This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/tjiTHEP-kK7YvaF4jOv_5AENFR8.roa File: tjiTHEP-kK7YvaF4jOv_5AENFR8.roa (raw, json) Hash identifier: +t1GaH9nJ8B0HL8q2iIaAV18s/F2KC1qzK08FxWPKP0= Subject key identifier: B6:38:93:1C:43:FE:90:AE:D8:BD:A1:78:8C:EB:FF:E4:01:0D:15:1F Certificate issuer: /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae Certificate serial: 019B7C133557F3CEFBCECDDD641161DBBCD0 Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/tjiTHEP-kK7YvaF4jOv_5AENFR8.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212344 IP address blocks: 5.183.162.0/24 maxlen: 24 45.85.186.0/23 maxlen: 23 45.85.186.0/24 maxlen: 24 45.85.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:35:57:f3:ce:fb:ce:cd:dd:64:11:61:db:bc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b638931c43fe90aed8bda1788cebffe4010d151f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:94:e3:ab:40:a7:17:d9:4e:82:9d:c7:c8: 46:4b:e6:b9:68:fb:f4:42:73:1a:32:f9:ba:e0:7c: 64:89:2e:09:39:ac:49:40:aa:36:4d:9f:7e:13:8c: d0:c9:62:38:64:a1:7c:57:c6:78:ae:56:45:8a:5a: e3:17:d7:ef:ae:4e:b5:2b:15:e5:17:9e:e4:58:11: 4c:27:7d:13:0f:2b:7d:d4:35:bf:37:89:4c:18:ca: c5:7a:b7:9f:af:85:65:ee:f6:5f:99:ad:e3:4c:62: 75:96:d5:02:6b:79:5e:05:5c:15:ab:8e:c1:fb:dd: 09:ea:e9:fc:94:27:60:16:c6:52:94:66:e6:d2:27: 00:0c:49:ed:be:07:51:fe:c0:39:6c:4c:57:a4:b1: e7:4d:47:d4:50:fb:77:40:48:08:84:4c:7e:a2:11: b7:bc:57:f9:7b:c3:02:2c:0e:fa:ac:1f:2e:13:44: 09:42:fc:af:49:2e:a9:8a:d5:c4:55:c7:17:4f:28: ba:1e:da:7d:a7:01:6f:c0:39:b2:f2:8f:59:8f:5a: d3:e4:9b:e9:15:00:57:94:f2:ca:4a:ba:9e:7c:62: d9:0c:24:0d:0f:0a:44:31:c6:f9:b0:26:83:0a:73: 9a:72:ae:70:9f:75:9e:d3:37:d5:d3:c5:46:b6:24: 17:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:38:93:1C:43:FE:90:AE:D8:BD:A1:78:8C:EB:FF:E4:01:0D:15:1F X509v3 Authority Key Identifier: keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/tjiTHEP-kK7YvaF4jOv_5AENFR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.162.0/24 45.85.186.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:3d:a1:98:94:20:4d:0b:4a:03:57:2d:c3:86:07:06:9c:96: 91:44:dd:4d:65:a8:2f:5d:ea:c0:04:16:e7:3b:fd:c7:76:7f: 66:c1:31:3d:dc:0c:fc:2b:19:a9:5e:4c:dd:f9:c7:65:96:b3: c0:40:97:0b:fc:1d:4f:94:48:9f:e2:b6:84:7f:88:47:93:3b: 7e:e1:29:3c:ac:09:3a:d0:63:6e:cc:9d:9f:87:39:9c:52:f3: 41:18:61:25:9f:a7:b9:63:d7:c4:1c:ce:2f:1a:d8:55:6d:9b: e6:43:c3:07:eb:77:ad:cc:95:72:62:b7:3f:99:f8:b8:ca:42: 69:0e:ce:47:30:a5:8d:15:43:8f:33:cc:6e:a2:ca:aa:7b:20: c4:13:00:fd:11:4c:28:e7:e2:60:03:e2:07:f9:66:16:c2:12: 6a:56:bf:02:7c:98:77:b8:d3:15:e3:1d:d7:02:64:ae:cb:a1: 8a:c9:74:48:5f:f1:51:50:32:92:70:3b:a8:84:50:07:b5:c1: 72:82:6a:d1:d4:f4:1d:41:db:77:a5:e8:d1:3e:4e:9c:86:18: da:8e:4e:b0:64:9c:6d:e4:ff:09:e3:57:f4:3e:2b:60:2d:d0: a1:8e:36:97:0d:47:43:7a:fd:95:e7:89:81:dd:25:ed:39:48: ea:e7:a7:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EzVX8877zs3dZBFh27zQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmE1YTdlZTlkMjFhN2RkNDViYmJmZmY0MzFiMzY0ZGVh MGI1YWUwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjM4OTMxYzQzZmU5MGFlZDhiZGExNzg4Y2ViZmZlNDAxMGQxNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvGU46tApxfZToKdx8hGS+a5aPv0 QnMaMvm64HxkiS4JOaxJQKo2TZ9+E4zQyWI4ZKF8V8Z4rlZFilrjF9fvrk61KxXl F57kWBFMJ30TDyt91DW/N4lMGMrFerefr4Vl7vZfma3jTGJ1ltUCa3leBVwVq47B +90J6un8lCdgFsZSlGbm0icADEntvgdR/sA5bExXpLHnTUfUUPt3QEgIhEx+ohG3 vFf5e8MCLA76rB8uE0QJQvyvSS6pitXEVccXTyi6Htp9pwFvwDmy8o9Zj1rT5Jvp FQBXlPLKSrqefGLZDCQNDwpEMcb5sCaDCnOacq5wn3We0zfV08VGtiQXswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLY4kxxD/pCu2L2heIzr/+QBDRUfMB8GA1UdIwQY MBaAFBtqWn7p0hp91Fu7//Qxs2TeoLWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQt NWJlMTIwMjM2N2U5LzEvdGppVEhFUC1rSzdZdmFGNGpPdl81QUVORlI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQtNWJlMTIwMjM2N2U5 LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbeiAwQB LVW6MA0GCSqGSIb3DQEBCwUAA4IBAQCePaGYlCBNC0oDVy3DhgcGnJaRRN1NZagv XerABBbnO/3Hdn9mwTE93Az8KxmpXkzd+cdllrPAQJcL/B1PlEif4raEf4hHkzt+ 4Sk8rAk60GNuzJ2fhzmcUvNBGGEln6e5Y9fEHM4vGthVbZvmQ8MH63etzJVyYrc/ mfi4ykJpDs5HMKWNFUOPM8xuosqqeyDEEwD9EUwo5+JgA+IH+WYWwhJqVr8CfJh3 uNMV4x3XAmSuy6GKyXRIX/FRUDKScDuohFAHtcFygmrR1PQdQdt3pejRPk6chhja jk6wZJxt5P8J41f0PitgLdChjjaXDUdDev2V54mB3SXtOUjq56de -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:23 2026 by rpki-client