This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/39rPTu5yX2a1zfysxgm6Jq1HK_o.roa File: 39rPTu5yX2a1zfysxgm6Jq1HK_o.roa (raw, json) Hash identifier: 6BnKkYXbYywwMGgDtqlqpR6k8qdTXNyGen3SDvJqbAk= Subject key identifier: DF:DA:CF:4E:EE:72:5F:66:B5:CD:FC:AC:C6:09:BA:26:AD:47:2B:FA Certificate issuer: /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3 Certificate serial: 019B7E37D73E1F315B2B2C78E30D61C7789F Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/39rPTu5yX2a1zfysxgm6Jq1HK_o.roa Signing time: Fri 02 Jan 2026 10:19:07 +0000 ROA not before: Fri 02 Jan 2026 10:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8560 IP address blocks: 81.19.144.0/20 maxlen: 24 178.23.80.0/21 maxlen: 24 185.16.188.0/22 maxlen: 24 185.115.184.0/22 maxlen: 24 185.164.4.0/22 maxlen: 24 185.173.140.0/22 maxlen: 24 185.230.216.0/22 maxlen: 24 185.249.72.0/22 maxlen: 24 2a00:1a68::/29 maxlen: 48 2a0a:7c00::/29 maxlen: 48 2a0b:5700::/29 maxlen: 48 2a0c:2d00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d7:3e:1f:31:5b:2b:2c:78:e3:0d:61:c7:78:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3 Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfdacf4eee725f66b5cdfcacc609ba26ad472bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7e:10:a4:d3:e3:40:51:67:12:e8:e4:5f:58: 58:75:01:a4:53:48:7c:90:73:ad:f5:1e:4e:2f:85: 8b:a5:53:30:27:94:4b:ab:1a:61:3d:25:2b:a3:5d: 0c:b2:bf:e1:f2:7b:21:09:b3:dd:b6:66:e7:5f:26: e1:8a:45:0c:4a:a1:85:58:dd:b9:4f:ee:6f:9a:0a: 11:5d:e3:47:7c:cd:73:f3:91:d3:d8:11:ae:7f:35: 73:ba:d9:df:6c:93:45:4c:0c:b2:bd:75:88:1a:3b: e1:98:84:e5:a2:72:1c:7d:cb:2a:4d:26:b7:a0:d8: 76:1d:d7:ff:be:e9:67:c8:14:29:d7:5c:c6:7c:fe: 5b:81:32:79:05:2e:ff:7a:d7:6b:80:58:24:ed:8b: 9c:d0:20:19:29:5c:09:05:cd:78:5c:f4:0e:8a:78: 0b:1e:64:8c:e1:23:89:83:15:65:ec:7b:3d:32:57: 94:eb:ae:30:d4:86:15:54:13:ee:c0:58:aa:b5:3d: 03:51:b1:03:da:fb:1e:cf:0d:e4:d2:9f:48:41:40: bb:18:b8:40:f5:c2:ad:ff:6d:33:d7:e3:b6:bc:ff: 1c:b6:95:e2:f8:bb:f9:99:0b:c0:13:65:1a:bf:d8: 0b:1c:76:78:07:e9:a7:85:3c:2c:ff:49:9d:0d:1a: 28:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DA:CF:4E:EE:72:5F:66:B5:CD:FC:AC:C6:09:BA:26:AD:47:2B:FA X509v3 Authority Key Identifier: keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/39rPTu5yX2a1zfysxgm6Jq1HK_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.144.0/20 178.23.80.0/21 185.16.188.0/22 185.115.184.0/22 185.164.4.0/22 185.173.140.0/22 185.230.216.0/22 185.249.72.0/22 IPv6: 2a00:1a68::/29 2a0a:7c00::/29 2a0b:5700::/29 2a0c:2d00::/29 Signature Algorithm: sha256WithRSAEncryption 