This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BoiSOiReGPVFpaCDNopU0mejeCQ.roa
File: BoiSOiReGPVFpaCDNopU0mejeCQ.roa (raw, json)
Hash identifier: 0tmjyfqR/wWKsdfVfBknQh+f8N7AXW4sMVDk/ZH0HQw=
Subject key identifier: 06:88:92:3A:24:5E:18:F5:45:A5:A0:83:36:8A:54:D2:67:A3:78:24
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019B7CEDE945F40BE410B52B8627D3BF9C2A
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BoiSOiReGPVFpaCDNopU0mejeCQ.roa
Signing time: Fri 02 Jan 2026 04:18:45 +0000
ROA not before: Fri 02 Jan 2026 04:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36832
IP address blocks: 2a05:1084::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:e9:45:f4:0b:e4:10:b5:2b:86:27:d3:bf:9c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 04:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0688923a245e18f545a5a083368a54d267a37824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:1a:c7:c8:64:f6:9b:00:8b:c2:37:1d:fa:
8a:82:99:24:0f:19:86:8a:ab:aa:d5:d0:b7:4f:e6:
a9:f3:a2:cd:00:94:00:1f:49:e3:fc:d8:30:14:23:
b0:4e:d2:6e:9e:d2:bc:d9:a3:9f:a9:de:c4:c7:20:
af:b0:32:a8:e7:d6:76:bb:1c:92:66:95:49:6e:2d:
ab:ba:fa:04:c8:94:3f:9e:8d:c3:3e:81:0a:f8:af:
61:6a:cc:dd:f4:c9:17:b6:41:d2:51:04:46:8b:35:
36:3f:28:04:2c:17:22:66:49:21:0d:e8:b4:8a:d1:
ac:4c:34:ff:fd:8f:45:ac:7f:eb:9f:e0:4d:4f:74:
64:70:e9:30:ed:9c:6e:fb:7e:97:89:f1:52:48:2e:
dc:40:ba:c5:c6:8f:81:58:92:72:98:86:38:9a:c4:
ab:ed:e8:b3:81:b6:c5:d3:6a:48:0f:eb:30:95:73:
f9:e2:2b:c6:f6:67:ac:30:e3:39:8b:65:11:25:5e:
9a:f4:14:bc:55:8a:41:6e:c2:25:99:9d:c2:3a:a9:
50:37:35:d5:c4:65:48:9f:0f:b4:87:3f:54:90:27:
98:3e:ad:51:82:30:88:49:42:cc:f9:f3:ec:3c:a4:
81:b2:84:44:b8:0e:b6:38:d6:01:ce:9c:81:d9:fd:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:88:92:3A:24:5E:18:F5:45:A5:A0:83:36:8A:54:D2:67:A3:78:24
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BoiSOiReGPVFpaCDNopU0mejeCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1084::/32
Signature Algorithm: sha256WithRSAEncryption
4d:e6:e5:7c:30:ee:f3:65:7e:bf:e3:17:ea:96:f8:7e:fb:83:
ca:be:5f:ee:83:44:d4:db:d9:a2:2e:ad:cd:7d:e4:7a:52:c5:
2d:cb:1d:79:ed:6a:c7:e8:f3:33:e8:ee:57:55:7a:e8:8e:03:
ee:55:6e:4d:4e:87:9f:95:be:c8:74:38:9c:ae:8b:a5:c6:55:
c2:dc:8a:21:d3:c4:b1:6f:43:3b:f8:d9:7d:01:54:52:e8:e7:
7f:0c:90:aa:73:70:04:c4:94:99:4f:a7:94:d0:21:89:f5:c8:
a7:5a:91:ef:23:41:96:1e:e7:e8:09:7d:88:ac:f5:ef:1b:49:
4e:1e:5c:ef:20:02:70:67:ea:d9:dc:43:68:8f:d4:06:0f:aa:
de:3a:98:e6:9c:34:bc:c2:ff:50:38:11:a0:53:f2:3a:aa:1e:
be:57:91:69:e5:a1:40:d6:06:ce:fd:b7:bb:72:08:b2:95:a3:
d9:6e:cb:93:78:ee:8d:40:b4:2b:ce:48:de:d5:77:6d:f6:5c:
67:85:7c:92:94:98:8e:15:e1:1a:16:42:de:8d:2e:7a:3c:52:
df:44:53:b3:65:59:76:e7:75:1b:e4:7d:91:2e:20:03:61:24:
d7:be:39:eb:6a:e6:2b:5a:e1:f1:65:ea:97:94:ef:96:49:3c:
3f:15:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:41 2026 by rpki-client