This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/dLCl2dUdiyrMRwEYfULcroQ2NvM.roa File: dLCl2dUdiyrMRwEYfULcroQ2NvM.roa (raw, json) Hash identifier: mdd+1psA3HwZ7RHwJrtrkoo5F3BxiUPSUxGfRJIXoNs= Subject key identifier: 74:B0:A5:D9:D5:1D:8B:2A:CC:47:01:18:7D:42:DC:AE:84:36:36:F3 Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019B7AC7ECE2538D49D2AAC222D3491AB2F4 Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/dLCl2dUdiyrMRwEYfULcroQ2NvM.roa Signing time: Thu 01 Jan 2026 18:18:01 +0000 ROA not before: Thu 01 Jan 2026 18:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 145.61.196.0/24 maxlen: 24 145.61.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ec:e2:53:8d:49:d2:aa:c2:22:d3:49:1a:b2:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74b0a5d9d51d8b2acc4701187d42dcae843636f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:04:ad:8e:73:91:41:0d:4a:1a:23:c9:dc:b3: 81:bc:df:4c:03:d3:7e:76:da:7d:c2:c3:bf:28:41: 0b:fb:4e:eb:f0:94:d7:29:e3:4b:9a:da:bc:20:95: 55:44:e2:f8:a4:70:36:1f:a0:cc:65:56:52:ff:98: 64:99:d6:ca:1d:f7:f8:e7:b1:4b:ad:6f:6d:df:70: 87:dd:c2:ac:92:1f:42:fa:be:ca:76:0a:5d:89:be: e7:1f:86:a4:12:1a:72:af:70:7b:fd:15:a4:49:4d: f9:41:94:34:08:b4:f4:3f:69:65:8e:79:f4:df:91: 3f:ca:55:81:b2:2c:fe:86:8f:19:7b:0b:90:d3:d7: cd:62:6d:fe:92:01:9d:c6:b6:1c:69:2d:16:12:ff: 25:3d:07:9d:92:75:29:59:93:18:f2:d1:ea:e6:2f: ff:1a:ac:8d:5f:37:2e:af:62:23:98:35:fa:13:19: 64:fc:71:7a:f9:8e:fd:9c:43:89:7d:ad:7b:02:13: a5:68:33:11:a5:2e:28:58:f0:fb:5a:8b:4f:70:e1: ac:7c:00:e8:6b:4f:6b:71:c4:b0:6c:2d:68:37:59: bd:35:9a:5a:5b:82:1b:2a:0a:55:0c:6a:32:e5:4e: 05:d3:fb:86:0a:ab:20:b4:b4:11:41:86:ab:b0:88: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B0:A5:D9:D5:1D:8B:2A:CC:47:01:18:7D:42:DC:AE:84:36:36:F3 X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/dLCl2dUdiyrMRwEYfULcroQ2NvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.61.196.0/24 145.61.200.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:b6:31:fd:3d:1a:b6:5d:b7:f1:97:c1:d7:91:71:8a:fb:37: 6d:4c:6c:74:f1:d4:da:8c:9a:ab:cf:d5:41:95:b2:02:db:e8: 0a:9a:2d:4d:5d:e5:90:76:c6:77:0b:3d:e6:b2:5a:03:90:09: 13:b7:b2:d5:4a:3d:1c:fc:7a:7f:5f:ca:51:ed:d2:de:d7:f9: 4c:1f:28:44:f1:7e:e7:9d:15:25:76:ac:84:0a:13:d6:dd:18: 2b:f9:98:ef:1c:b7:0b:d4:5c:96:23:98:43:d2:05:76:04:ef: 74:97:c8:b5:10:f9:0d:3c:8d:cd:6f:00:18:4d:99:c4:93:67: 72:b6:c8:8f:d6:aa:44:03:92:af:7f:d5:42:72:16:40:19:49: 4a:d7:63:86:86:90:8e:e0:d6:fa:27:36:b2:07:6f:25:7a:cb: c5:72:47:2c:13:bd:52:e7:4a:fd:b3:a9:ab:fe:7b:2b:72:93: f4:15:30:bb:4d:20:ca:29:59:b1:20:4f:a9:49:7f:c0:37:b3: 57:60:14:05:3f:7c:87:aa:f4:1f:6c:fc:92:ea:bf:15:94:34: 0e:bf:3e:6d:a2:9c:c9:84:a0:d1:af:91:fd:5a:8d:09:75:13: 1b:ae:fa:ce:e2:e4:70:3a:59:84:9c:8e:ee:10:d2:8b:7a:17: a3:ca:0b:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x+ziU41J0qrCItNJGrL0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGIwYTVkOWQ1MWQ4YjJhY2M0NzAxMTg3ZDQyZGNhZTg0MzYzNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QStjnORQQ1KGiPJ3LOBvN9MA9N+ dtp9wsO/KEEL+07r8JTXKeNLmtq8IJVVROL4pHA2H6DMZVZS/5hkmdbKHff457FL rW9t33CH3cKskh9C+r7Kdgpdib7nH4akEhpyr3B7/RWkSU35QZQ0CLT0P2lljnn0 35E/ylWBsiz+ho8ZewuQ09fNYm3+kgGdxrYcaS0WEv8lPQedknUpWZMY8tHq5i// GqyNXzcur2IjmDX6Exlk/HF6+Y79nEOJfa17AhOlaDMRpS4oWPD7WotPcOGsfADo a09rccSwbC1oN1m9NZpaW4IbKgpVDGoy5U4F0/uGCqsgtLQRQYarsIiemQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHSwpdnVHYsqzEcBGH1C3K6ENjbzMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvZExDbDJkVWRpeXJNUndFWWZVTGNyb1EyTnZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkT3EAwQC kT3IMA0GCSqGSIb3DQEBCwUAA4IBAQAKtjH9PRq2Xbfxl8HXkXGK+zdtTGx08dTa jJqrz9VBlbIC2+gKmi1NXeWQdsZ3Cz3msloDkAkTt7LVSj0c/Hp/X8pR7dLe1/lM HyhE8X7nnRUldqyEChPW3Rgr+ZjvHLcL1FyWI5hD0gV2BO90l8i1EPkNPI3NbwAY TZnEk2dytsiP1qpEA5Kvf9VCchZAGUlK12OGhpCO4Nb6JzayB28lesvFckcsE71S 50r9s6mr/nsrcpP0FTC7TSDKKVmxIE+pSX/AN7NXYBQFP3yHqvQfbPyS6r8VlDQO vz5topzJhKDRr5H9Wo0JdRMbrvrO4uRwOlmEnI7uENKLehejyguc -----END CERTIFICATE-----Generated at Fri Jan 23 16:03:33 2026 by rpki-client