This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iBGEz-tej_FAq47hFEt3LXiPlAU.roa File: iBGEz-tej_FAq47hFEt3LXiPlAU.roa (raw, json) Hash identifier: ZRiJC5SNia2u87xjZ0fDw27CPe3Mlgd/yd0/2xGYRfk= Subject key identifier: 88:11:84:CF:EB:5E:8F:F1:40:AB:8E:E1:14:4B:77:2D:78:8F:94:05 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA26E717836748FD8B081748C5EEE1 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iBGEz-tej_FAq47hFEt3LXiPlAU.roa Signing time: Fri 02 Jan 2026 08:19:18 +0000 ROA not before: Fri 02 Jan 2026 08:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48031 IP address blocks: 45.140.7.0/24 maxlen: 24 45.152.139.0/24 maxlen: 24 77.83.20.0/24 maxlen: 24 77.83.21.0/24 maxlen: 24 77.83.22.0/24 maxlen: 24 77.83.23.0/24 maxlen: 24 80.243.228.0/24 maxlen: 24 84.252.66.0/24 maxlen: 24 84.252.67.0/24 maxlen: 24 88.218.239.0/24 maxlen: 24 91.245.239.0/24 maxlen: 24 95.214.80.0/24 maxlen: 24 95.214.81.0/24 maxlen: 24 95.214.82.0/24 maxlen: 24 95.214.92.0/24 maxlen: 24 176.118.188.0/24 maxlen: 24 176.118.189.0/24 maxlen: 24 185.177.76.0/24 maxlen: 24 185.177.77.0/24 maxlen: 24 193.160.73.0/24 maxlen: 24 194.28.156.0/24 maxlen: 24 194.28.158.0/24 maxlen: 24 194.28.159.0/24 maxlen: 24 194.104.5.0/24 maxlen: 24 194.104.6.0/24 maxlen: 24 212.69.132.0/24 maxlen: 24 212.69.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:26:e7:17:83:67:48:fd:8b:08:17:48:c5:ee:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=881184cfeb5e8ff140ab8ee1144b772d788f9405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:c5:c4:8f:ec:6c:9a:8d:e6:f9:00:ee:1e: 48:97:be:ae:bc:fa:ab:f6:5d:fb:5c:d8:3a:47:31: 9f:ca:58:01:73:df:0d:ed:86:09:a7:7e:96:ff:cf: 54:6d:d2:16:9b:b2:cb:40:ab:63:07:07:33:ea:fe: 7d:5c:de:44:42:5b:ef:e2:48:f1:b6:42:9d:d2:e8: e5:fd:71:5d:43:8e:1e:ea:17:1b:b7:16:81:c8:06: 94:66:63:56:de:70:6e:63:c6:70:35:6e:45:5e:2c: 8d:c8:a6:2a:b6:74:49:ab:49:af:e2:0a:ad:07:5f: 57:a0:6e:46:1b:41:ef:5b:f4:0b:2e:ca:a9:9f:66: 7f:3e:0f:28:52:38:d6:69:c6:36:76:ea:fb:66:b2: 6b:53:e0:0b:53:eb:d2:38:3f:56:64:23:b0:87:28: 74:89:00:3a:6f:43:a8:c7:06:7a:d5:93:af:2c:8d: 05:a8:15:12:7c:b6:9c:da:1f:49:bc:7a:a8:a6:15: 01:5e:9a:c9:13:a2:a6:e3:ce:a4:77:75:4c:ac:e5: 8a:60:34:df:36:fe:57:98:75:21:ac:f2:f4:b3:09: 9c:2e:74:da:ec:1e:3a:fc:8a:84:ba:38:d5:32:c3: fe:77:f3:e9:fc:b6:11:d4:e8:c6:12:96:65:35:e4: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:11:84:CF:EB:5E:8F:F1:40:AB:8E:E1:14:4B:77:2D:78:8F:94:05 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iBGEz-tej_FAq47hFEt3LXiPlAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.7.0/24 