This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FRNi3sk0ZONfKtQJpcFEsCtLeHc.roa File: FRNi3sk0ZONfKtQJpcFEsCtLeHc.roa (raw, json) Hash identifier: 7YUc6wfgN+sYhdx1cpmGPpDGVuugRkWqHt6/wHp1CDk= Subject key identifier: 15:13:62:DE:C9:34:64:E3:5F:2A:D4:09:A5:C1:44:B0:2B:4B:78:77 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019B7CEDB2C827F772E717F9B969D8BC59A6 Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FRNi3sk0ZONfKtQJpcFEsCtLeHc.roa Signing time: Fri 02 Jan 2026 04:18:31 +0000 ROA not before: Fri 02 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34139 IP address blocks: 62.140.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b2:c8:27:f7:72:e7:17:f9:b9:69:d8:bc:59:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Jan 2 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=151362dec93464e35f2ad409a5c144b02b4b7877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:26:99:5b:50:dd:61:33:3f:56:37:64:62: 43:3b:ab:3c:0b:6c:de:fe:43:eb:14:0a:03:c6:86: 7f:28:94:9f:76:ad:e4:6a:6f:d2:88:89:d4:5b:36: 2f:1e:ab:b8:fb:a8:96:aa:1f:cf:d7:12:84:2e:d0: 28:f3:de:b9:8e:0e:d0:7e:2f:f8:a5:db:4c:10:ae: c0:31:6b:b9:b7:7c:7d:a9:67:ab:e5:53:12:28:c9: 52:e2:07:69:e5:3a:08:e1:3f:58:5a:f3:1f:9b:91: ca:90:b1:f9:ba:1a:b5:4e:0d:ac:9f:e3:27:8a:5a: 2d:5f:44:31:32:31:81:5f:a6:7f:c3:5c:5e:03:fa: 5b:0c:9d:df:84:4e:fc:96:ab:34:fb:d4:1b:80:e8: 6f:62:3c:be:0a:72:3b:4f:00:1d:86:2f:2a:1f:60: 83:57:27:96:f2:f7:6f:a9:36:d8:6c:d2:10:7d:06: 0b:64:8d:56:c1:7b:93:e4:8c:1c:62:53:49:90:fd: 07:b8:83:22:f8:b8:cf:78:2c:08:91:6d:bb:23:23: bf:56:2d:95:01:b5:29:ac:54:12:15:c6:e4:70:aa: 4b:c0:f1:3b:c8:6d:56:20:84:85:aa:6f:d7:d4:a1: df:90:f1:6c:81:55:84:31:70:92:db:cd:cb:c0:83: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:13:62:DE:C9:34:64:E3:5F:2A:D4:09:A5:C1:44:B0:2B:4B:78:77 X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/FRNi3sk0ZONfKtQJpcFEsCtLeHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.140.232.0/24 Signature Algorithm: sha256WithRSAEncryption 55:37:ce:cf:6c:43:c2:04:09:42:9f:08:ba:9a:00:59:bb:2c: f4:04:24:e8:f2:91:c6:2e:7a:7f:e4:51:35:95:8d:ec:63:05: 13:3f:9e:79:43:06:97:db:6b:34:b1:6e:0d:ab:d8:4d:69:de: 74:eb:de:6f:eb:73:c3:51:59:31:b4:8e:f6:ae:d8:8a:52:19: 25:73:1c:07:f6:28:3a:84:8e:37:c8:0f:66:42:8a:28:37:38: 9b:83:9f:57:c1:2a:0d:73:dd:12:84:68:14:9c:26:c0:99:c9: da:fe:6f:49:5a:81:fb:85:91:1a:a0:ad:ca:d5:ab:d7:49:73: 3f:f4:7c:d0:91:42:cd:7d:0f:df:d5:54:c1:36:6a:b3:76:b3: 44:98:6a:2c:4b:e8:1e:bb:65:be:35:85:1d:07:b8:6a:41:e8: 1c:dc:6b:69:80:a2:f3:d6:55:2a:3f:71:59:f9:12:41:e7:82: f0:db:d4:c4:49:73:4e:7e:64:84:d1:6d:18:70:5f:54:21:26: 5b:1e:76:36:b2:d4:4e:53:4d:0a:cb:0e:9f:7a:56:58:12:40: 25:5a:53:a4:6c:5c:2f:fc:60:c4:c3:4a:00:71:3e:1e:e8:ab: 0b:3e:8c:60:86:d6:11:38:da:e3:43:80:26:12:f7:13:39:a9: 0b:5e:dd:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87bLIJ/dy5xf5uWnYvFmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTEzNjJkZWM5MzQ2NGUzNWYyYWQ0MDlhNWMxNDRiMDJiNGI3ODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh0mmVtQ3WEzP1Y3ZGJDO6s8C2ze /kPrFAoDxoZ/KJSfdq3kam/SiInUWzYvHqu4+6iWqh/P1xKELtAo8965jg7Qfi/4 pdtMEK7AMWu5t3x9qWer5VMSKMlS4gdp5ToI4T9YWvMfm5HKkLH5uhq1Tg2sn+Mn ilotX0QxMjGBX6Z/w1xeA/pbDJ3fhE78lqs0+9QbgOhvYjy+CnI7TwAdhi8qH2CD VyeW8vdvqTbYbNIQfQYLZI1WwXuT5IwcYlNJkP0HuIMi+LjPeCwIkW27IyO/Vi2V AbUprFQSFcbkcKpLwPE7yG1WIISFqm/X1KHfkPFsgVWEMXCS283LwIONawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUTYt7JNGTjXyrUCaXBRLArS3h3MB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvRlJOaTNzazBaT05mS3RRSnBjRkVzQ3RMZUhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPozoMA0G CSqGSIb3DQEBCwUAA4IBAQBVN87PbEPCBAlCnwi6mgBZuyz0BCTo8pHGLnp/5FE1 lY3sYwUTP555QwaX22s0sW4Nq9hNad50695v63PDUVkxtI72rtiKUhklcxwH9ig6 hI43yA9mQoooNzibg59XwSoNc90ShGgUnCbAmcna/m9JWoH7hZEaoK3K1avXSXM/ 9HzQkULNfQ/f1VTBNmqzdrNEmGosS+geu2W+NYUdB7hqQegc3GtpgKLz1lUqP3FZ +RJB54Lw29TESXNOfmSE0W0YcF9UISZbHnY2stROU00Kyw6felZYEkAlWlOkbFwv /GDEw0oAcT4e6KsLPoxghtYRONrjQ4AmEvcTOakLXt3q -----END CERTIFICATE-----Generated at Mon Jan 26 03:40:32 2026 by rpki-client