This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/th-tx_kJ7veQ1scNgs5J6K1YnW4.roa File: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (raw, json) Hash identifier: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg= Subject key identifier: B6:1F:AD:C7:F9:09:EE:F7:90:D6:C7:0D:82:CE:49:E8:AD:58:9D:6E Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019B79ED46500A99D2EA605DCB4703F5A473 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/th-tx_kJ7veQ1scNgs5J6K1YnW4.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 95.140.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 14:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:46:50:0a:99:d2:ea:60:5d:cb:47:03:f5:a4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b61fadc7f909eef790d6c70d82ce49e8ad589d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:79:a4:5a:37:9d:77:ad:c1:2b:e6:9e:d5: c6:45:b1:02:e1:9d:2e:e3:3e:34:4d:38:e1:98:b9: 68:44:00:74:77:9b:34:fa:f7:dd:cc:c9:9a:2c:39: 9f:58:65:82:8c:6a:62:18:2c:43:22:dd:ae:08:9a: c9:0a:4b:65:a6:ea:39:08:52:5f:9f:43:16:06:95: d5:f1:7e:58:38:05:3c:8c:a2:51:0a:ff:94:d1:18: 43:2c:ad:2f:b4:1e:75:f3:a5:0f:86:97:0b:c2:82: 48:c2:45:bc:08:38:5a:95:02:ea:71:0b:5c:0d:84: 73:15:01:1c:41:5b:a1:ec:63:df:80:77:26:74:52: 7a:a0:7d:26:54:ab:c8:9f:cc:41:1a:ee:0b:42:1c: 8a:6d:3e:90:20:1e:d0:f4:c7:c1:70:58:38:38:ab: b2:be:41:4a:12:91:22:8f:f8:46:5b:aa:6c:b7:cd: 74:61:8a:da:6d:58:a9:47:4f:a2:b2:a2:3d:91:86: 9b:5f:8f:eb:90:aa:c3:4f:39:69:55:ec:73:10:e7: 7e:d8:4f:ff:e6:f5:ae:cb:8f:45:43:89:93:41:c6: 0b:ef:d0:63:52:aa:f5:5f:8d:7e:69:b8:d6:b5:18: 76:4d:8e:14:ae:c5:b7:19:0d:ca:88:ec:8a:71:ea: 9a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1F:AD:C7:F9:09:EE:F7:90:D6:C7:0D:82:CE:49:E8:AD:58:9D:6E X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/th-tx_kJ7veQ1scNgs5J6K1YnW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.140.148.0/24 Signature Algorithm: sha256WithRSAEncryption 33:aa:5e:2a:2c:c7:63:d0:8d:ba:55:bf:11:bb:93:6f:7e:f8: 50:5a:2d:e7:ae:64:9d:f5:1e:aa:ad:48:0d:1b:5c:df:74:a7: 00:d3:2d:2f:d7:6d:85:c5:25:69:91:08:30:3a:d9:cb:a7:c7: 8f:21:01:27:9c:63:cd:c3:64:13:fc:0e:7b:64:e7:e6:57:1b: 77:7f:5b:4d:37:05:8f:f1:b5:c5:6e:51:5b:be:47:2a:6a:20: c7:c8:96:ae:e1:e8:92:2d:16:87:b9:b3:83:67:c5:7b:62:6c: 9c:28:4c:57:6d:5d:79:1d:f2:97:f9:2d:e0:c3:6f:2a:5c:74: 50:7d:9f:75:72:60:a4:37:0e:f9:bb:76:d1:5a:f7:f5:be:38: 83:e6:a8:94:76:96:47:80:63:e6:a7:7f:99:95:93:37:a6:ca: 84:25:f0:eb:43:37:ce:9d:6b:00:47:9d:56:c0:7b:27:b6:b1: 60:0f:2d:d6:e2:30:46:0e:5f:44:3b:b9:c2:8a:45:5c:a0:24: 6a:d7:5f:d0:83:80:66:37:2a:ba:60:c7:15:0b:54:65:cd:34: 6d:37:c5:e0:b3:29:17:21:27:ed:7c:69:f3:92:9f:c3:d2:3a: 94:c9:fc:4a:c8:dc:92:2a:45:be:26:03:38:df:77:1d:16:87: 31:e1:6d:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UZQCpnS6mBdy0cD9aRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjFmYWRjN2Y5MDllZWY3OTBkNmM3MGQ4MmNlNDllOGFkNTg5ZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGp5pFo3nXetwSvmntXGRbEC4Z0u 4z40TTjhmLloRAB0d5s0+vfdzMmaLDmfWGWCjGpiGCxDIt2uCJrJCktlpuo5CFJf n0MWBpXV8X5YOAU8jKJRCv+U0RhDLK0vtB5186UPhpcLwoJIwkW8CDhalQLqcQtc DYRzFQEcQVuh7GPfgHcmdFJ6oH0mVKvIn8xBGu4LQhyKbT6QIB7Q9MfBcFg4OKuy vkFKEpEij/hGW6pst810YYrabVipR0+isqI9kYabX4/rkKrDTzlpVexzEOd+2E// 5vWuy49FQ4mTQcYL79BjUqr1X41+abjWtRh2TY4UrsW3GQ3KiOyKceqawQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYfrcf5Ce73kNbHDYLOSeitWJ1uMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdGgtdHhfa0o3dmVRMXNjTmdzNUo2SzFZblc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4yUMA0G CSqGSIb3DQEBCwUAA4IBAQAzql4qLMdj0I26Vb8Ru5NvfvhQWi3nrmSd9R6qrUgN G1zfdKcA0y0v122FxSVpkQgwOtnLp8ePIQEnnGPNw2QT/A57ZOfmVxt3f1tNNwWP 8bXFblFbvkcqaiDHyJau4eiSLRaHubODZ8V7YmycKExXbV15HfKX+S3gw28qXHRQ fZ91cmCkNw75u3bRWvf1vjiD5qiUdpZHgGPmp3+ZlZM3psqEJfDrQzfOnWsAR51W wHsntrFgDy3W4jBGDl9EO7nCikVcoCRq11/Qg4BmNyq6YMcVC1RlzTRtN8XgsykX ISftfGnzkp/D0jqUyfxKyNySKkW+JgM433cdFocx4W2/ -----END CERTIFICATE-----Generated at Thu Jan 1 21:42:14 2026 by rpki-client