This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ThdY1NGqdEAlbacIpCzIWWjl8-M.roa File: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (raw, json) Hash identifier: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y= Subject key identifier: 4E:17:58:D4:D1:AA:74:40:25:6D:A7:08:A4:2C:C8:59:68:E5:F3:E3 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019B78347E88183700274FECF5E44E580DAF Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ThdY1NGqdEAlbacIpCzIWWjl8-M.roa Signing time: Thu 01 Jan 2026 06:17:44 +0000 ROA not before: Thu 01 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 212.81.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7e:88:18:37:00:27:4f:ec:f5:e4:4e:58:0d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e1758d4d1aa7440256da708a42cc85968e5f3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:6d:13:4e:f9:1d:28:44:6c:8d:09:8d:39: 81:e2:f5:16:ab:0e:8d:e7:d8:6a:52:98:28:80:11: b6:a8:10:8d:9e:f7:c7:7a:31:7f:a2:15:20:b8:3c: b3:4e:42:af:f9:5b:28:a1:a8:0c:27:44:de:e9:3a: de:6f:aa:a9:42:9e:84:bd:cd:ef:67:f6:48:03:87: 7a:74:d1:97:73:f6:0b:2e:54:1b:36:c7:dd:3b:fe: d6:21:fa:ab:b5:cd:4a:b7:ef:6c:03:cb:d5:ed:ec: 69:c3:c5:f9:e5:92:12:10:a6:47:19:07:4d:95:4b: b5:6e:69:8f:59:a3:df:da:1a:40:73:78:38:21:0e: aa:4d:3a:8d:76:a0:38:66:cb:11:5f:73:50:c2:39: e7:7c:f9:1e:16:7a:45:52:81:40:6c:65:71:14:ae: 91:3a:62:aa:2d:33:c9:ea:9e:ac:02:82:f4:38:94: 14:81:cc:d9:89:43:71:ec:20:f6:e5:8a:d3:16:1d: e0:e6:5d:8a:54:75:d0:40:55:d2:1c:28:93:69:fa: 13:e6:c8:cd:cc:78:6c:7a:a6:be:3f:0c:4c:6e:be: bb:b9:2e:92:74:13:27:25:8c:3e:90:12:31:13:9e: 1a:61:92:59:43:f1:d8:32:56:5e:20:22:b6:83:5b: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:17:58:D4:D1:AA:74:40:25:6D:A7:08:A4:2C:C8:59:68:E5:F3:E3 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/ThdY1NGqdEAlbacIpCzIWWjl8-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.81.46.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:a4:af:51:a0:6f:1e:86:20:f2:a6:6b:03:a1:7e:5b:be:0b: e2:69:84:fc:d7:fd:bb:b2:bb:59:bf:4d:7e:74:08:e2:a6:de: 8a:fb:44:da:d1:e4:14:d2:f7:81:1a:66:3d:7b:ed:e4:0e:1d: d8:6b:fc:ab:ac:77:5b:30:05:5f:89:d6:12:56:fe:4b:c8:76: dc:47:b0:0f:fb:02:b0:c3:fb:0d:40:e8:63:2f:33:6c:27:b9: b1:79:9c:b0:9d:de:15:8d:39:2c:33:63:00:78:cf:d8:45:ae: b2:74:2f:79:3a:0d:99:88:1b:c6:1e:3d:2e:5a:12:8b:d7:94: af:cd:74:42:7f:45:a9:da:8a:47:7e:1b:20:4d:8d:7d:58:bf: d0:fa:d0:8d:6a:99:bd:3a:f7:29:01:57:e9:b4:e4:87:00:11: dc:0f:82:83:d9:7f:91:dd:04:f7:51:5d:81:2d:83:46:3a:28: bd:f1:b7:56:a6:6b:c2:80:70:eb:23:78:8e:e2:b2:ee:a7:f2: 36:97:58:b4:45:42:fd:94:c5:e3:32:7d:67:3f:76:0d:e3:05: bb:64:3f:5b:4b:cf:e7:cc:1e:0c:f1:e7:47:a1:78:66:92:b1: 68:7d:7e:48:66:27:cd:cf:2e:da:10:53:7a:c8:3d:e6:d4:5c: 20:e0:2e:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NH6IGDcAJ0/s9eROWA2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTE3NThkNGQxYWE3NDQwMjU2ZGE3MDhhNDJjYzg1OTY4ZTVmM2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE5tE075HShEbI0JjTmB4vUWqw6N 59hqUpgogBG2qBCNnvfHejF/ohUguDyzTkKv+VsooagMJ0Te6Treb6qpQp6Evc3v Z/ZIA4d6dNGXc/YLLlQbNsfdO/7WIfqrtc1Kt+9sA8vV7expw8X55ZISEKZHGQdN lUu1bmmPWaPf2hpAc3g4IQ6qTTqNdqA4ZssRX3NQwjnnfPkeFnpFUoFAbGVxFK6R OmKqLTPJ6p6sAoL0OJQUgczZiUNx7CD25YrTFh3g5l2KVHXQQFXSHCiTafoT5sjN zHhseqa+PwxMbr67uS6SdBMnJYw+kBIxE54aYZJZQ/HYMlZeICK2g1vyQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE4XWNTRqnRAJW2nCKQsyFlo5fPjMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvVGhkWTFOR3FkRUFsYmFjSXBDeklXV2psOC1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FEuMA0G CSqGSIb3DQEBCwUAA4IBAQCPpK9RoG8ehiDypmsDoX5bvgviaYT81/27srtZv01+ dAjipt6K+0Ta0eQU0veBGmY9e+3kDh3Ya/yrrHdbMAVfidYSVv5LyHbcR7AP+wKw w/sNQOhjLzNsJ7mxeZywnd4VjTksM2MAeM/YRa6ydC95Og2ZiBvGHj0uWhKL15Sv zXRCf0Wp2opHfhsgTY19WL/Q+tCNapm9OvcpAVfptOSHABHcD4KD2X+R3QT3UV2B LYNGOii98bdWpmvCgHDrI3iO4rLup/I2l1i0RUL9lMXjMn1nP3YN4wW7ZD9bS8/n zB4M8edHoXhmkrFofX5IZifNzy7aEFN6yD3m1Fwg4C4z -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:01 2026 by rpki-client