This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/boz2HEWAr2I9MdgKm-5fDjqxBzg.roa File: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (raw, json) Hash identifier: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg= Subject key identifier: 6E:8C:F6:1C:45:80:AF:62:3D:31:D8:0A:9B:EE:5F:0E:3A:B1:07:38 Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93 Certificate serial: 019B7BA4C11BBD55B9D6661BED0479AA3815 Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/boz2HEWAr2I9MdgKm-5fDjqxBzg.roa Signing time: Thu 01 Jan 2026 22:19:13 +0000 ROA not before: Thu 01 Jan 2026 22:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 93.123.45.0/24 maxlen: 24 2a14:e580::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c1:1b:bd:55:b9:d6:66:1b:ed:04:79:aa:38:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93 Validity Not Before: Jan 1 22:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e8cf61c4580af623d31d80a9bee5f0e3ab10738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:e0:98:c3:20:0e:04:ed:91:84:1c:f1:be: 38:0e:b1:00:2d:42:fc:9e:5c:87:4d:e0:ce:ef:32: 46:ac:18:45:a8:bc:26:8a:81:4b:01:47:f0:b5:79: 89:b9:be:2e:0a:2a:55:ef:81:d3:80:66:4b:72:4a: 4c:b1:ff:49:ae:d3:9f:8a:a5:e6:ad:9e:a1:27:89: 11:f4:14:d0:80:24:67:00:1a:c3:1a:ba:b0:8d:9e: 4b:cf:68:28:4e:07:1b:f5:86:c3:64:5e:f1:8e:5a: c8:08:e7:a6:1c:f6:da:3e:ed:c7:48:28:a4:d7:ab: 1d:51:22:cf:ee:d4:21:79:03:d9:30:84:2c:dd:35: e0:e3:0f:b4:18:cf:4c:59:4e:15:e0:2c:b7:d0:1b: 61:06:be:c7:86:a6:48:c3:3c:48:6c:97:03:e9:b4: df:9f:61:e1:bb:4e:e3:35:ec:09:2d:05:da:e0:a6: 62:0d:be:a5:a3:ce:a2:58:6a:2a:bf:b4:64:87:e9: a8:11:28:b8:e3:37:ba:fb:28:35:99:73:0f:7d:c5: f0:4c:34:35:dc:1b:bc:86:d8:86:72:03:46:1a:0a: c4:00:90:f2:a9:db:90:5c:c2:01:96:a3:4f:de:ec: bb:52:f9:d5:9d:f3:86:d6:1d:2f:8c:57:8c:72:43: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8C:F6:1C:45:80:AF:62:3D:31:D8:0A:9B:EE:5F:0E:3A:B1:07:38 X509v3 Authority Key Identifier: keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/boz2HEWAr2I9MdgKm-5fDjqxBzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.123.45.0/24 IPv6: 2a14:e580::/29 Signature Algorithm: sha256WithRSAEncryption 67:f4:26:d5:f0:48:c3:1a:98:ec:91:02:98:b0:88:5e:08:c2: 9a:dd:c0:15:10:33:ec:c8:39:6e:d7:63:ce:14:4a:a6:9b:ca: 2e:9d:6e:f8:8d:34:e6:4d:ee:12:39:8e:d8:14:ce:6a:08:eb: 49:ad:9b:66:60:45:b4:7a:47:6d:ed:50:b6:05:fc:8c:e8:46: 6a:4f:53:03:0c:e3:5f:cd:e4:cd:db:6d:02:b9:ff:be:4a:2e: c0:a5:61:5b:e0:42:c8:bd:60:e4:d7:ca:9d:19:de:c0:33:5a: 6a:4e:9f:7b:ac:88:36:b0:6c:01:83:ae:b2:27:15:44:d2:86: 2f:3d:32:87:35:a6:65:fd:10:3b:1f:0e:18:a2:20:ca:00:39: 2f:40:39:b6:30:df:8b:5e:c9:45:ce:94:c0:14:4f:73:de:9b: dd:5f:1e:1c:29:7e:de:66:f6:e7:aa:db:7d:e3:33:c5:ef:fb: c3:7b:b6:56:71:8d:15:9b:16:65:49:2a:9f:d1:a6:d9:e2:9e: f1:4f:f8:95:59:5e:df:a3:94:79:e9:73:7a:ef:ce:6f:72:de: 29:af:89:46:1f:de:4c:63:1d:9f:b1:06:25:e9:94:da:ae:9c: f9:6a:c0:95:87:20:31:fe:d0:46:5c:cd:08:2c:ed:1a:1d:9a: 0a:9b:bc:92 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pMEbvVW51mYb7QR5qjgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOTBlMzc2OTQ0ZDMwMjk0ZGVhNDFmMjFmYjdmMWUxY2Ez NjhhOTMwHhcNMjYwMTAxMjIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZThjZjYxYzQ1ODBhZjYyM2QzMWQ4MGE5YmVlNWYwZTNhYjEwNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxTgmMMgDgTtkYQc8b44DrEALUL8 nlyHTeDO7zJGrBhFqLwmioFLAUfwtXmJub4uCipV74HTgGZLckpMsf9JrtOfiqXm rZ6hJ4kR9BTQgCRnABrDGrqwjZ5Lz2goTgcb9YbDZF7xjlrICOemHPbaPu3HSCik 16sdUSLP7tQheQPZMIQs3TXg4w+0GM9MWU4V4Cy30BthBr7HhqZIwzxIbJcD6bTf n2Hhu07jNewJLQXa4KZiDb6lo86iWGoqv7Rkh+moESi44ze6+yg1mXMPfcXwTDQ1 3Bu8htiGcgNGGgrEAJDyqduQXMIBlqNP3uy7UvnVnfOG1h0vjFeMckMUUwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG6M9hxFgK9iPTHYCpvuXw46sQc4MB8GA1UdIwQY MBaAFAuQ43aUTTApTepB8h+38eHKNoqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAt MjBhMzIxOGI5OGNkLzEvYm96MkhFV0FyMkk5TWRnS20tNWZEanF4QnpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAtMjBhMzIxOGI5OGNk LzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXXstMA0E AgACMAcDBQMqFOWAMA0GCSqGSIb3DQEBCwUAA4IBAQBn9CbV8EjDGpjskQKYsIhe CMKa3cAVEDPsyDlu12POFEqmm8ounW74jTTmTe4SOY7YFM5qCOtJrZtmYEW0ekdt 7VC2BfyM6EZqT1MDDONfzeTN220Cuf++Si7ApWFb4ELIvWDk18qdGd7AM1pqTp97 rIg2sGwBg66yJxVE0oYvPTKHNaZl/RA7Hw4YoiDKADkvQDm2MN+LXslFzpTAFE9z 3pvdXx4cKX7eZvbnqtt94zPF7/vDe7ZWcY0VmxZlSSqf0abZ4p7xT/iVWV7fo5R5 6XN6785vct4pr4lGH95MYx2fsQYl6ZTarpz5asCVhyAx/tBGXM0ILO0aHZoKm7yS -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:40 2026 by rpki-client