This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Th9yBiWSbMsH3gwbWRPwpFcad2A.roa File: Th9yBiWSbMsH3gwbWRPwpFcad2A.roa (raw, json) Hash identifier: U0xnJVCep9fDorHM9EM9nJ7vs7fc/6GEbSINMoe/caM= Subject key identifier: 4E:1F:72:06:25:92:6C:CB:07:DE:0C:1B:59:13:F0:A4:57:1A:77:60 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019AA0A58CE86549868E99EFE1173E654D76 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Th9yBiWSbMsH3gwbWRPwpFcad2A.roa Signing time: Thu 20 Nov 2025 09:43:15 +0000 ROA not before: Thu 20 Nov 2025 09:43:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48529 IP address blocks: 144.56.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:a5:8c:e8:65:49:86:8e:99:ef:e1:17:3e:65:4d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Nov 20 09:43:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4e1f720625926ccb07de0c1b5913f0a4571a7760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2e:02:5a:b0:ba:da:e4:3b:50:5a:45:62:05: 10:72:5a:67:b8:e1:da:3c:45:cb:83:35:3a:ec:f9: d0:6e:2c:b2:06:f9:bf:37:3c:18:e2:b7:cf:6c:1e: 4d:c1:b5:88:c1:4d:df:42:77:78:c1:99:fa:9c:f8: 1f:5a:9f:57:ee:1d:43:48:1f:71:ad:0d:d8:29:61: 01:45:77:07:cc:6d:29:ee:1e:50:23:8f:fd:6e:4a: 0a:d6:ed:d8:a5:da:76:03:95:26:e7:43:3b:79:a5: 3b:8b:cd:91:07:f4:a6:81:7b:d6:77:8e:d9:7d:63: 34:e1:1d:be:b7:f7:c2:cd:60:85:14:2d:2b:0d:b5: f8:8a:d2:cd:0a:d3:48:4b:7b:98:9b:35:a3:c2:03: fc:b9:19:08:ad:c9:a1:eb:e6:b3:65:68:59:a8:cc: 78:81:eb:37:cf:46:31:e7:91:50:d3:32:7a:38:12: fb:5f:f4:78:cc:7d:16:9e:2b:9f:b4:92:8e:fc:31: ac:bf:f0:2f:ed:13:e8:60:b3:43:0e:e6:b9:54:e0: 99:bf:91:c3:68:86:84:e4:37:af:12:68:83:5e:3c: 4a:e2:09:7c:92:20:e1:65:8e:0c:c4:13:49:41:8f: df:5d:56:d5:80:f3:93:c8:c3:9c:40:b5:88:a5:a6: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1F:72:06:25:92:6C:CB:07:DE:0C:1B:59:13:F0:A4:57:1A:77:60 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Th9yBiWSbMsH3gwbWRPwpFcad2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.79.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:8d:f0:fa:71:2b:5f:19:64:5e:ca:03:82:3f:f1:fa:5a:8a: 7f:5d:c4:dc:98:0e:02:3d:37:56:1f:d7:12:2a:ff:92:3b:5b: 90:69:84:9a:ec:e2:e8:29:27:d6:9b:b2:8e:fe:c4:34:9d:ff: b7:b1:71:1e:11:5a:39:57:32:5c:d5:17:b9:4a:41:88:83:e4: 9d:92:e1:31:c9:f9:84:50:93:73:71:9b:e8:5b:35:eb:42:03: 07:ac:49:7e:ae:f1:b4:45:ac:ad:dd:a7:0b:2e:97:e9:16:e6: 9b:2d:74:4b:b8:5e:e7:39:f7:c3:37:08:c5:84:a6:03:8f:b5: 4f:a0:aa:ba:7b:81:d3:9b:0f:b0:e1:e5:5b:68:0d:cc:e8:3a: 1a:b0:b5:94:92:51:bd:89:9c:5c:ff:8a:64:04:32:2e:de:87: bf:50:e3:78:3e:9d:ba:52:23:0c:78:ab:03:7d:41:21:b1:5b: fb:9e:08:7a:fc:d4:79:2e:0e:29:e8:91:54:5f:c9:eb:c4:e3: a7:89:c5:e5:3d:cb:0b:f7:74:61:00:03:5c:dd:1a:e3:6c:90: f7:05:44:89:f2:8d:84:04:ca:11:c5:12:45:43:27:94:bf:10: 64:78:4c:bd:6f:31:eb:8a:1f:b7:49:86:94:19:13:17:9d:ae: 2d:f9:83:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqgpYzoZUmGjpnv4Rc+ZU12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMTIwMDk0MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTFmNzIwNjI1OTI2Y2NiMDdkZTBjMWI1OTEzZjBhNDU3MWE3NzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli4CWrC62uQ7UFpFYgUQclpnuOHa PEXLgzU67PnQbiyyBvm/NzwY4rfPbB5NwbWIwU3fQnd4wZn6nPgfWp9X7h1DSB9x rQ3YKWEBRXcHzG0p7h5QI4/9bkoK1u3Ypdp2A5Um50M7eaU7i82RB/SmgXvWd47Z fWM04R2+t/fCzWCFFC0rDbX4itLNCtNIS3uYmzWjwgP8uRkIrcmh6+azZWhZqMx4 ges3z0Yx55FQ0zJ6OBL7X/R4zH0WniuftJKO/DGsv/Av7RPoYLNDDua5VOCZv5HD aIaE5DevEmiDXjxK4gl8kiDhZY4MxBNJQY/fXVbVgPOTyMOcQLWIpaYHQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4fcgYlkmzLB94MG1kT8KRXGndgMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvVGg5eUJpV1NiTXNIM2d3YldSUHdwRmNhZDJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDhPMA0G CSqGSIb3DQEBCwUAA4IBAQAajfD6cStfGWReygOCP/H6Wop/XcTcmA4CPTdWH9cS Kv+SO1uQaYSa7OLoKSfWm7KO/sQ0nf+3sXEeEVo5VzJc1Re5SkGIg+SdkuExyfmE UJNzcZvoWzXrQgMHrEl+rvG0Rayt3acLLpfpFuabLXRLuF7nOffDNwjFhKYDj7VP oKq6e4HTmw+w4eVbaA3M6DoasLWUklG9iZxc/4pkBDIu3oe/UON4Pp26UiMMeKsD fUEhsVv7ngh6/NR5Lg4p6JFUX8nrxOOnicXlPcsL93RhAANc3RrjbJD3BUSJ8o2E BMoRxRJFQyeUvxBkeEy9bzHrih+3SYaUGRMXna4t+YPn -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:52 2025 by rpki-client