This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BO8dksxb0UodsO941FmkndmDLrY.roa File: BO8dksxb0UodsO941FmkndmDLrY.roa (raw, json) Hash identifier: xRNTvmbX4mp3w5WS3nDttGaMxkSovUGGgIr0ecjOpag= Subject key identifier: 04:EF:1D:92:CC:5B:D1:4A:1D:B0:EF:78:D4:59:A4:9D:D9:83:2E:B6 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA7572B72AA806391FBC890F2DDCCF7 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BO8dksxb0UodsO941FmkndmDLrY.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 146.19.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:57:2b:72:aa:80:63:91:fb:c8:90:f2:dd:cc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04ef1d92cc5bd14a1db0ef78d459a49dd9832eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:33:0a:a0:9a:1c:fe:83:18:40:f6:51:b9: 64:a4:42:27:e4:9d:04:71:91:ee:38:4f:f2:e5:61: 86:de:65:4d:37:82:d6:e3:87:74:64:cb:fe:3e:54: 77:3d:6f:a0:38:07:f1:16:89:fc:b1:22:6a:0d:33: 9a:f6:2d:3f:19:a6:34:c6:05:55:53:9a:0a:fc:41: 07:23:38:aa:8f:a2:38:15:3d:df:3a:50:5a:77:14: 1e:07:ea:54:dd:2a:ad:cd:73:06:62:9c:88:d8:cc: 4c:7c:b2:24:e3:bc:df:c0:5f:23:7a:d6:1b:85:30: ac:fa:d2:b2:07:84:a7:8c:59:4b:b2:a7:e8:63:95: 2d:22:a8:bf:4a:11:27:13:1c:fa:21:b4:79:0a:62: 23:48:ce:4b:f5:e2:20:5a:78:49:de:53:65:69:cc: ba:1a:b8:d4:b6:1a:3e:b7:7e:a6:fd:4a:d2:00:38: 77:15:01:8a:db:0c:25:98:88:24:9f:67:86:cb:80: 62:26:22:27:b1:a4:da:dd:c8:15:84:12:87:3b:7b: 32:9b:29:69:d5:4e:6c:cf:f5:ea:66:39:72:6b:9e: c0:cb:c6:d9:18:88:97:65:11:cd:86:f2:4a:a1:cd: 37:e5:a0:53:10:fd:85:dc:82:db:11:9c:9b:4c:76: 38:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EF:1D:92:CC:5B:D1:4A:1D:B0:EF:78:D4:59:A4:9D:D9:83:2E:B6 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BO8dksxb0UodsO941FmkndmDLrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.21.0/24 Signature Algorithm: sha256WithRSAEncryption 45:83:58:9d:89:6a:1b:0f:e3:24:91:50:42:1f:13:cf:9e:7c: 83:e5:53:eb:db:be:6f:83:71:52:d7:d0:e5:2c:59:4f:9f:f5: c9:b3:e7:20:8c:97:ea:47:c3:9b:c4:0e:81:12:f5:94:cc:39: e9:71:7e:12:1b:47:ca:3d:d2:22:81:4e:ff:45:8a:49:84:f1: fe:a7:ab:b4:eb:57:b9:52:7e:b0:bf:0a:f9:6d:db:57:72:0b: 4e:90:86:c9:5f:48:81:9b:50:aa:c8:2d:08:1a:ac:98:3e:a1: 43:f9:be:3e:47:a6:81:37:ac:1f:6c:40:a1:c3:db:37:69:3b: 65:b6:61:25:2c:02:c6:37:0d:46:e8:6c:84:fd:51:9e:94:0b: 2e:08:1c:3b:6f:05:3a:f9:ab:60:6a:aa:09:fe:a0:a3:3d:48: a3:02:37:b8:85:f3:33:43:e9:f8:75:ca:f0:88:f8:af:11:fe: 91:2b:fd:ee:06:34:f9:78:54:65:9f:7b:eb:6a:98:e8:85:d9: 90:7e:d5:aa:1e:e0:79:50:35:ef:11:e1:e3:8a:21:ab:de:88: 4d:6b:04:28:1a:47:7b:e7:79:45:b3:02:f4:5d:82:39:aa:e8: ff:2d:3a:7d:38:23:fc:93:5c:83:4d:39:5b:90:ba:64:c7:64: be:01:e8:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1crcqqAY5H7yJDy3cz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGVmMWQ5MmNjNWJkMTRhMWRiMGVmNzhkNDU5YTQ5ZGQ5ODMyZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX4zCqCaHP6DGED2UblkpEIn5J0E cZHuOE/y5WGG3mVNN4LW44d0ZMv+PlR3PW+gOAfxFon8sSJqDTOa9i0/GaY0xgVV U5oK/EEHIziqj6I4FT3fOlBadxQeB+pU3SqtzXMGYpyI2MxMfLIk47zfwF8jetYb hTCs+tKyB4SnjFlLsqfoY5UtIqi/ShEnExz6IbR5CmIjSM5L9eIgWnhJ3lNlacy6 GrjUtho+t36m/UrSADh3FQGK2wwlmIgkn2eGy4BiJiInsaTa3cgVhBKHO3symylp 1U5sz/XqZjlya57Ay8bZGIiXZRHNhvJKoc035aBTEP2F3ILbEZybTHY41wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFATvHZLMW9FKHbDveNRZpJ3Zgy62MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvQk84ZGtzeGIwVW9kc085NDFGbWtuZG1ETHJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMVMA0G CSqGSIb3DQEBCwUAA4IBAQBFg1idiWobD+MkkVBCHxPPnnyD5VPr275vg3FS19Dl LFlPn/XJs+cgjJfqR8ObxA6BEvWUzDnpcX4SG0fKPdIigU7/RYpJhPH+p6u061e5 Un6wvwr5bdtXcgtOkIbJX0iBm1CqyC0IGqyYPqFD+b4+R6aBN6wfbEChw9s3aTtl tmElLALGNw1G6GyE/VGelAsuCBw7bwU6+atgaqoJ/qCjPUijAje4hfMzQ+n4dcrw iPivEf6RK/3uBjT5eFRln3vrapjohdmQftWqHuB5UDXvEeHjiiGr3ohNawQoGkd7 53lFswL0XYI5quj/LTp9OCP8k1yDTTlbkLpkx2S+AejY -----END CERTIFICATE-----Generated at Sat Jan 3 18:58:51 2026 by rpki-client