This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/THUvGSRSDdO8NyiSUs_kzMBgKSg.roa File: THUvGSRSDdO8NyiSUs_kzMBgKSg.roa (raw, json) Hash identifier: f2duUHB5LK8Of3Fa8X+WHnO6K86lhJ6HdId3wsUMfg8= Subject key identifier: 4C:75:2F:19:24:52:0D:D3:BC:37:28:92:52:CF:E4:CC:C0:60:29:28 Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98 Certificate serial: 019B7D5AAFCBBD61D42598AE49865FE81633 Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/THUvGSRSDdO8NyiSUs_kzMBgKSg.roa Signing time: Fri 02 Jan 2026 06:17:33 +0000 ROA not before: Fri 02 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31564 IP address blocks: 193.17.73.0/24 maxlen: 24 195.178.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:af:cb:bd:61:d4:25:98:ae:49:86:5f:e8:16:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98 Validity Not Before: Jan 2 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c752f1924520dd3bc37289252cfe4ccc0602928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:32:7e:23:64:1f:c6:d6:38:48:15:4a:70: 5e:2c:77:eb:8b:8d:31:68:c1:ae:9b:41:1d:af:0a: b6:04:55:1f:50:37:0b:a9:9c:f8:3e:55:97:c5:26: af:b9:64:5f:9c:b1:e0:ad:97:26:ce:b4:13:ed:74: 89:2d:80:f6:59:e6:71:4b:48:94:a5:9a:e5:3f:a5: 9e:fe:d9:11:d4:41:5e:f5:ba:e8:39:6f:a7:54:f3: 98:47:7a:d8:a8:8c:5d:52:b8:39:15:52:ac:4e:25: e4:91:a3:a2:f0:42:7e:9b:f5:34:61:ee:1b:be:bd: 35:60:41:b0:43:8f:f8:1c:9c:d3:d3:5a:4e:2b:90: bb:f8:96:0e:84:3e:06:dc:be:08:3e:cb:3b:b5:20: df:46:31:cc:5f:97:e8:91:57:b6:3d:94:5a:6d:b2: bd:61:ca:3f:7c:59:c4:42:c8:08:56:70:b3:d0:a8: bf:b1:12:c9:b6:9d:ba:d0:b6:38:43:3d:dd:9e:29: 36:cb:ad:25:a0:7b:b7:1f:27:31:38:15:b0:25:10: f7:b9:a7:5a:cc:03:f7:ea:c9:d7:83:5a:cf:be:c3: 11:17:f7:19:9e:77:a3:f3:2e:1e:8e:67:1c:23:9d: 37:5a:69:54:77:31:5d:75:a5:8f:27:dd:66:2b:d7: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:75:2F:19:24:52:0D:D3:BC:37:28:92:52:CF:E4:CC:C0:60:29:28 X509v3 Authority Key Identifier: keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/THUvGSRSDdO8NyiSUs_kzMBgKSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.73.0/24 195.178.112.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:7e:ea:5b:86:84:d1:01:a7:fa:8f:10:50:5a:a5:f7:2d:b9: 72:dd:9c:97:e2:d6:d6:4e:39:19:2d:db:ce:5d:03:5f:66:ae: c7:8e:eb:d4:33:d1:31:33:97:68:76:ef:b5:b3:e5:85:e3:49: 11:e4:29:20:e5:1a:10:d8:3a:be:13:be:37:50:4f:44:25:ee: 9f:6b:dc:fa:1a:70:94:24:b0:5e:c0:20:81:4b:95:de:23:50: b0:70:bb:c8:57:d3:69:8c:90:33:af:f8:80:bb:03:19:6e:81: 96:d6:bf:8f:15:52:e9:91:fc:9d:46:ea:e0:0b:fe:99:7e:ff: dd:a8:bf:0b:9f:b3:ff:c0:da:d2:fb:7f:0b:36:3e:14:c7:50: 52:17:79:2f:03:62:8d:1d:95:44:3a:cc:61:75:18:53:81:de: b2:70:f4:ee:ef:ae:5a:ba:6f:fc:13:27:d6:76:d1:d0:71:5d: 94:a9:16:6d:5f:68:fe:40:80:69:0c:23:56:10:72:2d:79:41: 32:c1:37:ef:ed:28:22:26:ed:54:81:03:17:ee:e2:cb:33:af: 94:ca:e8:27:33:d0:77:ed:a2:7d:a0:b2:2b:db:5a:26:a5:40: 1a:64:08:a0:3c:df:35:c8:8d:66:04:c5:03:3e:5b:9f:03:fd: f2:17:ae:ba -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9Wq/LvWHUJZiuSYZf6BYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNzE1NzFjOGUxMGI0MTlkN2EzYmYzNmUxMDg1ZmZkNWNk NzhhOTgwHhcNMjYwMTAyMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzc1MmYxOTI0NTIwZGQzYmMzNzI4OTI1MmNmZTRjY2MwNjAyOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwEyfiNkH8bWOEgVSnBeLHfri40x aMGum0Edrwq2BFUfUDcLqZz4PlWXxSavuWRfnLHgrZcmzrQT7XSJLYD2WeZxS0iU pZrlP6We/tkR1EFe9broOW+nVPOYR3rYqIxdUrg5FVKsTiXkkaOi8EJ+m/U0Ye4b vr01YEGwQ4/4HJzT01pOK5C7+JYOhD4G3L4IPss7tSDfRjHMX5fokVe2PZRabbK9 Yco/fFnEQsgIVnCz0Ki/sRLJtp260LY4Qz3dnik2y60loHu3HycxOBWwJRD3uada zAP36snXg1rPvsMRF/cZnnej8y4ejmccI503WmlUdzFddaWPJ91mK9dDtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEx1LxkkUg3TvDcoklLP5MzAYCkoMB8GA1UdIwQY MBaAFKBxVxyOELQZ16O/NuEIX/1c14qYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2Yt MGMxZjY5YjdhZWU3LzEvVEhVdkdTUlNEZE84TnlpU1VzX2t6TUJnS1NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2YtMGMxZjY5YjdhZWU3 LzEvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRFJAwQB w7JwMA0GCSqGSIb3DQEBCwUAA4IBAQA9fupbhoTRAaf6jxBQWqX3Lbly3ZyX4tbW TjkZLdvOXQNfZq7HjuvUM9ExM5dodu+1s+WF40kR5Ckg5RoQ2Dq+E743UE9EJe6f a9z6GnCUJLBewCCBS5XeI1CwcLvIV9NpjJAzr/iAuwMZboGW1r+PFVLpkfydRurg C/6Zfv/dqL8Ln7P/wNrS+38LNj4Ux1BSF3kvA2KNHZVEOsxhdRhTgd6ycPTu765a um/8EyfWdtHQcV2UqRZtX2j+QIBpDCNWEHIteUEywTfv7SgiJu1UgQMX7uLLM6+U yugnM9B37aJ9oLIr21ompUAaZAigPN81yI1mBMUDPlufA/3yF666 -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:23 2026 by rpki-client