This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/th2fpvyArbk8pGCEtU7m50L1Syw.roa File: th2fpvyArbk8pGCEtU7m50L1Syw.roa (raw, json) Hash identifier: CQ7E2VcUSuV0QPu4FXzWAC6YJB5iJJendgq7t7Wksbo= Subject key identifier: B6:1D:9F:A6:FC:80:AD:B9:3C:A4:60:84:B5:4E:E6:E7:42:F5:4B:2C Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB87B15DEE51358E4A9A69CA226C16 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/th2fpvyArbk8pGCEtU7m50L1Syw.roa Signing time: Fri 02 Jan 2026 08:20:49 +0000 ROA not before: Fri 02 Jan 2026 08:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215623 IP address blocks: 5.42.213.0/24 maxlen: 24 185.248.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:87:b1:5d:ee:51:35:8e:4a:9a:69:ca:22:6c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b61d9fa6fc80adb93ca46084b54ee6e742f54b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:25:35:9e:36:39:c4:a2:55:70:c8:93:5e:82: 20:39:ba:7a:57:0d:7a:61:a0:92:0b:9e:60:e4:ea: fa:4e:1e:62:57:7d:20:b4:7f:cb:43:33:c2:a9:88: 37:03:72:89:f5:f5:18:2e:41:1f:10:e6:de:24:cb: 3b:1a:22:6d:76:c1:04:a0:e7:6a:3c:62:96:56:2c: fd:83:0e:04:02:fe:ba:18:e5:65:f2:d9:45:e8:dd: 6b:75:61:86:e3:6f:f4:2e:77:56:8c:02:0d:3b:57: 5b:8d:1e:b2:fd:42:f8:76:55:fc:8f:99:66:84:3f: cd:f8:47:d6:c6:a2:69:73:c7:4d:44:70:e5:a1:7e: 1f:60:76:88:60:3f:62:1e:b3:cc:aa:c9:1c:6b:7c: ba:88:7f:65:e0:55:79:49:0d:8c:af:24:a5:38:57: 86:c9:be:73:d6:8b:5a:b2:52:42:e9:7a:bf:4c:1a: b1:c4:9c:0f:06:ee:a7:cf:d2:3b:6c:fe:e3:35:00: 33:4b:42:27:e3:4e:9c:78:01:4b:01:1b:c1:6c:15: c0:12:a6:0c:d2:bf:e3:2e:f6:16:e2:25:0d:ad:6e: 2c:9e:3e:3e:fd:fd:82:e0:97:92:7e:13:6b:73:60: 4f:44:49:86:54:09:f7:61:eb:51:92:8f:be:c9:01: 71:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1D:9F:A6:FC:80:AD:B9:3C:A4:60:84:B5:4E:E6:E7:42:F5:4B:2C X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/th2fpvyArbk8pGCEtU7m50L1Syw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.213.0/24 185.248.27.0/24 Signature Algorithm: sha256WithRSAEncryption 25:29:e4:e7:f1:fd:77:f2:56:bd:2c:dc:5c:86:84:34:0f:73: e9:58:41:bb:1d:1c:2e:1b:c6:37:14:2e:2b:f3:90:93:61:39: 45:3a:b6:ca:ae:db:70:46:5a:84:84:34:d7:c5:1a:98:11:1a: 5c:ce:7c:34:43:01:be:1f:28:f5:de:36:58:0d:f7:89:63:07: 76:ce:64:70:a9:6b:40:b4:58:08:c9:78:12:31:c3:0a:43:70: 0e:6b:bc:31:26:d5:cc:85:49:4a:49:79:3e:69:5e:cd:72:38: c8:ec:ac:83:e2:41:cb:7e:45:e9:8e:cd:10:7e:d0:42:db:b4: 8a:bd:55:53:53:72:41:97:ec:26:f9:d0:e1:00:b1:2e:2e:6d: b1:7f:3d:6c:26:57:d1:c2:7f:46:89:2d:86:72:e2:03:b3:c6: 9e:97:ab:32:e4:88:93:1c:d4:da:cb:4d:f9:5f:96:33:bf:6d: 86:c1:d2:36:ae:a4:ec:30:bd:c0:fb:97:f2:61:0b:7e:23:e9: 21:c6:3c:cb:a5:3d:fe:0d:8e:b3:d5:5d:b0:08:e5:17:67:5b: ec:20:81:28:77:2d:f5:8d:1d:d4:8e:a4:86:46:67:6a:ee:f4: 29:0a:70:20:6c:95:a0:b7:3c:1f:32:d1:d0:28:fe:17:3b:1e: 24:e1:2e:94 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y4exXe5RNY5KmmnKImwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjFkOWZhNmZjODBhZGI5M2NhNDYwODRiNTRlZTZlNzQyZjU0YjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SU1njY5xKJVcMiTXoIgObp6Vw16 YaCSC55g5Or6Th5iV30gtH/LQzPCqYg3A3KJ9fUYLkEfEObeJMs7GiJtdsEEoOdq PGKWViz9gw4EAv66GOVl8tlF6N1rdWGG42/0LndWjAINO1dbjR6y/UL4dlX8j5lm hD/N+EfWxqJpc8dNRHDloX4fYHaIYD9iHrPMqskca3y6iH9l4FV5SQ2MrySlOFeG yb5z1otaslJC6Xq/TBqxxJwPBu6nz9I7bP7jNQAzS0In406ceAFLARvBbBXAEqYM 0r/jLvYW4iUNrW4snj4+/f2C4JeSfhNrc2BPREmGVAn3YetRko++yQFxmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLYdn6b8gK25PKRghLVO5udC9UssMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvdGgyZnB2eUFyYms4cEdDRXRVN201MEwxU3l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABSrVAwQA ufgbMA0GCSqGSIb3DQEBCwUAA4IBAQAlKeTn8f138la9LNxchoQ0D3PpWEG7HRwu G8Y3FC4r85CTYTlFOrbKrttwRlqEhDTXxRqYERpcznw0QwG+Hyj13jZYDfeJYwd2 zmRwqWtAtFgIyXgSMcMKQ3AOa7wxJtXMhUlKSXk+aV7NcjjI7KyD4kHLfkXpjs0Q ftBC27SKvVVTU3JBl+wm+dDhALEuLm2xfz1sJlfRwn9GiS2GcuIDs8ael6sy5IiT HNTay035X5Yzv22GwdI2rqTsML3A+5fyYQt+I+khxjzLpT3+DY6z1V2wCOUXZ1vs IIEody31jR3UjqSGRmdq7vQpCnAgbJWgtzwfMtHQKP4XOx4k4S6U -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:35 2026 by rpki-client