This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/iBgtsm0jgQ2Bb5AuJNJncbwCTJU.roa File: iBgtsm0jgQ2Bb5AuJNJncbwCTJU.roa (raw, json) Hash identifier: xxJYeXXzDMUbIn2arXYw6Bz1WeFd21DHLoaAUzTjTnk= Subject key identifier: 88:18:2D:B2:6D:23:81:0D:81:6F:90:2E:24:D2:67:71:BC:02:4C:95 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019B7F836BBA96A159D72057BCDD23BBF085 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/iBgtsm0jgQ2Bb5AuJNJncbwCTJU.roa Signing time: Fri 02 Jan 2026 16:21:17 +0000 ROA not before: Fri 02 Jan 2026 16:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204791 IP address blocks: 31.40.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:6b:ba:96:a1:59:d7:20:57:bc:dd:23:bb:f0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jan 2 16:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88182db26d23810d816f902e24d26771bc024c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:33:ec:d1:3e:8e:6a:06:8b:a3:5c:b3:c5: 38:9c:1f:e7:34:68:ce:96:00:d0:f3:02:85:ba:c0: 40:57:f6:44:d7:09:de:fe:a2:0c:82:bf:6d:51:27: d4:54:39:97:09:df:16:59:69:98:6b:70:c0:89:ac: 88:8d:ee:93:2c:67:62:bd:31:a2:6d:e4:a2:82:e9: 05:87:db:4c:aa:08:f9:d4:07:16:55:96:a3:cd:72: 38:17:ea:69:ef:ad:6f:2d:9f:98:d2:61:7b:62:1b: f2:4e:5e:80:0b:cf:2a:74:d1:bd:e7:cc:be:04:ed: fd:5d:a5:8a:4a:b5:4c:c5:21:4d:e2:6e:68:48:d4: 6b:89:d0:ae:a5:02:44:f3:69:13:37:4e:26:0b:e1: 96:8d:b2:01:9b:5d:4a:5c:e8:49:8b:9f:b4:8b:ea: bb:f5:41:d3:c9:ba:c0:bd:3c:aa:5a:49:5c:b4:f5: 29:cd:ae:d0:5c:61:0a:2b:9c:bb:63:a4:44:43:29: e3:84:3c:ce:3c:29:9a:ba:d2:9e:76:7f:6f:ce:a7: ac:6f:84:e6:e5:71:99:ac:7b:db:0c:4c:0f:36:b3: 62:89:5e:86:71:4d:c1:57:06:01:10:e8:75:56:e9: 37:36:09:d3:2f:06:6c:9f:84:a2:ca:c1:e3:63:f3: 78:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:18:2D:B2:6D:23:81:0D:81:6F:90:2E:24:D2:67:71:BC:02:4C:95 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/iBgtsm0jgQ2Bb5AuJNJncbwCTJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.130.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:20:7f:b0:a6:0d:7d:ab:fc:27:bb:1a:fe:80:6a:0b:90:e9: b0:92:6c:92:61:4e:52:3a:85:31:3c:14:b3:7d:e6:82:e5:56: 7f:e6:0c:eb:b7:32:8e:d5:39:bf:48:03:76:e0:b4:eb:c1:51: 74:a0:bb:d5:8e:b9:0f:07:b1:4b:80:76:43:23:30:c6:6f:9d: 7a:94:b4:42:61:9f:2b:94:ad:e7:38:56:29:fa:cd:01:14:27: c7:fd:39:3a:fd:83:2a:c5:ca:81:ea:bf:ad:69:c6:e3:b9:3c: 0f:90:29:2c:65:5d:31:80:c3:88:5c:38:f3:4e:1a:c4:df:1b: fd:8b:d7:dd:ef:74:0f:44:fb:9e:c3:5a:74:4f:44:b4:ff:dc: 4c:ca:73:2c:dc:9f:c0:40:a6:8c:d1:f3:06:f0:36:4e:fa:63: 8f:8a:cb:38:c8:8f:c2:b5:d0:23:bc:b2:ac:a0:13:e1:e7:e2: f5:14:59:0a:7c:b3:48:cb:79:f3:18:54:0a:e8:f8:93:56:11: d8:f4:08:54:4f:0b:d1:6d:1f:4c:48:e7:d6:11:b6:c3:d5:ee: 72:5e:7f:93:81:d9:ab:be:7c:ba:de:c6:ed:82:63:26:8a:37: 86:b5:4d:4b:76:c0:21:cc:0b:39:06:60:c0:3d:f7:11:95:6f: 4e:b0:88:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g2u6lqFZ1yBXvN0ju/CFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwMTAyMTYyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODE4MmRiMjZkMjM4MTBkODE2ZjkwMmUyNGQyNjc3MWJjMDI0Yzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Az7NE+jmoGi6Ncs8U4nB/nNGjO lgDQ8wKFusBAV/ZE1wne/qIMgr9tUSfUVDmXCd8WWWmYa3DAiayIje6TLGdivTGi beSigukFh9tMqgj51AcWVZajzXI4F+pp761vLZ+Y0mF7YhvyTl6AC88qdNG958y+ BO39XaWKSrVMxSFN4m5oSNRridCupQJE82kTN04mC+GWjbIBm11KXOhJi5+0i+q7 9UHTybrAvTyqWklctPUpza7QXGEKK5y7Y6REQynjhDzOPCmautKedn9vzqesb4Tm 5XGZrHvbDEwPNrNiiV6GcU3BVwYBEOh1Vuk3NgnTLwZsn4SiysHjY/N4jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIgYLbJtI4ENgW+QLiTSZ3G8AkyVMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvaUJndHNtMGpnUTJCYjVBdUpOSm5jYndDVEpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyiCMA0G CSqGSIb3DQEBCwUAA4IBAQALIH+wpg19q/wnuxr+gGoLkOmwkmySYU5SOoUxPBSz feaC5VZ/5gzrtzKO1Tm/SAN24LTrwVF0oLvVjrkPB7FLgHZDIzDGb516lLRCYZ8r lK3nOFYp+s0BFCfH/Tk6/YMqxcqB6r+tacbjuTwPkCksZV0xgMOIXDjzThrE3xv9 i9fd73QPRPuew1p0T0S0/9xMynMs3J/AQKaM0fMG8DZO+mOPiss4yI/CtdAjvLKs oBPh5+L1FFkKfLNIy3nzGFQK6PiTVhHY9AhUTwvRbR9MSOfWEbbD1e5yXn+Tgdmr vny63sbtgmMmijeGtU1LdsAhzAs5BmDAPfcRlW9OsIg2 -----END CERTIFICATE-----Generated at Mon Jan 26 21:33:25 2026 by rpki-client