This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Bo7zYUHQBUQi9_KUfF4PGQ_vJbs.roa File: Bo7zYUHQBUQi9_KUfF4PGQ_vJbs.roa (raw, json) Hash identifier: DOediyWmCRCfg7URui5n2J+mzRt4UeyRWgUOTIbJjyg= Subject key identifier: 06:8E:F3:61:41:D0:05:44:22:F7:F2:94:7C:5E:0F:19:0F:EF:25:BB Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84E8F2312332BDB8DE85B19FA42DF0 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Bo7zYUHQBUQi9_KUfF4PGQ_vJbs.roa Signing time: Fri 02 Jan 2026 16:22:55 +0000 ROA not before: Fri 02 Jan 2026 16:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64423 IP address blocks: 95.46.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e8:f2:31:23:32:bd:b8:de:85:b1:9f:a4:2d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=068ef36141d0054422f7f2947c5e0f190fef25bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:71:a5:82:ea:85:8f:dd:68:e3:35:4e:ca: 82:62:f6:3a:76:89:cc:53:fa:e6:6b:02:3a:2a:62: 0c:57:eb:62:56:00:63:0d:e4:46:c4:d5:06:a0:54: d5:94:24:3a:4c:14:b1:80:1a:da:f3:31:de:56:ff: 0c:54:5d:fd:f9:c3:c1:19:42:71:ff:2c:df:63:ce: 11:90:17:05:dd:78:ad:d3:ff:43:5c:83:2d:70:a2: 51:77:e6:76:3f:19:de:b5:cb:90:c1:ad:22:ae:ce: e8:1a:d9:dc:7e:3a:8c:d7:f4:b7:bc:12:19:33:02: 7a:98:5d:7f:ba:c1:65:40:c4:09:19:0d:91:15:e7: 48:4d:93:12:84:01:a6:7e:b2:08:88:2e:06:b4:7e: 92:5e:03:5f:39:de:73:b7:fb:61:6c:14:59:d0:f1: 09:d1:4c:80:30:de:59:36:98:57:1b:d3:9e:ea:af: 04:e8:47:61:a8:56:14:67:61:09:5b:20:a4:0d:4d: e3:b0:cd:5e:4c:fd:2d:a8:cd:5a:79:c9:cf:eb:eb: 10:fa:e2:0a:b1:9d:3d:bc:b3:74:a0:bd:84:6d:66: fb:b2:52:89:56:58:3a:fc:58:e7:13:a7:65:b0:8a: 01:5a:7b:f9:1c:ba:df:f6:d9:28:3a:39:ae:69:a5: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8E:F3:61:41:D0:05:44:22:F7:F2:94:7C:5E:0F:19:0F:EF:25:BB X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Bo7zYUHQBUQi9_KUfF4PGQ_vJbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.40.0/22 Signature Algorithm: sha256WithRSAEncryption a7:26:dd:a6:8e:f5:23:d5:f7:93:04:eb:33:b4:66:cb:dc:e6: ac:fb:c6:67:e9:34:95:34:e7:3e:e2:db:47:f5:e9:0b:cb:f0: b8:e9:ee:a4:43:17:e7:ba:65:cf:9d:d2:a1:ca:6f:aa:39:e3: 2a:8d:a3:54:dd:cb:fb:bb:0b:45:9d:96:d6:84:95:13:2d:1e: 54:76:09:7c:98:88:06:4e:bc:ed:24:9d:44:ed:f3:50:a4:a4: 13:c3:71:e8:7f:1f:53:05:d7:40:9b:16:d5:ab:0a:7e:80:7b: ef:35:9f:fb:ff:6c:ca:5f:f3:67:4f:eb:67:15:f7:d0:57:c4: 9b:97:00:b7:17:ec:2c:c8:72:a5:31:7e:a2:2c:5a:57:a4:98: c7:dc:f7:20:26:20:3c:79:de:15:f3:a4:29:9e:fb:37:5a:36: 4a:3e:e1:95:47:06:90:18:fc:42:8c:9f:65:db:d8:56:2e:43: c1:a0:e7:67:83:4f:cd:f8:3b:bd:28:9c:ac:40:a7:00:af:99: 8e:f9:18:06:79:ac:db:8d:c6:ff:52:0f:4c:ed:03:9e:63:7a: 3d:cc:9f:44:54:c3:c9:ea:bf:c2:05:27:17:a4:2f:67:13:fa: ba:ab:36:4e:ca:78:0f:f4:9c:80:8c:0a:ed:d2:87:21:6d:5a: ed:f3:14:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOjyMSMyvbjehbGfpC3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjhlZjM2MTQxZDAwNTQ0MjJmN2YyOTQ3YzVlMGYxOTBmZWYyNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyJxpYLqhY/daOM1TsqCYvY6donM U/rmawI6KmIMV+tiVgBjDeRGxNUGoFTVlCQ6TBSxgBra8zHeVv8MVF39+cPBGUJx /yzfY84RkBcF3Xit0/9DXIMtcKJRd+Z2PxnetcuQwa0irs7oGtncfjqM1/S3vBIZ MwJ6mF1/usFlQMQJGQ2RFedITZMShAGmfrIIiC4GtH6SXgNfOd5zt/thbBRZ0PEJ 0UyAMN5ZNphXG9Oe6q8E6EdhqFYUZ2EJWyCkDU3jsM1eTP0tqM1aecnP6+sQ+uIK sZ09vLN0oL2EbWb7slKJVlg6/FjnE6dlsIoBWnv5HLrf9tkoOjmuaaUR7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAaO82FB0AVEIvfylHxeDxkP7yW7MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvQm83ellVSFFCVVFpOV9LVWZGNFBHUV92SmJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXy4oMA0G CSqGSIb3DQEBCwUAA4IBAQCnJt2mjvUj1feTBOsztGbL3Oas+8Zn6TSVNOc+4ttH 9ekLy/C46e6kQxfnumXPndKhym+qOeMqjaNU3cv7uwtFnZbWhJUTLR5Udgl8mIgG TrztJJ1E7fNQpKQTw3Hofx9TBddAmxbVqwp+gHvvNZ/7/2zKX/NnT+tnFffQV8Sb lwC3F+wsyHKlMX6iLFpXpJjH3PcgJiA8ed4V86Qpnvs3WjZKPuGVRwaQGPxCjJ9l 29hWLkPBoOdng0/N+Du9KJysQKcAr5mO+RgGeazbjcb/Ug9M7QOeY3o9zJ9EVMPJ 6r/CBScXpC9nE/q6qzZOyngP9JyAjArt0ochbVrt8xTn -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:36 2026 by rpki-client