This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/ThpyK7T3T5Urd0gQp4EkSzgmEB0.roa File: ThpyK7T3T5Urd0gQp4EkSzgmEB0.roa (raw, json) Hash identifier: drk6qrOhljg5/CDI9FQXdFU1YNYaPplLqtldYNHdpKY= Subject key identifier: 4E:1A:72:2B:B4:F7:4F:95:2B:77:48:10:A7:81:24:4B:38:26:10:1D Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019B9857552E73AB9DE9F782B7D6B763EAF2 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/ThpyK7T3T5Urd0gQp4EkSzgmEB0.roa Signing time: Wed 07 Jan 2026 12:03:38 +0000 ROA not before: Wed 07 Jan 2026 12:03:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397373 IP address blocks: 109.104.134.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:57:55:2e:73:ab:9d:e9:f7:82:b7:d6:b7:63:ea:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Jan 7 12:03:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e1a722bb4f74f952b774810a781244b3826101d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e8:20:68:f7:1a:c0:33:e7:25:84:12:d8:02: f7:15:1b:95:7d:25:95:34:00:4c:7f:90:8d:58:bc: 41:2a:56:82:a6:a1:76:35:2f:90:11:9b:31:60:74: cd:13:fe:c2:37:71:f5:b8:7d:ac:b2:59:73:dc:e5: 3f:97:3f:ec:3c:ba:59:28:82:b7:d0:f3:4c:0d:1e: 4b:58:1f:90:d9:26:be:62:75:d8:1c:de:83:33:10: 1e:b5:f0:9c:ea:28:38:f6:a0:99:c7:65:b0:a7:f7: 96:4c:46:67:4d:d1:b3:fe:f1:40:b6:47:69:0b:71: 44:ed:71:1f:26:ad:95:76:af:18:2c:81:52:65:e5: 60:64:4d:00:ca:5d:9b:09:82:8e:5b:57:6a:a3:d1: 9d:a6:11:9b:49:14:21:92:e3:14:fb:90:05:31:66: 9a:e4:72:b0:aa:76:62:e0:e6:41:b2:bb:9b:2c:85: 9f:23:13:a3:9b:63:ba:af:d6:56:41:a5:90:a1:1f: 4f:90:a1:43:82:94:3c:eb:b4:9c:66:f4:58:8a:4e: 8d:66:87:34:a2:03:1f:72:17:0c:15:de:cc:13:79: 40:45:32:4d:20:e5:5c:97:39:66:03:0f:ad:d1:9c: 3b:86:aa:8c:59:a7:bd:d9:23:d8:1a:b7:4b:c4:3f: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1A:72:2B:B4:F7:4F:95:2B:77:48:10:A7:81:24:4B:38:26:10:1D X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/ThpyK7T3T5Urd0gQp4EkSzgmEB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.104.134.0/24 Signature Algorithm: sha256WithRSAEncryption 39:0e:f0:99:b7:d5:54:b5:ea:47:f3:26:74:83:df:c2:6c:97: 8d:2e:72:d6:f6:90:a1:98:d3:02:7e:be:07:4f:ef:61:30:d4: 3d:25:76:d6:54:33:f7:a1:65:6f:a0:67:e1:f1:a7:0c:76:fc: d0:9c:c6:78:97:02:a9:ce:c6:c9:e2:db:82:c8:c7:37:9c:47: d3:94:c2:6f:99:3b:bc:71:30:b0:1a:93:f1:25:54:22:fc:da: 73:30:5c:bd:13:0f:c1:02:ee:cd:9d:eb:85:da:5d:71:d1:be: d5:74:53:5c:1d:6f:c7:61:18:76:9f:b5:1f:a1:fb:3d:3c:9b: df:0c:35:2b:20:59:a2:c0:18:82:88:ed:50:62:a3:56:e0:bb: 71:91:af:b5:f3:cb:ba:25:05:ae:74:dc:d6:27:e8:1d:67:94: 74:be:ca:67:15:57:21:1e:d9:27:6d:e9:87:5e:e9:14:7d:bf: 25:07:03:00:d9:e6:3e:9b:96:87:27:b8:ad:7f:a2:1f:cf:49: 5c:a7:55:d8:82:cf:53:6e:48:16:c0:28:1b:87:ab:b6:80:ef: 63:2d:95:62:1a:64:6a:2a:51:10:e4:4b:2c:0a:72:7c:2b:f3: 9b:47:22:74:4d:42:87:14:97:20:4b:d6:61:3f:43:18:71:c4: 98:53:8a:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuYV1Uuc6ud6feCt9a3Y+ryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjYwMTA3MTIwMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTFhNzIyYmI0Zjc0Zjk1MmI3NzQ4MTBhNzgxMjQ0YjM4MjYxMDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOggaPcawDPnJYQS2AL3FRuVfSWV NABMf5CNWLxBKlaCpqF2NS+QEZsxYHTNE/7CN3H1uH2ssllz3OU/lz/sPLpZKIK3 0PNMDR5LWB+Q2Sa+YnXYHN6DMxAetfCc6ig49qCZx2Wwp/eWTEZnTdGz/vFAtkdp C3FE7XEfJq2Vdq8YLIFSZeVgZE0Ayl2bCYKOW1dqo9GdphGbSRQhkuMU+5AFMWaa 5HKwqnZi4OZBsrubLIWfIxOjm2O6r9ZWQaWQoR9PkKFDgpQ867ScZvRYik6NZoc0 ogMfchcMFd7ME3lARTJNIOVclzlmAw+t0Zw7hqqMWae92SPYGrdLxD8KwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4aciu090+VK3dIEKeBJEs4JhAdMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvVGhweUs3VDNUNVVyZDBnUXA0RWtTemdtRUIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWiGMA0G CSqGSIb3DQEBCwUAA4IBAQA5DvCZt9VUtepH8yZ0g9/CbJeNLnLW9pChmNMCfr4H T+9hMNQ9JXbWVDP3oWVvoGfh8acMdvzQnMZ4lwKpzsbJ4tuCyMc3nEfTlMJvmTu8 cTCwGpPxJVQi/NpzMFy9Ew/BAu7NneuF2l1x0b7VdFNcHW/HYRh2n7Ufofs9PJvf DDUrIFmiwBiCiO1QYqNW4Ltxka+188u6JQWudNzWJ+gdZ5R0vspnFVchHtknbemH XukUfb8lBwMA2eY+m5aHJ7itf6Ifz0lcp1XYgs9TbkgWwCgbh6u2gO9jLZViGmRq KlEQ5EssCnJ8K/ObRyJ0TUKHFJcgS9ZhP0MYccSYU4pU -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:16 2026 by rpki-client