This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JynPPm43DtWbK57THx8NuLGr4vY.roa File: JynPPm43DtWbK57THx8NuLGr4vY.roa (raw, json) Hash identifier: FkU6ILJzjjWm6k07w8nWafPpZvvpwrrwsEzcPuOMSh4= Subject key identifier: 27:29:CF:3E:6E:37:0E:D5:9B:2B:9E:D3:1F:1F:0D:B8:B1:AB:E2:F6 Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7E335972548458D61E12666ACED18 Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JynPPm43DtWbK57THx8NuLGr4vY.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 145.0.0.0/16 maxlen: 24 145.2.0.0/15 maxlen: 24 145.9.0.0/16 maxlen: 24 145.19.0.0/16 maxlen: 24 145.19.0.0/24 maxlen: 24 145.20.0.0/16 maxlen: 24 145.23.0.0/16 maxlen: 24 145.23.0.0/19 maxlen: 24 145.24.0.0/16 maxlen: 24 145.28.0.0/15 maxlen: 24 145.33.0.0/16 maxlen: 24 145.37.0.0/16 maxlen: 24 145.38.0.0/15 maxlen: 24 145.41.0.0/16 maxlen: 24 145.44.0.0/16 maxlen: 24 145.48.0.0/15 maxlen: 24 145.51.0.0/16 maxlen: 24 145.52.0.0/16 maxlen: 24 145.67.0.0/16 maxlen: 24 145.74.0.0/15 maxlen: 24 145.76.0.0/16 maxlen: 24 145.81.0.0/16 maxlen: 24 145.85.0.0/16 maxlen: 24 145.85.0.0/24 maxlen: 24 145.88.0.0/15 maxlen: 24 145.90.0.0/16 maxlen: 24 145.90.10.0/23 maxlen: 24 145.91.0.0/16 maxlen: 24 145.91.0.0/24 maxlen: 24 145.92.0.0/15 maxlen: 24 145.95.0.0/16 maxlen: 24 145.96.0.0/16 maxlen: 24 145.97.0.0/20 maxlen: 24 145.97.16.0/22 maxlen: 24 145.97.20.0/22 maxlen: 24 145.97.24.0/21 maxlen: 24 145.97.48.0/20 maxlen: 24 145.97.64.0/18 maxlen: 24 145.97.128.0/18 maxlen: 24 145.97.128.0/24 maxlen: 24 145.97.192.0/18 maxlen: 24 145.98.0.0/16 maxlen: 24 145.98.16.0/24 maxlen: 24 145.100.0.0/15 maxlen: 24 145.102.0.0/16 maxlen: 24 145.103.0.0/16 maxlen: 24 145.107.0.0/16 maxlen: 24 145.108.0.0/16 maxlen: 24 145.109.128.0/17 maxlen: 24 145.116.0.0/20 maxlen: 24 145.116.16.0/21 maxlen: 24 145.116.24.0/21 maxlen: 24 145.116.64.0/18 maxlen: 24 145.116.128.0/18 maxlen: 24 145.116.192.0/20 maxlen: 24 145.116.224.0/19 maxlen: 24 145.117.0.0/16 maxlen: 24 145.118.0.0/16 maxlen: 24 145.120.0.0/14 maxlen: 24 145.124.0.0/15 maxlen: 24 145.126.0.0/16 maxlen: 24 145.127.0.0/17 maxlen: 24 145.136.0.0/15 maxlen: 24 145.137.128.0/18 maxlen: 24 145.138.0.0/16 maxlen: 24 145.140.0.0/14 maxlen: 24 145.144.0.0/12 maxlen: 24 145.146.0.0/16 maxlen: 24 145.160.0.0/12 