This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/BoaVLgPlhn4qr_fU3lgNc_DP-CI.roa File: BoaVLgPlhn4qr_fU3lgNc_DP-CI.roa (raw, json) Hash identifier: 8gys4r5Jrh79V6ospkWBTCV9aubZPTwmXqR+dBSZNIM= Subject key identifier: 06:86:95:2E:03:E5:86:7E:2A:AF:F7:D4:DE:58:0D:73:F0:CF:F8:22 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019B7E392135ACDF2A813D501E4DE1012661 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/BoaVLgPlhn4qr_fU3lgNc_DP-CI.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214981 IP address blocks: 91.211.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:21:35:ac:df:2a:81:3d:50:1e:4d:e1:01:26:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0686952e03e5867e2aaff7d4de580d73f0cff822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:9a:7d:95:d1:39:2a:f8:11:b6:ba:55:c3: 56:2c:9d:a6:60:dd:98:13:9b:09:6e:fe:db:9a:89: b4:55:bb:19:2f:c0:23:d7:71:6f:59:2c:7a:16:d7: 9a:8f:c1:a4:71:72:a5:3a:01:d9:89:2d:b5:9c:3b: 04:6f:48:ff:38:dd:d8:74:bf:7c:6c:78:0f:8b:9d: cb:e5:d1:66:b7:e1:9b:b5:aa:cd:70:5b:41:bc:05: 7b:66:24:dc:0d:a2:2b:91:4d:7b:3f:79:60:5c:28: d4:28:74:11:05:e5:31:f8:2a:11:62:90:cb:72:93: 63:b2:34:6c:0b:fd:b9:97:c0:a2:93:cd:74:84:f1: b0:60:7b:ba:ba:ce:ee:56:19:fa:dc:42:30:b2:32: 0b:41:04:e4:7f:ff:69:2f:63:34:91:6e:e3:49:14: e8:10:79:58:4e:09:eb:d8:76:be:ff:f6:5d:0a:d5: 6a:13:4e:f2:23:fb:80:19:d5:0a:49:81:e9:24:0f: 37:e7:8c:f6:6f:da:e0:45:c2:20:a7:ca:7d:d1:de: 0d:29:2b:52:9f:06:e5:fc:80:55:05:94:99:bb:5a: f5:d9:12:e0:b7:fa:d4:9f:2e:f5:d6:46:b4:68:b3: ee:e4:89:2a:b0:c7:8e:23:85:ea:3b:af:15:93:34: 8d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:86:95:2E:03:E5:86:7E:2A:AF:F7:D4:DE:58:0D:73:F0:CF:F8:22 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/BoaVLgPlhn4qr_fU3lgNc_DP-CI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.123.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:6b:94:ea:dd:cf:b5:2f:c5:52:6b:37:11:de:10:2c:97:f2: 69:89:94:92:fd:ec:7e:49:5d:ee:af:11:61:58:4b:96:9c:3f: 9d:88:7d:84:e5:d1:be:d2:41:ad:b3:cc:2c:4e:81:70:fa:f7: 4e:ca:65:76:7a:57:68:3f:2a:05:58:c2:a0:91:df:13:8d:1d: cf:27:76:c0:62:0e:93:14:1f:8e:03:f2:92:9f:d9:62:b5:01: 72:78:b1:49:dd:96:dc:91:9c:3a:df:ff:65:f9:b1:02:b7:07: ac:4c:70:00:2f:f2:9a:3b:a0:d4:e9:db:24:f7:45:fb:ed:6e: f4:8a:3d:ff:eb:0e:ef:ed:70:81:01:5f:c9:3c:f4:a9:c8:cc: 4b:31:e1:59:7b:e4:fd:9c:bf:29:9c:b7:68:98:04:a8:2e:be: f5:49:e9:f0:df:b0:03:b0:6d:7d:25:1a:4c:51:cb:d2:95:f1: 3a:17:04:85:e5:87:59:46:e1:a4:5c:00:55:eb:ff:9b:6d:36: 09:98:c9:ae:8b:41:bf:2b:15:d4:4a:b7:55:97:e0:e6:2a:90: de:66:c2:96:b8:6d:bb:b0:be:39:11:7b:35:70:b0:b8:65:0e: 3e:28:35:10:39:b2:3a:7c:9d:14:48:83:c5:f3:ce:13:fa:dd: a7:c9:d0:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSE1rN8qgT1QHk3hASZhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjg2OTUyZTAzZTU4NjdlMmFhZmY3ZDRkZTU4MGQ3M2YwY2ZmODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzqafZXROSr4Eba6VcNWLJ2mYN2Y E5sJbv7bmom0VbsZL8Aj13FvWSx6Fteaj8GkcXKlOgHZiS21nDsEb0j/ON3YdL98 bHgPi53L5dFmt+GbtarNcFtBvAV7ZiTcDaIrkU17P3lgXCjUKHQRBeUx+CoRYpDL cpNjsjRsC/25l8Cik810hPGwYHu6us7uVhn63EIwsjILQQTkf/9pL2M0kW7jSRTo EHlYTgnr2Ha+//ZdCtVqE07yI/uAGdUKSYHpJA8354z2b9rgRcIgp8p90d4NKStS nwbl/IBVBZSZu1r12RLgt/rUny711ka0aLPu5IkqsMeOI4XqO68VkzSNkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAaGlS4D5YZ+Kq/31N5YDXPwz/giMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvQm9hVkxnUGxobjRxcl9mVTNsZ05jX0RQLUNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9N7MA0G CSqGSIb3DQEBCwUAA4IBAQBPa5Tq3c+1L8VSazcR3hAsl/JpiZSS/ex+SV3urxFh WEuWnD+diH2E5dG+0kGts8wsToFw+vdOymV2eldoPyoFWMKgkd8TjR3PJ3bAYg6T FB+OA/KSn9litQFyeLFJ3ZbckZw63/9l+bECtwesTHAAL/KaO6DU6dsk90X77W70 ij3/6w7v7XCBAV/JPPSpyMxLMeFZe+T9nL8pnLdomASoLr71Senw37ADsG19JRpM UcvSlfE6FwSF5YdZRuGkXABV6/+bbTYJmMmui0G/KxXUSrdVl+DmKpDeZsKWuG27 sL45EXs1cLC4ZQ4+KDUQObI6fJ0USIPF884T+t2nydCL -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:32 2026 by rpki-client