This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/Boq3yDWVANB56Y7DdPt7_dRYcLU.roa File: Boq3yDWVANB56Y7DdPt7_dRYcLU.roa (raw, json) Hash identifier: BStaHVeGVGavPOImRXWb924Lp/RocgyKTH8C5s1+NHU= Subject key identifier: 06:8A:B7:C8:35:95:00:D0:79:E9:8E:C3:74:FB:7B:FD:D4:58:70:B5 Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b Certificate serial: 019A78DF64E56B52E085E9A43116127C7E0A Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/Boq3yDWVANB56Y7DdPt7_dRYcLU.roa Signing time: Wed 12 Nov 2025 16:21:37 +0000 ROA not before: Wed 12 Nov 2025 16:21:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9211 IP address blocks: 31.24.96.0/21 maxlen: 24 87.253.160.0/20 maxlen: 24 87.253.190.0/24 maxlen: 24 87.253.191.0/24 maxlen: 24 185.205.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:df:64:e5:6b:52:e0:85:e9:a4:31:16:12:7c:7e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764928a97be955377013d382c62940e950dd212b Validity Not Before: Nov 12 16:21:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=068ab7c8359500d079e98ec374fb7bfdd45870b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:7b:b4:53:a2:80:12:d2:f0:ed:c5:ca:d8: e2:72:74:32:76:11:7b:2e:b1:dd:b4:f3:2d:1d:fc: 22:30:95:91:c1:49:83:de:61:37:78:03:3b:12:8c: db:ec:ce:08:5f:d0:5a:ad:42:a7:62:db:60:a8:ec: 93:39:eb:b4:dc:74:17:2c:fd:ed:44:5f:15:10:77: 46:70:6d:7d:d4:49:17:13:16:0b:c0:71:b4:6c:b5: 5a:d8:73:f0:07:01:24:e9:af:35:95:72:f2:fb:d3: b7:0d:36:9b:9b:8e:66:fd:e1:d0:0a:36:31:8f:e9: 30:8c:1d:8e:53:3c:17:1a:01:58:5b:a8:e2:e9:35: 23:ee:19:9c:09:94:65:d7:3a:ef:53:32:71:71:07: 70:c3:25:4e:3f:b4:83:af:8b:47:ed:2a:56:bc:d4: e6:ab:f2:cf:09:c4:ad:61:19:a9:76:f1:ab:bf:97: 93:2b:d6:40:f7:e2:a1:5c:85:cd:5b:6e:68:f6:39: 3b:16:02:be:22:14:ed:2d:e9:90:e2:09:2e:06:13: d4:c4:35:d4:2c:67:5d:a6:79:1f:cd:ab:88:89:bd: e4:44:d9:cc:22:2f:6c:02:e4:4a:ff:09:07:10:84: fe:57:b6:f5:b7:92:8d:02:14:15:b7:02:c1:bb:fd: 95:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8A:B7:C8:35:95:00:D0:79:E9:8E:C3:74:FB:7B:FD:D4:58:70:B5 X509v3 Authority Key Identifier: keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/Boq3yDWVANB56Y7DdPt7_dRYcLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.96.0/21 87.253.160.0/20 87.253.190.0/23 185.205.216.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:86:d1:91:3b:25:27:6e:4d:af:1c:44:6c:4f:2b:61:cf:57: 0a:be:d0:e4:c4:71:03:bc:51:f5:24:e2:e6:14:10:7f:23:6e: b0:6f:6e:78:33:9c:23:f1:b5:d7:a5:df:d5:33:b1:35:af:53: ee:c7:e2:7c:99:f9:ef:db:98:a1:8e:3f:46:13:96:8c:fd:44: 8d:23:2e:0d:28:da:c5:d1:65:d4:e2:72:f8:6b:7a:f6:e1:e8: bb:3d:e5:db:88:be:a1:aa:06:93:8a:c6:94:64:52:45:d2:bd: b6:72:9b:56:ab:b6:05:60:18:ae:f6:b7:5f:30:f3:64:c8:3d: 66:29:ad:f8:0b:14:a1:18:c1:c9:4b:b1:3b:4c:39:38:ac:69: 35:2b:7c:a5:05:85:ce:2a:d7:2a:5d:1e:44:41:fb:39:aa:f6: 58:79:eb:d8:3d:12:59:22:dc:25:de:5c:5e:8a:ef:73:24:e0: 1f:0b:62:97:77:b8:e9:5c:36:db:70:26:9a:c3:3c:e2:28:81: 9e:59:31:3f:be:2b:02:e8:1a:e8:94:0a:e9:f2:5a:8c:7a:33: d0:03:93:97:20:e4:20:25:f9:0f:36:b4:f8:6e:a4:56:cc:ca: 58:3c:7a:ff:3a:61:4b:47:a5:91:a3:9d:57:2a:a7:a9:ca:ed: 16:87:55:5e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZp432Tla1LghemkMRYSfH4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk ZDIxMmIwHhcNMjUxMTEyMTYyMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjhhYjdjODM1OTUwMGQwNzllOThlYzM3NGZiN2JmZGQ0NTg3MGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu717tFOigBLS8O3FytjicnQydhF7 LrHdtPMtHfwiMJWRwUmD3mE3eAM7Eozb7M4IX9BarUKnYttgqOyTOeu03HQXLP3t RF8VEHdGcG191EkXExYLwHG0bLVa2HPwBwEk6a81lXLy+9O3DTabm45m/eHQCjYx j+kwjB2OUzwXGgFYW6ji6TUj7hmcCZRl1zrvUzJxcQdwwyVOP7SDr4tH7SpWvNTm q/LPCcStYRmpdvGrv5eTK9ZA9+KhXIXNW25o9jk7FgK+IhTtLemQ4gkuBhPUxDXU LGddpnkfzauIib3kRNnMIi9sAuRK/wkHEIT+V7b1t5KNAhQVtwLBu/2VqQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAaKt8g1lQDQeemOw3T7e/3UWHC1MB8GA1UdIwQY MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt YmMxNTIyNzg5ZDNiLzEvQm9xM3lEV1ZBTkI1Nlk3RGRQdDdfZFJZY0xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDHxhgAwQE V/2gAwQBV/2+AwQCuc3YMA0GCSqGSIb3DQEBCwUAA4IBAQA/htGROyUnbk2vHERs Tythz1cKvtDkxHEDvFH1JOLmFBB/I26wb254M5wj8bXXpd/VM7E1r1Pux+J8mfnv 25ihjj9GE5aM/USNIy4NKNrF0WXU4nL4a3r24ei7PeXbiL6hqgaTisaUZFJF0r22 cptWq7YFYBiu9rdfMPNkyD1mKa34CxShGMHJS7E7TDk4rGk1K3ylBYXOKtcqXR5E Qfs5qvZYeevYPRJZItwl3lxeiu9zJOAfC2KXd7jpXDbbcCaawzziKIGeWTE/visC 6BrolArp8lqMejPQA5OXIOQgJfkPNrT4bqRWzMpYPHr/OmFLR6WRo51XKqepyu0W h1Ve -----END CERTIFICATE-----Generated at Sat Dec 6 18:58:51 2025 by rpki-client