This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/B_Oas4WgmVIGn-3rrNhZeLW80Lo.roa File: B_Oas4WgmVIGn-3rrNhZeLW80Lo.roa (raw, json) Hash identifier: D3jA3MorfBqB+MfUHf0sPY50LeECj4jpZHTJI+CUbGU= Subject key identifier: 07:F3:9A:B3:85:A0:99:52:06:9F:ED:EB:AC:D8:59:78:B5:BC:D0:BA Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019B7F83696A10097DDCBF7493E6F54719C4 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/B_Oas4WgmVIGn-3rrNhZeLW80Lo.roa Signing time: Fri 02 Jan 2026 16:21:17 +0000 ROA not before: Fri 02 Jan 2026 16:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48330 IP address blocks: 31.40.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:69:6a:10:09:7d:dc:bf:74:93:e6:f5:47:19:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jan 2 16:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07f39ab385a09952069fedebacd85978b5bcd0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:fd:59:35:5f:b0:ab:e0:ef:f5:fd:46:7d: 21:3d:52:6e:8f:13:e0:d5:24:11:ba:83:9a:09:1b: a4:79:2d:33:dc:19:19:5a:bb:b1:e3:95:29:4c:ac: 78:01:02:fc:53:24:97:6c:f2:16:70:bd:a3:2e:0a: 21:da:58:ce:6d:3f:2a:00:b2:c5:f6:af:92:81:1c: 73:c1:c6:5f:b6:03:f8:d2:3e:e6:b2:1d:61:be:29: ce:4c:72:d7:31:e2:25:5e:a8:57:c3:9e:e4:f5:8d: 63:81:d1:c0:5d:35:5a:b5:0b:a8:66:5e:53:de:58: 57:58:d9:88:53:73:ab:26:17:9b:ed:27:58:74:b4: 98:a3:1f:27:01:da:5a:a3:5b:80:96:2b:1b:24:93: 9c:80:66:62:57:ca:30:3e:ac:58:48:b1:88:40:ac: e4:95:16:81:a5:1f:39:8f:22:80:66:ab:64:84:01: 20:7a:06:02:6f:b9:61:f6:5b:42:97:a6:78:b8:2e: 1f:5d:63:7d:5b:4d:47:e4:02:c8:87:84:04:71:6b: fb:1d:55:e4:c6:1e:b5:f3:b6:a3:f6:8e:06:df:09: 93:b7:a6:b0:ed:8e:2d:3c:dc:01:de:fe:bf:8e:b5: cb:f4:51:e6:e3:88:f4:9a:0b:20:3e:f5:3e:da:f7: ea:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F3:9A:B3:85:A0:99:52:06:9F:ED:EB:AC:D8:59:78:B5:BC:D0:BA X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/B_Oas4WgmVIGn-3rrNhZeLW80Lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.164.0/24 Signature Algorithm: sha256WithRSAEncryption 03:21:af:23:d7:ea:d6:ba:c0:0c:77:7b:4b:3c:c9:0e:a7:21: cd:b3:80:ef:00:74:ec:11:f2:83:57:64:6f:0f:b2:23:4a:30: d1:2f:08:36:e5:e5:95:13:6b:43:e4:ed:fd:b9:90:52:cf:4b: 8c:f2:f7:02:68:27:17:a3:72:f0:66:9a:3d:00:ec:ab:2c:88: a9:60:d9:e9:f8:35:d5:7c:f0:8e:d4:b5:48:df:9e:8a:37:4f: 2e:91:63:ba:6c:4e:be:66:29:a7:bf:7b:55:99:73:cd:6c:8d: 4c:e8:6b:7d:a7:07:5f:b2:60:a8:f0:bb:cb:cd:43:4a:72:fd: 30:c8:07:0a:41:97:30:04:28:d8:59:5f:ce:e8:af:3f:63:3a: c9:1a:ef:5e:46:f3:de:62:a1:ac:34:25:5f:74:cf:41:b6:ab: 0e:1d:53:2a:94:2a:13:ec:fb:a7:e8:89:1f:3d:2e:22:99:8b: e9:7c:70:f3:38:b9:a8:0a:8d:cc:d0:0c:02:b0:f0:8d:89:79: f3:da:72:22:c1:d3:d2:3b:63:65:2a:be:33:f8:a8:0f:3c:02: 89:09:52:68:2f:15:27:be:53:b5:00:00:10:bc:04:85:74:00: 10:7c:27:4b:42:41:2e:03:85:d0:4d:da:da:bd:c3:b7:d2:ca: fc:8e:72:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g2lqEAl93L90k+b1RxnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwMTAyMTYyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2YzOWFiMzg1YTA5OTUyMDY5ZmVkZWJhY2Q4NTk3OGI1YmNkMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9T9WTVfsKvg7/X9Rn0hPVJujxPg 1SQRuoOaCRukeS0z3BkZWrux45UpTKx4AQL8UySXbPIWcL2jLgoh2ljObT8qALLF 9q+SgRxzwcZftgP40j7msh1hvinOTHLXMeIlXqhXw57k9Y1jgdHAXTVatQuoZl5T 3lhXWNmIU3OrJheb7SdYdLSYox8nAdpao1uAlisbJJOcgGZiV8owPqxYSLGIQKzk lRaBpR85jyKAZqtkhAEgegYCb7lh9ltCl6Z4uC4fXWN9W01H5ALIh4QEcWv7HVXk xh6187aj9o4G3wmTt6aw7Y4tPNwB3v6/jrXL9FHm44j0mgsgPvU+2vfqKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAfzmrOFoJlSBp/t66zYWXi1vNC6MB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvQl9PYXM0V2dtVklHbi0zcnJOaFplTFc4MExvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyikMA0G CSqGSIb3DQEBCwUAA4IBAQADIa8j1+rWusAMd3tLPMkOpyHNs4DvAHTsEfKDV2Rv D7IjSjDRLwg25eWVE2tD5O39uZBSz0uM8vcCaCcXo3LwZpo9AOyrLIipYNnp+DXV fPCO1LVI356KN08ukWO6bE6+Zimnv3tVmXPNbI1M6Gt9pwdfsmCo8LvLzUNKcv0w yAcKQZcwBCjYWV/O6K8/YzrJGu9eRvPeYqGsNCVfdM9BtqsOHVMqlCoT7Pun6Ikf PS4imYvpfHDzOLmoCo3M0AwCsPCNiXnz2nIiwdPSO2NlKr4z+KgPPAKJCVJoLxUn vlO1AAAQvASFdAAQfCdLQkEuA4XQTdravcO30sr8jnJ0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:22 2026 by rpki-client