This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/IjGrmYJ01VhSBHqQt8lEwuCam0E.roa File: IjGrmYJ01VhSBHqQt8lEwuCam0E.roa (raw, json) Hash identifier: wRhA0UxHh3OEkpsw+jN2w//ZJrtHgK8+FbKZBNihmv0= Subject key identifier: 22:31:AB:99:82:74:D5:58:52:04:7A:90:B7:C9:44:C2:E0:9A:9B:41 Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57 Certificate serial: 019B77590A010489CB731EC962002A9CDF0F Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/IjGrmYJ01VhSBHqQt8lEwuCam0E.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31735 IP address blocks: 193.28.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0a:01:04:89:cb:73:1e:c9:62:00:2a:9c:df:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2231ab998274d55852047a90b7c944c2e09a9b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:0f:aa:84:5c:1e:6c:f8:3a:b3:2e:2e:80: e0:7d:42:d4:88:02:54:f4:c6:aa:55:a8:64:5e:f3: 89:5c:e1:3f:95:44:c8:c6:d6:61:7b:29:ce:d2:fc: 89:bb:15:fa:c6:bf:35:62:e1:4b:78:1a:4c:85:da: 58:11:03:cd:55:9f:2e:01:e5:7b:1c:07:93:a7:c1: 35:10:0d:4c:c3:75:22:30:8d:45:54:4b:6e:3d:14: 83:f9:15:5a:00:40:51:03:0d:a8:17:78:e0:6d:2c: 6e:2d:d0:c4:3a:16:71:fe:dd:f0:0b:ab:e4:91:c7: 50:84:fa:98:bd:d0:65:88:99:f6:02:4e:a8:a1:10: 72:49:ba:d5:75:c4:36:e7:6e:4b:33:9d:eb:cd:ce: 4b:a7:e2:7f:45:82:38:de:a4:2b:6d:e9:c2:c3:13: 9d:6b:ac:9b:9e:ff:9b:20:21:0d:c3:b8:6b:5f:2e: 5f:64:91:37:1a:d5:54:1e:f2:3e:ba:83:56:e4:49: c5:9f:56:b7:31:2d:23:42:e2:b4:fd:52:08:19:e4: 20:56:71:4f:14:c1:74:37:37:6a:c7:0e:6e:b6:92: 7d:a2:81:ec:7b:b6:4e:5d:f7:81:56:45:f5:24:e2: 47:0e:c6:81:f0:f0:17:0b:aa:b2:f9:f7:e7:85:ca: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:31:AB:99:82:74:D5:58:52:04:7A:90:B7:C9:44:C2:E0:9A:9B:41 X509v3 Authority Key Identifier: keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/IjGrmYJ01VhSBHqQt8lEwuCam0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.180.0/24 Signature Algorithm: sha256WithRSAEncryption 14:bc:8d:9c:fe:5b:9a:d2:91:ab:00:49:18:63:0d:0b:00:8e: 7f:dc:93:4e:16:94:49:26:9c:42:83:2d:2c:29:80:20:de:3b: f4:4c:6b:00:16:29:d3:73:2c:04:72:d2:e3:b2:58:07:8d:93: 7a:6c:07:17:41:e6:8e:c7:6a:e9:eb:08:8e:49:c5:8c:2a:ee: 38:f8:81:cf:b8:69:ba:af:87:37:ca:50:19:53:f5:a7:9c:24: f2:9d:b7:ab:af:e9:b0:c6:4f:ce:bc:fe:16:0b:bf:c4:1c:a5: 61:ea:f9:fe:e1:ab:dd:04:d7:ec:80:e5:1d:3e:e1:65:b8:49: d8:49:b1:6d:1d:c7:b9:50:88:4f:ee:09:8e:29:7f:dc:5e:47: 14:2b:e3:85:cf:d7:91:4d:19:13:55:e8:79:fb:42:95:7f:61: c9:63:63:fc:df:81:66:20:9c:0a:bd:46:10:29:ff:9d:96:ff: be:31:73:e9:8e:7e:b5:4c:e8:18:22:9f:dd:47:c5:7a:37:71: bf:8f:fc:45:fa:0f:5c:01:3a:59:de:5c:06:ea:65:3c:f7:a7: 32:3d:f1:02:db:7e:22:a4:43:63:c7:9f:60:f8:89:53:03:1a: 54:ab:6f:fd:e8:8f:84:8b:54:20:a2:de:5b:44:3d:09:02:96: dd:be:b2:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQoBBInLcx7JYgAqnN8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2JkMGE0MTM2Mjk0MjE1YjFjMjQzYjBmMDIxOGNmZGQ1 NjVkNTcwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjMxYWI5OTgyNzRkNTU4NTIwNDdhOTBiN2M5NDRjMmUwOWE5YjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojEPqoRcHmz4OrMuLoDgfULUiAJU 9MaqVahkXvOJXOE/lUTIxtZheynO0vyJuxX6xr81YuFLeBpMhdpYEQPNVZ8uAeV7 HAeTp8E1EA1Mw3UiMI1FVEtuPRSD+RVaAEBRAw2oF3jgbSxuLdDEOhZx/t3wC6vk kcdQhPqYvdBliJn2Ak6ooRBySbrVdcQ2525LM53rzc5Lp+J/RYI43qQrbenCwxOd a6ybnv+bICENw7hrXy5fZJE3GtVUHvI+uoNW5EnFn1a3MS0jQuK0/VIIGeQgVnFP FMF0Nzdqxw5utpJ9ooHse7ZOXfeBVkX1JOJHDsaB8PAXC6qy+ffnhcqbnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCIxq5mCdNVYUgR6kLfJRMLgmptBMB8GA1UdIwQY MBaAFBnL0KQTYpQhWxwkOw8CGM/dVl1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYt ZWNlNzgyNjc4N2I0LzEvSWpHcm1ZSjAxVmhTQkhxUXQ4bEV3dUNhbTBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYtZWNlNzgyNjc4N2I0 LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRy0MA0G CSqGSIb3DQEBCwUAA4IBAQAUvI2c/lua0pGrAEkYYw0LAI5/3JNOFpRJJpxCgy0s KYAg3jv0TGsAFinTcywEctLjslgHjZN6bAcXQeaOx2rp6wiOScWMKu44+IHPuGm6 r4c3ylAZU/WnnCTynberr+mwxk/OvP4WC7/EHKVh6vn+4avdBNfsgOUdPuFluEnY SbFtHce5UIhP7gmOKX/cXkcUK+OFz9eRTRkTVeh5+0KVf2HJY2P834FmIJwKvUYQ Kf+dlv++MXPpjn61TOgYIp/dR8V6N3G/j/xF+g9cATpZ3lwG6mU896cyPfEC234i pENjx59g+IlTAxpUq2/96I+Ei1Qgot5bRD0JApbdvrLv -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:53 2026 by rpki-client