This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/BOIyHGFsSVNlNKzWZCkVyw194to.roa File: BOIyHGFsSVNlNKzWZCkVyw194to.roa (raw, json) Hash identifier: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog= Subject key identifier: 04:E2:32:1C:61:6C:49:53:65:34:AC:D6:64:29:15:CB:0D:7D:E2:DA Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Certificate serial: 019B78A27217E217A80E64CAEA15C3FD39E2 Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/BOIyHGFsSVNlNKzWZCkVyw194to.roa Signing time: Thu 01 Jan 2026 08:17:50 +0000 ROA not before: Thu 01 Jan 2026 08:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 91.195.80.0/24 maxlen: 24 91.195.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:72:17:e2:17:a8:0e:64:ca:ea:15:c3:fd:39:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c Validity Not Before: Jan 1 08:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04e2321c616c49536534acd6642915cb0d7de2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:07:e4:c3:ac:77:2f:48:f0:d8:a6:d8:f5: 86:d2:90:bb:25:f6:8e:28:c0:d3:77:8c:7e:7a:8e: 96:6b:37:1e:22:df:42:06:87:b0:06:6b:e8:3d:b1: 2e:7d:bb:ce:04:a5:ab:aa:ed:70:32:50:e9:8e:4b: c9:9c:ad:1d:46:51:bc:4e:1c:3a:dd:c8:ef:22:d2: 02:df:43:12:c2:fd:a4:4e:87:39:23:89:90:5b:33: 5f:c7:39:56:66:36:4a:03:e5:79:fb:d4:20:a1:1b: e1:4f:5d:0a:73:bd:05:8c:cd:bc:5d:21:81:52:90: e7:bf:d7:3f:64:1b:23:bd:54:fd:89:30:7e:1d:dc: 3e:48:1c:3c:f3:32:74:bb:62:d3:50:3f:35:27:1e: f3:9a:59:10:41:9d:78:10:29:dd:38:ac:1d:cb:28: c5:5e:78:99:73:62:87:af:7b:5d:39:d4:fb:e1:95: f2:c8:19:16:cd:db:67:a4:cf:a1:60:ac:c2:91:4e: f9:8a:8e:32:e2:dd:37:d8:d4:dd:36:93:5b:78:db: 84:ba:e1:09:e0:61:16:d7:50:7e:ee:e4:2c:8c:d9: 70:14:b3:8a:37:29:32:c8:c5:06:19:32:7f:a3:ce: f9:a0:79:8f:a8:ff:9b:37:43:d7:e4:3a:86:6f:5f: 2c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E2:32:1C:61:6C:49:53:65:34:AC:D6:64:29:15:CB:0D:7D:E2:DA X509v3 Authority Key Identifier: keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/BOIyHGFsSVNlNKzWZCkVyw194to.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.80.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:bf:7a:f1:58:25:9c:68:60:b9:ae:5d:a6:7e:45:4f:7e:89: fc:cf:8e:36:eb:1a:70:82:a2:d2:49:26:c4:fe:9c:62:5f:e0: bb:10:5c:46:9f:6b:51:1d:83:64:44:5a:9e:8d:20:9f:dd:2e: eb:97:0a:10:06:03:b4:2b:99:19:cf:94:2b:a2:2d:ea:4d:86: dc:f4:63:49:7a:b7:40:a6:22:58:62:21:4b:d3:28:f2:5d:f7: 6b:65:f8:89:18:65:47:b8:24:6d:be:d2:40:0a:b0:82:a2:4c: aa:c5:9e:91:8d:3c:0b:4e:3d:39:0d:16:a1:1e:3c:fa:ed:c8: 92:63:ff:6d:c7:58:99:5f:9a:ba:5b:e7:05:c6:db:1d:e2:a9: 54:59:ea:42:c2:fb:1a:2e:12:15:2d:ce:98:11:63:9d:1c:5b: fa:3a:7f:0b:77:c3:9e:ab:e4:d5:ee:f4:4a:1c:9a:58:f6:95: c7:00:af:aa:c8:a6:30:2f:e2:ea:73:3a:22:2f:82:3a:87:54: 7e:45:09:ec:e2:15:b7:62:fa:b4:bd:82:cf:49:b8:3f:6e:0e: 36:c5:51:1f:79:15:22:e5:e0:09:2c:92:b3:ed:21:e5:53:2e: 7f:0b:d9:5d:fb:86:4d:4c:d7:74:53:63:f8:8d:f9:e5:0b:bd: 99:7c:2e:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4onIX4heoDmTK6hXD/TniMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzFjOThlM2NhYjgyMWM4NGRkZWZmMjA2OWUwMjI1OWJk NmU2MWMwHhcNMjYwMTAxMDgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGUyMzIxYzYxNmM0OTUzNjUzNGFjZDY2NDI5MTVjYjBkN2RlMmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvgH5MOsdy9I8Nim2PWG0pC7JfaO KMDTd4x+eo6WazceIt9CBoewBmvoPbEufbvOBKWrqu1wMlDpjkvJnK0dRlG8Thw6 3cjvItIC30MSwv2kToc5I4mQWzNfxzlWZjZKA+V5+9QgoRvhT10Kc70FjM28XSGB UpDnv9c/ZBsjvVT9iTB+Hdw+SBw88zJ0u2LTUD81Jx7zmlkQQZ14ECndOKwdyyjF XniZc2KHr3tdOdT74ZXyyBkWzdtnpM+hYKzCkU75io4y4t032NTdNpNbeNuEuuEJ 4GEW11B+7uQsjNlwFLOKNykyyMUGGTJ/o875oHmPqP+bN0PX5DqGb18sowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFATiMhxhbElTZTSs1mQpFcsNfeLaMB8GA1UdIwQY MBaAFKoxyY48q4IchN3v8gaeAiWb1uYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMt MDViZmYzMWM1M2ZlLzEvQk9JeUhHRnNTVk5sTkt6V1pDa1Z5dzE5NHRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMtMDViZmYzMWM1M2Zl LzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8NQMA0G CSqGSIb3DQEBCwUAA4IBAQAvv3rxWCWcaGC5rl2mfkVPfon8z4426xpwgqLSSSbE /pxiX+C7EFxGn2tRHYNkRFqejSCf3S7rlwoQBgO0K5kZz5Qroi3qTYbc9GNJerdA piJYYiFL0yjyXfdrZfiJGGVHuCRtvtJACrCCokyqxZ6RjTwLTj05DRahHjz67ciS Y/9tx1iZX5q6W+cFxtsd4qlUWepCwvsaLhIVLc6YEWOdHFv6On8Ld8Oeq+TV7vRK HJpY9pXHAK+qyKYwL+LqczoiL4I6h1R+RQns4hW3Yvq0vYLPSbg/bg42xVEfeRUi 5eAJLJKz7SHlUy5/C9ld+4ZNTNd0U2P4jfnlC72ZfC46 -----END CERTIFICATE-----Generated at Sun Jan 11 11:46:18 2026 by rpki-client