This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/5zn3dum1Zv1WWxBMWnL1sbxclAQ.roa File: 5zn3dum1Zv1WWxBMWnL1sbxclAQ.roa (raw, json) Hash identifier: +xjN5pTNsJYKt5G/pIxTwAWAbgbWthqTTDlTwMj6Kz8= Subject key identifier: E7:39:F7:76:E9:B5:66:FD:56:5B:10:4C:5A:72:F5:B1:BC:5C:94:04 Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7EAE4EC8E65447B2FB0B75AD191CA Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/5zn3dum1Zv1WWxBMWnL1sbxclAQ.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1199 IP address blocks: 145.102.136.0/22 maxlen: 22 145.111.0.0/16 maxlen: 16 145.152.0.0/13 maxlen: 13 2001:610:5ea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ea:e4:ec:8e:65:44:7b:2f:b0:b7:5a:d1:91:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e739f776e9b566fd565b104c5a72f5b1bc5c9404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:52:0e:dc:00:91:92:3d:21:ec:7b:49:04: 72:c0:c5:f4:72:7e:51:23:cd:c2:6a:11:4b:7f:fb: 1b:f2:ed:1a:6d:ae:e7:61:04:9f:23:0c:d4:91:80: e5:32:c0:5a:37:f8:87:56:29:f4:73:35:9a:60:73: 34:5d:bc:25:50:44:d1:63:c1:87:f2:cb:3b:9a:d4: ae:9a:c2:ef:2a:4c:10:55:4a:a4:60:77:10:88:71: 3e:d0:34:72:96:8a:a4:fe:8c:53:1d:fe:7a:ad:8d: 7d:b5:d3:70:0f:18:a9:92:f8:db:ec:cc:b4:43:e7: 2f:20:f0:3e:fc:56:09:fa:65:48:cf:bf:9d:4f:72: 40:46:8b:2c:f8:68:2f:da:1e:ee:56:7d:a8:da:35: 33:bb:c8:33:d3:e0:2c:61:db:db:2d:3e:61:33:21: 0d:de:8b:4f:7e:9e:20:10:87:ba:c2:87:09:79:0d: e8:62:f1:76:67:dc:24:6b:dd:4a:91:32:f0:1e:a5: e8:ec:6a:2e:41:5c:95:94:42:cf:cf:0a:bd:5c:ab: 48:f2:3d:ed:59:81:3f:a2:8f:dd:84:e7:df:6d:a2: 28:f8:9f:93:d6:6c:79:8e:fa:c0:13:79:a9:f9:61: 6d:32:76:d9:fc:3c:d3:df:b7:46:47:bc:6d:d0:51: e5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:39:F7:76:E9:B5:66:FD:56:5B:10:4C:5A:72:F5:B1:BC:5C:94:04 X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/5zn3dum1Zv1WWxBMWnL1sbxclAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.102.136.0/22 145.111.0.0/16 145.152.0.0/13 IPv6: 2001:610:5ea::/48 Signature Algorithm: sha256WithRSAEncryption aa:01:8b:64:a8:3c:21:b6:19:96:17:e8:28:da:15:84:d4:4f: cd:05:ba:0b:a4:5a:61:8e:6e:bb:f1:05:fb:0b:a2:d9:11:7c: 4c:a0:39:e4:56:66:98:30:40:35:d1:ad:2e:aa:aa:1b:14:39: 77:e7:53:76:69:01:ab:ff:0f:b5:ac:97:9a:d7:9a:f0:a1:38: c4:99:32:f0:51:6d:22:75:5a:f5:b7:9f:92:c2:b4:0c:ce:8b: 9a:d0:df:d6:17:54:18:de:14:0a:95:7f:be:fd:f7:ac:93:25: 08:85:ca:a7:4a:36:65:e4:4d:22:fb:f0:96:a5:b2:10:87:56: 77:3e:c1:52:7f:0b:2d:0b:e3:09:eb:24:11:9f:19:09:3a:7b: d8:fc:c8:c9:63:5c:56:66:94:f4:0f:b0:f0:7d:ff:88:c1:8d: ca:75:aa:ea:8e:58:5e:88:65:59:b7:ae:42:27:e3:5c:5d:49: 40:d1:12:11:74:34:a2:6e:b8:61:53:d3:a3:e5:a8:d8:86:f3: 2b:e8:4f:a5:e7:d2:4e:27:67:d7:93:38:78:14:7e:8d:0a:91: d0:db:3d:2c:45:7d:61:b8:a5:9f:58:f5:61:75:87:3a:20:0d: 75:06:b9:0c:b7:98:ca:e0:0e:20:9d:e2:3e:3d:2f:09:94:0a: a1:bf:ca:2a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6x+rk7I5lRHsvsLda0ZHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzM5Zjc3NmU5YjU2NmZkNTY1YjEwNGM1YTcyZjViMWJjNWM5NDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgNSDtwAkZI9Iex7SQRywMX0cn5R I83CahFLf/sb8u0aba7nYQSfIwzUkYDlMsBaN/iHVin0czWaYHM0XbwlUETRY8GH 8ss7mtSumsLvKkwQVUqkYHcQiHE+0DRyloqk/oxTHf56rY19tdNwDxipkvjb7My0 Q+cvIPA+/FYJ+mVIz7+dT3JARoss+Ggv2h7uVn2o2jUzu8gz0+AsYdvbLT5hMyEN 3otPfp4gEIe6wocJeQ3oYvF2Z9wka91KkTLwHqXo7GouQVyVlELPzwq9XKtI8j3t WYE/oo/dhOffbaIo+J+T1mx5jvrAE3mp+WFtMnbZ/DzT37dGR7xt0FHlcwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOc593bptWb9VlsQTFpy9bG8XJQEMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvNXpuM2R1bTFadjFXV3hCTVduTDFzYnhjbEFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAWBAIAATAQAwQCkWaIAwMA kW8DAwORmDAPBAIAAjAJAwcAIAEGEAXqMA0GCSqGSIb3DQEBCwUAA4IBAQCqAYtk qDwhthmWF+go2hWE1E/NBboLpFphjm678QX7C6LZEXxMoDnkVmaYMEA10a0uqqob FDl351N2aQGr/w+1rJea15rwoTjEmTLwUW0idVr1t5+SwrQMzoua0N/WF1QY3hQK lX++/feskyUIhcqnSjZl5E0i+/CWpbIQh1Z3PsFSfwstC+MJ6yQRnxkJOnvY/MjJ Y1xWZpT0D7Dwff+IwY3KdarqjlheiGVZt65CJ+NcXUlA0RIRdDSibrhhU9Oj5ajY hvMr6E+l59JOJ2fXkzh4FH6NCpHQ2z0sRX1huKWfWPVhdYc6IA11BrkMt5jK4A4g neI+PS8JlAqhv8oq -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:09 2026 by rpki-client