This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa File: ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa (raw, json) Hash identifier: v+wF6wFf27Ypcfgbcy3yS1RY4Bsxs0fkYYHyrIRuiQE= Subject key identifier: 4E:1C:59:FF:3C:F4:A8:8F:B9:5F:FF:7E:30:2D:B7:95:71:9E:5B:87 Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019B797DDEE7F275DAFD032F8E44F2E0F4C4 Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa Signing time: Thu 01 Jan 2026 12:17:30 +0000 ROA not before: Thu 01 Jan 2026 12:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51032 IP address blocks: 31.128.128.0/19 maxlen: 24 31.130.0.0/19 maxlen: 24 62.122.88.0/21 maxlen: 24 85.159.224.0/24 maxlen: 24 85.159.227.0/24 maxlen: 24 89.23.128.0/19 maxlen: 20 89.23.128.0/21 maxlen: 24 89.23.144.0/20 maxlen: 24 89.23.146.0/24 maxlen: 24 89.23.147.0/24 maxlen: 24 89.23.160.0/19 maxlen: 19 89.23.168.0/21 maxlen: 21 89.23.176.0/21 maxlen: 21 91.123.80.0/20 maxlen: 20 91.202.204.0/22 maxlen: 24 93.157.160.0/21 maxlen: 21 93.157.162.0/24 maxlen: 24 93.157.163.0/24 maxlen: 24 178.212.80.0/21 maxlen: 24 178.216.176.0/21 maxlen: 24 2a13:2c80::/29 maxlen: 32 2a13:2c80::/32 maxlen: 48 2a13:2c81::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:de:e7:f2:75:da:fd:03:2f:8e:44:f2:e0:f4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Jan 1 12:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e1c59ff3cf4a88fb95fff7e302db795719e5b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:dd:d8:75:35:c0:a8:a5:5d:5c:46:e9:e4: 1e:59:a5:01:2e:d0:ab:22:b2:8e:e6:49:39:6d:89: dc:60:3c:61:c4:61:bb:c1:e7:91:bd:de:e0:a0:c6: e4:c3:67:db:2f:5d:c7:99:c1:01:e1:8d:51:ec:9c: 56:82:da:c5:fe:8f:a1:45:a0:1b:3b:8b:a6:84:51: 16:f3:86:9c:34:01:58:b7:e6:94:cd:78:a7:a4:64: a9:2a:20:96:f4:24:10:16:9f:c3:93:ba:2e:96:95: 5b:6c:90:65:48:9d:5b:5f:4a:cf:88:d7:67:35:66: 80:9f:9b:6a:e4:37:4a:d7:47:c2:3a:d5:0c:9c:8b: f7:4e:0f:85:8e:b7:86:ef:4e:c1:92:e8:30:b6:03: a3:f0:f1:57:01:d6:b5:d7:fb:36:2d:91:5d:c5:70: c3:8e:4c:c2:56:6c:1d:de:80:4f:07:5c:cf:29:33: 79:40:ab:1d:47:96:58:a9:dd:73:3e:54:a1:81:03: 70:44:8f:56:49:ca:f7:73:87:9f:35:eb:f7:77:6f: 97:72:24:e2:74:16:55:4f:7f:3d:db:f4:da:60:92: a4:6d:7a:cd:a7:5a:4d:15:db:d2:50:19:f2:61:24: f4:13:57:62:90:4e:15:92:d9:ae:da:be:01:82:89: 81:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1C:59:FF:3C:F4:A8:8F:B9:5F:FF:7E:30:2D:B7:95:71:9E:5B:87 X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.128.0/19 