This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/39VInJLJ3qnhvx5iqjcKdFwEBpE.roa File: 39VInJLJ3qnhvx5iqjcKdFwEBpE.roa (raw, json) Hash identifier: 6TDRzvB/lwrBZbsPGcbo4Dm9ksXI0q4yNjFzox4eAaA= Subject key identifier: DF:D5:48:9C:92:C9:DE:A9:E1:BF:1E:62:AA:37:0A:74:5C:04:06:91 Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78 Certificate serial: 019B7C80B5A721D4DDB6CA981781B1C24751 Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/39VInJLJ3qnhvx5iqjcKdFwEBpE.roa Signing time: Fri 02 Jan 2026 02:19:28 +0000 ROA not before: Fri 02 Jan 2026 02:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199124 IP address blocks: 69.30.89.0/24 maxlen: 24 91.218.78.0/23 maxlen: 23 91.218.79.0/24 maxlen: 24 2a09:a380::/40 maxlen: 40 2a09:a380:1::/48 maxlen: 48 2a09:a380:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b5:a7:21:d4:dd:b6:ca:98:17:81:b1:c2:47:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfd5489c92c9dea9e1bf1e62aa370a745c040691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:9f:32:1f:39:c2:45:8e:5f:7d:30:1b:ad: 83:96:1a:d8:66:4a:7c:8f:c5:f3:eb:9c:da:6e:3e: 7a:3c:a4:25:52:8d:de:94:75:9a:41:ea:05:08:68: 68:2d:6f:f6:34:fb:08:26:b2:72:1e:25:fa:97:4d: b6:46:06:b0:ba:fa:17:a5:f6:fa:cb:93:38:a4:c4: d8:ce:da:1c:a8:a0:4c:b4:c3:5f:50:07:de:70:3f: 40:96:2a:7c:69:17:dd:28:62:a1:97:b8:f8:59:78: 46:4a:df:6d:3a:d8:8c:bf:52:cc:c9:13:9f:4e:a7: 42:dd:52:db:b5:d1:44:80:cc:bd:4d:51:25:77:43: 5a:ca:fd:5f:49:94:6e:f1:9f:f5:bb:4a:75:fa:6f: 19:96:9a:90:b5:0a:4b:40:9c:42:9f:03:68:e2:92: e3:3c:d4:c3:5e:ee:a4:11:df:35:e6:1a:56:26:31: 54:c9:a1:4d:a3:53:6c:49:7a:4b:22:e9:ee:c0:8d: 81:9c:16:6d:d6:92:5a:ac:67:21:0f:68:2e:8f:87: 75:42:4c:d1:e9:12:4c:35:63:19:ed:14:6a:43:f9: 0c:fc:18:b6:eb:71:1f:05:0c:3e:28:6d:83:72:78: a4:e8:63:f6:df:4c:63:25:81:be:97:f3:ce:b7:7a: d1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D5:48:9C:92:C9:DE:A9:E1:BF:1E:62:AA:37:0A:74:5C:04:06:91 X509v3 Authority Key Identifier: keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/39VInJLJ3qnhvx5iqjcKdFwEBpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.30.89.0/24 91.218.78.0/23 IPv6: 2a09:a380::/40 Signature Algorithm: sha256WithRSAEncryption 12:22:82:d9:f7:be:0c:8b:be:d5:23:0b:c0:e2:47:41:34:ad: e1:0b:26:38:d2:65:75:94:fe:4f:84:28:89:ff:eb:b6:f2:f4: 56:cc:89:47:19:8a:52:3a:98:d0:e5:99:58:79:83:6d:53:86: e5:57:74:43:16:96:50:5c:55:a3:fd:d6:ec:b9:a2:f0:88:4b: d8:7e:0a:49:38:1c:70:96:03:79:bf:18:25:f8:59:00:69:97: ee:a2:99:6c:66:ad:50:2e:fb:84:36:11:07:64:0b:be:bc:02: 9e:9d:8f:17:55:3d:5c:e6:a3:7c:f1:8c:be:b1:79:55:6f:6c: cf:5e:d5:c9:23:36:ba:fe:ff:d2:26:33:c6:af:d0:cc:7d:79: b5:65:3f:eb:c3:72:4f:c2:d3:de:f4:6d:41:ad:1f:5c:0d:21: 46:90:8e:41:33:61:c7:23:88:39:29:ec:dc:87:15:17:36:d2: 07:96:43:7e:a6:30:47:ce:d2:94:95:a2:11:7d:c9:60:a6:8b: e3:05:26:4e:4d:fd:7e:90:93:34:ef:83:92:78:e7:8f:39:a1: 53:b1:d2:3a:39:cb:35:80:d8:e6:19:a1:5d:83:20:cf:48:0a: 8f:7a:2f:51:3c:55:5c:51:a7:0c:6c:9a:b9:c9:cf:60:75:76: 87:b1:44:fd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt8gLWnIdTdtsqYF4GxwkdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZjViZGE1ODM2NTJlMDU4N2ZlZjg0MTY2YjQxZjZjZGE4 ZjFmNzgwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmQ1NDg5YzkyYzlkZWE5ZTFiZjFlNjJhYTM3MGE3NDVjMDQwNjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCafMh85wkWOX30wG62DlhrYZkp8 j8Xz65zabj56PKQlUo3elHWaQeoFCGhoLW/2NPsIJrJyHiX6l022RgawuvoXpfb6 y5M4pMTYztocqKBMtMNfUAfecD9Alip8aRfdKGKhl7j4WXhGSt9tOtiMv1LMyROf TqdC3VLbtdFEgMy9TVEld0Nayv1fSZRu8Z/1u0p1+m8ZlpqQtQpLQJxCnwNo4pLj PNTDXu6kEd815hpWJjFUyaFNo1NsSXpLIunuwI2BnBZt1pJarGchD2guj4d1QkzR 6RJMNWMZ7RRqQ/kM/Bi263EfBQw+KG2Dcnik6GP230xjJYG+l/POt3rRHwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFN/VSJySyd6p4b8eYqo3CnRcBAaRMB8GA1UdIwQY MBaAFFv1vaWDZS4Fh/74QWa0H2zajx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMt MmE3OWU1ZDIyYWUxLzEvMzlWSW5KTEozcW5odng1aXFqY0tkRndFQnBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMtMmE3OWU1ZDIyYWUx LzEvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQARR5ZAwQB W9pOMA4EAgACMAgDBgAqCaOAADANBgkqhkiG9w0BAQsFAAOCAQEAEiKC2fe+DIu+ 1SMLwOJHQTSt4QsmONJldZT+T4Qoif/rtvL0VsyJRxmKUjqY0OWZWHmDbVOG5Vd0 QxaWUFxVo/3W7Lmi8IhL2H4KSTgccJYDeb8YJfhZAGmX7qKZbGatUC77hDYRB2QL vrwCnp2PF1U9XOajfPGMvrF5VW9sz17VySM2uv7/0iYzxq/QzH15tWU/68NyT8LT 3vRtQa0fXA0hRpCOQTNhxyOIOSns3IcVFzbSB5ZDfqYwR87SlJWiEX3JYKaL4wUm Tk39fpCTNO+DknjnjzmhU7HSOjnLNYDY5hmhXYMgz0gKj3ovUTxVXFGnDGyaucnP YHV2h7FE/Q== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:14 2026 by rpki-client