This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WzVSfSCn9MA71szaeG3UuHYtodU.roa File: WzVSfSCn9MA71szaeG3UuHYtodU.roa (raw, json) Hash identifier: kWQzLXCD3ayRG08QODIsJik0zppGZ5zBgdeluY209BY= Subject key identifier: 5B:35:52:7D:20:A7:F4:C0:3B:D6:CC:DA:78:6D:D4:B8:76:2D:A1:D5 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CDD1F7610CECC129BCBF5E1D26AC8 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WzVSfSCn9MA71szaeG3UuHYtodU.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215623 IP address blocks: 31.15.20.0/24 maxlen: 24 31.15.21.0/24 maxlen: 24 31.15.22.0/24 maxlen: 24 31.15.23.0/24 maxlen: 24 192.162.66.0/24 maxlen: 24 192.162.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:dd:1f:76:10:ce:cc:12:9b:cb:f5:e1:d2:6a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b35527d20a7f4c03bd6ccda786dd4b8762da1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:84:5b:1d:ca:89:59:5e:47:97:46:e6:4c: 75:d8:f4:5b:bd:f0:89:0c:af:6f:0b:b3:b6:51:22: 92:56:a5:f3:63:15:d4:8c:50:93:59:95:75:81:c3: bc:46:fd:06:30:d4:23:09:29:ae:f2:53:9e:2d:b8: c5:86:eb:ee:04:ab:bd:87:fc:62:e4:f4:56:c4:63: c5:ba:de:d2:db:9a:ca:7e:c3:5a:61:cf:93:73:e1: 87:f9:55:cd:ae:11:ad:6d:db:f9:9d:dc:66:c3:a2: 93:cc:d7:6f:4c:77:1f:ab:58:ad:f3:f7:5c:a5:0b: 3f:8e:8d:b5:64:7a:df:e9:b1:00:b6:23:d9:bc:a7: 0d:55:81:62:88:96:19:27:2d:21:be:87:fa:9a:e8: 95:9f:50:bc:49:e8:09:29:0d:98:1f:71:8a:ee:fa: 42:e7:92:38:52:ce:46:3f:49:3c:df:54:e9:61:18: c3:09:39:a7:7f:02:96:d4:fb:a6:e1:df:86:b0:ff: bc:74:33:0b:73:68:d7:95:60:9f:4d:09:82:7e:0d: c3:31:8d:fd:f1:6a:6e:28:83:b6:d7:18:14:51:b3: 53:af:7e:63:6e:69:da:4d:dc:28:63:3c:e6:cd:8a: 90:92:31:43:ff:d2:0e:4c:3b:8c:f6:86:4f:77:98: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:35:52:7D:20:A7:F4:C0:3B:D6:CC:DA:78:6D:D4:B8:76:2D:A1:D5 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WzVSfSCn9MA71szaeG3UuHYtodU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.20.0/22 192.162.66.0/23 Signature Algorithm: sha256WithRSAEncryption 22:a6:75:ba:2f:1e:46:2c:c6:b2:6b:03:3e:65:8a:a9:f0:77: c8:3d:c8:b1:f6:7d:59:95:07:32:ce:42:0a:9d:6b:db:17:82: 5b:57:b8:c2:7f:7d:c9:76:f0:30:29:88:fd:f3:43:aa:62:58: b6:6b:70:a3:c1:13:78:98:02:a2:01:5f:69:0d:7c:0e:fa:d7: 90:52:7f:dd:f3:f7:38:55:5b:fb:1d:fd:f8:05:5d:2c:9a:a9: f6:e4:e8:80:bd:fa:7e:9f:fd:a5:4f:55:58:d8:b5:09:3c:d5: 7f:1d:25:96:2d:33:b6:c8:24:dc:be:9d:7f:3c:7e:c3:e8:23: 9e:8d:cf:6f:c5:9f:c3:c8:d2:4b:bd:3e:fe:52:c5:32:0c:4a: 17:19:85:00:13:84:75:8e:be:c5:8d:40:b6:bf:51:78:ee:8b: 0e:43:1a:27:5c:ff:35:6d:e2:e1:a8:d9:e2:e2:ee:17:c1:6c: a7:e9:3d:8f:96:23:62:5b:fc:23:8e:82:75:e2:55:b7:01:79: c2:c4:06:6a:4d:41:48:c1:54:7d:6a:66:a5:64:c3:30:2f:09: ce:e6:66:af:d8:22:40:fd:c4:b7:19:63:6c:1a:71:aa:e8:4e: 61:f1:ff:83:b2:99:08:e2:b4:a3:80:45:67:7c:a0:39:ff:20: 12:38:bb:19 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XN0fdhDOzBKby/Xh0mrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjM1NTI3ZDIwYTdmNGMwM2JkNmNjZGE3ODZkZDRiODc2MmRhMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhmEWx3KiVleR5dG5kx12PRbvfCJ DK9vC7O2USKSVqXzYxXUjFCTWZV1gcO8Rv0GMNQjCSmu8lOeLbjFhuvuBKu9h/xi 5PRWxGPFut7S25rKfsNaYc+Tc+GH+VXNrhGtbdv5ndxmw6KTzNdvTHcfq1it8/dc pQs/jo21ZHrf6bEAtiPZvKcNVYFiiJYZJy0hvof6muiVn1C8SegJKQ2YH3GK7vpC 55I4Us5GP0k831TpYRjDCTmnfwKW1Pum4d+GsP+8dDMLc2jXlWCfTQmCfg3DMY39 8WpuKIO21xgUUbNTr35jbmnaTdwoYzzmzYqQkjFD/9IOTDuM9oZPd5jPHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFs1Un0gp/TAO9bM2nht1Lh2LaHVMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvV3pWU2ZTQ245TUE3MXN6YWVHM1V1SFl0b2RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCHw8UAwQB wKJCMA0GCSqGSIb3DQEBCwUAA4IBAQAipnW6Lx5GLMayawM+ZYqp8HfIPcix9n1Z lQcyzkIKnWvbF4JbV7jCf33JdvAwKYj980OqYli2a3CjwRN4mAKiAV9pDXwO+teQ Un/d8/c4VVv7Hf34BV0smqn25OiAvfp+n/2lT1VY2LUJPNV/HSWWLTO2yCTcvp1/ PH7D6COejc9vxZ/DyNJLvT7+UsUyDEoXGYUAE4R1jr7FjUC2v1F47osOQxonXP81 beLhqNni4u4XwWyn6T2PliNiW/wjjoJ14lW3AXnCxAZqTUFIwVR9amalZMMwLwnO 5mav2CJA/cS3GWNsGnGq6E5h8f+DspkI4rSjgEVnfKA5/yASOLsZ -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:15 2026 by rpki-client