This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/8W1T1Tey0DN17K0BTFxuuLhoWIM.roa File: 8W1T1Tey0DN17K0BTFxuuLhoWIM.roa (raw, json) Hash identifier: sAFYlRtYOx7SVyMnvJVTJDjRkAVggKjajJqD2AFqcuA= Subject key identifier: F1:6D:53:D5:37:B2:D0:33:75:EC:AD:01:4C:5C:6E:B8:B8:68:58:83 Certificate issuer: /CN=515585aca423697c62236e2b5f91b41e4be7ae58 Certificate serial: 019B7F1531F6C9CA38CCC05E0E0B8CB79A90 Authority key identifier: 51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/8W1T1Tey0DN17K0BTFxuuLhoWIM.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56546 IP address blocks: 31.41.20.0/22 maxlen: 22 31.41.20.0/24 maxlen: 24 31.41.21.0/24 maxlen: 24 31.41.22.0/24 maxlen: 24 31.41.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:31:f6:c9:ca:38:cc:c0:5e:0e:0b:8c:b7:9a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515585aca423697c62236e2b5f91b41e4be7ae58 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f16d53d537b2d03375ecad014c5c6eb8b8685883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:c0:67:c0:89:74:84:d0:16:a0:9b:17:a2: 6b:7e:b4:2d:b9:f9:3a:b8:67:f5:b6:3b:28:14:fa: 4e:cd:94:7e:8b:be:b4:bb:f9:a5:7a:f4:1c:2c:e6: 48:17:f7:9d:24:85:45:64:43:db:98:69:ed:38:f2: 6a:d4:b3:25:f9:fe:ff:93:ad:bc:ba:87:d5:92:fa: 87:7d:4b:a0:8b:db:63:e4:9e:c9:44:73:78:fa:71: c2:21:91:fb:67:a1:c9:8e:40:f2:c5:5a:03:40:8f: d1:12:fe:b0:ff:b1:18:e6:c2:a1:c6:4e:56:86:4f: fc:a0:c2:e4:50:a1:4b:3d:fe:01:74:4c:53:be:fc: fd:50:2e:02:06:64:08:27:bc:b0:fa:41:3a:c1:cc: 64:91:32:ce:a5:b4:b9:82:36:19:11:33:37:32:f6: 8b:c7:c0:fd:ab:ed:8d:f9:00:9e:85:f5:f8:0c:ba: 39:79:8c:73:fd:5d:8b:d8:87:0f:c1:de:59:f8:9a: ad:3c:bd:7e:40:ad:0a:02:e6:e0:b3:80:ce:88:db: 10:d6:c6:b6:dc:51:53:a7:2b:c7:4f:8e:4a:61:9d: 7f:91:34:97:58:67:38:99:8a:df:51:e2:77:24:4e: 45:00:bb:09:dc:d2:16:bc:d3:a6:ee:36:7b:2b:1f: 7a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6D:53:D5:37:B2:D0:33:75:EC:AD:01:4C:5C:6E:B8:B8:68:58:83 X509v3 Authority Key Identifier: keyid:51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/8W1T1Tey0DN17K0BTFxuuLhoWIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.20.0/22 Signature Algorithm: sha256WithRSAEncryption 94:40:cb:3d:ed:24:42:63:3f:82:e2:f8:99:15:2f:38:ce:69: 81:2e:9b:68:a3:cc:b8:8b:34:59:57:59:54:c4:3f:0a:01:31: 20:a5:9b:c4:0f:1f:71:3a:f1:78:97:cc:ca:70:b4:3b:09:c0: 75:ed:fd:95:c0:15:d9:13:2d:a9:22:65:fe:97:13:fc:8a:6f: 8a:cf:7c:32:db:6c:5d:57:30:a3:81:e8:1b:02:1f:7b:82:2d: 29:24:e3:75:5e:6c:60:5e:8b:d1:fb:ee:a9:eb:c3:7b:1e:d9: 82:3f:b7:0a:6d:d1:08:34:a9:69:02:b9:e3:26:fa:85:9a:d9: ac:03:af:06:80:4e:e1:61:1f:de:86:19:9a:bc:20:8f:9b:f4: c1:d9:8a:7c:cf:86:82:36:11:74:fa:2d:61:60:31:4c:8e:43: 40:a7:78:be:86:75:9b:6b:52:8e:75:ff:b2:8c:91:e8:ea:a2: f9:f8:f0:36:66:99:b7:81:6f:25:72:7f:e2:67:47:42:f0:6d: 42:a4:40:cf:b9:15:b2:2a:50:13:39:a0:6c:68:69:95:7c:a3: ce:64:fc:3e:d6:35:01:c5:45:8b:d4:48:93:db:8b:bf:a2:21: 65:52:a4:b6:3c:2e:f7:b5:18:a7:39:17:a8:d2:7a:14:ef:1a: ab:7d:9f:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTH2yco4zMBeDguMt5qQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNTU4NWFjYTQyMzY5N2M2MjIzNmUyYjVmOTFiNDFlNGJl N2FlNTgwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTZkNTNkNTM3YjJkMDMzNzVlY2FkMDE0YzVjNmViOGI4Njg1ODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqATAZ8CJdITQFqCbF6JrfrQtufk6 uGf1tjsoFPpOzZR+i760u/mlevQcLOZIF/edJIVFZEPbmGntOPJq1LMl+f7/k628 uofVkvqHfUugi9tj5J7JRHN4+nHCIZH7Z6HJjkDyxVoDQI/REv6w/7EY5sKhxk5W hk/8oMLkUKFLPf4BdExTvvz9UC4CBmQIJ7yw+kE6wcxkkTLOpbS5gjYZETM3MvaL x8D9q+2N+QCehfX4DLo5eYxz/V2L2IcPwd5Z+JqtPL1+QK0KAubgs4DOiNsQ1sa2 3FFTpyvHT45KYZ1/kTSXWGc4mYrfUeJ3JE5FALsJ3NIWvNOm7jZ7Kx96CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPFtU9U3stAzdeytAUxcbri4aFiDMB8GA1UdIwQY MBaAFFFVhaykI2l8YiNuK1+RtB5L565YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVZXRnJLUWphWHhpSTI0clg1RzBIa3ZucmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ZDNmMTUtNDdkMC00MDY5LWI1OTYt NTFhMGY2YmRlNGY2LzEvOFcxVDFUZXkwRE4xN0swQlRGeHV1TGhvV0lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85ZDNmMTUtNDdkMC00MDY5LWI1OTYtNTFhMGY2YmRlNGY2 LzEvVVZXRnJLUWphWHhpSTI0clg1RzBIa3ZucmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHykUMA0G CSqGSIb3DQEBCwUAA4IBAQCUQMs97SRCYz+C4viZFS84zmmBLptoo8y4izRZV1lU xD8KATEgpZvEDx9xOvF4l8zKcLQ7CcB17f2VwBXZEy2pImX+lxP8im+Kz3wy22xd VzCjgegbAh97gi0pJON1XmxgXovR++6p68N7HtmCP7cKbdEINKlpArnjJvqFmtms A68GgE7hYR/ehhmavCCPm/TB2Yp8z4aCNhF0+i1hYDFMjkNAp3i+hnWba1KOdf+y jJHo6qL5+PA2Zpm3gW8lcn/iZ0dC8G1CpEDPuRWyKlATOaBsaGmVfKPOZPw+1jUB xUWL1EiT24u/oiFlUqS2PC73tRinOReo0noU7xqrfZ+I -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:38 2026 by rpki-client