This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa File: FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa (raw, json) Hash identifier: HOwOr4bTuIB/KNZWR5lcxrrwlrEvRwNSNG9O5oAt0bs= Subject key identifier: 15:1C:97:B2:21:60:FB:A0:48:84:4C:36:01:15:87:D0:33:46:4A:73 Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a Certificate serial: 019B797E146976B07AC0289B9C4FF4D74933 Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa Signing time: Thu 01 Jan 2026 12:17:44 +0000 ROA not before: Thu 01 Jan 2026 12:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201612 IP address blocks: 176.97.158.0/24 maxlen: 24 192.174.68.0/24 maxlen: 24 2001:67c:10b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:14:69:76:b0:7a:c0:28:9b:9c:4f:f4:d7:49:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a Validity Not Before: Jan 1 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=151c97b22160fba048844c36011587d033464a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8d:41:75:90:20:00:d7:5f:d4:c5:f4:e4:cb: d5:0c:07:9b:75:3c:46:45:07:2c:ab:93:7b:81:01: 6d:5f:26:fa:bd:c8:31:85:b9:29:c9:46:78:c4:4a: be:fb:f8:e1:88:df:44:a9:10:dd:84:1e:a1:3f:78: a9:02:13:1d:6b:91:06:cb:d0:e8:d3:c9:1a:4a:ef: f9:cd:32:94:86:2c:99:7e:42:7b:e2:66:1a:d5:3b: 2e:c8:5c:0d:86:ba:5d:34:ee:ea:76:78:9c:10:b3: 93:24:99:fe:7c:ea:e3:f9:c6:71:01:e9:5d:0e:b7: 31:9d:60:8c:3e:d2:b5:52:e2:00:d3:05:66:c4:d9: a1:91:1a:81:84:b5:6d:2a:58:49:9d:e5:40:bd:7c: 34:46:24:43:bc:1b:98:58:1a:d0:7d:b2:1a:42:3d: 28:be:da:f4:38:a8:87:8e:8a:29:34:8c:b3:9b:99: 54:a0:4e:8e:02:ae:5a:1b:f2:8d:0b:13:23:ae:c5: fd:d4:05:30:10:7a:b3:39:74:5d:aa:83:0c:32:ed: 64:92:94:96:b0:1b:1d:0a:81:ec:69:5f:6e:c6:26: fa:10:cc:a4:ed:01:e2:30:6d:3d:4b:aa:0c:70:8f: 4e:69:33:3f:15:5b:e6:44:7b:85:27:7a:48:81:67: de:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1C:97:B2:21:60:FB:A0:48:84:4C:36:01:15:87:D0:33:46:4A:73 X509v3 Authority Key Identifier: keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.97.158.0/24 192.174.68.0/24 IPv6: 2001:67c:10b8::/48 Signature Algorithm: sha256WithRSAEncryption 2f:b0:e2:31:72:26:c9:57:63:f6:50:18:7d:9b:fb:8f:a9:5e: d9:5a:a6:33:8e:ad:19:1e:9c:f2:00:56:ad:84:cc:db:6d:0e: 3e:56:27:57:de:81:0d:2a:7a:5a:16:19:2e:f0:51:7e:f8:ae: 53:c5:fd:b1:07:84:b3:1a:3b:18:43:86:bb:7f:4f:60:bb:1f: 56:a4:0c:9c:b7:70:68:5a:c2:06:da:8e:30:ca:d4:47:63:91: bb:fc:86:75:84:c9:d0:07:c1:11:f3:61:ad:fc:92:30:3c:76: 50:c8:fb:50:b4:fb:d3:b3:93:9b:db:76:58:8d:ee:25:ca:7c: f5:ef:be:b7:b7:31:07:d5:a9:8e:d5:a5:cc:e8:c1:7f:43:35: a7:fe:2d:04:00:e8:e4:3f:49:c8:3d:cf:d2:ff:00:f8:42:f5: 5a:ad:7e:ab:00:b1:fb:44:af:0f:42:69:3e:8e:b8:cc:b2:8d: b0:37:c0:6a:70:91:b7:7e:f0:38:79:8b:fa:2b:aa:0d:ec:9e: 81:3f:17:3c:4c:28:7e:c1:2d:2b:b9:d5:5d:02:47:f1:e9:ab: cc:ec:17:6e:45:70:b5:71:d7:6f:6f:ab:3e:a7:01:54:40:ab: 15:cb:da:fa:4c:61:7f:85:4f:a9:42:07:90:35:6f:c1:ca:0a: 56:76:f1:0b -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5fhRpdrB6wCibnE/010kzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmZjNjBkMzZlMjhiYjhkZjE0NWM4NGFjYWIxOWNmYTUz YjAyNWEwHhcNMjYwMTAxMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTFjOTdiMjIxNjBmYmEwNDg4NDRjMzYwMTE1ODdkMDMzNDY0YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk41BdZAgANdf1MX05MvVDAebdTxG RQcsq5N7gQFtXyb6vcgxhbkpyUZ4xEq++/jhiN9EqRDdhB6hP3ipAhMda5EGy9Do 08kaSu/5zTKUhiyZfkJ74mYa1TsuyFwNhrpdNO7qdnicELOTJJn+fOrj+cZxAeld DrcxnWCMPtK1UuIA0wVmxNmhkRqBhLVtKlhJneVAvXw0RiRDvBuYWBrQfbIaQj0o vtr0OKiHjoopNIyzm5lUoE6OAq5aG/KNCxMjrsX91AUwEHqzOXRdqoMMMu1kkpSW sBsdCoHsaV9uxib6EMyk7QHiMG09S6oMcI9OaTM/FVvmRHuFJ3pIgWfenQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFBUcl7IhYPugSIRMNgEVh9AzRkpzMB8GA1UdIwQY MBaAFKUvxg024ou43xRchKyrGc+lOwJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTct OWI0YTJkNWYzYTc2LzEvRlJ5WHNpRmctNkJJaEV3MkFSV0gwRE5HU25NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTctOWI0YTJkNWYzYTc2 LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAsGGeAwQA wK5EMA8EAgACMAkDBwAgAQZ8ELgwDQYJKoZIhvcNAQELBQADggEBAC+w4jFyJslX Y/ZQGH2b+4+pXtlapjOOrRkenPIAVq2EzNttDj5WJ1fegQ0qeloWGS7wUX74rlPF /bEHhLMaOxhDhrt/T2C7H1akDJy3cGhawgbajjDK1Edjkbv8hnWEydAHwRHzYa38 kjA8dlDI+1C0+9Ozk5vbdliN7iXKfPXvvre3MQfVqY7VpczowX9DNaf+LQQA6OQ/ Scg9z9L/APhC9VqtfqsAsftErw9CaT6OuMyyjbA3wGpwkbd+8Dh5i/orqg3snoE/ FzxMKH7BLSu51V0CR/Hpq8zsF25FcLVx129vqz6nAVRAqxXL2vpMYX+FT6lCB5A1 b8HKClZ28Qs= -----END CERTIFICATE-----Generated at Tue Jan 27 05:34:16 2026 by rpki-client