45.152.139.0/24 77.83.20.0/22 80.243.228.0/24 84.252.66.0/23 88.218.239.0/24 91.245.239.0/24 95.214.80.0-95.214.82.255 95.214.92.0/24 176.118.188.0/23 185.177.76.0/23 193.160.73.0/24 194.28.156.0/24 194.28.158.0/23 194.104.5.0-194.104.6.255 212.69.132.0/24 212.69.134.0/24 Signature Algorithm: sha256WithRSAEncryption 86:51:51:bc:b5:ff:ff:50:56:1e:a8:75:27:95:d1:b8:39:f4: a7:17:d0:09:ca:b6:8d:b9:e1:80:6d:1c:7d:f9:c7:69:98:4f: 14:1d:0c:22:ab:c3:b5:81:78:b6:66:40:a2:f6:68:b6:83:f9: 41:85:1a:ef:5b:ee:37:1f:ca:ae:a5:8c:8f:aa:ca:81:09:2a: 0d:7a:f3:ac:10:9c:61:bd:9a:15:37:2d:d2:5b:ee:aa:00:c7: ae:7a:88:70:a5:49:2d:ae:c7:5f:d5:16:42:45:20:d4:f4:52: fa:65:7d:a3:8b:89:81:44:4b:c3:79:eb:1f:07:bb:c4:23:22: a7:5f:e4:14:50:55:8d:ab:4f:2b:47:9b:6c:53:49:43:99:0a: 0c:fd:ad:ca:53:f4:72:d7:72:68:95:e3:59:99:b6:07:29:bc: df:a0:25:1d:59:89:6c:2d:09:dd:97:a0:21:42:3d:d6:84:73: f6:f4:71:18:cb:b5:e9:f6:fc:7c:42:a6:6b:06:58:b5:68:91: 77:87:9d:c7:1c:bd:cd:5c:df:99:5e:0c:b2:9f:db:3d:db:89: 97:14:ea:50:b8:bf:7b:f4:f9:b3:05:b0:2d:15:8f:f5:33:08: 91:56:d8:97:e5:73:d2:47:22:06:58:14:c4:1f:9d:a2:be:b5: 20:db:c1:04 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZt9yibnF4NnSP2LCBdIxe7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODExODRjZmViNWU4ZmYxNDBhYjhlZTExNDRiNzcyZDc4OGY5NDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4XFxI/sbJqN5vkA7h5Il76uvPqr 9l37XNg6RzGfylgBc98N7YYJp36W/89UbdIWm7LLQKtjBwcz6v59XN5EQlvv4kjx tkKd0ujl/XFdQ44e6hcbtxaByAaUZmNW3nBuY8ZwNW5FXiyNyKYqtnRJq0mv4gqt B19XoG5GG0HvW/QLLsqpn2Z/Pg8oUjjWacY2dur7ZrJrU+ALU+vSOD9WZCOwhyh0 iQA6b0OoxwZ61ZOvLI0FqBUSfLac2h9JvHqophUBXprJE6Km486kd3VMrOWKYDTf Nv5XmHUhrPL0swmcLnTa7B46/IqEujjVMsP+d/Pp/LYR1OjGEpZlNeQffwIDAQAB o4ICezCCAncwHQYDVR0OBBYEFIgRhM/rXo/xQKuO4RRLdy14j5QFMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvaUJHRXotdGVqX0ZBcTQ3aEZFdDNMWGlQbEFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAAtjAcD BAAtmIsDBAJNUxQDBABQ8+QDBAFU/EIDBABY2u8DBABb9e8wDAMEBF/WUAMEAF/W UgMEAF/WXAMEAbB2vAMEAbmxTAMEAMGgSQMEAMIcnAMEAcIcnjAMAwQAwmgFAwQA wmgGAwQA1EWEAwQA1EWGMA0GCSqGSIb3DQEBCwUAA4IBAQCGUVG8tf//UFYeqHUn ldG4OfSnF9AJyraNueGAbRx9+cdpmE8UHQwiq8O1gXi2ZkCi9mi2g/lBhRrvW+43 H8qupYyPqsqBCSoNevOsEJxhvZoVNy3SW+6qAMeueohwpUktrsdf1RZCRSDU9FL6 ZX2ji4mBREvDeesfB7vEIyKnX+QUUFWNq08rR5tsU0lDmQoM/a3KU/Ry13JoleNZ mbYHKbzfoCUdWYlsLQndl6AhQj3WhHP29HEYy7Xp9vx8QqZrBli1aJF3h53HHL3N XN+ZXgyyn9s924mXFOpQuL979PmzBbAtFY/1MwiRVtiX5XPSRyIGWBTEH52ivrUg 28EE -----END CERTIFICATE-----Generated at Mon Jan 19 21:27:22 2026 by rpki-client