This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/39eACmDFW1g2-B9DlwGLaRK-uO0.roa File: 39eACmDFW1g2-B9DlwGLaRK-uO0.roa (raw, json) Hash identifier: tgxi0BRb5Y9zXmRzFS2m/2sav+i6eK2POsugWd54n9Q= Subject key identifier: DF:D7:80:0A:60:C5:5B:58:36:F8:1F:43:97:01:8B:69:12:BE:B8:ED Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0 Certificate serial: 019B7B36D43CDE4E75888579EE858DDA8615 Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/39eACmDFW1g2-B9DlwGLaRK-uO0.roa Signing time: Thu 01 Jan 2026 20:19:09 +0000 ROA not before: Thu 01 Jan 2026 20:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 185.156.184.0/24 maxlen: 24 185.156.185.0/24 maxlen: 24 185.156.186.0/24 maxlen: 24 185.156.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d4:3c:de:4e:75:88:85:79:ee:85:8d:da:86:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0 Validity Not Before: Jan 1 20:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfd7800a60c55b5836f81f4397018b6912beb8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:97:89:7e:dc:fc:4a:07:76:a0:80:ee:29:60: 16:f4:34:9e:b1:6a:7b:3c:7f:bd:1a:2c:ca:47:92: 19:e8:b1:89:eb:24:49:0a:1e:5a:08:3f:af:1a:73: 0b:ec:50:44:8b:2c:ca:f1:39:d8:50:7f:2f:99:5f: 1b:76:6e:e8:b0:b1:20:66:d0:67:f9:5e:f1:6f:cc: 7a:4d:71:0a:09:c0:2f:22:e2:6f:06:a2:68:8a:57: 1e:6e:40:c5:2f:4a:30:a0:95:58:ae:ce:98:c0:28: 4f:20:b8:1e:2b:46:3e:f1:b3:1d:58:39:b0:69:23: 68:e7:14:f4:f0:50:29:50:96:ef:63:38:3f:a2:88: 86:dc:e6:67:e7:c1:1d:22:ec:ba:c2:26:88:5f:4d: 8d:51:a4:86:ea:cb:bb:94:f0:70:40:ad:51:4b:d9: 4a:1c:44:b9:99:70:19:88:ca:22:c0:4a:51:c4:3a: 0a:43:8a:17:a0:7b:e5:cb:27:29:9d:0b:20:fe:44: 57:64:77:e0:52:98:33:32:2d:77:89:6b:d3:fd:4f: 1c:16:32:11:12:8b:b9:db:17:49:3c:63:86:62:e7: b8:05:42:a4:0b:c0:34:a2:ad:98:8c:3b:32:83:f3: cb:5f:24:e4:1f:43:9d:99:21:ab:4b:6c:af:e6:e7: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D7:80:0A:60:C5:5B:58:36:F8:1F:43:97:01:8B:69:12:BE:B8:ED X509v3 Authority Key Identifier: keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/39eACmDFW1g2-B9DlwGLaRK-uO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.184.0/22 Signature Algorithm: sha256WithRSAEncryption 39:2a:94:e1:1c:bd:b0:1b:68:40:35:f8:c8:86:5b:82:f8:85: b7:13:6d:e8:d3:25:64:59:9a:83:79:fe:e3:b1:a3:6a:74:54: 66:cf:99:09:3b:b7:1a:85:12:d2:95:f8:51:76:b1:91:31:52: f7:25:3a:ff:b1:f5:15:39:e9:d7:14:05:23:57:a0:68:ee:e9: 04:79:83:86:af:c0:76:58:6e:d2:f9:7b:91:77:f8:08:75:5e: 76:c3:9a:d0:e6:b8:2a:95:01:0e:07:fc:89:34:4d:27:5c:96: 52:85:bb:a4:78:de:6a:16:51:aa:05:35:3b:9a:b7:20:db:f6: f6:2f:a8:ca:04:aa:ee:c9:c6:33:18:fd:13:de:2c:ce:15:ed: c4:4e:2c:5f:89:af:88:49:ac:c1:79:0a:4b:23:8c:8d:f8:02: f8:66:82:51:2f:7b:a0:87:77:65:b4:62:90:f9:0a:8d:59:60: 9b:61:9b:ba:66:ec:d2:41:6a:3a:37:b9:58:3a:91:a5:92:12: 2f:56:78:8d:98:a9:67:db:c1:60:f5:4f:0b:3f:90:c4:23:14: 15:7e:e6:ae:ed:20:cc:07:de:d2:74:08:8a:e8:0d:a4:79:c5: 08:be:04:95:9a:e9:9c:10:da:60:2d:d3:c5:67:1f:2d:d1:fa: 02:55:da:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtQ83k51iIV57oWN2oYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZWZiNTNmMjY2ZTExZTZlZDVhMTNlYjNlOTdmNGI5NjAx ZGQ2ZTAwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmQ3ODAwYTYwYzU1YjU4MzZmODFmNDM5NzAxOGI2OTEyYmViOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZeJftz8Sgd2oIDuKWAW9DSesWp7 PH+9GizKR5IZ6LGJ6yRJCh5aCD+vGnML7FBEiyzK8TnYUH8vmV8bdm7osLEgZtBn +V7xb8x6TXEKCcAvIuJvBqJoilcebkDFL0owoJVYrs6YwChPILgeK0Y+8bMdWDmw aSNo5xT08FApUJbvYzg/ooiG3OZn58EdIuy6wiaIX02NUaSG6su7lPBwQK1RS9lK HES5mXAZiMoiwEpRxDoKQ4oXoHvlyycpnQsg/kRXZHfgUpgzMi13iWvT/U8cFjIR Eou52xdJPGOGYue4BUKkC8A0oq2YjDsyg/PLXyTkH0OdmSGrS2yv5ufKEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/XgApgxVtYNvgfQ5cBi2kSvrjtMB8GA1UdIwQY MBaAFEbvtT8mbhHm7VoT6z6X9LlgHdbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUt ZDdjNjcwODQxNGZhLzEvMzllQUNtREZXMWcyLUI5RGx3R0xhUkstdU8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUtZDdjNjcwODQxNGZh LzEvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZy4MA0G CSqGSIb3DQEBCwUAA4IBAQA5KpThHL2wG2hANfjIhluC+IW3E23o0yVkWZqDef7j saNqdFRmz5kJO7cahRLSlfhRdrGRMVL3JTr/sfUVOenXFAUjV6Bo7ukEeYOGr8B2 WG7S+XuRd/gIdV52w5rQ5rgqlQEOB/yJNE0nXJZShbukeN5qFlGqBTU7mrcg2/b2 L6jKBKruycYzGP0T3izOFe3ETixfia+ISazBeQpLI4yN+AL4ZoJRL3ugh3dltGKQ +QqNWWCbYZu6ZuzSQWo6N7lYOpGlkhIvVniNmKln28Fg9U8LP5DEIxQVfuau7SDM B97SdAiK6A2kecUIvgSVmumcENpgLdPFZx8t0foCVdpO -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:07 2026 by rpki-client