This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/eXXm1Ulp8umzvbta5fLxp-PY-MY.roa File: eXXm1Ulp8umzvbta5fLxp-PY-MY.roa (raw, json) Hash identifier: crFjalMvsl9i/+rOJNU/pdcqz+sZdkcxyLZdz71JwLM= Subject key identifier: 79:75:E6:D5:49:69:F2:E9:B3:BD:BB:5A:E5:F2:F1:A7:E3:D8:F8:C6 Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400 Certificate serial: 019B7C7FFA7800AE7A0D10177265DBC65C8F Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/eXXm1Ulp8umzvbta5fLxp-PY-MY.roa Signing time: Fri 02 Jan 2026 02:18:40 +0000 ROA not before: Fri 02 Jan 2026 02:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55933 IP address blocks: 194.32.148.0/23 maxlen: 23 194.32.148.0/24 maxlen: 24 194.32.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fa:78:00:ae:7a:0d:10:17:72:65:db:c6:5c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400 Validity Not Before: Jan 2 02:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7975e6d54969f2e9b3bdbb5ae5f2f1a7e3d8f8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:bb:19:39:5f:fb:3a:b7:1c:4c:36:6c:6c: 02:24:24:39:8e:d4:42:61:fc:c2:24:45:8a:8b:16: b9:7a:76:2f:bd:82:37:df:fc:c8:ad:8f:83:6c:fb: 2c:1a:6d:e8:2a:dd:1d:31:8e:db:ed:dc:5d:55:82: 8e:63:8a:4d:dd:7d:f9:bd:ac:2b:71:27:84:f0:0d: f5:89:23:f8:0f:85:94:7f:fa:97:62:b7:aa:ca:a4: 57:a5:89:2b:31:57:98:af:60:e9:0f:81:64:bf:3b: 2f:ce:0e:7f:81:48:4f:b9:32:dd:ae:b2:b7:26:88: 8e:ac:a1:66:d6:9d:95:51:10:b0:b4:db:4a:4a:64: c4:9a:b3:bd:4c:be:66:d6:78:c0:c9:02:fd:54:2c: 25:2b:c1:56:3a:ae:c9:ab:c0:8c:b4:f3:09:14:7f: 65:a4:3e:82:78:db:63:0b:f6:dc:fb:03:c4:ba:ad: 35:a3:7c:9d:40:cd:d9:2b:0e:92:85:0c:c6:2e:75: 5b:b4:0f:21:3b:44:8b:d6:60:a5:f1:0d:6e:11:4c: e0:cd:b5:61:33:86:7d:ba:ad:f1:62:6b:0a:11:ac: d3:06:10:b9:8a:69:c2:48:ce:ff:64:90:e7:e7:ce: 65:72:70:61:ea:a7:57:b0:bc:f5:1e:5d:e5:94:e4: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:75:E6:D5:49:69:F2:E9:B3:BD:BB:5A:E5:F2:F1:A7:E3:D8:F8:C6 X509v3 Authority Key Identifier: keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/eXXm1Ulp8umzvbta5fLxp-PY-MY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.148.0/23 Signature Algorithm: sha256WithRSAEncryption 18:b6:b6:43:bc:73:2a:fe:21:cc:16:8d:b7:cd:04:7a:39:64: 11:f5:ef:21:ee:77:f8:b1:cf:17:d8:74:b0:d6:69:9d:ac:5d: cb:bd:00:e2:23:a5:ed:f7:58:80:71:30:7c:a0:f7:5f:8d:80: a0:68:06:dd:a4:9d:7b:f4:52:61:10:1f:ff:d1:c2:50:99:29: 89:74:0a:57:4d:07:ec:7b:c5:39:88:e2:ec:c2:b4:35:82:1c: c8:3e:4b:98:b2:d5:9f:18:8f:bb:cb:62:95:39:07:cd:10:15: 5e:dc:a7:19:a0:24:71:76:a2:ed:e3:4a:45:4f:d2:00:a7:5d: ec:18:43:f8:f5:bb:9b:78:74:91:78:89:88:41:6e:99:d2:f1: 03:f0:b3:88:da:68:24:82:bd:79:2c:a7:e5:aa:cb:1d:a2:3c: b7:40:91:38:a6:36:cb:f8:12:1a:07:bc:5e:ed:03:71:19:9f: 3c:49:c8:41:0c:33:6a:bb:bb:0e:a0:e2:be:46:c1:82:67:f5: 15:75:65:eb:38:0b:ca:31:48:73:7e:c5:34:40:43:24:88:97: 23:db:3b:43:22:35:35:86:2d:3f:9d:3c:d5:56:19:26:c6:05: d8:5a:bb:6d:d7:14:46:02:39:f4:1e:b6:35:69:75:96:d0:75: dc:9f:44:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/p4AK56DRAXcmXbxlyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Zjg3M2NkMzkzOTIwM2M3NzhhOGVhYWYxNjgzZTk0NjRh YzM0MDAwHhcNMjYwMTAyMDIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTc1ZTZkNTQ5NjlmMmU5YjNiZGJiNWFlNWYyZjFhN2UzZDhmOGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ27GTlf+zq3HEw2bGwCJCQ5jtRC YfzCJEWKixa5enYvvYI33/zIrY+DbPssGm3oKt0dMY7b7dxdVYKOY4pN3X35vawr cSeE8A31iSP4D4WUf/qXYreqyqRXpYkrMVeYr2DpD4Fkvzsvzg5/gUhPuTLdrrK3 JoiOrKFm1p2VURCwtNtKSmTEmrO9TL5m1njAyQL9VCwlK8FWOq7Jq8CMtPMJFH9l pD6CeNtjC/bc+wPEuq01o3ydQM3ZKw6ShQzGLnVbtA8hO0SL1mCl8Q1uEUzgzbVh M4Z9uq3xYmsKEazTBhC5imnCSM7/ZJDn585lcnBh6qdXsLz1Hl3llOTTqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHl15tVJafLps727WuXy8afj2PjGMB8GA1UdIwQY MBaAFDn4c805OSA8d4qOqvFoPpRkrDQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MGU5MjMtMmYyZC00MDg2LTgxOWMt NGU2NTViNWI2NDI3LzEvZVhYbTFVbHA4dW16dmJ0YTVmTHhwLVBZLU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85MGU5MjMtMmYyZC00MDg2LTgxOWMtNGU2NTViNWI2NDI3 LzEvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiCUMA0G CSqGSIb3DQEBCwUAA4IBAQAYtrZDvHMq/iHMFo23zQR6OWQR9e8h7nf4sc8X2HSw 1mmdrF3LvQDiI6Xt91iAcTB8oPdfjYCgaAbdpJ179FJhEB//0cJQmSmJdApXTQfs e8U5iOLswrQ1ghzIPkuYstWfGI+7y2KVOQfNEBVe3KcZoCRxdqLt40pFT9IAp13s GEP49bubeHSReImIQW6Z0vED8LOI2mgkgr15LKflqssdojy3QJE4pjbL+BIaB7xe 7QNxGZ88SchBDDNqu7sOoOK+RsGCZ/UVdWXrOAvKMUhzfsU0QEMkiJcj2ztDIjU1 hi0/nTzVVhkmxgXYWrtt1xRGAjn0HrY1aXWW0HXcn0Sz -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:32 2026 by rpki-client