This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/TTHpThh0WFBegnNfmmfbon5C7Nk.roa File: TTHpThh0WFBegnNfmmfbon5C7Nk.roa (raw, json) Hash identifier: XL1bQibK3g0HnLkkJsFNT1Xil79v588WbG0+6ygTsbI= Subject key identifier: 4D:31:E9:4E:18:74:58:50:5E:82:73:5F:9A:67:DB:A2:7E:42:EC:D9 Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f Certificate serial: 019B77C76B0C8FC1207A287A44BB8904F17C Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/TTHpThh0WFBegnNfmmfbon5C7Nk.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41887 IP address blocks: 185.56.224.0/22 maxlen: 22 185.56.224.0/23 maxlen: 23 2a04:d940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6b:0c:8f:c1:20:7a:28:7a:44:bb:89:04:f1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d31e94e187458505e82735f9a67dba27e42ecd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:0e:7c:cf:75:ea:36:94:0c:fb:89:f7:b3: 7a:01:93:6f:fd:b2:81:0d:7c:e3:ab:2f:c5:8e:37: 3e:8a:54:fb:69:0c:4c:11:3d:68:65:a3:58:57:05: 49:d9:8c:65:5e:70:dd:a1:9d:ba:74:e9:38:d4:63: 30:66:83:00:59:f0:82:fd:de:fc:2d:4c:03:12:15: d1:21:7c:19:8d:21:3c:71:5a:fb:21:0e:ca:8c:08: d2:bc:43:fb:42:8d:bc:f1:c9:72:60:b2:52:d7:62: bf:0c:1e:5a:ac:57:5a:30:1c:e9:3e:31:46:06:70: d6:e2:8a:7e:51:84:33:6f:38:23:db:c9:d4:62:ec: a8:74:dc:f3:64:c5:7f:7f:b5:01:a8:24:73:6e:94: 62:b4:d5:03:27:1e:30:18:92:de:fc:e1:4e:c5:e6: 7f:e8:11:50:5b:09:3b:a8:72:33:c1:b2:4b:c4:ff: d6:d4:8f:8f:96:2b:7f:4b:0e:5b:af:01:ae:79:cd: 4f:41:51:16:33:f1:1e:bb:bc:e7:fa:0a:28:01:34: dc:c3:73:c3:d9:58:ea:8d:53:c7:35:d2:a6:10:62: 09:22:bf:75:d4:49:41:ef:a5:11:51:21:65:7e:bf: 29:75:38:91:b0:8a:24:a3:4a:06:b4:2f:b8:77:67: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:31:E9:4E:18:74:58:50:5E:82:73:5F:9A:67:DB:A2:7E:42:EC:D9 X509v3 Authority Key Identifier: keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/TTHpThh0WFBegnNfmmfbon5C7Nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.224.0/22 IPv6: 2a04:d940::/29 Signature Algorithm: sha256WithRSAEncryption 31:1e:2e:6b:d0:3a:69:19:d4:9b:3a:52:21:0f:ca:84:5b:76: 70:5d:25:7b:a7:06:90:82:22:e7:a9:1e:12:df:20:08:db:39: 52:58:53:75:62:7b:dd:a9:0f:3d:d9:2b:61:c7:b7:23:c8:30: 5d:1d:f0:89:e3:45:84:50:9d:c5:31:b5:12:0c:0a:b3:c8:11: 17:f5:66:1a:e4:51:b5:62:37:d2:43:3f:2d:cd:7f:68:21:05: 9a:31:df:14:3f:23:8c:cf:46:41:20:2f:19:52:b0:f0:e0:15: d0:34:0b:45:ab:40:8b:87:08:71:5a:aa:94:d2:be:91:aa:4e: 07:ca:00:17:e4:10:99:24:ae:2c:75:7c:62:77:c0:b0:4c:7f: cf:d0:67:bb:0f:64:d3:59:c1:3c:98:30:36:83:e5:90:cd:4e: 60:86:13:d2:79:60:56:78:bc:f9:fe:42:86:65:57:86:0d:d4: fb:56:8a:61:8d:2a:ba:4b:30:fe:d2:6d:27:e9:44:f6:66:20: 2f:1e:2d:86:7f:5c:eb:70:a2:59:f7:6d:a6:ae:e5:fb:00:66: 7a:68:93:81:cc:6c:ff:61:a1:d4:5d:51:cb:9e:a9:ce:4d:4b: ed:07:d7:03:02:e7:2f:f7:46:c5:19:f0:1a:07:74:f8:f1:44: 92:b9:bf:22 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x2sMj8Egeih6RLuJBPF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYWZhZGExMGUyY2UyMGUxYzk2Zjg5NWJiOGVjMzJhNTgw OGY2M2YwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDMxZTk0ZTE4NzQ1ODUwNWU4MjczNWY5YTY3ZGJhMjdlNDJlY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA8OfM916jaUDPuJ97N6AZNv/bKB DXzjqy/Fjjc+ilT7aQxMET1oZaNYVwVJ2YxlXnDdoZ26dOk41GMwZoMAWfCC/d78 LUwDEhXRIXwZjSE8cVr7IQ7KjAjSvEP7Qo288clyYLJS12K/DB5arFdaMBzpPjFG BnDW4op+UYQzbzgj28nUYuyodNzzZMV/f7UBqCRzbpRitNUDJx4wGJLe/OFOxeZ/ 6BFQWwk7qHIzwbJLxP/W1I+Plit/Sw5brwGuec1PQVEWM/Eeu7zn+gooATTcw3PD 2VjqjVPHNdKmEGIJIr911ElB76URUSFlfr8pdTiRsIoko0oGtC+4d2fFCQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE0x6U4YdFhQXoJzX5pn26J+QuzZMB8GA1UdIwQY MBaAFNyvraEOLOIOHJb4lbuOwypYCPY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQt YTY2Zjg0ZWRiZDZkLzEvVFRIcFRoaDBXRkJlZ25OZm1tZmJvbjVDN05rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQtYTY2Zjg0ZWRiZDZk LzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTjgMA0E AgACMAcDBQMqBNlAMA0GCSqGSIb3DQEBCwUAA4IBAQAxHi5r0DppGdSbOlIhD8qE W3ZwXSV7pwaQgiLnqR4S3yAI2zlSWFN1YnvdqQ892Sthx7cjyDBdHfCJ40WEUJ3F MbUSDAqzyBEX9WYa5FG1YjfSQz8tzX9oIQWaMd8UPyOMz0ZBIC8ZUrDw4BXQNAtF q0CLhwhxWqqU0r6Rqk4HygAX5BCZJK4sdXxid8CwTH/P0Ge7D2TTWcE8mDA2g+WQ zU5ghhPSeWBWeLz5/kKGZVeGDdT7VophjSq6SzD+0m0n6UT2ZiAvHi2Gf1zrcKJZ 922mruX7AGZ6aJOBzGz/YaHUXVHLnqnOTUvtB9cDAucv90bFGfAaB3T48USSub8i -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:25 2026 by rpki-client