This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/bos6SM7aKOJra7RYZZ1mtKTAVUs.roa File: bos6SM7aKOJra7RYZZ1mtKTAVUs.roa (raw, json) Hash identifier: 1H7aFqrene1yynQaBSt/d+zqOjOlIoieVytSTXqiFUs= Subject key identifier: 6E:8B:3A:48:CE:DA:28:E2:6B:6B:B4:58:65:9D:66:B4:A4:C0:55:4B Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0 Certificate serial: 019B7C805F12EAE9E6E5C20BFDCCB69B39A0 Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/bos6SM7aKOJra7RYZZ1mtKTAVUs.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51661 IP address blocks: 185.160.20.0/24 maxlen: 24 185.160.20.0/25 maxlen: 25 185.160.21.0/24 maxlen: 24 185.160.22.0/24 maxlen: 24 185.160.23.0/24 maxlen: 24 2a02:1d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5f:12:ea:e9:e6:e5:c2:0b:fd:cc:b6:9b:39:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e8b3a48ceda28e26b6bb458659d66b4a4c0554b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:de:14:10:01:29:38:5d:e3:0f:16:5e:6d:7f: 89:f1:0c:73:5a:01:ba:e7:89:71:86:91:9d:25:e1: ed:84:ff:f0:81:27:93:8b:db:8d:a3:c0:62:2d:ef: ec:eb:14:bd:4b:f6:11:ee:02:41:1a:12:c3:d5:e9: aa:bc:0b:4e:dc:55:12:fd:33:29:12:bb:f0:52:5d: 8b:b4:8e:30:3e:af:76:fb:25:8e:92:63:9d:f6:0e: 19:ca:db:4d:f2:eb:3b:30:1d:95:8c:55:25:14:a2: 0b:07:5e:d6:f7:b6:86:80:df:6c:94:10:ef:f4:65: 5e:22:ee:3c:25:e3:7d:81:f1:3b:95:68:23:ce:bd: 49:af:c2:cf:26:4a:e8:9e:93:f5:b0:b4:37:54:14: b2:1b:c9:37:87:b2:fa:83:1a:21:74:f6:b5:a3:d5: 7a:e0:70:d5:a9:bc:55:c8:93:eb:8a:be:25:90:f3: 89:19:ad:a4:43:ee:a9:37:64:1d:ca:97:cf:2a:3b: 25:07:f7:c1:48:2d:e2:4f:8c:1b:85:d2:49:86:e7: cf:91:08:de:2f:23:93:06:84:cf:6c:9d:0b:f6:06: 11:cb:17:13:cf:59:b4:f8:37:79:7c:f4:dc:4f:1f: 5c:3b:a1:05:20:1f:31:ef:c4:b1:50:e8:03:b3:d8: 2c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8B:3A:48:CE:DA:28:E2:6B:6B:B4:58:65:9D:66:B4:A4:C0:55:4B X509v3 Authority Key Identifier: keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/bos6SM7aKOJra7RYZZ1mtKTAVUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.20.0/22 IPv6: 2a02:1d0::/32 Signature Algorithm: sha256WithRSAEncryption 94:87:0f:a2:7f:a3:bf:42:40:22:dd:0b:7d:fd:d8:ad:59:7e: 33:1d:82:dc:83:6a:fb:c0:c2:67:bc:d9:bd:4c:ee:12:27:1a: 01:9f:7e:6d:5c:e3:e6:ee:af:5a:37:1d:6e:99:75:b2:75:cd: be:5c:12:6d:93:7d:2d:f9:07:bd:fa:1c:39:71:18:38:37:38: cb:3f:12:4a:80:aa:e0:00:17:3b:0f:c1:1e:cf:87:12:55:bc: b4:d9:7a:38:4d:90:b7:cb:65:e1:3c:70:29:07:4d:ba:c9:db: 82:61:aa:83:65:40:62:09:72:9a:3e:22:17:ce:6b:03:9c:b4: 25:c6:14:e9:d4:23:fd:51:62:34:83:b1:d3:ec:02:23:8d:48: e8:10:bc:6c:f8:fc:e7:67:fa:c4:63:d8:ef:f0:65:79:b9:92: 07:9d:d3:cc:0c:91:e1:4c:5e:28:d5:1e:98:a0:ce:59:6e:38: 95:f2:b0:fd:94:96:91:44:55:a9:9f:c2:c6:6a:fc:e6:68:db: b9:bf:cb:7d:c6:87:6a:69:a3:a9:9d:af:ee:ea:1c:30:4f:22: 91:ca:e6:a7:e5:b8:ac:ca:ab:08:18:84:5c:fc:c7:7d:fa:4d: 86:b4:f5:c0:a0:17:e6:d3:ab:f2:bf:2b:c3:5b:aa:57:47:84: 54:63:66:cf -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gF8S6unm5cIL/cy2mzmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzQ3NGNlYjg1YWYzMTEyMmVkZTU4NmQ0ZDY1YjBmNWI0 ZDk3ZjAwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZThiM2E0OGNlZGEyOGUyNmI2YmI0NTg2NTlkNjZiNGE0YzA1NTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N4UEAEpOF3jDxZebX+J8QxzWgG6 54lxhpGdJeHthP/wgSeTi9uNo8BiLe/s6xS9S/YR7gJBGhLD1emqvAtO3FUS/TMp ErvwUl2LtI4wPq92+yWOkmOd9g4ZyttN8us7MB2VjFUlFKILB17W97aGgN9slBDv 9GVeIu48JeN9gfE7lWgjzr1Jr8LPJkronpP1sLQ3VBSyG8k3h7L6gxohdPa1o9V6 4HDVqbxVyJPrir4lkPOJGa2kQ+6pN2QdypfPKjslB/fBSC3iT4wbhdJJhufPkQje LyOTBoTPbJ0L9gYRyxcTz1m0+Dd5fPTcTx9cO6EFIB8x78SxUOgDs9gs3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG6LOkjO2ijia2u0WGWdZrSkwFVLMB8GA1UdIwQY MBaAFMh0dM64WvMRIu3lhtTWWw9bTZfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYt MDM1ODY1MjNiMTMzLzEvYm9zNlNNN2FLT0pyYTdSWVpaMW10S1RBVlVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYtMDM1ODY1MjNiMTMz LzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaAUMA0E AgACMAcDBQAqAgHQMA0GCSqGSIb3DQEBCwUAA4IBAQCUhw+if6O/QkAi3Qt9/dit WX4zHYLcg2r7wMJnvNm9TO4SJxoBn35tXOPm7q9aNx1umXWydc2+XBJtk30t+Qe9 +hw5cRg4NzjLPxJKgKrgABc7D8Eez4cSVby02Xo4TZC3y2XhPHApB026yduCYaqD ZUBiCXKaPiIXzmsDnLQlxhTp1CP9UWI0g7HT7AIjjUjoELxs+PznZ/rEY9jv8GV5 uZIHndPMDJHhTF4o1R6YoM5ZbjiV8rD9lJaRRFWpn8LGavzmaNu5v8t9xodqaaOp na/u6hwwTyKRyuan5bisyqsIGIRc/Md9+k2GtPXAoBfm06vyvyvDW6pXR4RUY2bP -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:11 2026 by rpki-client