This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa File: BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa (raw, json) Hash identifier: hmgm/Pnh2iZKFyyt03L0VwIKzZWIKaWyCr/JtLV+SZ0= Subject key identifier: 06:87:8C:28:DC:25:84:4C:29:3B:2D:5D:44:58:7C:43:A9:A9:AF:20 Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019B7B3699F0E2B41FB82C89747481346D36 Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208183 IP address blocks: 45.152.228.0/22 maxlen: 22 45.152.228.0/24 maxlen: 24 45.152.229.0/24 maxlen: 24 2a0f:6500::/32 maxlen: 32 2a0f:6500:1000::/36 maxlen: 36 2a0f:6500:2000::/36 maxlen: 36 2a0f:6500:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:99:f0:e2:b4:1f:b8:2c:89:74:74:81:34:6d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06878c28dc25844c293b2d5d44587c43a9a9af20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f0:91:2a:78:94:cb:eb:ce:24:87:74:b8:51: a2:43:e3:70:a2:3b:08:b8:8d:1f:b9:7a:a7:64:bd: df:8c:f2:c2:db:77:70:73:59:e1:07:23:3e:ec:c4: f1:f9:d8:97:4d:7d:f6:d8:7b:9c:cd:fc:9d:31:31: 8d:22:70:bc:3b:ad:68:7c:c2:74:0d:47:df:99:ab: 7b:d4:a2:9d:9f:09:93:6f:db:10:d3:bb:6f:ce:b8: e8:04:d9:a4:17:56:cd:b2:16:a5:82:e3:0b:6f:4a: 07:20:1c:dc:88:83:54:88:68:20:0c:46:72:d3:e8: 68:76:33:fe:a7:d3:0b:be:f4:ec:8f:4b:ab:81:44: b9:16:31:5a:71:f2:02:fd:b7:ee:19:91:18:5c:b0: 3e:5b:b0:85:37:41:bd:2d:c8:0b:f2:a9:4b:c8:ab: 44:30:11:0e:59:ba:1c:f7:2d:0e:ca:fc:e6:50:d4: 1d:f9:33:41:cf:46:80:99:9d:28:57:78:6b:d7:df: 12:3f:18:9b:d2:06:d4:f2:fd:e9:bf:bb:e8:55:8d: f8:31:a4:07:71:f1:9c:14:21:53:2b:71:ba:44:db: 97:03:38:06:40:bb:48:30:c2:8a:6e:9b:f5:44:07: 19:57:be:c3:6d:52:81:5d:32:4c:18:0c:4f:bc:8e: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:87:8C:28:DC:25:84:4C:29:3B:2D:5D:44:58:7C:43:A9:A9:AF:20 X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.228.0/22 IPv6: 2a0f:6500::/32 Signature Algorithm: sha256WithRSAEncryption eb:5f:77:a8:48:03:8e:90:7b:e0:38:ab:22:28:68:b6:de:b1: ae:ae:e1:5a:8b:a1:04:b1:4e:84:35:81:9e:7e:1d:03:02:c3: 47:19:6e:3d:ae:c7:fb:20:c3:4e:79:32:2d:59:77:b6:00:98: 87:28:0d:2f:34:42:ed:d5:8a:d2:39:f4:26:57:40:04:e5:cc: 76:73:31:fe:98:c8:ad:19:55:b3:d1:a4:be:54:d5:be:52:b5: e5:7e:a2:45:59:a7:f5:26:cf:16:85:e7:9d:33:6b:aa:19:c9: 64:00:0d:b5:4c:84:22:f1:6d:c9:ce:55:19:6b:4e:8a:d9:3d: bb:b8:76:46:22:71:fc:73:e9:97:3a:52:89:05:f9:4a:c6:5d: db:ae:df:a8:61:69:c5:b2:92:0f:0c:72:d2:6a:36:ea:4b:07: 7b:2a:a7:fe:eb:bd:6e:60:0d:e8:42:99:66:08:98:27:fe:33: c5:6a:93:44:56:18:b5:ad:d0:5f:e4:20:04:51:0c:17:15:3f: 32:62:a1:f6:83:86:47:48:5e:c5:73:6b:48:6e:72:a4:04:e7: a3:cb:22:d8:3e:13:6e:b4:96:40:45:5f:cc:76:ff:88:3e:fd: f6:3b:62:c1:5b:ac:d7:26:75:da:62:57:e4:f1:5c:58:77:fa: f9:9f:1f:e4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7Npnw4rQfuCyJdHSBNG02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjg3OGMyOGRjMjU4NDRjMjkzYjJkNWQ0NDU4N2M0M2E5YTlhZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPCRKniUy+vOJId0uFGiQ+NwojsI uI0fuXqnZL3fjPLC23dwc1nhByM+7MTx+diXTX322HuczfydMTGNInC8O61ofMJ0 DUffmat71KKdnwmTb9sQ07tvzrjoBNmkF1bNshalguMLb0oHIBzciINUiGggDEZy 0+hodjP+p9MLvvTsj0urgUS5FjFacfIC/bfuGZEYXLA+W7CFN0G9LcgL8qlLyKtE MBEOWboc9y0OyvzmUNQd+TNBz0aAmZ0oV3hr198SPxib0gbU8v3pv7voVY34MaQH cfGcFCFTK3G6RNuXAzgGQLtIMMKKbpv1RAcZV77DbVKBXTJMGAxPvI4gqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAaHjCjcJYRMKTstXURYfEOpqa8gMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEvQm9lTUtOd2xoRXdwT3kxZFJGaDhRNm1wcnlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZjkMA0E AgACMAcDBQAqD2UAMA0GCSqGSIb3DQEBCwUAA4IBAQDrX3eoSAOOkHvgOKsiKGi2 3rGuruFai6EEsU6ENYGefh0DAsNHGW49rsf7IMNOeTItWXe2AJiHKA0vNELt1YrS OfQmV0AE5cx2czH+mMitGVWz0aS+VNW+UrXlfqJFWaf1Js8WheedM2uqGclkAA21 TIQi8W3JzlUZa06K2T27uHZGInH8c+mXOlKJBflKxl3brt+oYWnFspIPDHLSajbq Swd7Kqf+671uYA3oQplmCJgn/jPFapNEVhi1rdBf5CAEUQwXFT8yYqH2g4ZHSF7F c2tIbnKkBOejyyLYPhNutJZARV/Mdv+IPv32O2LBW6zXJnXaYlfk8VxYd/r5nx/k -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:35 2026 by rpki-client