This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/E8NXMFUx2HkdEKtacL8IVfhBnq0.roa File: E8NXMFUx2HkdEKtacL8IVfhBnq0.roa (raw, json) Hash identifier: g6WsEO1seR38LIFSJG/pPFQ6qfCMMJbMTjZhKMQmAvg= Subject key identifier: 13:C3:57:30:55:31:D8:79:1D:10:AB:5A:70:BF:08:55:F8:41:9E:AD Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7F5DA03554E0CFE3108F5425600DA Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/E8NXMFUx2HkdEKtacL8IVfhBnq0.roa Signing time: Thu 01 Jan 2026 18:18:03 +0000 ROA not before: Thu 01 Jan 2026 18:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200020 IP address blocks: 145.19.0.0/24 maxlen: 24 145.85.0.0/24 maxlen: 24 145.91.0.0/24 maxlen: 24 145.97.16.0/23 maxlen: 23 145.97.16.0/24 maxlen: 24 145.97.18.0/23 maxlen: 23 145.97.128.0/24 maxlen: 24 145.144.0.0/24 maxlen: 24 2001:610:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f5:da:03:55:4e:0c:fe:31:08:f5:42:56:00:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13c357305531d8791d10ab5a70bf0855f8419ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:07:48:a8:c7:8d:58:c7:db:0a:6e:5c:e6: 46:dd:21:a0:de:80:a5:7b:96:c8:a3:03:1e:8e:be: 95:02:9d:4f:41:1a:c4:8f:86:28:a1:62:c4:a4:93: e5:ee:63:14:01:c9:3c:d1:cd:e4:1b:30:cf:d8:04: 7e:7a:48:d4:0a:b8:a6:2f:23:27:3c:d8:88:72:c7: 27:fb:92:a1:6b:87:4c:85:c5:36:3f:14:ed:4d:53: a6:d9:c0:cd:e9:f4:6d:cc:68:19:fe:4e:ae:83:ff: 68:bd:57:d6:4c:d0:a7:50:89:c1:94:6f:d8:1b:f3: fb:98:c0:ed:a4:b2:06:59:01:ac:e9:22:df:5e:88: 20:38:db:6b:76:5a:66:96:52:44:a2:33:eb:90:b6: bd:09:c9:66:21:40:fe:45:a6:ff:12:15:06:50:9c: 3e:1a:f0:3f:be:13:5d:49:42:06:89:0d:5c:e7:f1: 9e:70:43:36:46:88:17:9e:b8:7a:19:68:91:59:5d: 99:23:38:00:57:4e:bc:26:a6:14:33:0b:86:55:9a: 10:d4:00:18:da:f6:fa:43:f4:81:de:59:8c:8e:8d: e4:bb:99:07:8e:ae:26:e4:c6:ce:c9:bb:e1:28:f5: f1:d3:d7:e0:99:41:1a:29:5a:1a:36:ae:47:6a:d6: 24:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C3:57:30:55:31:D8:79:1D:10:AB:5A:70:BF:08:55:F8:41:9E:AD X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/E8NXMFUx2HkdEKtacL8IVfhBnq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.19.0.0/24 145.85.0.0/24 145.91.0.0/24 145.97.16.0/22 145.97.128.0/24 145.144.0.0/24 IPv6: 2001:610:2000::/48 Signature Algorithm: sha256WithRSAEncryption 1c:31:e4:a7:a7:ae:32:56:97:a1:8d:c9:d0:50:33:46:78:1d: ad:b6:ef:fb:01:a7:c9:33:62:dd:e0:93:d0:6c:c0:4f:e6:44: 9e:5a:99:87:b1:22:d7:bf:5e:de:c1:e2:9a:19:6f:29:71:3b: 0c:a3:b2:9c:cd:28:a8:3b:19:71:e0:75:0a:d3:0b:0c:14:ae: d5:06:0b:62:f1:eb:ac:7a:f8:da:f1:b8:25:29:6f:08:27:3a: 47:e4:14:b0:3a:e9:04:4c:da:61:fc:6c:86:6c:86:bc:87:a4: 71:ba:57:80:e3:64:e5:55:d6:c7:3b:7a:65:70:b7:d8:87:7e: b4:b0:83:c3:c8:00:2b:c5:7f:f4:f9:08:4e:a8:42:fc:7d:90: f9:51:cb:e6:6c:0d:4b:c1:48:23:9d:eb:62:c6:04:cc:c8:a5: 3e:cc:fd:e5:75:9c:99:4d:03:3b:28:ae:df:68:cd:de:8e:db: c2:bc:90:be:8d:e6:07:a3:ed:59:12:d7:5e:f0:44:6b:18:17: a4:53:00:7d:19:ef:00:da:a8:a3:62:52:74:91:b1:f9:8c:61: a5:a7:43:20:ef:d7:39:39:08:0a:14:29:c2:c5:aa:49:20:ac: b0:22:d3:71:3d:d3:61:af:26:a7:31:5f:16:1c:46:ac:60:fe: 87:6a:ed:67 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt6x/XaA1VODP4xCPVCVgDaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2MzNTczMDU1MzFkODc5MWQxMGFiNWE3MGJmMDg1NWY4NDE5ZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXYHSKjHjVjH2wpuXOZG3SGg3oCl e5bIowMejr6VAp1PQRrEj4YooWLEpJPl7mMUAck80c3kGzDP2AR+ekjUCrimLyMn PNiIcscn+5Kha4dMhcU2PxTtTVOm2cDN6fRtzGgZ/k6ug/9ovVfWTNCnUInBlG/Y G/P7mMDtpLIGWQGs6SLfXoggONtrdlpmllJEojPrkLa9CclmIUD+Rab/EhUGUJw+ GvA/vhNdSUIGiQ1c5/GecEM2RogXnrh6GWiRWV2ZIzgAV068JqYUMwuGVZoQ1AAY 2vb6Q/SB3lmMjo3ku5kHjq4m5MbOybvhKPXx09fgmUEaKVoaNq5HatYkbQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFBPDVzBVMdh5HRCrWnC/CFX4QZ6tMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvRThOWE1GVXgySGtkRUt0YWNMOElWZmhCbnEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQAkRMAAwQA kVUAAwQAkVsAAwQCkWEQAwQAkWGAAwQAkZAAMA8EAgACMAkDBwAgAQYQIAAwDQYJ KoZIhvcNAQELBQADggEBABwx5KenrjJWl6GNydBQM0Z4Ha227/sBp8kzYt3gk9Bs wE/mRJ5amYexIte/Xt7B4poZbylxOwyjspzNKKg7GXHgdQrTCwwUrtUGC2Lx66x6 +NrxuCUpbwgnOkfkFLA66QRM2mH8bIZshryHpHG6V4DjZOVV1sc7emVwt9iHfrSw g8PIACvFf/T5CE6oQvx9kPlRy+ZsDUvBSCOd62LGBMzIpT7M/eV1nJlNAzsort9o zd6O28K8kL6N5gej7VkS117wRGsYF6RTAH0Z7wDaqKNiUnSRsfmMYaWnQyDv1zk5 CAoUKcLFqkkgrLAi03E902GvJqcxXxYcRqxg/odq7Wc= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:18 2026 by rpki-client