This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/VnFjbvGf9Z8AByNAA52QXMTvaJ4.roa
File: VnFjbvGf9Z8AByNAA52QXMTvaJ4.roa (raw, json)
Hash identifier: ZVqjzfeBV4F62ICM+yb/hYmaLpc1y5hRQun0Su5cUqk=
Subject key identifier: 56:71:63:6E:F1:9F:F5:9F:00:07:23:40:03:9D:90:5C:C4:EF:68:9E
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 019B7AC7E729629AE8BE5256A55357586063
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/VnFjbvGf9Z8AByNAA52QXMTvaJ4.roa
Signing time: Thu 01 Jan 2026 18:17:59 +0000
ROA not before: Thu 01 Jan 2026 18:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1146
IP address blocks: 145.100.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:e7:29:62:9a:e8:be:52:56:a5:53:57:58:60:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 18:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5671636ef19ff59f00072340039d905cc4ef689e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:01:7b:95:94:f8:60:d7:27:5a:ad:4b:a8:
0b:c8:21:7e:81:e3:7d:3d:f1:ca:99:13:e9:81:bb:
bd:42:3f:af:73:b5:1e:db:be:2f:c9:9d:8d:20:94:
20:66:b8:de:78:14:42:2d:6e:31:d1:0f:03:8f:09:
40:2c:dd:83:7a:c7:90:dd:82:63:c4:d2:1a:b8:c0:
15:dd:a0:6b:e7:3a:7b:00:91:a7:e5:8c:6d:49:bd:
04:ac:38:39:17:fd:bc:c3:26:c4:0f:75:32:ea:74:
c2:e3:d5:b5:b4:ca:90:2a:3d:f2:22:54:30:f3:15:
c2:36:ea:e8:ca:54:ea:34:7c:ea:9b:18:7d:8c:7d:
9f:83:6a:79:7a:b0:60:85:e3:4e:65:2d:17:fb:61:
9a:21:22:f8:c2:7b:80:46:3d:e1:1e:56:e8:25:37:
68:16:db:57:6e:7f:db:4a:20:7e:ee:36:36:6a:e2:
3e:5d:f9:64:21:c9:26:be:b9:68:4e:7a:0c:c1:ae:
6b:86:60:8e:72:76:2b:e0:d5:62:61:fc:56:f8:60:
14:c1:e5:7e:3b:4f:32:93:d6:aa:3c:e2:f5:81:20:
53:0b:b9:40:13:35:fd:cd:ba:69:d8:32:f6:72:bd:
d4:78:b4:bf:e3:4c:07:94:38:e0:76:8e:6d:31:f8:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:71:63:6E:F1:9F:F5:9F:00:07:23:40:03:9D:90:5C:C4:EF:68:9E
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/VnFjbvGf9Z8AByNAA52QXMTvaJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.100.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:18:a4:0f:77:57:88:3e:85:61:4c:9e:83:7a:ad:d0:ad:af:
11:06:bf:69:d2:ae:b4:7e:2d:94:00:d0:90:fd:de:c4:6a:e7:
a9:42:70:57:ec:d9:68:e6:4c:b9:fb:d4:40:d2:ca:d5:7c:f4:
79:bf:c0:2d:fd:10:6c:e6:64:a6:67:90:57:81:75:b5:d8:70:
3b:8a:d3:c4:87:81:4c:85:27:ec:cd:0e:85:c8:7a:14:4a:a7:
f2:fc:be:0e:a6:32:69:90:a1:b0:e2:2e:df:98:f0:71:6c:67:
a2:0f:33:53:4a:3b:4a:9f:57:e2:9e:43:a9:88:01:45:a0:08:
a6:60:02:e5:50:f1:5e:57:c4:0d:c5:8d:5a:e2:e0:ad:22:33:
7d:50:28:b6:f0:3c:c5:b4:8d:6c:62:21:98:c8:97:bd:c4:b8:
2d:5c:c9:a4:a8:29:3e:02:06:30:b2:f8:db:39:a4:2f:e6:82:
c4:aa:e4:02:f8:92:98:d2:4e:f2:be:56:6e:57:91:6d:e0:cb:
fc:ec:d4:f6:43:05:b3:42:c9:22:47:c2:21:63:e2:46:c4:69:
91:e3:63:ea:5e:fc:8e:c2:6f:fb:dd:4f:33:f7:a4:52:67:bb:
b6:c2:ce:ba:d3:22:ee:e9:fe:5e:11:54:65:aa:61:f4:81:eb:
61:57:46:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x+cpYprovlJWpVNXWGBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjcxNjM2ZWYxOWZmNTlmMDAwNzIzNDAwMzlkOTA1Y2M0ZWY2ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJkBe5WU+GDXJ1qtS6gLyCF+geN9
PfHKmRPpgbu9Qj+vc7Ue274vyZ2NIJQgZrjeeBRCLW4x0Q8DjwlALN2DeseQ3YJj
xNIauMAV3aBr5zp7AJGn5YxtSb0ErDg5F/28wybED3Uy6nTC49W1tMqQKj3yIlQw
8xXCNuroylTqNHzqmxh9jH2fg2p5erBgheNOZS0X+2GaISL4wnuARj3hHlboJTdo
FttXbn/bSiB+7jY2auI+XflkIckmvrloTnoMwa5rhmCOcnYr4NViYfxW+GAUweV+
O08yk9aqPOL1gSBTC7lAEzX9zbpp2DL2cr3UeLS/40wHlDjgdo5tMfiGwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFZxY27xn/WfAAcjQAOdkFzE72ieMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvVm5GamJ2R2Y5WjhBQnlOQUE1MlFYTVR2YUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkWRlMA0G
CSqGSIb3DQEBCwUAA4IBAQCjGKQPd1eIPoVhTJ6Deq3Qra8RBr9p0q60fi2UANCQ
/d7EauepQnBX7Nlo5ky5+9RA0srVfPR5v8At/RBs5mSmZ5BXgXW12HA7itPEh4FM
hSfszQ6FyHoUSqfy/L4OpjJpkKGw4i7fmPBxbGeiDzNTSjtKn1finkOpiAFFoAim
YALlUPFeV8QNxY1a4uCtIjN9UCi28DzFtI1sYiGYyJe9xLgtXMmkqCk+AgYwsvjb
OaQv5oLEquQC+JKY0k7yvlZuV5Ft4Mv87NT2QwWzQskiR8IhY+JGxGmR42PqXvyO
wm/73U8z96RSZ7u2ws660yLu6f5eEVRlqmH0gethV0aG
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:54:47 2026 by rpki-client