This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/th2pTn-En0EvqF1fUXxC_GzD4e4.roa File: th2pTn-En0EvqF1fUXxC_GzD4e4.roa (raw, json) Hash identifier: YWsreN1mrS6/tFSiQgn3+FJfJIWQ+GiL364NxHSL7es= Subject key identifier: B6:1D:A9:4E:7F:84:9F:41:2F:A8:5D:5F:51:7C:42:FC:6C:C3:E1:EE Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED1C2DF62872B7826B5392EA19E99D Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/th2pTn-En0EvqF1fUXxC_GzD4e4.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198777 IP address blocks: 193.59.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1c:2d:f6:28:72:b7:82:6b:53:92:ea:19:e9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b61da94e7f849f412fa85d5f517c42fc6cc3e1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:48:94:f3:43:4b:59:a1:50:76:fb:4d:ab:2a: 11:3a:56:ee:59:9c:bb:50:18:dd:7e:68:c7:30:14: 92:05:13:e3:9b:4a:75:1f:84:ce:d3:67:fa:0e:0e: e2:87:56:3b:39:5e:94:79:a3:d3:44:9d:42:25:ac: 56:73:bf:2d:6a:a1:84:62:6c:ff:a5:52:e8:b7:1f: 4e:78:38:5e:8e:84:88:b7:d7:f6:c9:9e:2a:21:26: 96:e3:34:e2:5d:f0:ef:0e:97:2b:ab:30:97:c6:9b: 53:71:b9:df:2f:9a:24:b2:2a:8e:fd:3e:41:25:73: c7:c1:e8:53:eb:91:e6:28:2a:e5:f4:77:24:4e:14: 57:5c:15:14:39:08:88:3c:ed:5a:cf:60:c6:6f:74: 9a:1c:80:8e:fe:b5:2b:9c:75:b2:64:ba:d7:df:bb: 0e:02:f8:ed:73:21:d6:1b:12:fa:4c:8b:a4:16:60: a5:1c:48:f0:8d:48:49:9a:58:bb:04:ea:72:77:4d: 43:8a:9a:18:25:27:d2:ee:7a:27:f5:93:45:aa:b1: 9c:d7:0f:a7:dd:48:c4:df:a4:03:ae:13:a8:ca:be: 2e:2c:bc:c8:6d:7a:62:7c:46:46:96:59:64:ee:d8: f3:30:8a:6f:fe:77:73:39:57:19:6c:1b:2a:66:4c: 3c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1D:A9:4E:7F:84:9F:41:2F:A8:5D:5F:51:7C:42:FC:6C:C3:E1:EE X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/th2pTn-En0EvqF1fUXxC_GzD4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.59.88.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:7a:71:c5:a7:7a:83:4f:d5:0b:1f:6e:62:e9:4f:7e:20:be: 8e:8f:bd:01:61:41:37:28:24:15:05:36:1d:86:1e:d2:2d:7e: 29:78:7c:18:0e:bd:40:1f:66:33:4c:3a:c1:76:96:87:10:cb: c2:f4:2c:5e:87:60:c1:32:63:32:60:be:8c:06:23:b8:97:85: f9:0b:a1:93:78:b1:f8:22:c7:92:ba:0a:7a:98:fc:b2:9c:8e: fd:0d:6a:9d:5c:a0:e4:ca:23:c9:96:e7:e7:d4:1a:89:59:ba: 01:bc:af:41:72:17:e8:76:a4:6b:45:49:07:a7:96:dc:86:24: 79:42:e6:f5:7c:9d:97:cd:97:81:ae:7d:74:8a:8b:12:12:d3: bf:d8:0f:50:1d:73:8c:8c:3d:42:de:76:79:47:e2:b5:2d:4b: f5:a1:8c:30:b4:de:20:d6:ce:ae:c2:3f:a5:51:39:a2:50:48: 5f:e0:5b:1c:95:e6:93:f0:13:64:00:5d:c5:3b:3d:bd:39:03: 0e:f5:95:d0:d6:92:55:2e:f5:e7:f4:27:6a:6e:f2:74:8a:c0: 20:15:b4:de:f1:2a:89:35:53:b1:0d:25:40:36:58:2d:26:9d: 13:ca:d0:07:3d:66:53:76:a6:ee:fb:2c:39:04:b9:62:bf:b7: 13:50:14:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Rwt9ihyt4JrU5LqGemdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjFkYTk0ZTdmODQ5ZjQxMmZhODVkNWY1MTdjNDJmYzZjYzNlMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0iU80NLWaFQdvtNqyoROlbuWZy7 UBjdfmjHMBSSBRPjm0p1H4TO02f6Dg7ih1Y7OV6UeaPTRJ1CJaxWc78taqGEYmz/ pVLotx9OeDhejoSIt9f2yZ4qISaW4zTiXfDvDpcrqzCXxptTcbnfL5oksiqO/T5B JXPHwehT65HmKCrl9HckThRXXBUUOQiIPO1az2DGb3SaHICO/rUrnHWyZLrX37sO AvjtcyHWGxL6TIukFmClHEjwjUhJmli7BOpyd01DipoYJSfS7non9ZNFqrGc1w+n 3UjE36QDrhOoyr4uLLzIbXpifEZGlllk7tjzMIpv/ndzOVcZbBsqZkw85QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYdqU5/hJ9BL6hdX1F8Qvxsw+HuMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvdGgycFRuLUVuMEV2cUYxZlVYeENfR3pENGU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwTtYMA0G CSqGSIb3DQEBCwUAA4IBAQB/enHFp3qDT9ULH25i6U9+IL6Oj70BYUE3KCQVBTYd hh7SLX4peHwYDr1AH2YzTDrBdpaHEMvC9Cxeh2DBMmMyYL6MBiO4l4X5C6GTeLH4 IseSugp6mPyynI79DWqdXKDkyiPJlufn1BqJWboBvK9BchfodqRrRUkHp5bchiR5 Qub1fJ2XzZeBrn10iosSEtO/2A9QHXOMjD1C3nZ5R+K1LUv1oYwwtN4g1s6uwj+l UTmiUEhf4FscleaT8BNkAF3FOz29OQMO9ZXQ1pJVLvXn9CdqbvJ0isAgFbTe8SqJ NVOxDSVANlgtJp0TytAHPWZTdqbu+yw5BLliv7cTUBRY -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:45 2026 by rpki-client