This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/C3JgIrvJpt4nFvOI3FV_wu1oSmw.roa File: C3JgIrvJpt4nFvOI3FV_wu1oSmw.roa (raw, json) Hash identifier: 8N7oLcTIrMKquSvzqCaJkuxVRMjI5F/VIDYpm7lFnAM= Subject key identifier: 0B:72:60:22:BB:C9:A6:DE:27:16:F3:88:DC:55:7F:C2:ED:68:4A:6C Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7F3ED9FDEBF763A742FC50F9352CD Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/C3JgIrvJpt4nFvOI3FV_wu1oSmw.roa Signing time: Thu 01 Jan 2026 18:18:03 +0000 ROA not before: Thu 01 Jan 2026 18:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21286 IP address blocks: 145.15.0.0/22 maxlen: 22 145.15.90.0/24 maxlen: 24 145.15.92.0/22 maxlen: 22 145.15.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f3:ed:9f:de:bf:76:3a:74:2f:c5:0f:93:52:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b726022bbc9a6de2716f388dc557fc2ed684a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d7:65:90:66:6c:e2:3b:a0:2a:05:cb:c2:b9: 23:b8:94:c5:0a:20:55:ae:40:e5:84:46:61:4f:3b: 4c:26:33:ef:d1:e2:b8:65:68:4f:3f:ce:ad:3a:b1: 94:8d:16:ea:9a:64:6b:10:b6:87:41:a2:00:d1:e7: 6b:05:3e:97:90:2a:35:bf:92:c0:f4:e0:45:84:fc: 21:ce:fa:55:69:28:db:2a:7a:60:29:bc:09:19:ff: 77:40:cb:92:88:65:ee:db:e8:15:fc:43:1c:ed:5a: 04:4f:7b:56:5a:b9:60:fa:2f:d5:c4:54:43:b9:d5: d9:17:c7:c3:85:77:f8:d1:27:42:49:07:6b:d1:52: 48:e5:53:8a:d0:74:09:a4:af:86:38:45:34:4b:46: fe:fd:fd:31:ae:00:e8:d9:26:cc:56:23:bd:57:72: ba:03:45:99:21:59:c0:5b:b8:3c:ab:8b:42:51:3b: a0:22:ce:ac:92:c8:0d:70:df:0d:17:03:c2:c6:13: a1:50:a0:b9:a8:f5:b6:27:0e:57:fe:58:41:20:d0: c3:a6:3f:2b:42:99:d1:aa:7c:9e:3a:96:d3:72:74: 21:72:9e:9b:38:1f:50:85:c0:f8:b8:95:ee:8d:af: 6b:0e:d9:26:5c:bc:8f:ee:2d:77:01:26:89:40:5b: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:72:60:22:BB:C9:A6:DE:27:16:F3:88:DC:55:7F:C2:ED:68:4A:6C X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/C3JgIrvJpt4nFvOI3FV_wu1oSmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.15.0.0/22 145.15.90.0/24 145.15.92.0-145.15.99.255 Signature Algorithm: sha256WithRSAEncryption 3f:13:0d:cb:f8:c3:77:3e:a3:4e:a1:67:da:68:70:b0:05:ef: 58:77:e0:79:95:b2:a1:13:e3:18:36:13:69:af:fc:9a:f5:4d: ea:c7:e6:e2:72:e4:6e:38:a8:21:70:ed:b6:8f:e8:0a:15:61: d4:02:dc:ac:58:94:90:2e:ce:24:33:6b:68:3d:8e:61:4b:d5: e5:32:8f:59:7a:6b:ba:82:3a:38:92:9c:21:d7:1c:87:24:c8: 8d:5c:82:ca:99:2f:01:ec:ec:fd:07:10:04:29:f5:c8:09:88: b5:ea:a7:4c:f0:cc:a1:5d:39:88:4e:99:50:86:0b:fb:d1:ff: 63:d6:fb:63:45:56:59:0f:d1:92:6a:40:75:f2:44:cb:37:7a: c5:32:43:b0:96:c9:ae:5b:62:07:c5:51:0e:5a:f0:e0:80:7d: ed:b5:8f:bb:89:fb:68:56:bb:7b:ec:0f:b3:59:a5:10:e5:e3: 3c:37:b9:a6:c8:b3:a7:36:36:b4:fe:38:b7:bd:47:f7:dd:b6: be:26:5a:0b:2d:76:2a:a5:31:23:4b:98:b9:6a:79:74:08:9f: bd:a1:ad:68:1f:69:07:e3:d1:67:9e:cc:b2:36:6c:16:54:35: d3:67:fd:8b:7a:aa:f9:b0:32:19:99:ef:ce:62:79:b3:5f:f1: 22:37:7c:a0 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6x/Ptn96/djp0L8UPk1LNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjcyNjAyMmJiYzlhNmRlMjcxNmYzODhkYzU1N2ZjMmVkNjg0YTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltdlkGZs4jugKgXLwrkjuJTFCiBV rkDlhEZhTztMJjPv0eK4ZWhPP86tOrGUjRbqmmRrELaHQaIA0edrBT6XkCo1v5LA 9OBFhPwhzvpVaSjbKnpgKbwJGf93QMuSiGXu2+gV/EMc7VoET3tWWrlg+i/VxFRD udXZF8fDhXf40SdCSQdr0VJI5VOK0HQJpK+GOEU0S0b+/f0xrgDo2SbMViO9V3K6 A0WZIVnAW7g8q4tCUTugIs6sksgNcN8NFwPCxhOhUKC5qPW2Jw5X/lhBINDDpj8r QpnRqnyeOpbTcnQhcp6bOB9QhcD4uJXuja9rDtkmXLyP7i13ASaJQFuDGQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFAtyYCK7yabeJxbziNxVf8LtaEpsMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvQzNKZ0lydkpwdDRuRnZPSTNGVl93dTFvU213LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCkQ8AAwQA kQ9aMAwDBAKRD1wDBAKRD2AwDQYJKoZIhvcNAQELBQADggEBAD8TDcv4w3c+o06h Z9pocLAF71h34HmVsqET4xg2E2mv/Jr1TerH5uJy5G44qCFw7baP6AoVYdQC3KxY lJAuziQza2g9jmFL1eUyj1l6a7qCOjiSnCHXHIckyI1cgsqZLwHs7P0HEAQp9cgJ iLXqp0zwzKFdOYhOmVCGC/vR/2PW+2NFVlkP0ZJqQHXyRMs3esUyQ7CWya5bYgfF UQ5a8OCAfe21j7uJ+2hWu3vsD7NZpRDl4zw3uabIs6c2NrT+OLe9R/fdtr4mWgst diqlMSNLmLlqeXQIn72hrWgfaQfj0WeezLI2bBZUNdNn/Yt6qvmwMhmZ785iebNf 8SI3fKA= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:12 2026 by rpki-client