This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/ibKCHX-WZBoFR7l0mVl5Z5yPoYo.roa File: ibKCHX-WZBoFR7l0mVl5Z5yPoYo.roa (raw, json) Hash identifier: VCOZaoQKdaHYdzLeM6vy+vaxjALR2cSdXmffmC82vmA= Subject key identifier: 89:B2:82:1D:7F:96:64:1A:05:47:B9:74:99:59:79:67:9C:8F:A1:8A Certificate issuer: /CN=265649691591e552a14889439cff70de56c08da9 Certificate serial: 019B7910AF49E0AD6C5E86942DC68840A901 Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/ibKCHX-WZBoFR7l0mVl5Z5yPoYo.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41755 IP address blocks: 130.43.162.0/24 maxlen: 24 2a06:4e00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:af:49:e0:ad:6c:5e:86:94:2d:c6:88:40:a9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265649691591e552a14889439cff70de56c08da9 Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89b2821d7f96641a0547b974995979679c8fa18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:e3:98:f6:7c:fa:da:b5:ab:70:ae:05:48: cc:57:47:78:aa:cf:86:07:7c:63:04:1c:9d:6a:26: 48:28:a1:7b:47:cf:53:50:04:b1:be:23:ee:e5:c5: ab:c3:37:27:cd:30:6f:65:0a:c5:f3:68:f8:40:de: 5f:26:18:2f:9d:4c:8f:b4:f1:a4:c1:31:63:d3:f5: b0:58:19:c0:5a:86:00:12:82:e3:8b:e7:d5:46:f8: 49:67:99:be:58:5b:7a:6a:39:f2:af:80:ad:cd:c3: b7:87:ca:4c:e7:08:25:76:46:20:8f:3d:60:a6:7a: 7c:3e:9d:fe:f6:92:0e:01:d7:85:b9:c8:d2:09:8e: 2c:ba:b3:78:20:ae:de:50:4a:bf:c6:97:c2:84:ce: 3b:93:84:f0:cd:5c:ab:53:b0:29:f4:5e:ba:3d:86: 9c:8c:ae:28:9b:aa:32:9a:c3:02:ed:56:34:1d:27: c7:36:9e:cd:37:ff:06:20:a2:65:57:c0:87:d3:74: 7f:e5:3a:3d:8f:26:f0:59:33:29:47:99:50:59:e7: 8a:44:2b:0a:91:52:0b:6d:1f:31:7c:b1:ae:64:ea: 2c:86:2d:50:a6:d4:4d:5a:60:23:57:43:ef:4f:70: f7:d7:f5:c9:bf:38:a8:42:b6:d9:90:40:b8:f2:42: 96:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B2:82:1D:7F:96:64:1A:05:47:B9:74:99:59:79:67:9C:8F:A1:8A X509v3 Authority Key Identifier: keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/ibKCHX-WZBoFR7l0mVl5Z5yPoYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.43.162.0/24 IPv6: 2a06:4e00::/29 Signature Algorithm: sha256WithRSAEncryption 02:cb:97:1c:43:7e:18:6d:90:ac:97:c0:6c:fd:55:50:74:6c: 58:0a:da:e5:cf:db:1d:cd:6f:5c:05:c0:5c:7c:68:e1:69:b7: e0:af:52:ec:31:b4:8e:7f:35:94:c2:94:d5:aa:64:7b:b7:aa: 94:f0:6b:7c:b8:96:d3:cf:d0:56:15:cd:4c:61:b2:c7:6a:d2: b8:68:b6:90:ec:b8:78:64:84:24:60:6d:2a:35:3f:d2:47:41: 1e:5c:c4:4b:63:ad:56:80:af:15:9b:88:47:3f:44:bc:80:58: f6:fc:b9:51:8e:85:7b:57:c9:28:b0:88:9a:26:74:83:f2:c6: 65:2f:30:fa:a8:2c:43:26:c1:ab:04:07:a1:cb:55:cc:ad:d8: 81:0a:21:54:58:71:fa:bd:86:7b:33:f3:88:ea:91:df:42:69: 75:e4:9b:68:74:a5:ac:18:07:b6:5a:4e:c5:08:3c:e9:43:b8: 96:32:2a:db:f9:74:24:2a:b6:9f:05:89:f3:ac:92:12:8b:28: 8f:27:20:f6:d3:bb:12:4a:7e:77:03:60:7a:97:0e:fb:fe:06: 3c:e8:b1:db:05:9a:00:99:29:16:03:48:14:4e:ea:68:3a:53: 04:4c:f0:25:ee:8e:d1:05:77:c2:0a:6f:a7:a9:34:e4:b0:2b: e9:7b:a7:9f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EK9J4K1sXoaULcaIQKkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTY0OTY5MTU5MWU1NTJhMTQ4ODk0MzljZmY3MGRlNTZj MDhkYTkwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWIyODIxZDdmOTY2NDFhMDU0N2I5NzQ5OTU5Nzk2NzljOGZhMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GHjmPZ8+tq1q3CuBUjMV0d4qs+G B3xjBBydaiZIKKF7R89TUASxviPu5cWrwzcnzTBvZQrF82j4QN5fJhgvnUyPtPGk wTFj0/WwWBnAWoYAEoLji+fVRvhJZ5m+WFt6ajnyr4CtzcO3h8pM5wgldkYgjz1g pnp8Pp3+9pIOAdeFucjSCY4surN4IK7eUEq/xpfChM47k4TwzVyrU7Ap9F66PYac jK4om6oymsMC7VY0HSfHNp7NN/8GIKJlV8CH03R/5To9jybwWTMpR5lQWeeKRCsK kVILbR8xfLGuZOoshi1QptRNWmAjV0PvT3D31/XJvzioQrbZkEC48kKWYwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFImygh1/lmQaBUe5dJlZeWecj6GKMB8GA1UdIwQY MBaAFCZWSWkVkeVSoUiJQ5z/cN5WwI2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxaSmFSV1I1VktoU0lsRG5QOXczbGJBamFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MzFjNzktYTg4ZC00MWU2LWIwYTct MTIxMDA5NGE0OGEzLzEvaWJLQ0hYLVdaQm9GUjdsMG1WbDVaNXlQb1lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS84MzFjNzktYTg4ZC00MWU2LWIwYTctMTIxMDA5NGE0OGEz LzEvSmxaSmFSV1I1VktoU0lsRG5QOXczbGJBamFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAgiuiMA0E AgACMAcDBQMqBk4AMA0GCSqGSIb3DQEBCwUAA4IBAQACy5ccQ34YbZCsl8Bs/VVQ dGxYCtrlz9sdzW9cBcBcfGjhabfgr1LsMbSOfzWUwpTVqmR7t6qU8Gt8uJbTz9BW Fc1MYbLHatK4aLaQ7Lh4ZIQkYG0qNT/SR0EeXMRLY61WgK8Vm4hHP0S8gFj2/LlR joV7V8kosIiaJnSD8sZlLzD6qCxDJsGrBAehy1XMrdiBCiFUWHH6vYZ7M/OI6pHf Qml15JtodKWsGAe2Wk7FCDzpQ7iWMirb+XQkKrafBYnzrJISiyiPJyD207sSSn53 A2B6lw77/gY86LHbBZoAmSkWA0gUTupoOlMETPAl7o7RBXfCCm+nqTTksCvpe6ef -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:15 2026 by rpki-client