This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/ThzwdKdKn1Xy5a4JKmMojrXgu40.roa File: ThzwdKdKn1Xy5a4JKmMojrXgu40.roa (raw, json) Hash identifier: lIi2RxL8LrPV+57y38KO3DW0z4++WwpkT83uTb32e/I= Subject key identifier: 4E:1C:F0:74:A7:4A:9F:55:F2:E5:AE:09:2A:63:28:8E:B5:E0:BB:8D Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356 Certificate serial: 019B7A5AE849BA9405F7F0B12C279A45A9E5 Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/ThzwdKdKn1Xy5a4JKmMojrXgu40.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57445 IP address blocks: 91.232.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e8:49:ba:94:05:f7:f0:b1:2c:27:9a:45:a9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e1cf074a74a9f55f2e5ae092a63288eb5e0bb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:82:0b:04:c7:8b:26:23:61:dd:2a:23:a0: f0:28:24:82:4a:a7:a2:8a:06:21:fc:98:89:f3:f1: 6a:6e:30:1e:4f:fa:4e:5f:13:f3:0f:5b:e6:c3:57: 97:af:7a:be:e0:6c:dc:11:dc:b2:da:97:d8:79:04: 0d:49:1d:d5:c0:24:eb:85:6b:c9:c0:7f:96:83:c0: 4d:15:66:b1:17:ba:bf:12:cb:30:15:06:7d:84:6e: f6:2f:e0:78:b5:1e:4a:7c:d7:db:fa:28:d8:00:51: 33:c0:17:65:e7:8b:3d:14:df:05:a9:cc:19:23:9b: 67:8e:38:d1:84:e5:67:99:95:67:06:75:28:a7:fb: 46:2f:71:1a:00:30:73:d1:a0:d2:c9:45:1e:3b:05: 53:1c:be:c4:af:7e:88:fa:8d:60:f9:74:4a:99:49: b9:57:4a:e0:a1:39:c2:a0:a5:f5:cc:03:e5:0d:d0: 98:4c:88:08:ab:9e:9e:83:58:84:04:5a:20:d2:be: 17:b0:23:4a:02:f0:2e:ac:11:07:4a:02:f6:5c:37: b5:8f:e5:4f:41:b4:7c:ff:04:e7:d5:ca:3b:12:10: 3d:14:7d:99:cb:85:19:ce:b2:c2:42:8f:da:02:59: 66:61:14:3e:14:84:eb:f1:ec:b9:33:a6:cd:41:2f: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1C:F0:74:A7:4A:9F:55:F2:E5:AE:09:2A:63:28:8E:B5:E0:BB:8D X509v3 Authority Key Identifier: keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/ThzwdKdKn1Xy5a4JKmMojrXgu40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.26.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:c2:57:76:2f:53:40:a6:4a:e8:51:0f:60:2f:65:16:60:ad: f0:0d:1d:e5:2d:75:a9:cb:52:06:9e:09:37:23:3d:f0:c1:a3: ca:2c:91:7b:fa:78:3e:b8:1e:2d:ff:c8:50:7f:f7:d9:9b:6e: 50:41:fb:5b:c9:d3:22:49:8c:d2:fa:db:35:b9:b8:1e:11:e1: 78:28:23:98:44:87:64:89:f1:17:6c:ad:a5:34:95:5c:89:ae: 64:7d:0e:d5:19:d6:5b:5a:41:ae:8b:d6:c8:e9:eb:e7:3f:cf: 27:2c:ab:f8:5a:a1:0b:d3:18:12:f7:28:0f:27:cb:20:01:0b: f1:d6:57:86:3f:0c:c3:cf:99:c5:29:ef:e6:21:02:1e:16:8f: 4e:47:ca:e9:27:11:d3:d4:c9:52:33:84:5a:a3:7a:f8:96:8d: 65:46:56:fa:c2:b6:1e:3f:61:4e:6a:9f:60:65:b9:14:27:db: f0:37:8f:e1:10:56:88:23:b3:fc:e7:7d:6a:e7:cf:e2:d0:12: 66:68:be:8b:c7:32:7f:4e:ae:1a:56:c2:df:d8:be:81:9e:a4: 5c:30:04:d2:65:19:2a:e0:9f:b0:3f:4a:2f:b9:0b:2f:25:f1: 33:35:10:5c:88:bd:74:a3:f3:14:1d:93:7a:5c:d8:38:1b:96: 4a:66:58:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuhJupQF9/CxLCeaRanlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZGNlODcwZTQ3M2MzNTQyNzNlODljNWU0ZTJlZDNlMGMw NjkzNTYwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTFjZjA3NGE3NGE5ZjU1ZjJlNWFlMDkyYTYzMjg4ZWI1ZTBiYjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAqCCwTHiyYjYd0qI6DwKCSCSqei igYh/JiJ8/FqbjAeT/pOXxPzD1vmw1eXr3q+4GzcEdyy2pfYeQQNSR3VwCTrhWvJ wH+Wg8BNFWaxF7q/EsswFQZ9hG72L+B4tR5KfNfb+ijYAFEzwBdl54s9FN8FqcwZ I5tnjjjRhOVnmZVnBnUop/tGL3EaADBz0aDSyUUeOwVTHL7Er36I+o1g+XRKmUm5 V0rgoTnCoKX1zAPlDdCYTIgIq56eg1iEBFog0r4XsCNKAvAurBEHSgL2XDe1j+VP QbR8/wTn1co7EhA9FH2Zy4UZzrLCQo/aAllmYRQ+FITr8ey5M6bNQS9ipwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4c8HSnSp9V8uWuCSpjKI614LuNMB8GA1UdIwQY MBaAFNLc6HDkc8NUJz6JxeTi7T4MBpNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAt MzJkODBkOGQxNjE1LzEvVGh6d2RLZEtuMVh5NWE0SkttTW9qclhndTQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAtMzJkODBkOGQxNjE1 LzEvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+gaMA0G CSqGSIb3DQEBCwUAA4IBAQB6wld2L1NApkroUQ9gL2UWYK3wDR3lLXWpy1IGngk3 Iz3wwaPKLJF7+ng+uB4t/8hQf/fZm25QQftbydMiSYzS+ts1ubgeEeF4KCOYRIdk ifEXbK2lNJVcia5kfQ7VGdZbWkGui9bI6evnP88nLKv4WqEL0xgS9ygPJ8sgAQvx 1leGPwzDz5nFKe/mIQIeFo9OR8rpJxHT1MlSM4Rao3r4lo1lRlb6wrYeP2FOap9g ZbkUJ9vwN4/hEFaII7P8531q58/i0BJmaL6LxzJ/Tq4aVsLf2L6BnqRcMATSZRkq 4J+wP0ovuQsvJfEzNRBciL10o/MUHZN6XNg4G5ZKZlgk -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:23 2026 by rpki-client