This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/weY_2856hTe3pr2rRDSeNZrrwGY.roa File: weY_2856hTe3pr2rRDSeNZrrwGY.roa (raw, json) Hash identifier: AgQxLvovPKe7WQZGV1eUhCzA8gghQ7NklaBXL9qGr3k= Subject key identifier: C1:E6:3F:DB:CE:7A:85:37:B7:A6:BD:AB:44:34:9E:35:9A:EB:C0:66 Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66 Certificate serial: 019B7F81033D9BAB7EC875A5CF963D2A07A2 Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/weY_2856hTe3pr2rRDSeNZrrwGY.roa Signing time: Fri 02 Jan 2026 16:18:39 +0000 ROA not before: Fri 02 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198392 IP address blocks: 31.217.224.0/24 maxlen: 24 31.217.225.0/24 maxlen: 24 31.217.226.0/24 maxlen: 24 31.217.227.0/24 maxlen: 24 31.217.228.0/24 maxlen: 24 31.217.229.0/24 maxlen: 24 31.217.230.0/24 maxlen: 24 31.217.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:03:3d:9b:ab:7e:c8:75:a5:cf:96:3d:2a:07:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66 Validity Not Before: Jan 2 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1e63fdbce7a8537b7a6bdab44349e359aebc066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:2e:99:82:f6:1e:ff:ab:7b:d7:1a:d3:16: 9c:c1:44:75:4d:3a:2d:08:9c:1d:2b:72:9f:bd:b5: 9a:da:8d:6d:33:76:84:e2:17:89:fe:3c:ec:35:d9: b1:f8:6d:70:26:03:df:5b:26:2f:a5:06:48:33:99: f4:27:a7:47:9d:ee:e8:30:14:95:24:1b:f1:02:ba: 60:ab:95:34:d0:de:67:3d:ee:5a:74:57:b6:f4:a9: c4:b9:da:72:f0:a6:dc:77:6e:cf:75:6d:31:d8:55: 67:3d:6d:16:57:5b:38:5b:ef:ed:54:34:17:b7:41: cf:8d:9a:6c:ff:7a:99:3a:af:8c:32:f4:bb:8a:13: d5:a2:1a:c2:5c:c4:e8:5f:25:e4:3d:b2:cb:27:f3: ae:11:fa:a4:5b:fa:b5:d7:fb:88:e2:de:0e:d9:47: 83:37:da:7d:e0:7e:c1:52:11:fc:d5:b7:a4:0b:b2: 42:32:4a:1e:ea:64:08:f4:3f:8e:58:c7:96:71:25: a3:cf:15:8f:2c:5f:6a:5e:20:e9:64:c2:ef:f8:2d: 12:e2:43:87:55:17:c6:db:4f:f7:e4:94:4e:58:f0: 0a:2c:a9:55:c8:12:25:55:a3:4f:ba:1f:c1:eb:51: ec:2e:35:93:b4:0e:0c:01:c0:86:16:88:90:5a:58: bb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E6:3F:DB:CE:7A:85:37:B7:A6:BD:AB:44:34:9E:35:9A:EB:C0:66 X509v3 Authority Key Identifier: keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/weY_2856hTe3pr2rRDSeNZrrwGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.217.224.0/21 Signature Algorithm: sha256WithRSAEncryption 46:57:64:ee:d1:31:45:00:32:b7:bb:25:6d:63:8d:89:c9:93: d2:b3:cd:a1:8a:1c:71:af:d0:2f:00:78:85:54:82:59:2f:f2: 7c:a8:73:d6:78:0f:e9:9f:79:44:83:73:bc:12:79:ee:ba:92: 25:f7:3d:bd:8f:6b:3b:01:99:41:8d:46:3a:58:62:60:24:47: cf:aa:e6:a5:5b:02:44:f1:d5:93:bf:28:19:59:1a:7a:a5:b2: a8:1d:d5:6d:17:f8:fb:43:5a:e4:de:31:a6:bd:1f:91:9b:93: 5d:2d:9d:fb:67:24:a1:f2:6c:dc:90:e7:e0:6e:3c:34:97:6f: 91:e2:5d:21:e3:56:fe:c6:47:50:6f:c1:26:7d:e9:8a:6e:09: 9c:7b:06:c3:b0:1d:cc:ab:1b:16:17:87:6b:a6:07:81:a8:b7: 64:34:c6:8e:74:f3:3f:27:39:6f:fe:87:e9:bf:90:2b:fd:fb: 52:40:b7:40:50:e7:59:da:c7:dd:99:59:b1:df:7b:b1:f5:70: a5:00:d5:00:61:df:f6:5e:f5:d3:7d:8b:f3:0b:8c:a5:c7:6d: bf:38:b7:40:4a:9d:48:72:73:5f:df:a6:3a:a3:fe:68:68:6a: 77:7f:e1:7d:b8:e9:30:8a:df:55:be:ae:c1:c0:ef:34:5a:24: 60:c7:dc:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gQM9m6t+yHWlz5Y9KgeiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OGIzNzQzNmE4OWZhY2EyYzRmN2U2MGY5YWM0ZDQ3YTE5 OWFkNjYwHhcNMjYwMTAyMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWU2M2ZkYmNlN2E4NTM3YjdhNmJkYWI0NDM0OWUzNTlhZWJjMDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtgumYL2Hv+re9ca0xacwUR1TTot CJwdK3KfvbWa2o1tM3aE4heJ/jzsNdmx+G1wJgPfWyYvpQZIM5n0J6dHne7oMBSV JBvxArpgq5U00N5nPe5adFe29KnEudpy8Kbcd27PdW0x2FVnPW0WV1s4W+/tVDQX t0HPjZps/3qZOq+MMvS7ihPVohrCXMToXyXkPbLLJ/OuEfqkW/q11/uI4t4O2UeD N9p94H7BUhH81bekC7JCMkoe6mQI9D+OWMeWcSWjzxWPLF9qXiDpZMLv+C0S4kOH VRfG20/35JROWPAKLKlVyBIlVaNPuh/B61HsLjWTtA4MAcCGFoiQWli7TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMHmP9vOeoU3t6a9q0Q0njWa68BmMB8GA1UdIwQY MBaAFJWLN0NqifrKLE9+YPmsTUehma1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2Ut MTIxMjUzMTJiMmEzLzEvd2VZXzI4NTZoVGUzcHIyclJEU2VOWnJyd0dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2UtMTIxMjUzMTJiMmEz LzEvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH9ngMA0G CSqGSIb3DQEBCwUAA4IBAQBGV2Tu0TFFADK3uyVtY42JyZPSs82hihxxr9AvAHiF VIJZL/J8qHPWeA/pn3lEg3O8EnnuupIl9z29j2s7AZlBjUY6WGJgJEfPqualWwJE 8dWTvygZWRp6pbKoHdVtF/j7Q1rk3jGmvR+Rm5NdLZ37ZySh8mzckOfgbjw0l2+R 4l0h41b+xkdQb8EmfemKbgmcewbDsB3MqxsWF4drpgeBqLdkNMaOdPM/Jzlv/ofp v5Ar/ftSQLdAUOdZ2sfdmVmx33ux9XClANUAYd/2XvXTfYvzC4ylx22/OLdASp1I cnNf36Y6o/5oaGp3f+F9uOkwit9Vvq7BwO80WiRgx9w6 -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:16 2026 by rpki-client