This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/ThEbdNyMjZlPcirKDdAqyJZ_IQw.roa File: ThEbdNyMjZlPcirKDdAqyJZ_IQw.roa (raw, json) Hash identifier: CGthBA4HArt69dssvy/GYBuP0JxNG1Tkx2gronzpD3M= Subject key identifier: 4E:11:1B:74:DC:8C:8D:99:4F:72:2A:CA:0D:D0:2A:C8:96:7F:21:0C Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4 Certificate serial: 019B7CEDB4582C38368C5748C6BF111DB239 Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/ThEbdNyMjZlPcirKDdAqyJZ_IQw.roa Signing time: Fri 02 Jan 2026 04:18:31 +0000 ROA not before: Fri 02 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 193.108.116.0/24 maxlen: 24 193.108.117.0/24 maxlen: 24 193.108.118.0/24 maxlen: 24 193.108.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b4:58:2c:38:36:8c:57:48:c6:bf:11:1d:b2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4 Validity Not Before: Jan 2 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e111b74dc8c8d994f722aca0dd02ac8967f210c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:9d:fa:09:9f:ac:1c:85:fd:62:1f:47:1a: 92:7c:e5:f8:7e:0d:0b:d3:d8:d5:66:21:f7:e9:db: c3:5a:bb:43:45:39:18:b0:55:8b:84:a0:30:ee:8b: 34:4c:61:e9:c5:6f:0e:35:83:8c:d3:c3:5a:a3:fc: c3:1d:e9:80:08:10:4f:93:a0:9c:af:37:21:86:39: f2:43:eb:85:11:e1:d7:49:e3:0f:a2:c6:1b:b4:2e: f7:5c:78:61:36:01:63:1f:bf:90:e6:1e:1f:db:05: a8:cb:16:2d:a3:84:1b:b5:03:40:31:b2:56:49:23: 96:e0:c5:99:94:5f:97:35:34:da:29:dd:20:2f:aa: 5b:7b:af:e9:17:b5:6c:d0:dc:91:77:57:40:be:59: e3:c9:c0:f4:5d:e4:bb:91:d4:5c:5a:c8:36:44:2f: 69:a0:78:3c:3c:41:da:40:93:f0:a1:7c:4e:68:a3: b6:f1:13:6d:77:5b:4b:14:b3:53:04:e1:26:ca:e4: 72:43:af:30:37:e9:7f:a7:b8:3c:b7:61:d4:f2:e4: 21:74:62:c9:2f:ee:c3:a3:51:3a:45:09:56:5d:64: 16:91:60:7d:70:24:f2:dd:2b:c4:a9:3e:68:1c:d1: 17:89:cf:9e:5e:3c:6a:14:17:7f:f5:ae:33:56:eb: 82:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:11:1B:74:DC:8C:8D:99:4F:72:2A:CA:0D:D0:2A:C8:96:7F:21:0C X509v3 Authority Key Identifier: keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/ThEbdNyMjZlPcirKDdAqyJZ_IQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.116.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:f3:59:b7:81:04:d3:c4:c7:a7:11:aa:98:9f:25:50:c1:96: a1:f1:62:21:6a:60:fe:45:57:1a:c7:47:55:77:be:7f:38:af: 5d:ba:8a:74:99:bc:a1:6b:64:36:e3:37:5c:41:5e:ac:51:6a: 6b:08:b5:3c:d3:ef:d0:7a:b7:59:f8:65:c4:b0:54:e4:b6:90: 42:e2:1e:3a:47:7a:ae:97:83:6e:8c:38:52:80:ec:89:6d:0e: 0e:79:69:e8:52:b3:f7:f4:e8:4b:83:4f:bd:d8:aa:0f:8a:ec: 6c:87:51:29:27:85:0b:62:c6:f3:6d:05:42:30:9a:66:d3:cf: 04:9c:9f:e8:2a:d1:d1:5c:79:29:e3:7e:6c:dc:83:55:91:f0: 80:25:0f:c8:e6:0f:16:17:f4:67:e2:2f:8b:8c:06:cd:15:70: ae:d3:28:5f:a4:8a:8b:5f:3d:c0:a9:06:40:7d:92:ec:5b:43: e7:ec:03:bc:5d:d2:29:01:a6:af:44:a6:d8:77:df:b8:8d:cd: 72:68:e3:28:2b:9d:b8:6b:5f:4c:43:9e:60:0e:c7:56:2a:5b: e9:3e:56:38:10:1a:82:6f:b8:00:b0:c9:9f:44:f1:16:3a:67: 4d:2c:e2:06:08:35:57:3a:1f:ec:8f:8e:b8:a6:e5:5e:9e:ac: 1d:a3:8c:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87bRYLDg2jFdIxr8RHbI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTZlYmQ0MGE3NDRhMGM4NGYyNTM1NDU3MDQ3ODA4YWQy ZjE3YzQwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTExMWI3NGRjOGM4ZDk5NGY3MjJhY2EwZGQwMmFjODk2N2YyMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorGd+gmfrByF/WIfRxqSfOX4fg0L 09jVZiH36dvDWrtDRTkYsFWLhKAw7os0TGHpxW8ONYOM08Nao/zDHemACBBPk6Cc rzchhjnyQ+uFEeHXSeMPosYbtC73XHhhNgFjH7+Q5h4f2wWoyxYto4QbtQNAMbJW SSOW4MWZlF+XNTTaKd0gL6pbe6/pF7Vs0NyRd1dAvlnjycD0XeS7kdRcWsg2RC9p oHg8PEHaQJPwoXxOaKO28RNtd1tLFLNTBOEmyuRyQ68wN+l/p7g8t2HU8uQhdGLJ L+7Do1E6RQlWXWQWkWB9cCTy3SvEqT5oHNEXic+eXjxqFBd/9a4zVuuCTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4RG3TcjI2ZT3Iqyg3QKsiWfyEMMB8GA1UdIwQY MBaAFBcW69QKdEoMhPJTVFcEeAitLxfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhicjFBcDBTZ3lFOGxOVVZ3UjRDSzB2RjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81ZjU1ODktNGMzMi00OTNmLTkyNGUt YmFlN2FhMGExOGEwLzEvVGhFYmROeU1qWmxQY2lyS0RkQXF5SlpfSVF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81ZjU1ODktNGMzMi00OTNmLTkyNGUtYmFlN2FhMGExOGEw LzEvRnhicjFBcDBTZ3lFOGxOVVZ3UjRDSzB2RjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWx0MA0G CSqGSIb3DQEBCwUAA4IBAQAe81m3gQTTxMenEaqYnyVQwZah8WIhamD+RVcax0dV d75/OK9duop0mbyha2Q24zdcQV6sUWprCLU80+/QerdZ+GXEsFTktpBC4h46R3qu l4NujDhSgOyJbQ4OeWnoUrP39OhLg0+92KoPiuxsh1EpJ4ULYsbzbQVCMJpm088E nJ/oKtHRXHkp435s3INVkfCAJQ/I5g8WF/Rn4i+LjAbNFXCu0yhfpIqLXz3AqQZA fZLsW0Pn7AO8XdIpAaavRKbYd9+4jc1yaOMoK524a19MQ55gDsdWKlvpPlY4EBqC b7gAsMmfRPEWOmdNLOIGCDVXOh/sj464puVenqwdo4wZ -----END CERTIFICATE-----Generated at Mon Jan 19 18:02:51 2026 by rpki-client