This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/FrgtLDHlGMWP7-Ol00IvZZoBesM.roa File: FrgtLDHlGMWP7-Ol00IvZZoBesM.roa (raw, json) Hash identifier: T567K72LlQfx3PglnXUfayy6bFn0FIimheQaqSUapwY= Subject key identifier: 16:B8:2D:2C:31:E5:18:C5:8F:EF:E3:A5:D3:42:2F:65:9A:01:7A:C3 Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc Certificate serial: 019B7BA5188B3A81FFD3A5F3282FF740BDA3 Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/FrgtLDHlGMWP7-Ol00IvZZoBesM.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 702 IP address blocks: 185.42.232.0/24 maxlen: 24 185.42.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:18:8b:3a:81:ff:d3:a5:f3:28:2f:f7:40:bd:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16b82d2c31e518c58fefe3a5d3422f659a017ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:84:79:61:f5:3e:af:a8:b7:4e:2e:9d:f9: 27:d9:c0:e0:f3:54:1f:7a:6a:de:4c:20:48:15:b5: 8a:a3:61:02:33:e7:c5:fc:8b:48:d2:e6:ae:88:d4: 24:ae:5c:79:74:bd:78:da:62:d5:8f:24:2b:e2:8c: ed:15:f6:28:da:4d:3a:5d:3b:a4:de:46:d6:97:d6: ae:66:bc:94:9a:25:61:99:84:d1:7d:86:52:16:d3: 1c:38:0b:81:01:ac:07:3c:51:72:5f:55:87:e1:b8: 9d:00:37:22:61:47:90:aa:2c:91:34:1d:a0:40:57: 27:fc:0c:8d:e6:42:6c:76:1f:cf:b0:a9:88:c7:0d: 86:f6:46:e0:12:20:45:1e:43:4b:c0:6f:0c:9e:7b: 51:dc:7a:e8:4a:b4:25:8c:24:ea:ec:1d:6a:d9:2b: 2e:b2:8b:84:cb:56:15:01:04:8e:ed:6c:a4:88:e3: c0:76:db:96:63:d8:fe:31:4c:7d:09:36:f6:bc:52: 74:dc:9e:e5:77:93:01:46:fc:6e:e7:b5:bc:18:e8: 5f:4a:2f:53:14:39:f8:33:f9:54:b8:24:cc:a1:f9: c9:6f:06:21:13:a8:91:8c:09:b7:e1:59:60:19:15: ce:44:5a:1c:8d:48:ed:7f:42:37:0e:6d:32:ab:d6: 78:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B8:2D:2C:31:E5:18:C5:8F:EF:E3:A5:D3:42:2F:65:9A:01:7A:C3 X509v3 Authority Key Identifier: keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/FrgtLDHlGMWP7-Ol00IvZZoBesM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.232.0/23 Signature Algorithm: sha256WithRSAEncryption 25:69:4d:4a:59:c4:b8:92:98:58:87:47:6f:43:56:d4:d9:fd: 08:55:67:54:40:1d:4d:af:73:98:d3:07:f6:d6:a8:20:c5:c6: 8f:98:59:6d:81:63:22:f7:52:ea:d7:1d:1c:1b:a7:fb:13:b4: f9:d2:72:d3:56:91:da:e4:ad:b5:75:17:02:cf:8d:f4:58:23: ac:ad:d4:24:e6:82:d0:46:b8:4c:92:d1:cc:ca:79:7e:68:12: a3:a2:a2:69:dc:b3:4a:c6:04:eb:9d:48:6d:e5:27:f3:12:db: 30:ba:91:37:a1:12:09:da:f3:c5:7b:88:f5:4c:3b:c4:e4:94: 8f:0e:c4:c7:3a:e8:6c:76:da:30:1f:c4:fc:4e:9a:d1:86:11: a6:7b:f4:03:d8:ce:8c:29:76:ee:f0:24:ef:a1:75:88:63:11: 11:8d:74:8b:46:63:6e:58:6c:6c:16:68:66:f3:d7:21:c0:ab: cf:ec:04:98:5d:a3:0b:28:6c:bf:40:90:81:54:b6:a1:2b:8a: 0f:a3:41:94:c9:56:63:62:0e:21:fb:ef:a7:76:9f:ae:6a:6b: d0:ae:61:24:0e:1c:26:d6:90:2a:b8:be:99:7a:bd:9d:72:f5: 18:ba:51:9f:cb:59:72:b0:61:c9:f8:84:a8:f2:35:00:da:62: 93:f6:9e:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRiLOoH/06XzKC/3QL2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MmYyZDNjMjY5ZDkzNTIyNzY5MGIyOGI3ZmJkZDk1M2Ux ZTllZGMwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmI4MmQyYzMxZTUxOGM1OGZlZmUzYTVkMzQyMmY2NTlhMDE3YWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyWEeWH1Pq+ot04unfkn2cDg81Qf emreTCBIFbWKo2ECM+fF/ItI0uauiNQkrlx5dL142mLVjyQr4oztFfYo2k06XTuk 3kbWl9auZryUmiVhmYTRfYZSFtMcOAuBAawHPFFyX1WH4bidADciYUeQqiyRNB2g QFcn/AyN5kJsdh/PsKmIxw2G9kbgEiBFHkNLwG8MnntR3HroSrQljCTq7B1q2Ssu souEy1YVAQSO7WykiOPAdtuWY9j+MUx9CTb2vFJ03J7ld5MBRvxu57W8GOhfSi9T FDn4M/lUuCTMofnJbwYhE6iRjAm34VlgGRXORFocjUjtf0I3Dm0yq9Z4CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBa4LSwx5RjFj+/jpdNCL2WaAXrDMB8GA1UdIwQY MBaAFKYvLTwmnZNSJ2kLKLf73ZU+Hp7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMt MTAwZWVkODEyYzQwLzEvRnJndExESGxHTVdQNy1PbDAwSXZaWm9CZXNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMtMTAwZWVkODEyYzQw LzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSroMA0G CSqGSIb3DQEBCwUAA4IBAQAlaU1KWcS4kphYh0dvQ1bU2f0IVWdUQB1Nr3OY0wf2 1qggxcaPmFltgWMi91Lq1x0cG6f7E7T50nLTVpHa5K21dRcCz430WCOsrdQk5oLQ RrhMktHMynl+aBKjoqJp3LNKxgTrnUht5SfzEtswupE3oRIJ2vPFe4j1TDvE5JSP DsTHOuhsdtowH8T8TprRhhGme/QD2M6MKXbu8CTvoXWIYxERjXSLRmNuWGxsFmhm 89chwKvP7ASYXaMLKGy/QJCBVLahK4oPo0GUyVZjYg4h+++ndp+uamvQrmEkDhwm 1pAquL6Zer2dcvUYulGfy1lysGHJ+ISo8jUA2mKT9p4Y -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:26 2026 by rpki-client