This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JvYuNd51thIM0_PpN5rrqN-qA3c.roa
File: JvYuNd51thIM0_PpN5rrqN-qA3c.roa (raw, json)
Hash identifier: jxaxaHKzCd+Oi4exX3d2cHyHGVuQRbjPaeI/ES/giRQ=
Subject key identifier: 26:F6:2E:35:DE:75:B6:12:0C:D3:F3:E9:37:9A:EB:A8:DF:AA:03:77
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 019B7AC7E860A44FBDD100B9F1364A3FCD26
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JvYuNd51thIM0_PpN5rrqN-qA3c.roa
Signing time: Thu 01 Jan 2026 18:18:00 +0000
ROA not before: Thu 01 Jan 2026 18:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1149
IP address blocks: 145.100.118.0/23 maxlen: 24
145.116.218.0/23 maxlen: 24
2001:610:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:e8:60:a4:4f:bd:d1:00:b9:f1:36:4a:3f:cd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 18:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26f62e35de75b6120cd3f3e9379aeba8dfaa0377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:61:67:dd:a1:de:fb:66:ab:5a:5e:63:6d:
fe:1b:51:8e:0c:98:63:fc:85:89:99:bb:c3:4f:40:
3c:3e:18:e8:e0:55:70:68:fc:62:bf:0e:28:cc:ac:
33:38:16:f1:ca:49:ae:36:c5:29:8e:24:c6:ad:fa:
b5:b3:bc:e4:dc:c4:d6:32:e0:78:51:9d:29:47:39:
93:e2:a7:ce:0d:cc:a4:1b:0d:e0:dd:71:7c:c2:18:
f8:a2:2f:bc:09:a8:f6:09:33:51:28:f4:0b:3f:32:
25:f2:e8:cd:c1:fb:67:5b:bd:8c:c7:41:82:8d:c6:
b7:54:62:da:d1:0f:40:97:f4:bd:9c:51:fe:ad:40:
f2:2d:54:09:59:e4:3c:e8:5f:ae:1e:b2:65:f9:6e:
8f:2d:a7:b1:f7:3e:d6:10:c2:92:07:14:c2:5a:23:
37:d7:00:cd:4e:58:10:98:6e:e3:49:50:9e:5e:5e:
b6:d9:2e:6f:97:e0:29:32:78:90:85:80:8d:fd:7b:
2a:d4:a1:33:46:95:c6:95:fe:70:aa:b9:e0:5f:94:
7e:ee:79:a8:04:8a:93:77:5a:8a:4d:be:df:6b:a0:
d2:4e:96:cd:c0:75:1e:73:01:a0:58:39:7e:c6:6b:
77:d0:31:e5:98:79:a6:90:a7:8c:3a:b8:ad:e8:e4:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F6:2E:35:DE:75:B6:12:0C:D3:F3:E9:37:9A:EB:A8:DF:AA:03:77
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JvYuNd51thIM0_PpN5rrqN-qA3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.100.118.0/23
145.116.218.0/23
IPv6:
2001:610:9000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:c7:04:3d:7e:f8:79:01:7a:c1:c8:84:a3:69:c2:ec:1b:43:
6d:52:69:d6:c6:83:1c:ec:36:1b:9e:a7:be:ce:79:c0:5d:6e:
0c:2b:cd:96:bf:c7:10:53:be:e2:b3:38:cf:67:3d:e7:0d:3a:
5c:2a:f5:c9:b3:cf:57:36:4e:51:88:94:61:ba:be:46:bb:07:
c3:c4:bf:28:0d:63:8b:4b:05:3a:40:a8:63:2d:ab:ab:63:bc:
2f:d3:99:3a:0c:fa:10:0f:df:9e:17:9e:90:77:5f:ef:e6:02:
16:21:4c:7d:70:f1:f4:bc:01:e1:6a:b8:a7:1c:15:9c:5e:05:
ae:68:c3:cd:bf:87:03:fa:60:75:cb:ac:97:3d:36:29:4d:4d:
21:ce:73:47:c9:59:ae:c8:8d:b7:86:ed:8e:92:fa:93:9d:7d:
35:0a:03:ec:11:c5:51:0e:f1:7a:a1:f6:f4:9f:1c:84:bb:e6:
1c:3a:c7:81:04:51:66:2c:49:b7:cc:6d:0b:91:f7:43:f3:ce:
54:7d:a3:7f:17:c5:57:84:7e:8b:39:c8:b3:15:13:be:67:fd:
0a:8b:26:51:3a:4f:49:c7:94:05:a7:fb:b1:36:eb:7b:5f:fe:
33:a7:89:2a:1a:2e:e4:a7:ae:41:1c:96:02:a7:ef:b0:08:fa:
6c:e4:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:17 2026 by rpki-client