This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/frVqf7Qb9l_BsfQariFSVHz8ob4.roa File: frVqf7Qb9l_BsfQariFSVHz8ob4.roa (raw, json) Hash identifier: YJglM4AaABJW1ebpCVy7ykfzKfkx+c4T33VsT0DyZ/M= Subject key identifier: 7E:B5:6A:7F:B4:1B:F6:5F:C1:B1:F4:1A:AE:21:52:54:7C:FC:A1:BE Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd Certificate serial: 019B7B35BB35CFC77E769FB96DFCF4742B9F Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/frVqf7Qb9l_BsfQariFSVHz8ob4.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60258 IP address blocks: 37.114.129.0/24 maxlen: 24 37.114.130.0/24 maxlen: 24 37.114.131.0/24 maxlen: 24 185.91.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bb:35:cf:c7:7e:76:9f:b9:6d:fc:f4:74:2b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eb56a7fb41bf65fc1b1f41aae2152547cfca1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f7:29:17:09:bf:bb:ba:6f:b0:a2:0e:c0:f9: 97:13:6b:60:2f:d6:b2:eb:a3:53:1f:f8:2d:19:5a: a3:44:3c:14:12:33:15:7b:a4:be:75:a6:64:63:90: 47:b7:f4:de:53:d2:05:04:ac:08:40:c3:09:97:a8: b2:13:fe:b7:b3:17:54:3f:b5:43:d2:e1:8b:76:ab: be:f0:fc:d8:11:6e:96:0c:95:d7:1e:34:6a:00:90: 42:62:e3:96:79:7a:9d:63:6c:3a:78:07:3a:29:5c: bf:b5:3e:b6:6d:ab:56:cf:31:6a:ec:71:8d:79:c4: 0a:d7:7c:07:bb:20:4d:87:48:90:63:7d:77:cf:59: 58:e9:ad:a0:47:2d:c3:c6:bc:ea:fc:d1:c7:41:9e: 7a:e6:43:7b:34:6e:3a:5f:ae:7d:ae:40:4c:6b:32: e9:dc:29:f6:c6:45:23:c0:07:56:2b:2b:bf:20:b2: b2:bb:70:0d:8e:99:ff:aa:02:f0:7b:6c:b3:55:5c: 9a:e0:b5:99:6c:60:d7:af:66:02:d6:9d:5b:15:ab: 87:a3:8c:39:b7:c9:60:cd:04:1e:1a:88:57:4a:7a: e6:c7:ca:21:96:fc:05:96:37:e1:2a:1d:77:64:04: 44:51:e6:59:4b:f1:ef:a9:56:b4:f9:bd:85:a9:cf: fc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B5:6A:7F:B4:1B:F6:5F:C1:B1:F4:1A:AE:21:52:54:7C:FC:A1:BE X509v3 Authority Key Identifier: keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/frVqf7Qb9l_BsfQariFSVHz8ob4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.129.0-37.114.131.255 185.91.208.0/22 Signature Algorithm: sha256WithRSAEncryption 85:6a:7b:b4:0c:37:bc:8e:09:5e:e8:e5:f3:4f:6a:20:51:5b: 02:1a:b9:b6:8c:cd:fb:d8:84:d3:5f:f4:14:84:aa:cf:d0:77: 86:ab:97:d4:ab:4e:09:34:5b:c4:68:76:23:94:25:b0:4b:3f: d1:a3:dc:d8:e1:6f:73:e4:26:06:31:c8:98:22:5e:c1:8f:1e: 48:fe:78:f9:6d:96:91:68:4e:26:9c:09:c4:15:5d:ae:be:c9: ef:a9:7b:0f:f4:e3:ad:1b:30:4c:13:0f:86:6f:55:14:e9:05: 45:74:0a:9b:5f:5c:51:c8:32:ff:3f:fa:29:c4:1f:c6:68:a9: d2:75:87:86:24:fd:e5:b3:c7:70:fc:f3:32:27:62:28:3f:dd: 17:6d:56:1f:86:fb:b4:39:4b:80:b8:e5:cc:13:da:cb:d6:10: ce:e2:b2:ac:d3:b8:53:5b:44:72:93:7a:5c:0a:8b:16:a8:ea: fd:ac:62:1c:99:4f:01:4c:a7:9a:e3:46:46:65:fd:51:75:8b: 9b:11:a3:14:2c:70:21:d2:75:61:44:bd:4e:95:31:a7:f2:75: 62:f8:ff:4d:00:78:bf:4c:40:dd:2e:90:19:97:a2:3f:55:24: 62:be:81:d9:c4:80:22:a1:c8:68:99:bf:d3:62:a3:6b:a5:18: 27:cb:7b:fd -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7Nbs1z8d+dp+5bfz0dCufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi MDk2ZmQwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWI1NmE3ZmI0MWJmNjVmYzFiMWY0MWFhZTIxNTI1NDdjZmNhMWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fcpFwm/u7pvsKIOwPmXE2tgL9ay 66NTH/gtGVqjRDwUEjMVe6S+daZkY5BHt/TeU9IFBKwIQMMJl6iyE/63sxdUP7VD 0uGLdqu+8PzYEW6WDJXXHjRqAJBCYuOWeXqdY2w6eAc6KVy/tT62batWzzFq7HGN ecQK13wHuyBNh0iQY313z1lY6a2gRy3Dxrzq/NHHQZ565kN7NG46X659rkBMazLp 3Cn2xkUjwAdWKyu/ILKyu3ANjpn/qgLwe2yzVVya4LWZbGDXr2YC1p1bFauHo4w5 t8lgzQQeGohXSnrmx8ohlvwFljfhKh13ZAREUeZZS/HvqVa0+b2Fqc/8eQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFH61an+0G/ZfwbH0Gq4hUlR8/KG+MB8GA1UdIwQY MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt MTVkNWRlYjIyOGRkLzEvZnJWcWY3UWI5bF9Cc2ZRYXJpRlNWSHo4b2I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAlcoED BAIlcoADBAK5W9AwDQYJKoZIhvcNAQELBQADggEBAIVqe7QMN7yOCV7o5fNPaiBR WwIaubaMzfvYhNNf9BSEqs/Qd4arl9SrTgk0W8RodiOUJbBLP9Gj3Njhb3PkJgYx yJgiXsGPHkj+ePltlpFoTiacCcQVXa6+ye+pew/0460bMEwTD4ZvVRTpBUV0Cptf XFHIMv8/+inEH8ZoqdJ1h4Yk/eWzx3D88zInYig/3RdtVh+G+7Q5S4C45cwT2svW EM7isqzTuFNbRHKTelwKixao6v2sYhyZTwFMp5rjRkZl/VF1i5sRoxQscCHSdWFE vU6VMafydWL4/00AeL9MQN0ukBmXoj9VJGK+gdnEgCKhyGiZv9Nio2ulGCfLe/0= -----END CERTIFICATE-----Generated at Tue Jan 27 00:24:12 2026 by rpki-client