This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/THpGYC3KAh4Nh2aSf_ElMpZJEww.roa File: THpGYC3KAh4Nh2aSf_ElMpZJEww.roa (raw, json) Hash identifier: 6eDhHzhaISARxdiDWICa8Q3A3/Q7+g+k7UoN1vc+WFs= Subject key identifier: 4C:7A:46:60:2D:CA:02:1E:0D:87:66:92:7F:F1:25:32:96:49:13:0C Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f Certificate serial: 019A9BD76B6BC6DD60096A12C16564F14C71 Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/THpGYC3KAh4Nh2aSf_ElMpZJEww.roa Signing time: Wed 19 Nov 2025 11:19:37 +0000 ROA not before: Wed 19 Nov 2025 11:19:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 85.204.106.0/24 maxlen: 24 188.241.220.0/24 maxlen: 24 194.127.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:d7:6b:6b:c6:dd:60:09:6a:12:c1:65:64:f1:4c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f Validity Not Before: Nov 19 11:19:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c7a46602dca021e0d8766927ff125329649130c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:17:5f:c3:40:aa:12:03:8d:8c:82:ba:0b: 67:30:e4:96:55:7a:9f:e2:90:fb:1e:e8:00:3a:b1: e3:ab:35:af:5c:b1:a7:53:72:44:23:fa:24:75:08: 52:6e:88:c6:9b:3e:c4:26:f8:46:fc:73:dd:2c:98: 30:e0:14:fd:a6:af:fd:44:fb:a4:eb:fb:63:3c:61: 63:a8:dc:d2:07:2d:e6:bb:6b:e1:34:3f:19:8e:f2: bc:f3:c3:e9:a0:21:25:11:7b:0b:0c:48:98:c4:09: 34:52:09:f1:62:c1:dc:c1:ae:62:97:99:85:6f:74: ec:10:48:b1:0b:33:74:d3:d0:c9:14:c5:0b:17:1d: 37:e3:f2:f7:de:a1:76:94:3f:37:b9:17:c7:59:c4: f4:5f:de:a7:b2:cf:df:fd:6a:c6:e2:a3:db:f9:c5: af:bd:bb:92:4c:ce:d2:0d:15:e2:31:48:24:ee:4f: b4:45:f5:27:e9:00:49:cd:05:c8:f5:bb:31:f9:27: 6f:7f:f7:df:b9:67:da:a3:a9:b7:46:8c:7a:7a:a4: fc:a9:b3:c3:6c:55:79:ec:0d:be:cc:e9:d1:fe:e5: cf:39:53:79:14:ac:29:f4:b4:88:c9:3d:2e:d6:87: e8:5b:2f:c8:5a:2a:ca:16:73:e6:df:c8:23:5b:9a: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7A:46:60:2D:CA:02:1E:0D:87:66:92:7F:F1:25:32:96:49:13:0C X509v3 Authority Key Identifier: keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/THpGYC3KAh4Nh2aSf_ElMpZJEww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.106.0/24 188.241.220.0/24 194.127.197.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:5f:e3:1d:6b:03:74:7a:df:7e:52:bf:20:aa:83:ca:a2:49: 2d:f2:fe:b0:9a:8c:61:e4:86:75:a8:53:6a:6f:21:e8:d1:1c: 2e:c2:42:51:19:cc:a2:93:0b:5a:e7:b0:75:89:78:ee:8d:6e: 1b:46:da:64:7b:dc:6c:b4:11:65:1b:68:8b:99:f3:dc:4a:32: 69:a1:33:99:22:82:01:86:44:0c:fb:8a:8f:5f:d2:2a:6d:21: ec:ae:f2:ba:f5:c2:6d:d6:f8:8c:df:83:cb:59:f9:93:00:a3: e6:cd:85:1e:a6:34:a0:0a:f0:82:67:50:88:e8:f2:7a:e3:33: bc:04:2d:18:5e:42:c8:c5:1b:91:19:ed:84:0c:5d:a5:88:5f: 51:b1:6d:e9:b6:17:33:a9:70:61:ad:bc:59:a8:95:f2:c6:f1: ae:b2:1b:f1:28:ee:9f:25:47:f3:c8:19:df:82:4f:b0:bf:67: 0c:66:c6:94:62:26:a3:d7:66:9b:43:d1:30:ed:2d:18:12:0e: 45:c8:18:c9:2e:1d:a8:85:c5:2a:14:a0:2c:e9:2f:a4:eb:45: 11:1c:91:40:f2:1f:e6:73:5b:de:e6:3d:d3:03:1f:1e:2a:ac: dc:13:a1:4f:b2:eb:e5:b2:32:39:4e:92:ae:9e:0e:0d:12:32: 40:ea:ea:ec -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqb12trxt1gCWoSwWVk8UxxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyN2U2NmU0MDNkMzFjNzk1ODMzNTI5ODE2OGRlNjBhMjE1 YzBjMGYwHhcNMjUxMTE5MTExOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzdhNDY2MDJkY2EwMjFlMGQ4NzY2OTI3ZmYxMjUzMjk2NDkxMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoMXX8NAqhIDjYyCugtnMOSWVXqf 4pD7HugAOrHjqzWvXLGnU3JEI/okdQhSbojGmz7EJvhG/HPdLJgw4BT9pq/9RPuk 6/tjPGFjqNzSBy3mu2vhND8ZjvK888PpoCElEXsLDEiYxAk0UgnxYsHcwa5il5mF b3TsEEixCzN009DJFMULFx034/L33qF2lD83uRfHWcT0X96nss/f/WrG4qPb+cWv vbuSTM7SDRXiMUgk7k+0RfUn6QBJzQXI9bsx+Sdvf/ffuWfao6m3Rox6eqT8qbPD bFV57A2+zOnR/uXPOVN5FKwp9LSIyT0u1ofoWy/IWirKFnPm38gjW5pVuQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEx6RmAtygIeDYdmkn/xJTKWSRMMMB8GA1UdIwQY MBaAFOJ+ZuQD0xx5WDNSmBaN5gohXAwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMt NmU2ZTc2ZjM3OTQ2LzEvVEhwR1lDM0tBaDROaDJhU2ZfRWxNcFpKRXd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMtNmU2ZTc2ZjM3OTQ2 LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVcxqAwQA vPHcAwQAwn/FMA0GCSqGSIb3DQEBCwUAA4IBAQBaX+MdawN0et9+Ur8gqoPKokkt 8v6wmoxh5IZ1qFNqbyHo0RwuwkJRGcyikwta57B1iXjujW4bRtpke9xstBFlG2iL mfPcSjJpoTOZIoIBhkQM+4qPX9IqbSHsrvK69cJt1viM34PLWfmTAKPmzYUepjSg CvCCZ1CI6PJ64zO8BC0YXkLIxRuRGe2EDF2liF9RsW3pthczqXBhrbxZqJXyxvGu shvxKO6fJUfzyBnfgk+wv2cMZsaUYiaj12abQ9Ew7S0YEg5FyBjJLh2ohcUqFKAs 6S+k60URHJFA8h/mc1ve5j3TAx8eKqzcE6FPsuvlsjI5TpKung4NEjJA6urs -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:41 2025 by rpki-client