This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/ths8OXX3QSMsj9e29cfZdF76uD8.roa
File: ths8OXX3QSMsj9e29cfZdF76uD8.roa (raw, json)
Hash identifier: aGHUmAejD8Fr+WhhhtcNvvY0gSQE1mI1EhqqEc3+N9Q=
Subject key identifier: B6:1B:3C:39:75:F7:41:23:2C:8F:D7:B6:F5:C7:D9:74:5E:FA:B8:3F
Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852
Certificate serial: 019B7D5CC5F3E38F4467F8FF15FEE11E2818
Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/ths8OXX3QSMsj9e29cfZdF76uD8.roa
Signing time: Fri 02 Jan 2026 06:19:50 +0000
ROA not before: Fri 02 Jan 2026 06:19:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39019
IP address blocks: 185.213.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:c5:f3:e3:8f:44:67:f8:ff:15:fe:e1:1e:28:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852
Validity
Not Before: Jan 2 06:19:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b61b3c3975f741232c8fd7b6f5c7d9745efab83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:fd:c8:dd:4b:6c:62:3d:6f:c3:ba:4f:d3:
ed:8e:f7:02:43:9a:fd:76:03:a4:9d:d6:dd:71:54:
bf:d2:80:21:aa:f9:44:ee:45:f1:ff:f1:78:59:c9:
ab:3b:a2:de:25:b9:b5:89:a5:1c:4f:29:9a:c5:1c:
21:64:94:54:84:e1:32:70:3b:ef:0b:dd:b5:b7:98:
56:47:92:54:6a:5b:86:e0:63:9b:e3:be:d0:50:da:
f6:a6:5f:7d:1c:fc:97:5c:b5:23:ce:5a:16:61:5f:
e1:ae:c0:2a:20:fe:14:55:f2:aa:ea:6b:16:85:78:
78:da:3e:6f:81:ad:02:0d:6e:e2:20:04:9f:d7:17:
c5:a9:3c:67:7f:45:ed:87:61:c7:21:c6:1b:9a:b5:
1c:f5:79:7f:d5:17:2c:03:c1:68:db:a4:25:6b:19:
fe:77:62:9c:70:b1:db:ab:5f:d7:20:1b:0c:ea:c6:
95:8a:d3:3f:5b:d2:6e:2b:f7:ff:15:86:17:53:45:
20:34:49:fa:50:6f:ec:45:43:82:7f:a2:a4:18:8b:
70:97:ca:47:47:79:d4:6a:48:1a:2f:fa:43:70:71:
89:65:b3:77:9a:f6:42:f4:04:e1:e2:e0:f6:07:15:
ab:e2:7f:a8:f8:de:56:ad:b3:15:a5:4b:5e:bb:8a:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1B:3C:39:75:F7:41:23:2C:8F:D7:B6:F5:C7:D9:74:5E:FA:B8:3F
X509v3 Authority Key Identifier:
keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/ths8OXX3QSMsj9e29cfZdF76uD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.46.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f6:63:62:ae:ec:5e:38:2e:5e:ba:8b:01:21:3b:f4:bd:ae:
58:e9:21:42:be:e9:c0:2b:08:9f:cf:00:f8:b3:90:d5:18:9e:
b5:f5:5d:71:31:c2:96:e8:6e:1e:b0:16:0b:a8:92:61:2c:d5:
66:f1:26:0b:85:26:2b:92:d6:6b:92:6f:55:8f:4d:7a:95:67:
bc:f6:fe:25:b4:32:46:d8:67:f8:b6:7e:e2:67:8e:80:6c:ac:
f4:86:b7:1c:db:02:4a:1a:b5:65:6e:bc:d2:a3:ed:40:a4:9f:
2e:37:fa:33:af:05:f9:68:24:8b:5c:dd:17:05:3c:1b:4f:23:
e4:aa:0c:a9:87:d9:94:a3:90:ee:a2:fd:be:97:f4:e9:b0:4f:
b7:69:0c:66:51:1d:ea:e2:32:7c:b3:2b:9a:18:97:cc:1e:a0:
b0:01:66:2b:e3:85:95:66:87:51:76:63:0d:9d:07:e5:34:7b:
43:bc:36:64:01:7a:cc:6e:cf:cb:46:dc:4d:81:f7:7d:11:5b:
b0:f5:17:c7:f4:ac:e1:2a:ad:1a:38:f4:7e:71:4a:4f:66:59:
41:5b:c1:16:88:d5:ad:22:ad:31:a0:34:1a:50:26:55:7b:60:
aa:fc:23:45:68:6a:60:0b:b3:da:a0:00:a0:6f:25:94:5b:fe:
04:3b:47:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:23:37 2026 by rpki-client