:22 2025 by rpki-client