This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/THhYDAN0qrsCtuJtXWRCUlxQRGg.roa File: THhYDAN0qrsCtuJtXWRCUlxQRGg.roa (raw, json) Hash identifier: RLiZzna2ZQX0BOaxKF246T0j53A007kbYha6NQyWAe0= Subject key identifier: 4C:78:58:0C:03:74:AA:BB:02:B6:E2:6D:5D:64:42:52:5C:50:44:68 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C68F5F62CEEC1A05A23CD95F4EB9BB Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/THhYDAN0qrsCtuJtXWRCUlxQRGg.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199853 IP address blocks: 37.72.8.0/24 maxlen: 24 84.232.106.0/23 maxlen: 23 88.148.58.0/23 maxlen: 23 94.76.176.0/24 maxlen: 24 178.156.32.0/24 maxlen: 24 185.27.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8f:5f:62:ce:ec:1a:05:a2:3c:d9:5f:4e:b9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c78580c0374aabb02b6e26d5d6442525c504468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:59:40:c7:4d:e2:d2:4e:bc:40:1f:cd:06: df:8f:18:43:58:55:f8:97:44:81:79:5e:cb:1a:ed: 67:43:64:9f:af:56:7b:1e:81:d3:3f:b5:d3:71:3c: 69:5c:c8:f2:58:76:21:50:77:16:e1:88:92:4a:d1: 22:80:cf:fd:ed:c9:2d:d8:59:52:a9:bd:b0:04:11: 24:44:25:df:04:6c:8e:7e:02:e4:69:64:8f:18:5b: 7e:d7:f5:1a:f0:26:15:66:35:00:2a:85:23:c2:68: 39:b0:77:28:2c:62:21:0d:c8:54:f4:c2:29:08:03: b8:72:2b:e9:8d:d5:48:d0:85:5a:db:5d:cf:37:03: 81:5c:c8:02:0f:16:67:ad:1d:c5:75:f4:37:4b:e9: ed:33:f4:42:c1:f2:69:20:61:0b:de:56:19:28:3b: 72:cb:8b:c3:0d:16:5c:b2:9f:06:a3:fe:6a:d0:fa: ca:be:a1:8c:a7:43:6e:58:cd:1d:bc:73:17:7f:72: a2:38:9c:21:bc:fe:86:21:6c:fa:21:8d:f0:82:f1: 1d:ab:9a:26:1e:5e:e5:12:4c:a3:bd:d9:08:9e:67: b0:10:15:e0:91:11:3f:56:62:11:6a:87:c9:2e:92: 9a:27:71:4f:4b:2a:e4:78:3b:b4:d2:e6:ee:c6:21: 8c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:78:58:0C:03:74:AA:BB:02:B6:E2:6D:5D:64:42:52:5C:50:44:68 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/THhYDAN0qrsCtuJtXWRCUlxQRGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.8.0/24 84.232.106.0/23 88.148.58.0/23 94.76.176.0/24 178.156.32.0/24 185.27.126.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:e6:77:29:c8:91:38:29:74:6c:e2:96:bc:8f:e3:3e:3f:94: 6b:6f:a2:0b:3d:a1:c5:05:08:83:54:9b:4e:55:a8:4b:d6:76: cc:df:71:ac:c7:a6:65:00:e7:4c:37:00:28:86:51:44:44:a9: af:41:39:0f:71:b0:52:20:29:21:c8:88:e0:a3:84:53:e0:fb: d2:27:bf:65:f1:0d:1c:be:28:03:db:9e:c1:57:d0:a9:5a:e8: 49:b1:83:9b:73:1a:95:c0:b8:5d:a2:cc:20:6e:62:07:08:88: fc:13:50:fc:da:0a:99:18:30:3d:e2:ea:72:37:dc:24:bf:33: cd:9d:26:0d:87:ca:56:b9:b4:26:22:d2:30:d1:67:cb:ed:8a: 3f:24:7c:93:bd:a7:1b:2a:06:28:12:12:96:5a:12:a5:4c:48: ae:52:5c:50:51:98:52:8d:2c:38:3c:44:c1:a5:22:fe:23:18: d2:54:7e:55:06:0e:a0:b2:1b:9c:0c:d5:a6:a5:48:99:5f:3c: ed:ed:0f:4d:f5:52:48:d3:98:e1:a0:64:16:40:7d:d8:27:1b: 54:97:cf:9b:c3:82:b5:37:17:8a:8f:65:d9:83:5c:9e:17:98: 47:d0:3d:34:30:e8:6a:a7:14:d6:13:ba:e3:ad:00:88:98:62: 80:7d:ac:61 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3xo9fYs7sGgWiPNlfTrm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzc4NTgwYzAzNzRhYWJiMDJiNmUyNmQ1ZDY0NDI1MjVjNTA0NDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5RZQMdN4tJOvEAfzQbfjxhDWFX4 l0SBeV7LGu1nQ2Sfr1Z7HoHTP7XTcTxpXMjyWHYhUHcW4YiSStEigM/97ckt2FlS qb2wBBEkRCXfBGyOfgLkaWSPGFt+1/Ua8CYVZjUAKoUjwmg5sHcoLGIhDchU9MIp CAO4civpjdVI0IVa213PNwOBXMgCDxZnrR3FdfQ3S+ntM/RCwfJpIGEL3lYZKDty y4vDDRZcsp8Go/5q0PrKvqGMp0NuWM0dvHMXf3KiOJwhvP6GIWz6IY3wgvEdq5om Hl7lEkyjvdkInmewEBXgkRE/VmIRaofJLpKaJ3FPSyrkeDu00ubuxiGM9wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFEx4WAwDdKq7ArbibV1kQlJcUERoMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvVEhoWURBTjBxcnNDdHVKdFhXUkNVbHhRUkdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJUgIAwQB VOhqAwQBWJQ6AwQAXkywAwQAspwgAwQAuRt+MA0GCSqGSIb3DQEBCwUAA4IBAQCc 5ncpyJE4KXRs4pa8j+M+P5Rrb6ILPaHFBQiDVJtOVahL1nbM33Gsx6ZlAOdMNwAo hlFERKmvQTkPcbBSICkhyIjgo4RT4PvSJ79l8Q0cvigD257BV9CpWuhJsYObcxqV wLhdoswgbmIHCIj8E1D82gqZGDA94upyN9wkvzPNnSYNh8pWubQmItIw0WfL7Yo/ JHyTvacbKgYoEhKWWhKlTEiuUlxQUZhSjSw4PETBpSL+IxjSVH5VBg6gshucDNWm pUiZXzzt7Q9N9VJI05jhoGQWQH3YJxtUl8+bw4K1NxeKj2XZg1yeF5hH0D00MOhq pxTWE7rjrQCImGKAfaxh -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:26 2026 by rpki-client