This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/THMUwp1z_8yM4YT3tCOSI8jHXpc.roa File: THMUwp1z_8yM4YT3tCOSI8jHXpc.roa (raw, json) Hash identifier: Lr+q9lzNVfojfVbAAoJyDVcA+Kbg/x3ZRCV9JR35aYs= Subject key identifier: 4C:73:14:C2:9D:73:FF:CC:8C:E1:84:F7:B4:23:92:23:C8:C7:5E:97 Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3 Certificate serial: 019B7EA57733F9761B5C473514D1F0C1D194 Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/THMUwp1z_8yM4YT3tCOSI8jHXpc.roa Signing time: Fri 02 Jan 2026 12:18:51 +0000 ROA not before: Fri 02 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48595 IP address blocks: 31.131.128.0/21 maxlen: 24 31.131.128.0/24 maxlen: 24 31.131.129.0/24 maxlen: 24 31.131.130.0/24 maxlen: 24 31.131.130.128/26 maxlen: 26 31.131.131.0/24 maxlen: 24 31.131.132.0/24 maxlen: 24 31.131.133.0/24 maxlen: 24 31.131.134.0/24 maxlen: 24 31.131.134.128/25 maxlen: 25 31.131.135.0/24 maxlen: 24 31.131.136.0/22 maxlen: 24 31.131.136.0/24 maxlen: 24 31.131.136.128/25 maxlen: 25 31.131.137.0/24 maxlen: 24 31.131.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:77:33:f9:76:1b:5c:47:35:14:d1:f0:c1:d1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3 Validity Not Before: Jan 2 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c7314c29d73ffcc8ce184f7b4239223c8c75e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5f:9d:26:41:1a:fe:fd:06:84:9a:05:32:a6: 89:da:44:7a:03:aa:09:fd:9a:a8:18:c5:ca:e8:13: 63:f2:94:1b:3a:a4:9b:b5:9d:d8:ee:54:5d:db:48: 5f:0c:b2:2c:ca:f2:55:9d:60:a9:9c:4f:ab:d1:db: 58:da:38:6c:ae:16:1a:c6:10:ce:f4:97:d2:07:40: 1a:1a:76:ed:e6:4b:d6:03:87:8f:6d:3b:d8:d8:1e: 9b:49:9b:a2:a7:77:4c:23:bc:ad:ba:7f:c5:78:98: da:81:c3:77:72:ba:cf:02:e1:cd:f9:fc:89:fb:4a: d8:fb:c8:79:4d:83:c5:16:e2:b8:aa:0d:98:37:aa: 22:65:63:7a:85:f1:c6:84:b9:65:2d:a3:ca:69:33: 9d:5a:b1:f7:6d:cd:7a:3c:35:fb:80:c0:32:68:e0: c4:1a:cb:1e:ff:cc:14:9e:4f:ef:0c:11:09:b9:f3: 9c:53:31:90:a7:f4:2c:46:3c:d2:60:ac:83:de:a5: 43:e7:e0:c8:95:06:e5:ab:f2:50:2e:c8:48:d3:a0: 1a:ce:7b:35:45:d7:ab:eb:48:65:c8:94:4f:09:22: 71:2e:dd:a4:6d:0e:c8:b7:87:d0:3c:05:1f:38:d0: ea:b5:b0:5e:1f:57:2a:91:ee:8a:a1:b1:9a:3d:71: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:73:14:C2:9D:73:FF:CC:8C:E1:84:F7:B4:23:92:23:C8:C7:5E:97 X509v3 Authority Key Identifier: keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/THMUwp1z_8yM4YT3tCOSI8jHXpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.131.128.0-31.131.139.255 