This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/39DTcMNKiRnZZh7clR3-Xg7LiNc.roa File: 39DTcMNKiRnZZh7clR3-Xg7LiNc.roa (raw, json) Hash identifier: BV0YNi+He+COF6H5HCrpqupHZg4YCTyzm94qIT5wJPI= Subject key identifier: DF:D0:D3:70:C3:4A:89:19:D9:66:1E:DC:95:1D:FE:5E:0E:CB:88:D7 Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538 Certificate serial: 019B79ECB9191A11C90DFA34C2BFC7B6B665 Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/39DTcMNKiRnZZh7clR3-Xg7LiNc.roa Signing time: Thu 01 Jan 2026 14:18:35 +0000 ROA not before: Thu 01 Jan 2026 14:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39564 IP address blocks: 194.11.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b9:19:1a:11:c9:0d:fa:34:c2:bf:c7:b6:b6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c77013e488a09c709b632246d9405da458c5538 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfd0d370c34a8919d9661edc951dfe5e0ecb88d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:da:c5:74:af:91:85:83:79:a7:8f:61:1a:95: 6a:02:47:5d:21:c2:79:8f:e5:11:e3:52:f2:b0:4e: 38:09:ef:a1:9e:c9:3b:5f:7e:fe:0c:9d:9a:20:d6: 78:9e:f0:cb:7d:9d:93:7a:03:1b:d5:0f:0b:d0:b4: e6:32:a8:ed:0f:b6:11:68:45:b3:63:ba:d6:6c:c6: 6b:e1:95:cc:ec:6a:0c:c0:a2:11:ce:72:50:0a:5b: c9:a7:33:b5:27:fd:66:15:57:68:1b:60:87:6e:b1: dd:61:99:f8:c7:78:6a:64:77:45:d4:11:f6:58:f7: 83:17:f2:1c:08:79:6c:36:27:58:cd:a8:b6:51:ba: 34:98:1c:f4:4d:2c:58:cf:d9:08:e3:97:96:4b:3c: e1:4a:a3:1d:48:85:8a:f2:89:e8:73:fb:1b:c5:dd: 61:4b:df:1e:79:fe:42:99:65:ed:50:25:ee:5c:37: eb:81:56:2c:44:e8:d3:9c:6f:d1:31:7f:68:ef:22: cb:cf:81:34:b5:b9:d4:cd:41:ef:c6:c9:cc:61:e9: d7:4e:4d:76:79:bb:a1:9f:3f:c8:47:c6:c8:c7:5c: 88:3b:a8:3c:5d:85:22:82:52:c5:12:64:98:85:c8: 61:a8:7c:18:2f:0c:84:77:c0:02:f6:be:8d:ab:ef: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D0:D3:70:C3:4A:89:19:D9:66:1E:DC:95:1D:FE:5E:0E:CB:88:D7 X509v3 Authority Key Identifier: keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/39DTcMNKiRnZZh7clR3-Xg7LiNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.27.0/24 Signature Algorithm: sha256WithRSAEncryption 22:08:32:f3:c1:f0:f8:59:c2:ae:13:ec:4e:4f:e1:30:25:29: 27:2b:be:4f:29:b8:86:7d:72:c5:5e:9b:e6:e6:1d:78:2e:95: 6f:72:99:4d:da:58:aa:3f:18:40:1d:ab:9e:64:25:55:56:93: db:a6:75:29:0e:05:c2:09:ed:19:8c:99:f5:f8:96:cd:6e:5a: 16:3b:59:3c:5d:71:28:78:71:98:9c:4c:49:bf:19:ea:4a:97: 7b:5d:ef:c6:ad:cd:bb:73:c8:de:52:8b:4e:7a:c2:16:bf:5c: b5:ad:bb:7a:71:41:26:a5:69:51:1a:a2:51:ec:07:f0:e3:50: 46:ad:13:9e:d4:03:7a:49:cc:16:12:d7:fd:fb:77:62:f8:bc: 35:fc:99:df:b1:64:6d:ca:12:b9:6e:69:d9:52:24:d6:01:de: 4e:3a:9d:1b:53:b1:34:ff:64:c5:d0:d4:58:36:ef:1a:10:65: 6a:a4:55:e0:f1:e4:cf:ab:02:6d:36:0d:da:9a:9a:1e:31:1d: eb:6a:a4:2f:9a:fa:53:50:d8:46:c0:4a:3c:e6:1d:c1:31:3b: 8a:75:5f:14:ac:9e:5a:fa:45:23:d6:5b:cb:37:2e:96:aa:9b: 04:f3:b7:99:05:dd:03:8b:f1:60:f0:17:76:5a:67:d2:34:2b: 89:4d:ec:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LkZGhHJDfo0wr/HtrZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNzcwMTNlNDg4YTA5YzcwOWI2MzIyNDZkOTQwNWRhNDU4 YzU1MzgwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmQwZDM3MGMzNGE4OTE5ZDk2NjFlZGM5NTFkZmU1ZTBlY2I4OGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79rFdK+RhYN5p49hGpVqAkddIcJ5 j+UR41LysE44Ce+hnsk7X37+DJ2aINZ4nvDLfZ2TegMb1Q8L0LTmMqjtD7YRaEWz Y7rWbMZr4ZXM7GoMwKIRznJQClvJpzO1J/1mFVdoG2CHbrHdYZn4x3hqZHdF1BH2 WPeDF/IcCHlsNidYzai2Ubo0mBz0TSxYz9kI45eWSzzhSqMdSIWK8onoc/sbxd1h S98eef5CmWXtUCXuXDfrgVYsROjTnG/RMX9o7yLLz4E0tbnUzUHvxsnMYenXTk12 ebuhnz/IR8bIx1yIO6g8XYUiglLFEmSYhchhqHwYLwyEd8AC9r6Nq+9AKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/Q03DDSokZ2WYe3JUd/l4Oy4jXMB8GA1UdIwQY MBaAFIx3AT5IignHCbYyJG2UBdpFjFU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgt MDIxMjk1MzNhMzNkLzEvMzlEVGNNTktpUm5aWmg3Y2xSMy1YZzdMaU5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgtMDIxMjk1MzNhMzNk LzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgsbMA0G CSqGSIb3DQEBCwUAA4IBAQAiCDLzwfD4WcKuE+xOT+EwJSknK75PKbiGfXLFXpvm 5h14LpVvcplN2liqPxhAHaueZCVVVpPbpnUpDgXCCe0ZjJn1+JbNbloWO1k8XXEo eHGYnExJvxnqSpd7Xe/Grc27c8jeUotOesIWv1y1rbt6cUEmpWlRGqJR7Afw41BG rROe1AN6ScwWEtf9+3di+Lw1/JnfsWRtyhK5bmnZUiTWAd5OOp0bU7E0/2TF0NRY Nu8aEGVqpFXg8eTPqwJtNg3ampoeMR3raqQvmvpTUNhGwEo85h3BMTuKdV8UrJ5a +kUj1lvLNy6WqpsE87eZBd0Di/Fg8Bd2WmfSNCuJTezR -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:31 2026 by rpki-client