This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/BoAi6R1XvO_67ttLNSAdeyqZvPk.roa File: BoAi6R1XvO_67ttLNSAdeyqZvPk.roa (raw, json) Hash identifier: 5s1F7P45/sBHG0FImFDDYDdD52JmgpPdxnKiWxNvrbw= Subject key identifier: 06:80:22:E9:1D:57:BC:EF:FA:EE:DB:4B:35:20:1D:7B:2A:99:BC:F9 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA3FA2BFFA6C43472D31BD4B75C6B9D Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/BoAi6R1XvO_67ttLNSAdeyqZvPk.roa Signing time: Thu 01 Jan 2026 22:18:22 +0000 ROA not before: Thu 01 Jan 2026 22:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 5.180.138.0/24 maxlen: 24 84.252.72.0/24 maxlen: 24 2a0f:7b81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:fa:2b:ff:a6:c4:34:72:d3:1b:d4:b7:5c:6b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=068022e91d57bceffaeedb4b35201d7b2a99bcf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:38:f5:58:98:49:02:24:3c:1c:0d:43:6e: 3a:ff:ee:43:c0:7f:cc:7c:20:29:84:58:28:99:53: c6:58:a1:05:64:3a:23:46:1b:84:e1:d8:89:7d:89: d0:b1:89:6d:f5:85:6d:1a:e2:a9:ed:24:de:03:37: 64:00:80:b3:53:d8:fc:0a:90:48:28:5f:11:11:6d: 1d:0a:ee:81:3a:66:4f:4c:a7:bb:77:8d:98:c9:13: ae:c4:4b:d4:b9:ca:9e:91:d1:dd:b2:05:d2:1f:61: e9:ec:2b:fe:40:e7:b1:68:33:f0:2a:fc:9a:92:5b: f9:38:c9:9c:a8:0c:f1:95:3c:59:6e:69:05:fb:fe: 89:8f:3d:e5:c1:fa:78:fe:9f:a0:42:f5:b3:3b:20: 05:c9:90:74:91:6f:86:0b:4a:8b:f5:61:ed:90:e7: f5:4a:d9:d6:37:6e:98:d6:4e:67:34:47:2f:56:ab: 3a:0b:eb:e2:b4:e2:5f:19:91:58:11:f2:36:5e:9c: 1e:e5:1b:1b:9a:59:4b:70:5a:94:38:94:12:66:10: 52:e0:95:48:eb:85:bf:85:92:01:36:70:22:c7:26: e5:85:c9:cc:c9:81:51:3f:af:a8:fa:08:88:4d:e0: 69:f2:ff:2b:31:b3:cd:65:5d:6e:9c:74:5c:c1:d7: 46:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:80:22:E9:1D:57:BC:EF:FA:EE:DB:4B:35:20:1D:7B:2A:99:BC:F9 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/BoAi6R1XvO_67ttLNSAdeyqZvPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.138.0/24 84.252.72.0/24 IPv6: 2a0f:7b81::/48 Signature Algorithm: sha256WithRSAEncryption a5:9a:e0:09:66:45:0a:99:f4:ce:53:56:90:fd:8d:b2:3b:a6: df:65:dd:32:e2:e5:bd:bf:30:35:e5:f0:62:f6:4f:29:46:8b: ae:9a:01:d5:5b:48:c2:f6:e5:05:af:9a:4b:bb:2d:f3:6e:85: 73:90:ec:04:02:13:b3:97:82:fb:2d:bb:87:cd:80:78:65:16: 1b:fc:ac:86:91:18:fc:37:cd:8b:c7:f3:4b:17:85:70:91:0c: a8:bd:f9:9d:76:32:01:2e:ec:dc:a3:4f:9b:3a:ae:b6:54:dc: 41:76:a0:d3:cf:62:61:6f:52:6f:14:a4:c5:16:2b:cc:c1:a5: 06:d9:0f:34:52:10:31:1e:bd:b6:fd:c7:54:5b:db:0b:ff:93: 32:0f:c2:e5:f6:80:20:a5:1c:73:90:29:be:ff:cc:3a:09:29: bf:61:c5:a4:01:75:e4:31:15:78:33:3c:9b:a3:82:9b:66:1d: 63:c7:7e:d5:51:c1:fd:3d:93:b8:d8:97:20:2b:28:0a:e7:48: fe:fc:17:86:92:9f:83:3a:c1:b9:ff:f4:91:95:bf:74:01:db: ab:7d:5c:62:48:c1:7c:cf:c5:c8:11:19:a6:9e:17:d4:7f:e1: fd:d8:10:28:15:2b:f6:54:ab:c6:1f:65:0b:22:1f:6e:7a:60: 04:04:f3:af -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7o/or/6bENHLTG9S3XGudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjgwMjJlOTFkNTdiY2VmZmFlZWRiNGIzNTIwMWQ3YjJhOTliY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqc49ViYSQIkPBwNQ246/+5DwH/M fCAphFgomVPGWKEFZDojRhuE4diJfYnQsYlt9YVtGuKp7STeAzdkAICzU9j8CpBI KF8REW0dCu6BOmZPTKe7d42YyROuxEvUucqekdHdsgXSH2Hp7Cv+QOexaDPwKvya klv5OMmcqAzxlTxZbmkF+/6Jjz3lwfp4/p+gQvWzOyAFyZB0kW+GC0qL9WHtkOf1 StnWN26Y1k5nNEcvVqs6C+vitOJfGZFYEfI2Xpwe5RsbmllLcFqUOJQSZhBS4JVI 64W/hZIBNnAixyblhcnMyYFRP6+o+giITeBp8v8rMbPNZV1unHRcwddGDQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAaAIukdV7zv+u7bSzUgHXsqmbz5MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvQm9BaTZSMVh2T182N3R0TE5TQWRleXFadlBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQABbSKAwQA VPxIMA8EAgACMAkDBwAqD3uBAAAwDQYJKoZIhvcNAQELBQADggEBAKWa4AlmRQqZ 9M5TVpD9jbI7pt9l3TLi5b2/MDXl8GL2TylGi66aAdVbSML25QWvmku7LfNuhXOQ 7AQCE7OXgvstu4fNgHhlFhv8rIaRGPw3zYvH80sXhXCRDKi9+Z12MgEu7NyjT5s6 rrZU3EF2oNPPYmFvUm8UpMUWK8zBpQbZDzRSEDEevbb9x1Rb2wv/kzIPwuX2gCCl HHOQKb7/zDoJKb9hxaQBdeQxFXgzPJujgptmHWPHftVRwf09k7jYlyArKArnSP78 F4aSn4M6wbn/9JGVv3QB26t9XGJIwXzPxcgRGaaeF9R/4f3YECgVK/ZUq8YfZQsi H256YAQE868= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:31 2026 by rpki-client