This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/IanQkTnnQ_lAsPGvPOAlKk8gwI4.roa File: IanQkTnnQ_lAsPGvPOAlKk8gwI4.roa (raw, json) Hash identifier: oQXkFgncSy99k7omog0l/CPQ37A4tRtjdMwST6m8+0k= Subject key identifier: 21:A9:D0:91:39:E7:43:F9:40:B0:F1:AF:3C:E0:25:2A:4F:20:C0:8E Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7E3813867E5915FEC503DC9E6B7C5 Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/IanQkTnnQ_lAsPGvPOAlKk8gwI4.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1104 IP address blocks: 145.102.132.0/22 maxlen: 22 145.107.4.0/22 maxlen: 22 145.107.12.0/22 maxlen: 22 145.110.0.0/16 maxlen: 16 145.116.48.0/20 maxlen: 20 145.116.208.0/21 maxlen: 21 194.171.96.0/21 maxlen: 21 2001:610:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e3:81:38:67:e5:91:5f:ec:50:3d:c9:e6:b7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21a9d09139e743f940b0f1af3ce0252a4f20c08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4d:47:ca:77:9c:6a:c5:74:1d:63:6d:d6:7e: 67:d1:22:21:b0:7f:f0:62:84:21:4a:f8:c6:30:d6: 22:8d:60:e3:e1:71:52:b9:fc:ad:26:e1:52:e7:3f: f7:fc:d7:b7:e0:53:d4:d6:5c:86:88:fd:42:57:08: 05:d6:99:8c:07:69:c6:ad:ed:9d:d7:85:6c:ad:87: 4f:83:0b:00:d8:e7:a5:97:6a:af:0d:4b:f7:44:f5: 89:18:2f:23:ad:07:29:45:c0:ef:a6:8e:61:db:12: 65:d4:96:94:42:59:50:30:e1:fc:63:13:aa:7b:a9: 51:10:b1:6f:46:1c:b4:38:df:5f:11:da:72:93:28: 10:5e:f1:3e:2a:bd:a1:89:0f:4e:3c:96:10:4d:04: c9:90:2a:fc:71:9a:fb:10:4f:7c:4f:eb:c9:f2:f9: 43:03:32:62:e0:9e:87:4b:71:c5:e1:6b:a5:37:08: 50:44:36:6f:db:69:4c:3a:cb:5a:18:a4:00:07:24: f7:e7:0a:cd:bd:e6:84:b6:95:ab:5f:cf:4e:1f:70: b8:3d:1a:74:a0:56:6f:f3:84:12:f8:e9:3a:e3:7b: 15:fb:22:bc:ce:55:83:6a:21:25:e8:67:fc:79:e2: 41:17:4e:c8:f8:3e:a0:1e:22:13:ac:cd:42:af:f9: 6f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A9:D0:91:39:E7:43:F9:40:B0:F1:AF:3C:E0:25:2A:4F:20:C0:8E X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/IanQkTnnQ_lAsPGvPOAlKk8gwI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.102.132.0/22 145.107.4.0/22 145.107.12.0/22 145.110.0.0/16 145.116.48.0/20 145.116.208.0/21 194.171.96.0/21 IPv6: 2001:610:120::/48 Signature Algorithm: sha256WithRSAEncryption 9f:da:dc:4b:21:ac:9d:55:be:df:cd:c5:fb:70:b0:9b:19:42: f4:d7:1a:2b:32:92:fc:b2:e4:1d:18:f7:91:e7:c1:ea:97:24: 2b:48:e7:78:c9:03:87:8d:5d:6c:fd:7a:43:85:dc:f0:9a:57: 67:21:d6:49:da:79:ca:a8:68:85:0c:6c:0b:b4:d8:3f:97:4a: 57:7b:bc:a7:0c:a9:0a:7e:3d:d2:c6:83:b5:45:e2:dd:34:59: 36:b7:89:22:5d:7b:21:39:6b:c3:ae:c8:17:74:04:b5:46:ac: 52:b4:75:96:42:20:25:ee:18:b1:4a:a0:76:d8:e9:4a:be:67: 0c:6f:b6:0a:e4:bf:a5:5f:8e:23:4b:0f:ca:7a:e9:2a:f5:4d: 07:41:53:f9:a8:6f:ed:6e:d9:c0:08:ed:a5:e4:03:4a:4c:63: 00:76:88:1e:de:d1:fe:31:9a:c1:ff:c1:08:db:65:75:cf:05: 9a:37:e8:cd:2f:d4:71:e9:b6:89:fd:ea:f4:c6:b7:34:15:93: 42:4f:d4:1a:89:e0:24:6e:8e:0a:c3:5f:b3:82:e4:9f:7e:aa: d3:e2:bd:dc:68:f2:95:3e:96:a2:0d:32:ee:4e:76:ca:dc:23: 39:67:0b:5d:08:47:12:73:15:de:24:bb:69:e8:f9:27:e0:c7: dd:2e:6a:3c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt6x+OBOGflkV/sUD3J5rfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWE5ZDA5MTM5ZTc0M2Y5NDBiMGYxYWYzY2UwMjUyYTRmMjBjMDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE1HynecasV0HWNt1n5n0SIhsH/w YoQhSvjGMNYijWDj4XFSufytJuFS5z/3/Ne34FPU1lyGiP1CVwgF1pmMB2nGre2d 14VsrYdPgwsA2Oell2qvDUv3RPWJGC8jrQcpRcDvpo5h2xJl1JaUQllQMOH8YxOq e6lRELFvRhy0ON9fEdpykygQXvE+Kr2hiQ9OPJYQTQTJkCr8cZr7EE98T+vJ8vlD AzJi4J6HS3HF4WulNwhQRDZv22lMOstaGKQAByT35wrNveaEtpWrX89OH3C4PRp0 oFZv84QS+Ok643sV+yK8zlWDaiEl6Gf8eeJBF07I+D6gHiITrM1Cr/lvfwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFCGp0JE550P5QLDxrzzgJSpPIMCOMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvSWFuUWtUbm5RX2xBc1BHdlBPQWxLazhnd0k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAvBAIAATApAwQCkWaEAwQC kWsEAwQCkWsMAwMAkW4DBASRdDADBAORdNADBAPCq2AwDwQCAAIwCQMHACABBhAB IDANBgkqhkiG9w0BAQsFAAOCAQEAn9rcSyGsnVW+383F+3CwmxlC9NcaKzKS/LLk HRj3kefB6pckK0jneMkDh41dbP16Q4Xc8JpXZyHWSdp5yqhohQxsC7TYP5dKV3u8 pwypCn490saDtUXi3TRZNreJIl17ITlrw67IF3QEtUasUrR1lkIgJe4YsUqgdtjp Sr5nDG+2CuS/pV+OI0sPynrpKvVNB0FT+ahv7W7ZwAjtpeQDSkxjAHaIHt7R/jGa wf/BCNtldc8FmjfozS/Ucem2if3q9Ma3NBWTQk/UGongJG6OCsNfs4Lkn36q0+K9 3GjylT6Wog0y7k52ytwjOWcLXQhHEnMV3iS7aej5J+DH3S5qPA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:43 2026 by rpki-client