This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/_44oqZiyM9_I_5V8UkpoD9iuN2c.roa File: _44oqZiyM9_I_5V8UkpoD9iuN2c.roa (raw, json) Hash identifier: XzY1P+HMO7DLd5FViiowROuZh8r4c4Kuvgumz9iY8gQ= Subject key identifier: FF:8E:28:A9:98:B2:33:DF:C8:FF:95:7C:52:4A:68:0F:D8:AE:37:67 Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7E94B2BF7057BA23C7D78DA8C7805 Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/_44oqZiyM9_I_5V8UkpoD9iuN2c.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1162 IP address blocks: 145.100.9.0/30 maxlen: 30 145.100.32.0/22 maxlen: 22 2001:610:108:203a::/64 maxlen: 64 2001:610:108:3014::/64 maxlen: 64 2001:610:108:3017::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e9:4b:2b:f7:05:7b:a2:3c:7d:78:da:8c:78:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff8e28a998b233dfc8ff957c524a680fd8ae3767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:27:6c:cd:28:54:4f:18:b1:0a:bb:51:69: 64:12:2c:92:50:07:15:09:3f:74:f0:ac:b4:c0:3f: f3:83:3b:4e:ca:85:66:93:3f:5d:f5:11:2b:82:da: bd:75:d5:09:ff:cd:c5:ca:b9:8a:7f:2b:f8:b5:3f: cf:ed:44:e8:ba:12:8d:d6:bb:59:fc:be:b3:6b:10: 7d:93:49:0e:2e:67:80:aa:50:dc:2f:e5:e0:e0:4f: 6e:59:67:e7:7f:92:1c:fa:a6:f0:96:6f:d2:2d:ca: 44:b3:46:60:be:cd:c2:e1:0d:9e:b6:3c:21:d9:ea: 5e:25:3a:10:d1:f1:db:c7:05:fe:6e:1b:6e:3d:53: 64:4c:bc:68:78:f8:d7:9b:49:89:7a:4b:b2:ac:50: 95:58:02:9d:0f:e3:fb:53:6f:b1:0b:30:26:b8:19: a4:5e:c1:91:50:d6:34:61:6a:1a:66:8b:57:b8:b1: 9f:b1:b9:fa:b7:0a:66:87:fe:0b:db:e7:05:8b:28: 33:67:6a:43:96:ae:15:75:c6:54:8d:9e:7a:f8:f6: 38:68:ab:c9:2a:11:9b:29:d9:b6:ed:21:eb:1f:36: 27:e8:77:2d:f0:76:6b:54:75:ab:75:f6:b9:b4:16: 3d:c1:bf:98:6c:ad:7d:06:7f:58:f0:ef:c7:8e:74: 27:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8E:28:A9:98:B2:33:DF:C8:FF:95:7C:52:4A:68:0F:D8:AE:37:67 X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/_44oqZiyM9_I_5V8UkpoD9iuN2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.100.9.0/30 145.100.32.0/22 IPv6: 2001:610:108:203a::/64 2001:610:108:3014::/64 2001:610:108:3017::/64 Signature Algorithm: sha256WithRSAEncryption ae:48:21:e0:51:0e:56:e3:60:26:55:21:9e:86:2b:84:12:40: 50:f2:4a:80:99:59:e6:18:68:bf:11:71:9e:31:77:d6:08:6c: af:4d:db:ac:b1:e0:1b:23:b1:8e:74:df:c1:37:62:c9:01:f5: 7d:74:ea:b9:96:fc:5a:53:83:ba:39:47:6f:51:76:36:57:fb: 69:3e:e9:d7:08:59:97:4d:2a:d0:10:3b:00:51:7c:c4:62:93: b7:02:20:7c:66:69:ea:d0:c7:b7:89:32:75:c4:23:e2:99:57: 95:66:ef:2b:e0:37:87:7c:3e:68:44:ea:ac:45:29:ae:bf:a9: d5:17:e0:fc:46:55:7c:90:1a:00:9b:f5:7a:a9:78:14:9d:e8: 9b:da:47:2a:09:52:6e:ac:f0:2a:47:53:e1:04:03:3f:6e:eb: 1d:c5:ff:40:82:cc:79:d8:b4:3c:94:37:6a:a0:2e:c2:d3:a4: 26:d8:da:eb:19:d1:4f:60:17:bb:9f:13:d7:f5:2b:95:12:ad: d2:41:32:d7:3c:81:76:63:27:c2:36:c1:91:f6:42:0b:66:dc: 8a:e1:27:c8:58:f5:c3:9e:da:79:ce:00:a7:f8:c0:b1:9d:e5: a0:eb:ea:91:70:b4:30:a1:75:2c:cd:06:03:02:d0:a9:90:8a: f7:a9:4e:cb -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt6x+lLK/cFe6I8fXjajHgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjhlMjhhOTk4YjIzM2RmYzhmZjk1N2M1MjRhNjgwZmQ4YWUzNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcAnbM0oVE8YsQq7UWlkEiySUAcV CT908Ky0wD/zgztOyoVmkz9d9RErgtq9ddUJ/83FyrmKfyv4tT/P7UTouhKN1rtZ /L6zaxB9k0kOLmeAqlDcL+Xg4E9uWWfnf5Ic+qbwlm/SLcpEs0Zgvs3C4Q2etjwh 2epeJToQ0fHbxwX+bhtuPVNkTLxoePjXm0mJekuyrFCVWAKdD+P7U2+xCzAmuBmk XsGRUNY0YWoaZotXuLGfsbn6twpmh/4L2+cFiygzZ2pDlq4VdcZUjZ56+PY4aKvJ KhGbKdm27SHrHzYn6Hct8HZrVHWrdfa5tBY9wb+YbK19Bn9Y8O/HjnQnewIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFP+OKKmYsjPfyP+VfFJKaA/YrjdnMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvXzQ0b3FaaXlNOV9JXzVWOFVrcG9EOWl1TjJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjATBAIAATANAwUCkWQJAAME ApFkIDAnBAIAAjAhAwkAIAEGEAEIIDoDCQAgAQYQAQgwFAMJACABBhABCDAXMA0G CSqGSIb3DQEBCwUAA4IBAQCuSCHgUQ5W42AmVSGehiuEEkBQ8kqAmVnmGGi/EXGe MXfWCGyvTdusseAbI7GOdN/BN2LJAfV9dOq5lvxaU4O6OUdvUXY2V/tpPunXCFmX TSrQEDsAUXzEYpO3AiB8Zmnq0Me3iTJ1xCPimVeVZu8r4DeHfD5oROqsRSmuv6nV F+D8RlV8kBoAm/V6qXgUneib2kcqCVJurPAqR1PhBAM/busdxf9Agsx52LQ8lDdq oC7C06Qm2NrrGdFPYBe7nxPX9SuVEq3SQTLXPIF2YyfCNsGR9kILZtyK4SfIWPXD ntp5zgCn+MCxneWg6+qRcLQwoXUszQYDAtCpkIr3qU7L -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:44 2026 by rpki-client