maxlen: 24 192.87.0.0/16 maxlen: 24 194.171.0.0/16 maxlen: 24 195.169.0.0/16 maxlen: 24 2001:610::/29 maxlen: 29 2001:610::/32 maxlen: 48 2001:610:130::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e3:35:97:25:48:45:8d:61:e1:26:66:ac:ed:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2729cf3e6e370ed59b2b9ed31f1f0db8b1abe2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:a8:d4:4c:93:0b:09:ed:69:44:e9:b4:cb:9d: 13:bf:96:1c:c6:8a:c0:65:f2:2e:07:ab:98:28:b2: 94:fb:8a:d0:b9:23:40:c8:6f:35:86:65:5e:49:e7: e8:1c:be:ba:f0:2e:85:88:fc:6d:dc:f9:67:04:08: b3:56:9f:73:98:6a:29:cc:65:7e:b3:4d:07:12:fd: 53:98:cd:ca:94:72:da:b7:cf:d7:f7:77:9d:5b:c3: 07:bb:ea:21:78:d5:8a:bc:9d:52:95:cf:5f:3b:fd: 73:04:c0:a2:9e:7d:23:0c:56:12:c3:4c:f2:2d:96: 69:ca:3b:f9:60:3b:28:a1:a7:66:9b:f9:72:43:f8: a1:d1:40:24:db:25:7f:9b:0c:5a:fe:60:11:94:4b: fc:0a:14:c0:38:ea:c5:e3:e4:6d:fd:59:b0:18:bf: e5:82:78:f5:a8:f2:52:29:24:c7:a9:17:8a:3f:c9: c0:79:7c:db:d3:38:46:28:f9:e8:c5:37:a3:5e:42: 2c:49:a2:30:f7:12:8a:4f:e6:c4:6d:70:b3:49:81: de:6e:ad:5c:a6:73:c4:2a:a5:0a:50:3c:01:13:8f: fa:ef:8e:48:9d:c8:f4:19:00:49:36:17:d2:d4:4d: a4:4a:90:f6:4b:9a:1e:86:f8:9f:ec:02:41:24:fe: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:29:CF:3E:6E:37:0E:D5:9B:2B:9E:D3:1F:1F:0D:B8:B1:AB:E2:F6 X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/JynPPm43DtWbK57THx8NuLGr4vY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.0.0.0/16 145.2.0.0/15 145.9.0.0/16 145.19.0.0-145.20.255.255 145.23.0.0-145.24.255.255 145.28.0.0/15 145.33.0.0/16 145.37.0.0-145.39.255.255 145.41.0.0/16 145.44.0.0/16 145.48.0.0/15 145.51.0.0-145.52.255.255 145.67.0.0/16 145.74.0.0-145.76.255.255 145.81.0.0/16 145.85.0.0/16 145.88.0.0-145.93.255.255 145.95.0.0-145.97.31.255 145.97.48.0-145.98.255.255 145.100.0.0/14 145.107.0.0-145.108.255.255 145.109.128.0/17 145.116.0.0/19 145.116.64.0-145.116.207.255 145.116.224.0-145.118.255.255 145.120.0.0-145.127.127.255 145.136.0.0-145.138.255.255 145.140.0.0-145.175.255.255 192.87.0.0/16 194.171.0.0/16 195.169.0.0/16 IPv6: 2001:610::/29 Signature Algorithm: sha256WithRSAEncryption 79:91:cf:76:3a:46:f1:a2:40:6e:f2:81:6f:6a:83:d9:8e:6b: 94:51:6a:a0:70:87:58:76:cd:d3:c6:40:34:b3:42:51:41:90: c0:7a:2a:a1:d1:5f:3e:d9:c1:13:21:78:d9:68:69:05:df:64: 