This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/FRRRnwExpXw7a2MuDv5ABSNE0os.roa File: FRRRnwExpXw7a2MuDv5ABSNE0os.roa (raw, json) Hash identifier: 3ZQFCRFjP8UeMQLhH1/qjBrVW66rsV7z4ra4rGbF/Rk= Subject key identifier: 15:14:51:9F:01:31:A5:7C:3B:6B:63:2E:0E:FE:40:05:23:44:D2:8B Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 019BE0A0C3DB70B26806B8FC994109645BFF Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/FRRRnwExpXw7a2MuDv5ABSNE0os.roa Signing time: Wed 21 Jan 2026 12:56:30 +0000 ROA not before: Wed 21 Jan 2026 12:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64419 IP address blocks: 77.91.120.0/23 maxlen: 23 77.91.120.0/24 maxlen: 24 77.91.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:a0:c3:db:70:b2:68:06:b8:fc:99:41:09:64:5b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Jan 21 12:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1514519f0131a57c3b6b632e0efe40052344d28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:13:4e:68:e1:2b:76:91:19:db:10:6c:3e: d4:f5:aa:5c:b3:ad:af:06:68:04:14:7f:d6:8b:44: d5:92:6d:3e:4b:ed:55:d9:c1:f6:53:78:04:e3:f7: 20:54:26:a2:2b:07:4c:46:f6:9e:2e:67:ec:56:a4: 0e:51:85:10:a0:5d:0e:af:82:6d:b2:97:88:6e:0a: 0e:82:c2:bf:a0:39:c6:d3:3a:ed:00:78:89:da:c4: 27:c6:b5:c2:f1:ca:54:e8:b1:12:4c:8c:26:7b:8c: 0e:df:ee:23:a2:fe:81:c4:72:ea:0b:f8:98:76:59: 67:83:d6:3d:97:fa:9d:1b:4f:0b:dd:c8:85:00:55: 60:eb:30:0b:95:a5:45:d1:f4:62:77:29:3d:15:7d: 38:74:c3:03:ad:6c:06:6c:52:b4:5c:87:ae:95:c4: 5c:a9:98:e7:65:e6:a1:8c:fe:9a:b2:c9:1a:83:81: 25:bc:63:e5:43:3d:02:a8:6b:d4:32:ef:b1:8e:00: 74:c9:5f:d8:c2:cf:4c:cd:75:02:78:f9:a4:42:08: 8e:3a:48:2e:ac:c1:a6:8a:ea:db:81:82:da:0f:45: 4a:f2:92:a1:6d:a5:2f:e8:3f:e8:78:ad:84:02:06: ab:8e:9c:6e:db:14:4a:9f:ca:21:54:4e:fe:03:4c: 55:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:14:51:9F:01:31:A5:7C:3B:6B:63:2E:0E:FE:40:05:23:44:D2:8B X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/FRRRnwExpXw7a2MuDv5ABSNE0os.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.120.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:d8:21:ad:1d:98:51:24:6b:64:8e:39:f7:1b:25:ae:b8:a1: 2a:8b:76:d4:e9:79:b9:e1:ab:bf:bc:24:2d:db:5b:a6:01:1b: c5:25:8f:6d:d7:0e:33:c9:94:af:e4:a5:8a:e2:7a:da:21:1d: 1a:af:0e:67:ad:fe:ce:0b:80:a1:55:61:46:be:ac:2f:68:03: 8a:00:69:bc:d2:61:05:d3:1b:43:80:ce:66:f9:95:93:f8:1e: 05:6f:26:ca:bf:22:e6:f0:5c:07:e4:a3:08:92:5a:2c:19:37: f7:06:1b:87:02:41:88:ea:a8:a6:d4:f8:27:41:27:80:54:ac: d3:48:99:7f:ab:d0:63:75:f7:93:5c:ad:f0:7d:c9:b5:91:3e: 54:4f:f0:59:ac:d1:d5:fa:89:70:c0:fa:11:31:0e:68:b5:04: ac:6a:a9:f6:04:df:65:11:83:67:4f:1d:e9:93:e5:aa:da:f5: e3:0f:78:2f:cc:fd:6a:74:39:12:a2:1c:b0:c5:9e:f3:82:09: c5:43:85:70:93:fd:ac:dc:95:99:71:f3:50:2c:ea:89:3b:84: 86:42:f9:f2:09:68:1e:fe:1e:2c:22:36:29:c5:c4:bc:ab:c6: 5e:09:17:9f:a7:f8:18:fa:7e:14:ad:ae:e4:13:25:50:86:f7: ba:5c:01:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvgoMPbcLJoBrj8mUEJZFv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYwMTIxMTI1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTE0NTE5ZjAxMzFhNTdjM2I2YjYzMmUwZWZlNDAwNTIzNDRkMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/MTTmjhK3aRGdsQbD7U9apcs62v BmgEFH/Wi0TVkm0+S+1V2cH2U3gE4/cgVCaiKwdMRvaeLmfsVqQOUYUQoF0Or4Jt speIbgoOgsK/oDnG0zrtAHiJ2sQnxrXC8cpU6LESTIwme4wO3+4jov6BxHLqC/iY dllng9Y9l/qdG08L3ciFAFVg6zALlaVF0fRidyk9FX04dMMDrWwGbFK0XIeulcRc qZjnZeahjP6asskag4ElvGPlQz0CqGvUMu+xjgB0yV/Yws9MzXUCePmkQgiOOkgu rMGmiurbgYLaD0VK8pKhbaUv6D/oeK2EAgarjpxu2xRKn8ohVE7+A0xVFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUUUZ8BMaV8O2tjLg7+QAUjRNKLMB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvRlJSUm53RXhwWHc3YTJNdUR2NUFCU05FMG9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTVt4MA0G CSqGSIb3DQEBCwUAA4IBAQCK2CGtHZhRJGtkjjn3GyWuuKEqi3bU6Xm54au/vCQt 21umARvFJY9t1w4zyZSv5KWK4nraIR0arw5nrf7OC4ChVWFGvqwvaAOKAGm80mEF 0xtDgM5m+ZWT+B4FbybKvyLm8FwH5KMIklosGTf3BhuHAkGI6qim1PgnQSeAVKzT SJl/q9BjdfeTXK3wfcm1kT5UT/BZrNHV+olwwPoRMQ5otQSsaqn2BN9lEYNnTx3p k+Wq2vXjD3gvzP1qdDkSohywxZ7zggnFQ4Vwk/2s3JWZcfNQLOqJO4SGQvnyCWge /h4sIjYpxcS8q8ZeCRefp/gY+n4Ura7kEyVQhve6XAHg -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:37 2026 by rpki-client