This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/8BokwqNdAZw-F0ecrcKpG0HfvdE.roa File: 8BokwqNdAZw-F0ecrcKpG0HfvdE.roa (raw, json) Hash identifier: p4KMplmsFd8hmDW0qUXNZiwtSy0rhvkuFzg9slKSx6o= Subject key identifier: F0:1A:24:C2:A3:5D:01:9C:3E:17:47:9C:AD:C2:A9:1B:41:DF:BD:D1 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019B7F8367A51F1B013859A7806A7F6B3854 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/8BokwqNdAZw-F0ecrcKpG0HfvdE.roa Signing time: Fri 02 Jan 2026 16:21:16 +0000 ROA not before: Fri 02 Jan 2026 16:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25437 IP address blocks: 31.40.158.0/24 maxlen: 24 31.40.180.0/24 maxlen: 24 31.40.181.0/24 maxlen: 24 195.20.118.0/24 maxlen: 24 195.20.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:67:a5:1f:1b:01:38:59:a7:80:6a:7f:6b:38:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jan 2 16:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f01a24c2a35d019c3e17479cadc2a91b41dfbdd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bb:1f:ca:fc:27:a5:3c:14:02:96:a0:b6:b3: 0c:49:db:1c:cd:83:90:a4:82:b1:e5:a2:60:6a:79: ba:ba:9d:be:37:77:2b:5d:2d:d7:55:94:76:6a:55: 2a:49:12:f1:14:6b:58:db:fb:38:79:66:d5:59:3a: 5a:9f:f6:7d:a9:8a:86:60:1a:c2:c1:d9:79:5f:9a: eb:1b:27:19:93:db:41:0c:b5:b1:d1:8f:68:28:61: d2:68:48:9d:75:51:38:73:57:be:bb:5f:16:b4:18: 9b:6a:d9:61:3c:04:a6:e9:4c:cd:52:32:d5:8f:7c: 4c:13:77:b4:ad:49:05:a9:6c:30:ad:76:bf:65:c4: 07:c4:e7:3a:07:35:02:11:ae:b1:9d:43:73:13:c8: 2b:1a:19:b0:a2:56:ee:55:fe:17:4c:1e:9e:02:50: 76:46:02:ce:cc:d9:36:ee:54:21:f4:1c:2c:47:2a: d8:b1:2d:bb:0e:bd:4f:52:54:db:9b:94:98:d0:9e: d9:be:bf:ed:54:36:18:a0:c3:28:3d:6b:c5:bc:c8: 39:47:57:0b:a0:f0:85:72:bd:26:29:a9:82:81:ee: 7a:32:3c:20:9e:97:96:a4:c8:47:b1:9f:2e:50:bb: 09:08:9c:dd:be:23:66:e3:a6:3e:58:b2:74:f2:04: b5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1A:24:C2:A3:5D:01:9C:3E:17:47:9C:AD:C2:A9:1B:41:DF:BD:D1 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/8BokwqNdAZw-F0ecrcKpG0HfvdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.158.0/24 31.40.180.0/23 195.20.118.0/23 Signature Algorithm: sha256WithRSAEncryption 81:2e:10:56:1f:b1:61:d9:60:fb:85:84:bd:8c:cf:83:b1:f7: 2a:87:9f:8b:cd:6a:cd:25:67:24:5f:67:5f:c1:df:f7:90:b4: 64:bd:3b:83:b1:45:6a:5a:5a:26:c2:e5:1e:cd:5a:69:81:c5: 24:99:d6:27:24:72:c1:58:43:c0:4a:d5:22:c7:e9:63:55:34: 47:dc:4c:32:b3:21:f1:52:4f:24:28:ce:2e:f7:b6:c9:a2:3f: 9e:ba:d3:1d:9e:7a:90:96:f6:5a:69:8c:3d:d1:a3:d3:f1:f6: 75:21:34:f7:7e:38:e1:c3:d0:35:01:9e:0a:53:02:69:9e:13: e7:34:71:ea:bd:cd:92:62:82:73:c7:d5:1d:9b:58:b3:a8:64: b3:b1:d8:c6:88:93:32:e3:fb:9a:a4:d4:d6:ec:34:28:f8:97: 89:0d:f1:d2:16:f2:5d:c3:9c:20:46:02:90:d2:3c:b6:4e:ab: f8:56:4a:17:e9:46:c0:fb:98:3f:e4:f4:94:71:f2:41:24:d3: 08:f8:5d:a6:0b:00:48:ab:bd:09:92:fc:13:1a:3c:23:73:44: 57:25:5f:69:27:fc:d5:be:52:44:58:79:a3:fa:b4:68:40:2f: 30:fc:60:87:42:2f:fc:f3:ef:e7:f7:5a:2e:37:08:ce:54:71: fb:bc:36:7f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g2elHxsBOFmngGp/azhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwMTAyMTYyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDFhMjRjMmEzNWQwMTljM2UxNzQ3OWNhZGMyYTkxYjQxZGZiZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rsfyvwnpTwUApagtrMMSdsczYOQ pIKx5aJganm6up2+N3crXS3XVZR2alUqSRLxFGtY2/s4eWbVWTpan/Z9qYqGYBrC wdl5X5rrGycZk9tBDLWx0Y9oKGHSaEiddVE4c1e+u18WtBibatlhPASm6UzNUjLV j3xME3e0rUkFqWwwrXa/ZcQHxOc6BzUCEa6xnUNzE8grGhmwolbuVf4XTB6eAlB2 RgLOzNk27lQh9BwsRyrYsS27Dr1PUlTbm5SY0J7Zvr/tVDYYoMMoPWvFvMg5R1cL oPCFcr0mKamCge56MjwgnpeWpMhHsZ8uULsJCJzdviNm46Y+WLJ08gS1bwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPAaJMKjXQGcPhdHnK3CqRtB373RMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvOEJva3dxTmRBWnctRjBlY3JjS3BHMEhmdmRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHyieAwQB Hyi0AwQBwxR2MA0GCSqGSIb3DQEBCwUAA4IBAQCBLhBWH7Fh2WD7hYS9jM+Dsfcq h5+LzWrNJWckX2dfwd/3kLRkvTuDsUVqWlomwuUezVppgcUkmdYnJHLBWEPAStUi x+ljVTRH3EwysyHxUk8kKM4u97bJoj+eutMdnnqQlvZaaYw90aPT8fZ1ITT3fjjh w9A1AZ4KUwJpnhPnNHHqvc2SYoJzx9Udm1izqGSzsdjGiJMy4/uapNTW7DQo+JeJ DfHSFvJdw5wgRgKQ0jy2Tqv4VkoX6UbA+5g/5PSUcfJBJNMI+F2mCwBIq70JkvwT Gjwjc0RXJV9pJ/zVvlJEWHmj+rRoQC8w/GCHQi/88+/n91ouNwjOVHH7vDZ/ -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:18 2026 by rpki-client