1a:e3:0f:7b:b7:f7:86:72:94:3d:06:90:d0:66:dc:27:03:2b: 30:76:4b:81:55:ed:32:58:d2:6c:36:5b:58:9a:a0:09:5c:00: 07:6d:70:6a:af:91:aa:76:10:04:a6:39:ea:83:01:fb:96:f4: 48:3f:b4:ef:26:9e:04:b5:5f:72:ef:41:2c:65:4a:90:6e:d0: ae:58:4d:38:6f:7b:e5:e2:b4:e3:b4:00:5f:8e:05:27:4f:38: 5d:f1:47:dd:12:29:1e:b9:5e:ae:13:61:1e:7b:cf:39:a1:43: b6:40:11:2e:72:41:20:40:5e:c4:89:03:b9:d7:91:60:a8:fb: dd:45:85:5e:98:f2:c9:12:a9:ed:63:4e:c6:38:39:98:ee:15: 57:4c:db:cd:ff:78:66:fe:cf:29:53:48:ca:69:d2:de:9b:97: d7:b8:f3:81:bf:db:bc:0b:12:22:e0:33:7d:be:79:bb:3d:7d: ff:cb:8a:f5:12:0b:d3:2c:49:03:9e:07:b8:a8:e1:a5:15:b4: 84:c6:dd:d0 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgISAZt6x+M1lyVIRY1h4SZmrO0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzI5Y2YzZTZlMzcwZWQ1OWIyYjllZDMxZjFmMGRiOGIxYWJlMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qjUTJMLCe1pROm0y50Tv5YcxorA ZfIuB6uYKLKU+4rQuSNAyG81hmVeSefoHL668C6FiPxt3PlnBAizVp9zmGopzGV+ s00HEv1TmM3KlHLat8/X93edW8MHu+oheNWKvJ1Slc9fO/1zBMCinn0jDFYSw0zy LZZpyjv5YDsooadmm/lyQ/ih0UAk2yV/mwxa/mARlEv8ChTAOOrF4+Rt/VmwGL/l gnj1qPJSKSTHqReKP8nAeXzb0zhGKPnoxTejXkIsSaIw9xKKT+bEbXCzSYHebq1c pnPEKqUKUDwBE4/6745Incj0GQBJNhfS1E2kSpD2S5oehvif7AJBJP7FjQIDAQAB o4IDITCCAx0wHQYDVR0OBBYEFCcpzz5uNw7Vmyue0x8fDbixq+L2MB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvSnluUFBtNDNEdFdiSzU3VEh4OE51TEdyNHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUHAQcBAf8EggEkMIIBIDCCAQ0EAgABMIIB BQMDAJEAAwMBkQIDAwCRCTAKAwMAkRMDAwCRFDAKAwMAkRcDAwCRGAMDAZEcAwMA kSEwCgMDAJElAwMDkSADAwCRKQMDAJEsAwMBkTAwCgMDAJEzAwMAkTQDAwCRQzAK AwMBkUoDAwCRTAMDAJFRAwMAkVUwCgMDA5FYAwMBkVwwCwMDAJFfAwQFkWEAMAsD BASRYTADAwCRYgMDApFkMAoDAwCRawMDAJFsAwQHkW2AAwQFkXQAMAwDBAaRdEAD BASRdMAwCwMEBZF04AMDAJF2MAsDAwOReAMEB5F/ADAKAwMDkYgDAwCRijAKAwMC kYwDAwSRoAMDAMBXAwMAwqsDAwDDqTANBAIAAjAHAwUDIAEGEDANBgkqhkiG9w0B AQsFAAOCAQEAeZHPdjpG8aJAbvKBb2qD2Y5rlFFqoHCHWHbN08ZANLNCUUGQwHoq odFfPtnBEyF42WhpBd9kGuMPe7f3hnKUPQaQ0GbcJwMrMHZLgVXtMljSbDZbWJqg CVwAB21waq+RqnYQBKY56oMB+5b0SD+07yaeBLVfcu9BLGVKkG7QrlhNOG975eK0 47QAX44FJ084XfFH3RIpHrlerhNhHnvPOaFDtkARLnJBIEBexIkDudeRYKj73UWF XpjyyRKp7WNOxjg5mO4VV0zbzf94Zv7PKVNIymnS3puX17jzgb/bvAsSIuAzfb55 uz19/8uK9RIL0yxJA54HuKjhpRW0hMbd0A== -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:06 2026 by rpki-client