This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/39hneJOhhgQ3tuCJz5rk0Hahg8Q.roa File: 39hneJOhhgQ3tuCJz5rk0Hahg8Q.roa (raw, json) Hash identifier: 3hQnINDrkdh7j9/KioGKynE1ZZ9IVPMy4iOK1ZGZOvM= Subject key identifier: DF:D8:67:78:93:A1:86:04:37:B6:E0:89:CF:9A:E4:D0:76:A1:83:C4 Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Certificate serial: 019B7AC7F7FF170E8777C4E536FB6792C58A Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/39hneJOhhgQ3tuCJz5rk0Hahg8Q.roa Signing time: Thu 01 Jan 2026 18:18:04 +0000 ROA not before: Thu 01 Jan 2026 18:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21507 IP address blocks: 62.144.32.0/19 maxlen: 19 195.63.0.0/19 maxlen: 19 195.63.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f7:ff:17:0e:87:77:c4:e5:36:fb:67:92:c5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Validity Not Before: Jan 1 18:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfd8677893a1860437b6e089cf9ae4d076a183c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:62:c4:35:e2:15:1b:2d:4d:3c:e3:57:7d: 0d:06:61:5f:d1:16:a2:72:86:27:57:d3:61:4a:66: d5:e6:c4:c6:95:94:6e:0b:a6:f0:75:89:fa:61:ca: 70:9f:aa:3f:0a:86:c4:aa:64:74:0c:d7:85:46:2d: 3e:a9:5d:cf:4b:1d:09:8d:6b:e4:5d:e2:82:19:2c: a9:48:b2:db:26:a9:7f:1d:36:38:52:ae:61:d3:44: a3:b0:03:bf:d8:3e:b3:0e:2c:0b:fb:96:2c:17:c9: 31:e8:b6:74:72:99:f8:ba:48:c9:db:5f:f1:e2:b7: 3c:7b:5a:6c:4b:e2:96:6e:4e:b0:ac:c7:18:1a:ea: 7b:40:ec:fe:10:dc:bd:d1:53:03:af:c2:79:ee:e1: 50:e0:3d:91:7f:7b:69:0d:0c:5b:9b:3b:30:78:c9: 18:4a:8c:bc:a9:61:8f:06:c0:83:46:25:9e:d7:c5: a7:33:0f:be:11:1c:f5:f7:cd:77:8b:59:0b:11:fb: 87:fa:58:8b:a0:4d:2d:fd:61:b2:d5:b0:e7:ea:63: ca:2f:27:9d:12:8e:83:01:b9:81:cb:eb:81:41:03: fa:9c:c7:e8:22:5c:2a:a9:01:a3:3e:a1:82:f1:18: b2:93:d3:f0:72:11:53:e1:42:46:0c:f4:d0:1e:ab: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D8:67:78:93:A1:86:04:37:B6:E0:89:CF:9A:E4:D0:76:A1:83:C4 X509v3 Authority Key Identifier: keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/39hneJOhhgQ3tuCJz5rk0Hahg8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.32.0/19 195.63.0.0/19 195.63.192.0/18 Signature Algorithm: sha256WithRSAEncryption 20:9d:00:1d:4a:18:c7:f4:7a:26:d8:0d:a4:d0:86:67:1b:cb: b2:b2:78:e0:82:ac:0d:ff:96:37:b7:a2:11:96:58:f6:36:92: dc:f4:87:37:ed:d6:6f:c2:c1:7b:60:20:69:b2:5e:0d:99:e8: 6d:85:4e:1b:60:8a:91:85:e8:fa:f5:33:46:66:a6:48:f8:ec: f3:db:b9:78:96:6f:3f:35:22:33:b3:ce:e5:62:95:30:78:94: e6:14:eb:14:6f:d0:f4:54:57:a1:24:9f:39:53:1d:76:5c:26: 6f:ba:51:16:09:56:75:15:7c:26:aa:68:17:fc:cd:ac:21:72: 9a:50:4c:3e:6a:8a:cc:c6:11:c1:b0:ff:7f:b4:49:ee:d0:64: 46:85:04:a6:c2:19:a3:1b:3f:a1:2c:9e:c4:7c:0a:1d:67:f3: a7:d7:88:6e:c7:96:e4:ee:37:e3:19:79:75:ed:65:e3:a7:70: 3d:c4:11:e1:9e:b6:39:4c:f5:5b:b7:bf:ac:52:37:b8:75:f1: 04:3e:ce:3d:2f:c7:40:6a:3b:18:15:2c:13:98:6c:bd:f7:3f: 25:8f:d4:fa:e6:45:65:93:79:a5:c5:a3:33:ba:11:a2:85:0b: 38:c7:2b:18:fd:51:b7:a1:ab:26:eb:8d:3e:76:b2:bc:fd:1b: 54:2c:6b:cb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x/f/Fw6Hd8TlNvtnksWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx ZGQ0MTMwHhcNMjYwMTAxMTgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmQ4Njc3ODkzYTE4NjA0MzdiNmUwODljZjlhZTRkMDc2YTE4M2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxxixDXiFRstTTzjV30NBmFf0Rai coYnV9NhSmbV5sTGlZRuC6bwdYn6Ycpwn6o/CobEqmR0DNeFRi0+qV3PSx0JjWvk XeKCGSypSLLbJql/HTY4Uq5h00SjsAO/2D6zDiwL+5YsF8kx6LZ0cpn4ukjJ21/x 4rc8e1psS+KWbk6wrMcYGup7QOz+ENy90VMDr8J57uFQ4D2Rf3tpDQxbmzsweMkY Soy8qWGPBsCDRiWe18WnMw++ERz19813i1kLEfuH+liLoE0t/WGy1bDn6mPKLyed Eo6DAbmBy+uBQQP6nMfoIlwqqQGjPqGC8Riyk9PwchFT4UJGDPTQHqvNXwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN/YZ3iToYYEN7bgic+a5NB2oYPEMB8GA1UdIwQY MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct OTU4MTEyYTQ4OWE0LzEvMzlobmVKT2hoZ1EzdHVDSno1cmswSGFoZzhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0 LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFPpAgAwQF wz8AAwQGwz/AMA0GCSqGSIb3DQEBCwUAA4IBAQAgnQAdShjH9Hom2A2k0IZnG8uy snjggqwN/5Y3t6IRllj2NpLc9Ic37dZvwsF7YCBpsl4NmehthU4bYIqRhej69TNG ZqZI+Ozz27l4lm8/NSIzs87lYpUweJTmFOsUb9D0VFehJJ85Ux12XCZvulEWCVZ1 FXwmqmgX/M2sIXKaUEw+aorMxhHBsP9/tEnu0GRGhQSmwhmjGz+hLJ7EfAodZ/On 14hux5bk7jfjGXl17WXjp3A9xBHhnrY5TPVbt7+sUje4dfEEPs49L8dAajsYFSwT mGy99z8lj9T65kVlk3mlxaMzuhGihQs4xysY/VG3oasm640+drK8/RtULGvL -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:19 2026 by rpki-client