Signature Algorithm: sha256WithRSAEncryption 12:f2:48:f5:f1:ad:92:48:48:e4:ce:a6:8f:71:de:b8:de:23: e2:4c:80:1b:7d:f0:17:02:09:24:15:e3:8a:c0:46:97:87:eb: 29:a5:08:bd:aa:c2:fe:e0:8e:f5:01:7c:cc:19:43:c5:ef:fc: bf:ac:8e:3d:6c:d8:19:3a:53:ee:f9:bc:7c:0f:b0:06:d0:ce: 36:5b:d7:f6:08:d1:3c:3f:53:5d:39:54:c0:52:ab:31:db:53: f9:7d:04:d0:c7:ce:bc:af:27:42:94:77:44:44:91:1c:36:b5: b3:c8:db:cf:91:87:bb:7a:9e:ea:b8:cb:57:41:86:54:b5:33: ad:91:3e:57:dd:50:49:bb:48:64:b5:fd:34:15:8c:37:bd:a7: a9:fa:a6:fa:f3:9f:30:26:f6:a2:c6:db:e5:0b:26:65:43:e4: e0:bb:e1:e3:ef:98:b8:03:17:09:81:b2:a9:60:fd:3f:40:a8: 97:a3:06:2b:bc:74:13:64:dc:99:7e:b1:c8:e7:62:91:58:fa: ad:ae:08:fe:03:80:8d:2f:f1:79:87:56:fc:34:01:1c:a5:67: 22:05:67:d5:c4:e2:53:ed:22:4e:fc:91:d1:9e:27:fa:9a:99: f7:26:51:a7:97:68:77:e5:ea:a3:f4:a9:ff:52:a5:1f:43:d1: 07:17:0f:56 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pXcz+XYbXEc1FNHwwdGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMTE3OWYwYTM1Y2YwN2MxNjI5NjcyNjYyODY2Y2EwMDFm NzViZDMwHhcNMjYwMTAyMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzczMTRjMjlkNzNmZmNjOGNlMTg0ZjdiNDIzOTIyM2M4Yzc1ZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl+dJkEa/v0GhJoFMqaJ2kR6A6oJ /ZqoGMXK6BNj8pQbOqSbtZ3Y7lRd20hfDLIsyvJVnWCpnE+r0dtY2jhsrhYaxhDO 9JfSB0AaGnbt5kvWA4ePbTvY2B6bSZuip3dMI7ytun/FeJjagcN3crrPAuHN+fyJ +0rY+8h5TYPFFuK4qg2YN6oiZWN6hfHGhLllLaPKaTOdWrH3bc16PDX7gMAyaODE Gsse/8wUnk/vDBEJufOcUzGQp/QsRjzSYKyD3qVD5+DIlQblq/JQLshI06Aazns1 Rder60hlyJRPCSJxLt2kbQ7It4fQPAUfONDqtbBeH1cqke6KobGaPXGhiQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFExzFMKdc//MjOGE97QjkiPIx16XMB8GA1UdIwQY MBaAFI4RefCjXPB8FilnJmKGbKAB91vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAt NGNiYzY3MjE5YjRhLzEvVEhNVXdwMXpfOHlNNFlUM3RDT1NJOGpIWHBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAtNGNiYzY3MjE5YjRh LzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAcfg4AD BAIfg4gwDQYJKoZIhvcNAQELBQADggEBABLySPXxrZJISOTOpo9x3rjeI+JMgBt9 8BcCCSQV44rARpeH6ymlCL2qwv7gjvUBfMwZQ8Xv/L+sjj1s2Bk6U+75vHwPsAbQ zjZb1/YI0Tw/U105VMBSqzHbU/l9BNDHzryvJ0KUd0REkRw2tbPI28+Rh7t6nuq4 y1dBhlS1M62RPlfdUEm7SGS1/TQVjDe9p6n6pvrznzAm9qLG2+ULJmVD5OC74ePv mLgDFwmBsqlg/T9AqJejBiu8dBNk3Jl+scjnYpFY+q2uCP4DgI0v8XmHVvw0ARyl ZyIFZ9XE4lPtIk78kdGeJ/qamfcmUaeXaHfl6qP0qf9SpR9D0QcXD1Y= -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:29 2026 by rpki-client