80:46:9b:2a:59:ee:1b:17:0d:b7:28:7b:4b:f8:b8:bb:b9:51: dc:d2:42:df:59:73:f6:70:b4:1f:62:1f:33:77:a8:2e:65:c3: 96:5e:cc:9a:38:9a:eb:43:34:f8:cd:4e:53:81:92:50:4c:4c: 01:cc:94:d6:63:81:6a:e6:51:6d:3f:59:b1:be:f3:03:1d:cd: 10:5b:ce:45:19:2e:6f:40:3e:18:36:13:c3:38:b6:20:04:0a: 93:6f:4a:d6:e9:9f:ad:a8:15:9e:c6:18:e3:d5:37:35:7a:23: 03:4b:78:51:90:88:e2:57:43:6b:8b:28:12:56:70:91:73:ba: 3e:bf:c4:09:b7:ef:43:22:32:e6:84:dd:9d:a5:1f:f1:46:a6: f7:f2:02:d6:f9:70:a0:25:80:cd:89:d7:8d:69:1b:05:92:4b: c3:0b:4b:df:6a:76:04:51:65:06:ca:c5:60:33:98:35:91:0d: f0:9f:f4:64:7b:89:c5:ce:5f:f0:92:f7:6e:4d:39:7f:97:73: 44:9c:93:93:04:a4:1f:82:3b:9b:33:eb:53:d5:c4:f0:63:7a: a4:7e:8e:b0:43:3c:33:44:04:51:77:76:d9:1e:09:23:57:74: b8:6c:26:99:7c:a6:2a:42:02:3c:26:88:e0:e2:ff:4a:c4:b6: 87:65:da:32 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt+N9c+HzFbKyx44w1hx3ifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDU5ZmQ2ODNlMzU3MGQ2Mzg5NTUzMGNlYjlmMmM4NGZl ZmUwYTMwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmRhY2Y0ZWVlNzI1ZjY2YjVjZGZjYWNjNjA5YmEyNmFkNDcyYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n4QpNPjQFFnEujkX1hYdQGkU0h8 kHOt9R5OL4WLpVMwJ5RLqxphPSUro10Msr/h8nshCbPdtmbnXybhikUMSqGFWN25 T+5vmgoRXeNHfM1z85HT2BGufzVzutnfbJNFTAyyvXWIGjvhmITlonIcfcsqTSa3 oNh2Hdf/vulnyBQp11zGfP5bgTJ5BS7/etdrgFgk7Yuc0CAZKVwJBc14XPQOingL HmSM4SOJgxVl7Hs9MleU664w1IYVVBPuwFiqtT0DUbED2vsezw3k0p9IQUC7GLhA 9cKt/20z1+O2vP8ctpXi+Lv5mQvAE2Uav9gLHHZ4B+mnhTws/0mdDRooLQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFN/az07ucl9mtc38rMYJuiatRyv6MB8GA1UdIwQY MBaAFBPVn9aD41cNY4lVMM658shP7+CjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlXZjFvUGpWdzFqaVZVd3pybnl5RV92NEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80MTBlYWYtZjgyZC00N2ZmLTk5MjYt MGIxYjMwODk1NjAyLzEvMzlyUFR1NXlYMmExemZ5c3hnbTZKcTFIS19vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi80MTBlYWYtZjgyZC00N2ZmLTk5MjYtMGIxYjMwODk1NjAy LzEvRTlXZjFvUGpWdzFqaVZVd3pybnl5RV92NEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDA2BAIAATAwAwQEUROQAwQD shdQAwQCuRC8AwQCuXO4AwQCuaQEAwQCua2MAwQCuebYAwQCuflIMCIEAgACMBwD BQMqABpoAwUDKgp8AAMFAyoLVwADBQMqDC0AMA0GCSqGSIb3DQEBCwUAA4IBAQCA RpsqWe4bFw23KHtL+Li7uVHc0kLfWXP2cLQfYh8zd6guZcOWXsyaOJrrQzT4zU5T gZJQTEwBzJTWY4Fq5lFtP1mxvvMDHc0QW85FGS5vQD4YNhPDOLYgBAqTb0rW6Z+t qBWexhjj1Tc1eiMDS3hRkIjiV0NriygSVnCRc7o+v8QJt+9DIjLmhN2dpR/xRqb3 8gLW+XCgJYDNideNaRsFkkvDC0vfanYEUWUGysVgM5g1kQ3wn/Rke4nFzl/wkvdu TTl/l3NEnJOTBKQfgjubM+tT1cTwY3qkfo6wQzwzRARRd3bZHgkjV3S4bCaZfKYq QgI8Jojg4v9KxLaHZdoy -----END CERTIFICATE-----Generated at Tue Jan 27 16:05:51 2026 by rpki-client