This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/0M2Gh8kEW4HBMWUNSOyce3OzjgM.roa File: 0M2Gh8kEW4HBMWUNSOyce3OzjgM.roa (raw, json) Hash identifier: nL6ZkeLrqvehVaLZ+aqsUTY74DbCrZt7dFx0jh6BBXU= Subject key identifier: D0:CD:86:87:C9:04:5B:81:C1:31:65:0D:48:EC:9C:7B:73:B3:8E:03 Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7E291FB8580D3288EE3E44CC52EF4 Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/0M2Gh8kEW4HBMWUNSOyce3OzjgM.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1101 IP address blocks: 145.99.0.0/16 maxlen: 16 145.102.4.0/23 maxlen: 23 145.111.0.0/16 maxlen: 16 145.192.0.0/12 maxlen: 12 145.208.0.0/13 maxlen: 13 145.216.0.0/15 maxlen: 15 145.220.0.0/16 maxlen: 16 2001:67c:6ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e2:91:fb:85:80:d3:28:8e:e3:e4:4c:c5:2e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0cd8687c9045b81c131650d48ec9c7b73b38e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:69:c2:8f:cb:72:df:9c:ca:40:71:4a:32:d0: c5:b3:2f:a7:77:ab:6f:f3:1e:2d:3e:99:85:cf:7b: 69:d8:30:b4:7e:a7:9e:0a:20:da:7d:db:91:43:a5: b2:a2:c1:21:60:22:39:47:f1:55:f6:46:8e:ff:d6: 30:f7:fa:1c:cf:a2:7e:e9:4c:08:cb:94:23:77:c5: 0c:a1:46:4a:c8:66:72:10:47:3a:73:45:ca:ee:b2: 4e:d1:7b:ac:58:5b:41:1d:a3:b1:51:4d:89:2f:9b: 3f:b9:c5:79:dd:1b:47:ba:0e:a5:f2:df:64:e0:ea: b1:14:a0:13:4c:df:65:63:6d:cf:03:db:b0:bc:7e: 60:bf:6c:b8:7c:93:25:e9:6b:ce:b6:50:0e:08:f5: 08:e2:32:f6:82:90:fb:e5:ef:4b:a7:81:2b:f7:ab: 7f:d5:ae:fa:75:df:66:e7:f9:cb:52:72:fe:a1:f5: c5:df:b7:7a:cc:47:d5:bb:07:31:0f:ce:55:3a:58: 3d:33:0f:6b:87:7c:e8:ee:c7:38:eb:76:74:88:ec: 07:3d:0e:a1:5c:77:a8:93:26:e6:a8:3d:7a:85:ba: 67:f5:db:23:63:04:af:ea:09:a8:e2:37:48:ea:0f: bb:4f:a9:2b:9b:6e:bb:ac:b9:4c:16:f5:4e:8e:7f: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CD:86:87:C9:04:5B:81:C1:31:65:0D:48:EC:9C:7B:73:B3:8E:03 X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/0M2Gh8kEW4HBMWUNSOyce3OzjgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.99.0.0/16 145.102.4.0/23 145.111.0.0/16 145.192.0.0-145.217.255.255 145.220.0.0/16 IPv6: 2001:67c:6ec::/48 Signature Algorithm: sha256WithRSAEncryption 7e:7c:8a:2b:b5:30:d3:85:07:ef:b1:78:01:31:69:bc:f4:84: b9:27:08:a2:c0:e8:37:d8:67:ac:b1:0e:35:c6:14:58:70:63: 6e:c8:6f:1f:9b:d1:5e:8b:51:34:a7:3f:bb:2a:9d:71:98:15: 59:ce:f8:9c:c4:c9:43:1e:32:2a:f0:86:91:e7:a9:4c:a2:a1: 88:5c:85:9f:22:d9:f4:48:97:71:9f:d7:6a:bf:9a:fe:c9:b1: f7:f9:c2:d2:e4:cb:01:16:e7:09:50:87:4e:ab:af:54:4e:83: e2:90:18:8d:17:df:7b:47:71:ec:71:ac:b9:18:d0:9c:9c:f3: 1f:32:0f:c9:42:61:92:74:c7:dc:5d:02:70:8d:e0:cc:95:07: d7:2a:66:7d:36:eb:a2:49:77:65:0e:38:b5:97:04:d8:86:a5: 30:ef:a1:57:c1:13:f0:4a:1c:fc:75:d1:3f:ce:67:4b:80:87: 27:dd:04:27:56:4a:4f:c0:95:fc:2c:1c:37:3f:cc:aa:85:89: d4:0d:04:9b:2d:2c:13:89:47:30:3c:36:ad:13:59:52:74:ba: 3f:90:73:e7:55:c8:10:ca:06:b8:b5:92:bf:e3:c4:fb:ba:c8: cf:4a:b1:08:52:8e:8e:40:be:cc:06:40:76:4b:d4:8d:45:99: 75:97:a4:c6 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt6x+KR+4WA0yiO4+RMxS70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGNkODY4N2M5MDQ1YjgxYzEzMTY1MGQ0OGVjOWM3YjczYjM4ZTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmnCj8ty35zKQHFKMtDFsy+nd6tv 8x4tPpmFz3tp2DC0fqeeCiDafduRQ6WyosEhYCI5R/FV9kaO/9Yw9/ocz6J+6UwI y5Qjd8UMoUZKyGZyEEc6c0XK7rJO0XusWFtBHaOxUU2JL5s/ucV53RtHug6l8t9k 4OqxFKATTN9lY23PA9uwvH5gv2y4fJMl6WvOtlAOCPUI4jL2gpD75e9Lp4Er96t/ 1a76dd9m5/nLUnL+ofXF37d6zEfVuwcxD85VOlg9Mw9rh3zo7sc463Z0iOwHPQ6h XHeokybmqD16hbpn9dsjYwSv6gmo4jdI6g+7T6krm267rLlMFvVOjn8ILQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFNDNhofJBFuBwTFlDUjsnHtzs44DMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvME0yR2g4a0VXNEhCTVdVTlNPeWNlM096amdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAnBAIAATAhAwMAkWMDBAGR ZgQDAwCRbzAKAwMGkcADAwGR2AMDAJHcMA8EAgACMAkDBwAgAQZ8BuwwDQYJKoZI hvcNAQELBQADggEBAH58iiu1MNOFB++xeAExabz0hLknCKLA6DfYZ6yxDjXGFFhw Y27Ibx+b0V6LUTSnP7sqnXGYFVnO+JzEyUMeMirwhpHnqUyioYhchZ8i2fRIl3Gf 12q/mv7Jsff5wtLkywEW5wlQh06rr1ROg+KQGI0X33tHcexxrLkY0Jyc8x8yD8lC YZJ0x9xdAnCN4MyVB9cqZn0266JJd2UOOLWXBNiGpTDvoVfBE/BKHPx10T/OZ0uA hyfdBCdWSk/AlfwsHDc/zKqFidQNBJstLBOJRzA8Nq0TWVJ0uj+Qc+dVyBDKBri1 kr/jxPu6yM9KsQhSjo5AvswGQHZL1I1FmXWXpMY= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:28 2026 by rpki-client