This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/A_froRO9pbrJLDVEzpfQl91eXok.roa File: A_froRO9pbrJLDVEzpfQl91eXok.roa (raw, json) Hash identifier: 2umJ0pPia+IzIixJA1uhoZmkKwHmxLfx14SkgokEFl4= Subject key identifier: 03:F7:EB:A1:13:BD:A5:BA:C9:2C:35:44:CE:97:D0:97:DD:5E:5E:89 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B07EA8AAEBA780AC216299A9FC6921F09 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/A_froRO9pbrJLDVEzpfQl91eXok.roa Signing time: Wed 10 Dec 2025 10:59:30 +0000 ROA not before: Wed 10 Dec 2025 10:59:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201691 IP address blocks: 45.159.151.0/24 maxlen: 24 193.35.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ea:8a:ae:ba:78:0a:c2:16:29:9a:9f:c6:92:1f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 10 10:59:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=03f7eba113bda5bac92c3544ce97d097dd5e5e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:1d:16:6c:ab:42:0e:32:04:15:2c:48:98: 99:73:24:e7:ca:c6:04:ea:b4:ad:5a:3f:ae:84:1c: 01:8d:b6:0a:c2:ef:fe:63:ac:8d:5e:18:bf:74:5b: c2:85:4f:a9:e0:89:a9:9e:e2:78:8d:6a:06:64:99: 61:c8:e8:e3:23:5c:2b:de:f4:76:46:d0:de:31:c7: 06:33:58:dc:f5:78:fb:13:ea:47:6c:bb:59:f9:69: 9d:a3:0a:01:4b:44:16:75:2c:80:7b:63:93:c5:ac: 18:d1:69:f2:c6:69:f8:5b:a6:15:58:fb:71:e3:48: 3a:00:75:c6:69:8b:a3:f3:33:2f:0d:b3:e9:3f:5d: ff:a2:53:7d:3d:f7:00:cd:eb:78:73:8b:e8:55:78: a3:cc:ec:a4:6e:43:2c:89:6c:80:a9:7d:53:48:b4: 84:57:28:c6:f1:0f:3e:3b:2c:22:84:a8:5c:29:66: 49:cc:b1:40:8b:8e:23:25:e4:a1:44:8e:44:24:eb: 71:87:a4:99:bc:b9:14:ef:d7:c0:2c:d8:c2:0b:bc: 1d:16:7f:28:63:71:b5:53:f5:36:66:3f:f0:11:a7: b0:78:a2:88:ac:6e:d6:7b:c5:cc:63:8d:9b:b3:08: ff:c8:7d:88:c2:69:5a:34:c7:1c:68:e5:ab:60:80: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F7:EB:A1:13:BD:A5:BA:C9:2C:35:44:CE:97:D0:97:DD:5E:5E:89 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/A_froRO9pbrJLDVEzpfQl91eXok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.151.0/24 193.35.230.0/24 Signature Algorithm: sha256WithRSAEncryption 07:80:d0:86:2b:6a:6e:24:9d:61:93:e6:10:23:e6:05:86:b4: 0a:63:4d:e8:18:e3:ae:36:52:d2:92:42:70:03:b2:ed:26:cd: 50:97:f8:6e:a5:14:6a:e4:33:db:29:33:29:a4:88:14:68:34: 59:79:09:1c:7f:c5:8a:a9:89:73:e3:d2:7f:56:9d:89:65:13: 86:4b:44:d3:01:14:84:d2:78:dd:45:f4:c7:d6:1a:9d:de:56: 60:e3:c3:13:3d:6e:bf:01:69:29:04:e7:6f:25:fe:45:f6:03: 51:36:6f:98:05:0a:fa:5f:c6:64:91:7c:9f:97:09:e1:f9:64: 58:00:06:22:a7:bf:ff:79:51:25:e7:c6:51:90:52:cf:af:e1: 3c:ad:5d:fd:58:f4:8c:49:bb:39:f7:a8:17:34:ad:54:24:29: 4e:20:7e:94:2c:82:64:58:a2:a3:b0:60:cb:de:0a:fb:61:e9: 4c:04:ab:fa:2a:80:4f:55:a1:f7:b8:47:ba:8d:70:18:44:55: e1:7b:8d:25:10:ea:ee:48:ac:c0:b0:5c:51:07:d6:74:72:f0: 81:5f:1c:78:4f:df:1b:59:8f:8c:4f:c4:dd:18:42:c0:d1:e9: 3f:1b:25:0f:78:b4:47:67:c3:9b:be:ba:6c:ec:86:3a:69:2c: ce:39:b5:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsH6oquungKwhYpmp/Gkh8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjEwMTA1OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2Y3ZWJhMTEzYmRhNWJhYzkyYzM1NDRjZTk3ZDA5N2RkNWU1ZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbodFmyrQg4yBBUsSJiZcyTnysYE 6rStWj+uhBwBjbYKwu/+Y6yNXhi/dFvChU+p4ImpnuJ4jWoGZJlhyOjjI1wr3vR2 RtDeMccGM1jc9Xj7E+pHbLtZ+WmdowoBS0QWdSyAe2OTxawY0Wnyxmn4W6YVWPtx 40g6AHXGaYuj8zMvDbPpP13/olN9PfcAzet4c4voVXijzOykbkMsiWyAqX1TSLSE VyjG8Q8+OywihKhcKWZJzLFAi44jJeShRI5EJOtxh6SZvLkU79fALNjCC7wdFn8o Y3G1U/U2Zj/wEaeweKKIrG7We8XMY42bswj/yH2IwmlaNMccaOWrYIDStQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAP366ETvaW6ySw1RM6X0JfdXl6JMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvQV9mcm9STzlwYnJKTERWRXpwZlFsOTFlWG9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ+XAwQA wSPmMA0GCSqGSIb3DQEBCwUAA4IBAQAHgNCGK2puJJ1hk+YQI+YFhrQKY03oGOOu NlLSkkJwA7LtJs1Ql/hupRRq5DPbKTMppIgUaDRZeQkcf8WKqYlz49J/Vp2JZROG S0TTARSE0njdRfTH1hqd3lZg48MTPW6/AWkpBOdvJf5F9gNRNm+YBQr6X8ZkkXyf lwnh+WRYAAYip7//eVEl58ZRkFLPr+E8rV39WPSMSbs596gXNK1UJClOIH6ULIJk WKKjsGDL3gr7YelMBKv6KoBPVaH3uEe6jXAYRFXhe40lEOruSKzAsFxRB9Z0cvCB Xxx4T98bWY+MT8TdGELA0ek/GyUPeLRHZ8Obvrps7IY6aSzOObVG -----END CERTIFICATE-----Generated at Mon Dec 15 17:09:16 2025 by rpki-client