This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/39TW_rteZEmG2yqgCNBCF7PjZJA.roa
File: 39TW_rteZEmG2yqgCNBCF7PjZJA.roa (raw, json)
Hash identifier: QiC1evAcCRcezlzRHbRvqDU6mKjNFQuGOEOLFGB1NnM=
Subject key identifier: DF:D4:D6:FE:BB:5E:64:49:86:DB:2A:A0:08:D0:42:17:B3:E3:64:90
Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial: 019B7C1220FCC8D71A22DD439B4E8DC20076
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/39TW_rteZEmG2yqgCNBCF7PjZJA.roa
Signing time: Fri 02 Jan 2026 00:18:41 +0000
ROA not before: Fri 02 Jan 2026 00:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137
IP address blocks: 193.43.18.0/23 maxlen: 23
193.43.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:20:fc:c8:d7:1a:22:dd:43:9b:4e:8d:c2:00:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Validity
Not Before: Jan 2 00:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfd4d6febb5e644986db2aa008d04217b3e36490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:a9:3e:73:df:b9:84:0f:4d:11:7e:b5:49:
47:2c:c0:e2:c7:5d:9c:a9:19:fa:11:aa:a9:b2:9f:
33:f0:a3:1e:3e:eb:8d:7b:ca:fb:97:76:b5:87:44:
ca:b8:6b:3c:f0:cf:c8:30:fb:ba:5b:8d:73:6c:7f:
47:67:21:05:67:b1:fd:29:c7:25:16:1a:fc:9a:52:
cc:f4:50:f2:b9:30:a8:1c:39:94:33:09:47:1b:fe:
3a:43:b5:80:9e:6d:88:75:55:eb:b6:27:2a:2b:21:
39:90:34:8d:37:cf:0c:68:ec:be:05:9e:c5:28:58:
07:21:e5:79:8b:c4:51:97:d2:30:61:71:f7:14:6a:
f4:d0:3e:b2:57:bd:09:b8:03:f8:bc:6d:37:34:86:
90:36:76:df:cc:60:c2:1c:9a:fd:48:59:af:66:52:
07:89:f7:ab:00:79:92:08:3e:6e:03:3d:96:01:01:
f0:a0:23:47:6f:6a:3f:2f:ef:96:0d:5c:76:08:62:
28:ba:f7:af:b3:d4:8b:42:24:ce:ba:d5:56:22:ef:
c0:08:6d:9b:08:8a:b7:eb:35:9a:2e:04:59:c0:0a:
6a:61:6a:26:41:d8:eb:d6:ea:5b:3d:a7:3a:7b:70:
15:d9:2f:a9:f9:b2:43:34:7b:6f:5f:84:a2:bc:c2:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D4:D6:FE:BB:5E:64:49:86:DB:2A:A0:08:D0:42:17:B3:E3:64:90
X509v3 Authority Key Identifier:
keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/39TW_rteZEmG2yqgCNBCF7PjZJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.18.0/23
193.43.117.0/24
Signature Algorithm: sha256WithRSAEncryption
75:08:0e:59:a6:a3:01:cc:04:ef:8c:5e:33:06:c5:99:b6:84:
61:5a:2e:13:72:b7:71:cb:b2:12:c6:d7:52:55:92:bc:7c:f0:
1e:a8:28:68:23:47:28:2d:40:13:37:65:47:3d:44:14:1a:85:
9c:02:bb:3d:ae:f4:1d:1d:55:69:5b:d3:c9:f8:e7:11:24:46:
9f:2c:39:16:91:54:ed:ea:07:fd:75:02:1b:bb:fa:03:d4:03:
8a:28:bd:7c:a5:18:df:d3:76:18:7f:3d:e2:5c:e3:c3:59:cd:
bb:b5:5a:e9:52:d7:7d:7c:c9:fb:cd:02:7c:ba:df:1c:cd:47:
89:81:a1:f8:fe:3b:5d:c4:e2:4d:f1:8d:00:7b:8c:b9:4b:11:
33:ae:8b:54:fe:a5:34:04:32:5a:e4:09:c9:8a:96:67:80:97:
e5:ff:d5:78:df:27:34:b6:23:a2:c0:1a:40:3f:90:10:70:4c:
ce:6d:0d:7c:31:b1:3a:f9:31:a2:64:14:4b:0f:f4:bc:38:ab:
71:ac:7f:cc:59:37:40:16:b2:03:45:39:c8:3a:98:ff:9c:ba:
d4:5c:5b:52:87:b3:b2:d7:85:1a:3e:4c:e5:01:24:8c:72:f4:
2e:14:a5:a6:a5:8a:be:65:35:b3:b5:58:c1:28:4e:c0:89:d2:
32:d6:da:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:47:17 2026 by rpki-client