31.130.0.0/19 62.122.88.0/21 85.159.224.0/24 85.159.227.0/24 89.23.128.0/18 91.123.80.0/20 91.202.204.0/22 93.157.160.0/21 178.212.80.0/21 178.216.176.0/21 IPv6: 2a13:2c80::/29 Signature Algorithm: sha256WithRSAEncryption b3:df:b4:59:78:fd:66:c8:cb:d0:64:c1:9e:51:bf:b0:73:63: d2:a1:e5:e8:16:86:12:87:56:1f:3c:ad:83:e3:50:3f:21:6f: f5:57:98:bc:a1:0d:4f:83:5c:41:f8:a8:ef:31:4f:62:97:8a: c3:17:59:61:9d:c4:53:0d:7b:71:e3:d8:86:f2:6a:08:83:1b: 62:6c:dc:05:3e:15:36:ce:a6:ff:35:d0:f8:04:46:eb:71:02: 8f:6f:29:a6:1a:74:bf:3b:84:71:99:c7:6d:1e:53:3e:00:12: 01:90:71:fd:af:15:3e:c8:e5:c0:3c:51:a6:b6:45:f7:29:4c: e9:33:0a:33:5c:86:49:58:2d:fb:5a:39:a6:b7:5d:e8:b8:b4: 0a:c7:ff:5d:1c:ad:c9:6d:7e:e2:f1:4e:ae:15:f3:94:0f:81: d0:69:5f:aa:13:1f:f6:a8:ff:51:f1:14:4a:cf:d5:b5:04:52: 1d:ce:d1:c3:c5:9a:4e:02:74:14:ba:91:33:1d:3f:84:61:e5: 66:4a:26:65:d9:01:4d:3d:45:69:c3:12:f4:74:78:62:d1:1c: eb:4c:bb:f7:de:c1:a3:b1:6b:b0:a3:1b:86:cc:1a:d7:ea:ef: c7:4d:1a:9f:5f:c2:d0:0d:8e:23:c5:7f:23:f3:e9:60:f3:5b: da:4c:d2:1e -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt5fd7n8nXa/QMvjkTy4PTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjYwMTAxMTIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTFjNTlmZjNjZjRhODhmYjk1ZmZmN2UzMDJkYjc5NTcxOWU1Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOnd2HU1wKilXVxG6eQeWaUBLtCr IrKO5kk5bYncYDxhxGG7weeRvd7goMbkw2fbL13HmcEB4Y1R7JxWgtrF/o+hRaAb O4umhFEW84acNAFYt+aUzXinpGSpKiCW9CQQFp/Dk7oulpVbbJBlSJ1bX0rPiNdn NWaAn5tq5DdK10fCOtUMnIv3Tg+FjreG707BkugwtgOj8PFXAda11/s2LZFdxXDD jkzCVmwd3oBPB1zPKTN5QKsdR5ZYqd1zPlShgQNwRI9WScr3c4efNev3d2+XciTi dBZVT3892/TaYJKkbXrNp1pNFdvSUBnyYST0E1dikE4Vktmu2r4BgomBEwIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFE4cWf889KiPuV//fjAtt5VxnluHMB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvVGh4Wl96ejBxSS01WF85LU1DMjNsWEdlVzRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQFH4CAAwQF H4IAAwQDPnpYAwQAVZ/gAwQAVZ/jAwQGWReAAwQEW3tQAwQCW8rMAwQDXZ2gAwQD stRQAwQDstiwMA0EAgACMAcDBQMqEyyAMA0GCSqGSIb3DQEBCwUAA4IBAQCz37RZ eP1myMvQZMGeUb+wc2PSoeXoFoYSh1YfPK2D41A/IW/1V5i8oQ1Pg1xB+KjvMU9i l4rDF1lhncRTDXtx49iG8moIgxtibNwFPhU2zqb/NdD4BEbrcQKPbymmGnS/O4Rx mcdtHlM+ABIBkHH9rxU+yOXAPFGmtkX3KUzpMwozXIZJWC37Wjmmt13ouLQKx/9d HK3JbX7i8U6uFfOUD4HQaV+qEx/2qP9R8RRKz9W1BFIdztHDxZpOAnQUupEzHT+E YeVmSiZl2QFNPUVpwxL0dHhi0RzrTLv33sGjsWuwoxuGzBrX6u/HTRqfX8LQDY4j xX8j8+lg81vaTNIe -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:54 2026 by rpki-client