This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/8BGOgyvTM3cQVZkmabNpYxGe_9s.roa File: 8BGOgyvTM3cQVZkmabNpYxGe_9s.roa (raw, json) Hash identifier: 9bggmjWraVwIQX28xZSm8TmHWMkhlleKkSUw+UjkIs4= Subject key identifier: F0:11:8E:83:2B:D3:33:77:10:55:99:26:69:B3:69:63:11:9E:FF:DB Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019B7F8368D1412D4B87B83D7476EED1D4FD Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/8BGOgyvTM3cQVZkmabNpYxGe_9s.roa Signing time: Fri 02 Jan 2026 16:21:17 +0000 ROA not before: Fri 02 Jan 2026 16:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43972 IP address blocks: 31.40.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:68:d1:41:2d:4b:87:b8:3d:74:76:ee:d1:d4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jan 2 16:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0118e832bd333771055992669b36963119effdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bb:55:fd:06:55:bb:5e:fc:85:f6:24:31:45: 9b:46:2f:07:55:a4:10:c0:79:cc:e2:8f:f5:bf:81: 26:19:a5:58:e5:8d:16:0e:47:6e:b1:48:b3:e9:04: c5:12:ce:60:42:0f:3b:70:16:c2:ec:1e:17:23:7c: fb:b6:97:38:44:e3:1a:3c:1f:46:69:3a:b6:ef:7c: a8:44:f5:40:30:24:e5:91:d3:25:9a:18:73:2c:ab: b3:64:65:bd:fc:02:a8:35:39:7e:5b:bc:ca:90:1b: 4e:65:1f:4d:b0:81:7e:93:5a:a0:64:04:41:97:81: 10:a4:cf:2f:ad:b3:40:b3:8e:9c:e0:24:20:bb:16: d3:00:ce:00:3c:71:c1:2f:17:bf:c0:c3:e2:a1:7f: 2d:53:87:01:fc:b6:47:15:f6:fa:c7:c2:08:1d:a9: 40:fa:e8:d4:df:c2:a5:2b:83:89:75:c7:fd:b3:8c: 05:fb:95:06:8d:87:76:89:ef:e8:30:19:0a:e0:23: 2d:2c:bb:84:3c:a3:fe:88:51:98:f3:d6:10:81:3a: af:a8:f1:09:df:1f:6c:fa:6b:b7:e0:cd:78:69:42: 76:65:eb:bf:4a:ce:cd:30:e4:c0:c4:1f:78:97:a8: 17:2b:19:07:53:c6:23:ee:7a:16:34:a6:7a:73:52: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:11:8E:83:2B:D3:33:77:10:55:99:26:69:B3:69:63:11:9E:FF:DB X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/8BGOgyvTM3cQVZkmabNpYxGe_9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.131.0/24 Signature Algorithm: sha256WithRSAEncryption 50:fd:3c:b0:bf:65:17:a1:af:82:b0:ad:35:dd:c9:92:f7:7d: 32:78:fc:7c:9d:e5:20:3c:32:1e:36:00:b2:92:33:31:c8:a1: f2:fc:3e:0f:0f:f5:92:b2:63:38:5f:1a:32:36:48:c9:71:67: fe:5d:af:a8:bb:c3:ed:8c:4c:ab:27:34:6b:c0:e8:eb:73:34: 98:5f:20:f7:9b:3e:dc:aa:48:c6:e2:e3:59:88:92:6d:46:e2: 01:45:dd:d4:84:3d:37:02:7e:26:c3:f9:2a:bd:bf:63:39:48: 49:1a:85:58:0a:6e:65:f3:bb:93:cb:b0:e9:de:c7:c8:c2:d1: 0c:07:6e:e5:cb:bb:54:31:a9:bf:14:63:f7:d1:f5:89:31:cd: 90:9c:64:05:92:ff:2f:fd:bd:42:13:02:e9:ee:b4:b9:c3:14: 33:f2:35:76:a8:66:25:82:b8:ce:13:c3:ab:f9:15:4e:07:e0: fc:ad:c4:77:17:6d:b4:e1:48:bd:a8:be:8d:b3:d0:2c:a0:78: 7c:e8:69:b2:f0:7a:8c:83:cf:79:7e:42:57:6d:43:c9:6f:a7: 27:00:a1:ef:34:74:fa:4e:be:4c:20:7b:0c:63:f9:87:ad:74: 64:23:6e:cd:0e:46:89:50:f3:50:b6:9b:e5:26:64:fe:f7:24: 3f:e2:d7:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g2jRQS1Lh7g9dHbu0dT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwMTAyMTYyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDExOGU4MzJiZDMzMzc3MTA1NTk5MjY2OWIzNjk2MzExOWVmZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirtV/QZVu178hfYkMUWbRi8HVaQQ wHnM4o/1v4EmGaVY5Y0WDkdusUiz6QTFEs5gQg87cBbC7B4XI3z7tpc4ROMaPB9G aTq273yoRPVAMCTlkdMlmhhzLKuzZGW9/AKoNTl+W7zKkBtOZR9NsIF+k1qgZARB l4EQpM8vrbNAs46c4CQguxbTAM4APHHBLxe/wMPioX8tU4cB/LZHFfb6x8IIHalA +ujU38KlK4OJdcf9s4wF+5UGjYd2ie/oMBkK4CMtLLuEPKP+iFGY89YQgTqvqPEJ 3x9s+mu34M14aUJ2Zeu/Ss7NMOTAxB94l6gXKxkHU8Yj7noWNKZ6c1LT0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPARjoMr0zN3EFWZJmmzaWMRnv/bMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvOEJHT2d5dlRNM2NRVlprbWFiTnBZeEdlXzlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyiDMA0G CSqGSIb3DQEBCwUAA4IBAQBQ/Tywv2UXoa+CsK013cmS930yePx8neUgPDIeNgCy kjMxyKHy/D4PD/WSsmM4XxoyNkjJcWf+Xa+ou8PtjEyrJzRrwOjrczSYXyD3mz7c qkjG4uNZiJJtRuIBRd3UhD03An4mw/kqvb9jOUhJGoVYCm5l87uTy7Dp3sfIwtEM B27ly7tUMam/FGP30fWJMc2QnGQFkv8v/b1CEwLp7rS5wxQz8jV2qGYlgrjOE8Or +RVOB+D8rcR3F2204Ui9qL6Ns9AsoHh86Gmy8HqMg895fkJXbUPJb6cnAKHvNHT6 Tr5MIHsMY/mHrXRkI27NDkaJUPNQtpvlJmT+9yQ/4teI -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:01 2026 by rpki-client