This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/BooqKG4SsYSQxh6PGW72NBqbtuw.roa File: BooqKG4SsYSQxh6PGW72NBqbtuw.roa (raw, json) Hash identifier: TU0xZxrNhYVeehRBPFf+LnBXvIDYoAVW0L6Hmfayq5M= Subject key identifier: 06:8A:2A:28:6E:12:B1:84:90:C6:1E:8F:19:6E:F6:34:1A:9B:B6:EC Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019B7EA6A23213899A80120E1D4C27E3AF96 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/BooqKG4SsYSQxh6PGW72NBqbtuw.roa Signing time: Fri 02 Jan 2026 12:20:08 +0000 ROA not before: Fri 02 Jan 2026 12:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20374 IP address blocks: 157.23.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a2:32:13:89:9a:80:12:0e:1d:4c:27:e3:af:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=068a2a286e12b18490c61e8f196ef6341a9bb6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:ac:b6:29:67:2b:f0:ed:65:53:d7:47:cf: 2a:47:ad:16:0e:f7:e3:7d:4e:c7:43:09:eb:b5:a8: 11:a7:74:68:bf:16:80:ff:93:c6:58:a5:02:40:e6: c4:40:e6:5c:3c:02:72:b7:43:d7:f3:29:46:68:0d: a2:3c:73:3a:48:f6:27:43:93:ad:6e:90:e4:e6:3a: f8:b4:2d:f9:2b:f4:3d:5b:18:4c:06:47:47:d1:26: e1:8b:25:04:59:ac:50:3e:e7:a5:69:3a:01:d2:b8: 32:2b:bf:6b:bf:86:ba:f0:1f:35:cf:b1:0e:b9:a5: 68:71:02:b1:68:d4:b0:c9:5b:b4:58:ce:e0:b6:b7: bf:11:b0:2a:4c:00:61:b7:e0:e9:3b:e3:29:f4:66: fe:9a:5a:c4:1f:b2:67:dc:03:4e:bf:69:85:ac:92: 37:28:e0:d9:c2:b8:ca:cf:b6:bd:c5:73:de:75:ae: 06:5e:49:cc:7f:0b:0b:97:5c:f3:05:47:17:30:83: b3:58:a5:c1:e4:29:ad:73:a8:3d:f3:4d:87:46:c2: 0e:c3:9e:12:c6:60:94:72:1e:f8:e1:b2:35:c9:0f: 56:30:96:f7:e3:f0:ca:8d:05:8a:eb:d8:f6:19:4f: f0:c3:ce:ae:fe:83:b4:fa:3f:7f:e5:61:85:13:00: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8A:2A:28:6E:12:B1:84:90:C6:1E:8F:19:6E:F6:34:1A:9B:B6:EC X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/BooqKG4SsYSQxh6PGW72NBqbtuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.23.178.0/24 Signature Algorithm: sha256WithRSAEncryption a1:55:22:27:76:0a:2d:87:ef:19:5b:37:4c:ee:22:0d:db:f9: 07:a0:c1:cf:62:d6:9f:32:1e:f1:75:db:34:b5:14:04:94:61: 82:90:3d:bc:d7:b2:05:2a:f5:42:86:be:76:91:25:22:87:07: 86:1b:9a:61:be:00:be:13:04:c9:b7:9c:3f:5f:f3:69:ea:99: 0d:26:10:33:69:42:db:ad:02:30:23:c0:86:ac:95:7f:a9:e8: 69:65:07:05:d1:16:de:b8:9d:7f:3e:d7:d0:ed:83:84:24:f6: 91:53:83:c6:9d:ba:21:b7:fd:8e:db:cb:16:3e:15:60:2e:17: 04:d4:dd:0e:9e:f9:71:9f:3f:22:d9:1b:4a:76:ed:b2:f6:aa: ee:44:35:6a:0e:c5:b5:eb:19:00:bc:1e:c4:75:2f:22:26:22: dd:18:a1:73:5c:90:ea:b8:74:04:7d:7e:37:8b:23:3a:5f:64: bc:0a:70:4c:b8:49:36:c7:c6:a6:fe:2b:63:54:fa:17:96:e4: 96:4a:72:0a:a0:6e:4c:05:07:9c:d6:1e:5a:e4:81:1b:80:1a: 6e:aa:97:17:fe:39:2c:9a:05:5c:84:c5:c3:4e:7d:9d:7a:ac: de:27:d7:9c:4e:bf:3c:1a:63:7e:77:1c:a2:e1:5e:30:82:4f: 4d:a6:12:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqIyE4magBIOHUwn46+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjhhMmEyODZlMTJiMTg0OTBjNjFlOGYxOTZlZjYzNDFhOWJiNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/GstilnK/DtZVPXR88qR60WDvfj fU7HQwnrtagRp3RovxaA/5PGWKUCQObEQOZcPAJyt0PX8ylGaA2iPHM6SPYnQ5Ot bpDk5jr4tC35K/Q9WxhMBkdH0SbhiyUEWaxQPuelaToB0rgyK79rv4a68B81z7EO uaVocQKxaNSwyVu0WM7gtre/EbAqTABht+DpO+Mp9Gb+mlrEH7Jn3ANOv2mFrJI3 KODZwrjKz7a9xXPeda4GXknMfwsLl1zzBUcXMIOzWKXB5Cmtc6g9802HRsIOw54S xmCUch744bI1yQ9WMJb34/DKjQWK69j2GU/ww86u/oO0+j9/5WGFEwBZXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAaKKihuErGEkMYejxlu9jQam7bsMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvQm9vcUtHNFNzWVNReGg2UEdXNzJOQnFidHV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnReyMA0G CSqGSIb3DQEBCwUAA4IBAQChVSIndgoth+8ZWzdM7iIN2/kHoMHPYtafMh7xdds0 tRQElGGCkD2817IFKvVChr52kSUihweGG5phvgC+EwTJt5w/X/Np6pkNJhAzaULb rQIwI8CGrJV/qehpZQcF0RbeuJ1/PtfQ7YOEJPaRU4PGnboht/2O28sWPhVgLhcE 1N0Onvlxnz8i2RtKdu2y9qruRDVqDsW16xkAvB7EdS8iJiLdGKFzXJDquHQEfX43 iyM6X2S8CnBMuEk2x8am/itjVPoXluSWSnIKoG5MBQec1h5a5IEbgBpuqpcX/jks mgVchMXDTn2deqzeJ9ecTr88GmN+dxyi4V4wgk9NphIy -----END CERTIFICATE-----Generated at Sun Jan 25 14:10:29 2026 by rpki-client