This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/0bon_9lO1_1S4Y0uUolP8XU5FaI.roa File: 0bon_9lO1_1S4Y0uUolP8XU5FaI.roa (raw, json) Hash identifier: FJ2QehHtFtcd71ZjMQZfutk+NRAwO7uiNlxtBcCUL2k= Subject key identifier: D1:BA:27:FF:D9:4E:D7:FD:52:E1:8D:2E:52:89:4F:F1:75:39:15:A2 Certificate issuer: /CN=46ebddae6a7acee83a322a0e743a6759d85365f2 Certificate serial: 019B78348FAEE6EDBB0FE015CAA510B2CA6C Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/0bon_9lO1_1S4Y0uUolP8XU5FaI.roa Signing time: Thu 01 Jan 2026 06:17:49 +0000 ROA not before: Thu 01 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206944 IP address blocks: 185.171.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8f:ae:e6:ed:bb:0f:e0:15:ca:a5:10:b2:ca:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2 Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1ba27ffd94ed7fd52e18d2e52894ff1753915a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:71:4b:51:6f:27:3b:8c:2f:14:17:e0:82: 65:6e:39:2c:46:81:f0:8f:f6:82:94:e5:29:c9:ed: 0e:d2:7c:16:2f:e8:dc:9b:04:7e:25:38:ca:9a:70: 96:7c:2f:b7:a8:2f:ea:38:f9:26:35:dc:9c:d9:d1: eb:7f:2b:68:16:11:32:40:a8:fa:7c:b5:98:6c:81: 73:d9:5a:a5:72:d1:46:ff:b8:4b:8f:b3:7d:4e:91: 07:9d:c7:53:5c:c4:08:71:fc:b5:f3:c1:38:65:fa: 1f:cc:ed:fe:ad:38:8e:d1:40:c6:61:ea:df:12:ba: fd:c5:d3:99:fb:53:44:cf:46:ad:2d:81:90:00:27: 27:6a:8e:7a:85:67:db:3d:75:e0:0c:93:b3:69:d9: d2:e5:e0:01:38:6a:19:1c:bb:ba:75:62:c3:b6:c2: 23:b5:44:7e:71:ec:87:ae:6e:0f:f7:75:3f:95:bd: a8:8b:d5:d0:9f:05:09:15:ca:92:56:fc:7d:79:47: 26:f5:e4:c0:a5:13:1b:3b:7b:f9:64:9f:d2:33:b0: da:6f:2b:13:99:90:b0:2c:2b:3c:71:0f:bc:37:70: d6:40:62:72:91:3f:d9:54:37:72:95:bf:ed:f2:ef: 35:78:7c:a5:6e:40:66:74:14:37:36:35:1b:6a:29: 99:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BA:27:FF:D9:4E:D7:FD:52:E1:8D:2E:52:89:4F:F1:75:39:15:A2 X509v3 Authority Key Identifier: keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/0bon_9lO1_1S4Y0uUolP8XU5FaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.20.0/23 Signature Algorithm: sha256WithRSAEncryption 75:ed:ef:f0:24:14:d1:e2:af:4f:59:4a:b2:d1:3e:55:a9:c0: 02:dc:71:a9:69:2a:0f:02:58:54:0a:ca:cf:5f:30:b7:6b:56: 74:60:bb:d8:c2:23:b7:3d:77:d2:7f:a9:f5:ca:32:88:7d:b2: eb:ab:9b:83:23:10:09:9d:d6:3c:ff:69:e0:9a:98:08:c8:dd: 05:1a:01:5e:0b:51:b7:36:1f:41:70:21:67:61:45:eb:42:3a: 46:31:35:a5:cf:96:8a:be:fa:4c:1f:a9:69:d9:9e:cb:fc:3e: 90:f4:03:05:70:a4:54:df:e5:94:8b:08:35:46:2e:bd:81:ca: 7b:38:8c:31:b5:18:80:34:e9:12:77:15:5c:a7:e8:06:77:56: d6:ca:c3:63:c3:33:2a:e9:ab:27:4d:2f:2e:28:1e:ce:be:cf: 40:9a:26:6f:1b:06:bb:38:5e:6a:f1:ba:95:34:a6:52:d7:5e: e0:bb:fa:0d:19:65:53:22:aa:ce:b4:83:12:6d:c4:b3:91:2c: 0d:bd:c2:c0:73:10:f4:0b:b8:23:4b:73:ff:05:2e:c5:a2:26: 84:90:ab:a5:86:49:59:78:19:e9:ea:ec:17:ce:4f:6a:7b:e3: 85:86:0b:8b:e9:79:a0:f1:68:9a:03:05:c0:84:f9:83:88:29: 83:aa:dc:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NI+u5u27D+AVyqUQsspsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZWJkZGFlNmE3YWNlZTgzYTMyMmEwZTc0M2E2NzU5ZDg1 MzY1ZjIwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWJhMjdmZmQ5NGVkN2ZkNTJlMThkMmU1Mjg5NGZmMTc1MzkxNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVlxS1FvJzuMLxQX4IJlbjksRoHw j/aClOUpye0O0nwWL+jcmwR+JTjKmnCWfC+3qC/qOPkmNdyc2dHrfytoFhEyQKj6 fLWYbIFz2VqlctFG/7hLj7N9TpEHncdTXMQIcfy188E4ZfofzO3+rTiO0UDGYerf Err9xdOZ+1NEz0atLYGQACcnao56hWfbPXXgDJOzadnS5eABOGoZHLu6dWLDtsIj tUR+ceyHrm4P93U/lb2oi9XQnwUJFcqSVvx9eUcm9eTApRMbO3v5ZJ/SM7DabysT mZCwLCs8cQ+8N3DWQGJykT/ZVDdylb/t8u81eHylbkBmdBQ3NjUbaimZ5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNG6J//ZTtf9UuGNLlKJT/F1ORWiMB8GA1UdIwQY MBaAFEbr3a5qes7oOjIqDnQ6Z1nYU2XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81YzY1YWYtYjNmOS00YmIzLWE3MDIt MmJjOTA3OTRkMzhkLzEvMGJvbl85bE8xXzFTNFkwdVVvbFA4WFU1RmFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81YzY1YWYtYjNmOS00YmIzLWE3MDItMmJjOTA3OTRkMzhk LzEvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuasUMA0G CSqGSIb3DQEBCwUAA4IBAQB17e/wJBTR4q9PWUqy0T5VqcAC3HGpaSoPAlhUCsrP XzC3a1Z0YLvYwiO3PXfSf6n1yjKIfbLrq5uDIxAJndY8/2ngmpgIyN0FGgFeC1G3 Nh9BcCFnYUXrQjpGMTWlz5aKvvpMH6lp2Z7L/D6Q9AMFcKRU3+WUiwg1Ri69gcp7 OIwxtRiANOkSdxVcp+gGd1bWysNjwzMq6asnTS8uKB7Ovs9AmiZvGwa7OF5q8bqV NKZS117gu/oNGWVTIqrOtIMSbcSzkSwNvcLAcxD0C7gjS3P/BS7FoiaEkKulhklZ eBnp6uwXzk9qe+OFhguL6Xmg8WiaAwXAhPmDiCmDqtyB -----END CERTIFICATE-----Generated at Mon Jan 26 07:51:30 2026 by rpki-client