This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/ThcE502VHh7nDHiwu3z750fA_jI.roa File: ThcE502VHh7nDHiwu3z750fA_jI.roa (raw, json) Hash identifier: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ= Subject key identifier: 4E:17:04:E7:4D:95:1E:1E:E7:0C:78:B0:BB:7C:FB:E7:47:C0:FE:32 Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5 Certificate serial: 019B7BA38F8539B6321998423889F2FECE94 Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/ThcE502VHh7nDHiwu3z750fA_jI.roa Signing time: Thu 01 Jan 2026 22:17:55 +0000 ROA not before: Thu 01 Jan 2026 22:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29286 IP address blocks: 213.175.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8f:85:39:b6:32:19:98:42:38:89:f2:fe:ce:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5 Validity Not Before: Jan 1 22:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e1704e74d951e1ee70c78b0bb7cfbe747c0fe32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:77:3e:17:83:ab:67:79:9f:69:7a:8e:b2: da:74:e7:b5:31:61:50:18:46:26:d5:e7:c5:cc:5b: 1e:b4:df:ec:75:ee:34:f1:ae:46:45:7c:73:70:be: f3:cc:3e:cc:3c:c5:21:74:35:77:22:62:08:be:e6: 7d:91:4b:10:44:58:a6:39:c3:31:1b:15:2b:98:59: 08:ad:c5:f5:14:1f:24:6e:3d:77:53:19:64:f0:c9: ae:0c:2a:e9:8f:d9:ad:a1:7a:9c:03:75:34:3f:f1: 71:98:85:3f:af:ca:8e:04:92:29:7d:53:1c:d0:ca: ff:ac:be:46:b6:2b:75:8d:d7:da:d9:a6:54:71:bf: d1:fd:c4:22:2d:78:00:79:fb:87:ae:af:e4:92:ce: 19:9f:fa:04:ea:5e:cf:86:2d:18:ab:7f:bb:18:2c: 86:ce:ec:74:82:e1:18:6b:0f:44:97:0a:60:46:48: e9:71:cd:d1:bd:81:d1:ce:1c:c0:d4:6a:47:ea:e2: 91:96:7f:0a:07:44:85:74:48:ff:f1:77:7f:89:d8: f8:8b:ee:b1:98:4f:16:de:97:43:01:85:f3:7f:b7: 23:60:34:08:01:8d:a4:3e:75:1e:ba:0b:95:ff:ce: fa:c8:8f:57:2f:aa:5c:af:b6:25:88:a9:db:f3:5e: cd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:17:04:E7:4D:95:1E:1E:E7:0C:78:B0:BB:7C:FB:E7:47:C0:FE:32 X509v3 Authority Key Identifier: keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/ThcE502VHh7nDHiwu3z750fA_jI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.175.133.0/24 Signature Algorithm: sha256WithRSAEncryption 97:c1:ef:af:2c:5a:47:10:f4:75:3b:56:4b:2b:0a:03:a9:1d: 75:4a:83:7e:0d:c7:da:0b:28:e4:61:64:2b:7a:d4:5e:b4:4e: e8:5f:9a:e7:36:c0:3e:d7:b4:51:02:71:e4:3c:12:51:f8:44: 6a:3e:dc:55:c6:56:83:2f:06:1e:d1:07:8d:c3:f6:c2:42:a1: bd:45:45:6c:a0:d4:90:a9:fc:5d:fb:c7:8f:54:72:13:10:b3: da:23:ae:91:20:b8:32:c8:6a:30:ae:85:41:c0:35:2e:ca:70: 9f:0e:5d:68:5b:09:b0:bc:7a:31:08:e9:94:81:81:12:61:2e: 6b:9e:ba:51:f9:e3:fd:65:aa:11:a7:e2:0f:57:51:76:c4:fc: a8:64:85:a4:47:cd:35:37:eb:a8:67:eb:53:1b:c6:95:af:f2: c4:fc:0e:5d:be:b3:a3:6e:34:e6:06:72:24:09:7c:5c:79:bf: 2e:bf:3f:fb:c6:70:f7:c0:a3:09:d4:d5:7f:85:d4:3c:c9:53: 8d:e8:b7:3a:68:dd:3f:18:8d:b2:1f:a8:9e:27:ba:ff:d4:10: 20:46:1d:1d:cd:ac:d0:f8:f8:c9:4f:55:1e:5d:b6:aa:28:95: da:49:48:9a:89:f2:78:65:f0:7f:f6:d1:d2:79:5c:e1:5d:22: b9:3c:45:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o4+FObYyGZhCOIny/s6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MDEwY2ViMjBmMmUwNzZhM2YwMDAyNzFhNWMzNzU3NjFi ZWMyZjUwHhcNMjYwMTAxMjIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTE3MDRlNzRkOTUxZTFlZTcwYzc4YjBiYjdjZmJlNzQ3YzBmZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyZ3PheDq2d5n2l6jrLadOe1MWFQ GEYm1efFzFsetN/sde408a5GRXxzcL7zzD7MPMUhdDV3ImIIvuZ9kUsQRFimOcMx GxUrmFkIrcX1FB8kbj13Uxlk8MmuDCrpj9mtoXqcA3U0P/FxmIU/r8qOBJIpfVMc 0Mr/rL5Gtit1jdfa2aZUcb/R/cQiLXgAefuHrq/kks4Zn/oE6l7Phi0Yq3+7GCyG zux0guEYaw9ElwpgRkjpcc3RvYHRzhzA1GpH6uKRln8KB0SFdEj/8Xd/idj4i+6x mE8W3pdDAYXzf7cjYDQIAY2kPnUeuguV/876yI9XL6pcr7YliKnb817NjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4XBOdNlR4e5wx4sLt8++dHwP4yMB8GA1UdIwQY MBaAFKgBDOsg8uB2o/AAJxpcN1dhvsL1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMt NDlmNjVjNmE0OGJmLzEvVGhjRTUwMlZIaDduREhpd3Uzejc1MGZBX2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMtNDlmNjVjNmE0OGJm LzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a+FMA0G CSqGSIb3DQEBCwUAA4IBAQCXwe+vLFpHEPR1O1ZLKwoDqR11SoN+DcfaCyjkYWQr etRetE7oX5rnNsA+17RRAnHkPBJR+ERqPtxVxlaDLwYe0QeNw/bCQqG9RUVsoNSQ qfxd+8ePVHITELPaI66RILgyyGowroVBwDUuynCfDl1oWwmwvHoxCOmUgYESYS5r nrpR+eP9ZaoRp+IPV1F2xPyoZIWkR801N+uoZ+tTG8aVr/LE/A5dvrOjbjTmBnIk CXxceb8uvz/7xnD3wKMJ1NV/hdQ8yVON6Lc6aN0/GI2yH6ieJ7r/1BAgRh0dzazQ +PjJT1UeXbaqKJXaSUiaifJ4ZfB/9tHSeVzhXSK5PEVt -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:12 2026 by rpki-client