This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/FrHMIqU1nyql5fH458yK8iNimJU.roa File: FrHMIqU1nyql5fH458yK8iNimJU.roa (raw, json) Hash identifier: HPL1MkQufVuqDT5rCNUypCZgqKjP0W6MbJyxk8JQnmg= Subject key identifier: 16:B1:CC:22:A5:35:9F:2A:A5:E5:F1:F8:E7:CC:8A:F2:23:62:98:95 Certificate issuer: /CN=11e512976b91a2967ebce10ed4052ece12b14155 Certificate serial: 019B78A2A8F03971EDCE5F86142C96770D26 Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/FrHMIqU1nyql5fH458yK8iNimJU.roa Signing time: Thu 01 Jan 2026 08:18:04 +0000 ROA not before: Thu 01 Jan 2026 08:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 185.76.180.0/24 maxlen: 24 2a03:5120::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a8:f0:39:71:ed:ce:5f:86:14:2c:96:77:0d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155 Validity Not Before: Jan 1 08:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16b1cc22a5359f2aa5e5f1f8e7cc8af223629895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:75:19:bd:c7:f9:18:20:92:a0:69:95:28: 02:44:cf:6b:a6:f6:eb:35:0e:54:b9:60:4d:7c:91: d3:68:e5:12:b3:a2:22:3f:db:78:f7:b3:bc:4e:a7: 17:36:58:ed:3b:be:10:2a:95:d4:7e:ef:06:35:02: 3a:b8:f1:dc:70:b3:ec:27:ad:fa:14:5a:24:62:6b: 50:17:7e:60:21:63:b4:42:f0:cf:37:33:d8:4e:9c: 5a:bb:fd:73:b5:a6:39:69:2a:cb:0f:2e:fc:f8:e3: ee:59:95:5f:01:fd:9c:4b:5d:50:a9:20:9d:3d:10: 56:dd:b9:99:05:07:38:2b:db:42:73:92:44:0e:ec: 2c:b2:8e:fe:31:db:63:9e:70:48:45:e6:61:eb:b8: fd:d6:1a:52:43:fa:31:09:b8:9d:d7:1e:5a:cf:ad: 1f:55:37:bc:ac:ad:6f:5a:5b:51:ff:25:b3:82:19: 90:df:ac:9c:e1:1d:14:fe:19:89:3d:a4:93:2b:44: 20:69:90:07:f0:e8:d7:32:84:03:90:56:3d:b1:a3: 57:55:35:a4:86:e8:fc:98:0c:2a:08:6e:2a:91:a6: 1d:a3:8d:0c:d3:41:8c:93:17:38:4e:c3:f4:cf:0a: d6:c1:9e:03:8c:6d:99:cd:bd:f9:5f:8d:51:ad:fe: e4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B1:CC:22:A5:35:9F:2A:A5:E5:F1:F8:E7:CC:8A:F2:23:62:98:95 X509v3 Authority Key Identifier: keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/FrHMIqU1nyql5fH458yK8iNimJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.180.0/24 IPv6: 2a03:5120::/40 Signature Algorithm: sha256WithRSAEncryption 39:f1:f3:bb:3b:5e:e3:3e:53:d1:1b:2c:0e:c1:d4:22:50:58: fa:42:18:e4:26:aa:8c:1d:85:c7:f6:ea:da:8a:c7:a2:31:29: 3e:d2:3e:d3:5f:92:61:cc:77:63:6c:86:3f:1b:23:8a:da:01: d4:f7:d5:b4:08:70:83:93:4c:54:bb:a5:db:a5:84:d6:05:ae: 1b:f7:ab:e6:b6:d5:bd:7c:b3:27:2b:f5:8c:65:0f:2c:69:18: 70:2c:23:1a:2b:75:c4:0e:6c:39:70:79:87:c8:8f:8d:35:8d: a1:a3:72:c1:cc:df:2f:d4:f8:ad:4f:a0:4d:0b:af:9f:d9:c5: c5:e5:25:09:ea:36:59:ae:fa:31:c5:3e:c5:e4:7b:a6:91:68: d5:e1:bf:07:7c:b4:53:5f:7b:0c:8f:7e:84:76:0f:00:03:83: c7:36:2e:91:11:5b:9c:75:80:c7:f4:57:57:fa:25:d4:d8:25: 42:a3:08:26:d8:88:8d:ae:7c:76:52:f5:65:05:1a:51:46:f2: d9:62:f1:d2:f4:e1:8c:87:bb:42:74:99:cd:8e:64:6a:6b:38: 70:9a:df:91:d1:16:42:ce:14:08:e2:d0:4d:0f:7e:88:4a:9d: 05:05:43:e5:7e:5e:a6:ab:87:cd:79:f1:22:37:af:a3:27:ab: 2e:29:7f:9c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4oqjwOXHtzl+GFCyWdw0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTUxMjk3NmI5MWEyOTY3ZWJjZTEwZWQ0MDUyZWNlMTJi MTQxNTUwHhcNMjYwMTAxMDgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmIxY2MyMmE1MzU5ZjJhYTVlNWYxZjhlN2NjOGFmMjIzNjI5ODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6F1Gb3H+RggkqBplSgCRM9rpvbr NQ5UuWBNfJHTaOUSs6IiP9t497O8TqcXNljtO74QKpXUfu8GNQI6uPHccLPsJ636 FFokYmtQF35gIWO0QvDPNzPYTpxau/1ztaY5aSrLDy78+OPuWZVfAf2cS11QqSCd PRBW3bmZBQc4K9tCc5JEDuwsso7+MdtjnnBIReZh67j91hpSQ/oxCbid1x5az60f VTe8rK1vWltR/yWzghmQ36yc4R0U/hmJPaSTK0QgaZAH8OjXMoQDkFY9saNXVTWk huj8mAwqCG4qkaYdo40M00GMkxc4TsP0zwrWwZ4DjG2Zzb35X41Rrf7knQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFBaxzCKlNZ8qpeXx+OfMivIjYpiVMB8GA1UdIwQY MBaAFBHlEpdrkaKWfrzhDtQFLs4SsUFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWVVU2wydVJvcFotdk9FTzFBVXV6aEt4UVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xN2EzYzAtZTk3YS00MzA2LWJjZTQt N2ZmMzJiNmZmZDFlLzEvRnJITUlxVTFueXFsNWZINDU4eUs4aU5pbUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xN2EzYzAtZTk3YS00MzA2LWJjZTQtN2ZmMzJiNmZmZDFl LzEvRWVVU2wydVJvcFotdk9FTzFBVXV6aEt4UVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuUy0MA4E AgACMAgDBgAqA1EgADANBgkqhkiG9w0BAQsFAAOCAQEAOfHzuzte4z5T0RssDsHU IlBY+kIY5CaqjB2Fx/bq2orHojEpPtI+01+SYcx3Y2yGPxsjitoB1PfVtAhwg5NM VLul26WE1gWuG/er5rbVvXyzJyv1jGUPLGkYcCwjGit1xA5sOXB5h8iPjTWNoaNy wczfL9T4rU+gTQuvn9nFxeUlCeo2Wa76McU+xeR7ppFo1eG/B3y0U197DI9+hHYP AAODxzYukRFbnHWAx/RXV/ol1NglQqMIJtiIja58dlL1ZQUaUUby2WLx0vThjIe7 QnSZzY5kams4cJrfkdEWQs4UCOLQTQ9+iEqdBQVD5X5epquHzXnxIjevoyerLil/ nA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:28 2026 by rpki-client