This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/Bonx83HF76BE61ZX0VoIun52A94.roa File: Bonx83HF76BE61ZX0VoIun52A94.roa (raw, json) Hash identifier: TlHLw/pT6swl2899e/7+GOFr0kLi3ZqUiDKK8FJwmx4= Subject key identifier: 06:89:F1:F3:71:C5:EF:A0:44:EB:56:57:D1:5A:08:BA:7E:76:03:DE Certificate issuer: /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19 Certificate serial: 019B7C801BEB60C37D9397C8B9FCB701C248 Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/Bonx83HF76BE61ZX0VoIun52A94.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210133 IP address blocks: 37.77.173.0/24 maxlen: 24 37.77.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1b:eb:60:c3:7d:93:97:c8:b9:fc:b7:01:c2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19 Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0689f1f371c5efa044eb5657d15a08ba7e7603de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:66:1f:5f:ac:15:44:98:07:ed:3e:e0:a3: ea:2e:23:23:db:6c:28:cc:98:77:c2:61:02:28:b4: 2e:ad:e3:5b:04:82:7c:77:82:bc:55:88:86:34:a2: ba:49:22:43:f3:8e:c8:6f:ee:7e:ee:78:e5:4b:db: a1:10:e5:cb:9b:2b:b1:c3:a6:e5:f5:0c:c1:bc:27: 9d:04:cb:81:57:8a:51:9d:18:a6:52:81:a6:77:c4: 7f:dc:5a:a5:6a:4c:75:f9:9d:7b:b4:cb:a8:39:16: 0b:17:cb:a5:da:47:a7:a7:9c:29:97:3b:ea:9a:53: 22:e5:cd:2b:e3:24:d4:96:80:f5:61:e8:d1:2c:51: a0:97:26:7f:88:35:ef:62:ce:2b:b6:65:66:40:30: 51:5a:c1:84:5b:13:7b:a2:ad:b1:ef:7e:e9:d8:c5: 4f:16:2c:af:3c:17:8e:ce:31:fb:fc:e9:d4:63:e5: 99:8d:c4:9c:05:22:f1:7d:74:55:74:78:88:93:79: c1:2b:69:59:25:0e:0f:66:27:5a:13:f2:d7:a0:4f: e3:12:38:f0:75:46:9e:5e:82:c2:66:17:75:44:cb: 0a:eb:48:32:5a:82:5e:8f:67:4c:41:e7:21:b2:8f: c8:a9:87:a9:7b:9a:b9:3c:d7:e7:67:0e:a5:32:16: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:89:F1:F3:71:C5:EF:A0:44:EB:56:57:D1:5A:08:BA:7E:76:03:DE X509v3 Authority Key Identifier: keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/Bonx83HF76BE61ZX0VoIun52A94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.173.0-37.77.174.255 Signature Algorithm: sha256WithRSAEncryption c6:f2:ad:1f:79:6c:c1:35:9e:c4:51:59:a4:a1:e9:8c:a2:ec: 09:cd:36:5f:91:bf:3c:bc:35:35:1d:55:94:27:6a:6d:f0:3e: 3c:7d:a4:ff:89:5f:0e:2e:ff:5d:3b:21:30:bc:72:48:f5:82: 77:d9:fc:cb:80:2d:45:e5:ec:38:c5:05:d4:12:15:0b:b2:86: 11:81:b7:96:0b:68:5f:d8:a7:d5:b6:19:fc:ae:45:02:c3:e6: 26:b3:35:e2:04:aa:36:59:20:b2:9c:21:1d:b4:66:00:18:a3: 07:fd:f4:c6:ce:2a:7a:08:14:8d:64:81:47:ef:84:a3:a6:89: 84:d8:9a:5a:4c:63:80:48:ed:85:21:8a:46:fd:fa:3a:fc:73: 16:96:6f:07:f2:78:b3:63:ea:84:84:9b:90:a7:ea:96:6e:b2: ca:3c:80:27:5b:f9:5f:09:aa:50:91:ea:00:22:e2:fb:ae:aa: 89:c1:de:1c:2e:73:99:a7:dc:59:75:c9:ff:6e:75:8e:9b:59: 7e:f3:ed:f8:ec:22:66:b4:7d:6b:21:25:18:4b:fb:43:31:f6: 6d:5c:90:ad:ba:8c:99:5b:0b:9c:75:fb:7c:58:b2:00:84:08: 3b:ed:56:ee:09:c7:e6:7c:d3:96:b1:1f:d7:ba:b9:e9:32:d5: 7e:b7:db:da -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gBvrYMN9k5fIufy3AcJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1N2EyYzc0YWY1YTQ0ZDlhYWU0N2EwYjg5NDI1ZmE0Zjdm YzdjMTkwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjg5ZjFmMzcxYzVlZmEwNDRlYjU2NTdkMTVhMDhiYTdlNzYwM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh5mH1+sFUSYB+0+4KPqLiMj22wo zJh3wmECKLQureNbBIJ8d4K8VYiGNKK6SSJD847Ib+5+7njlS9uhEOXLmyuxw6bl 9QzBvCedBMuBV4pRnRimUoGmd8R/3Fqlakx1+Z17tMuoORYLF8ul2kenp5wplzvq mlMi5c0r4yTUloD1YejRLFGglyZ/iDXvYs4rtmVmQDBRWsGEWxN7oq2x737p2MVP FiyvPBeOzjH7/OnUY+WZjcScBSLxfXRVdHiIk3nBK2lZJQ4PZidaE/LXoE/jEjjw dUaeXoLCZhd1RMsK60gyWoJej2dMQechso/IqYepe5q5PNfnZw6lMhZzuQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAaJ8fNxxe+gROtWV9FaCLp+dgPeMB8GA1UdIwQY MBaAFIV6LHSvWkTZquR6C4lCX6T3/HwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFhvc2RLOWFSTm1xNUhvTGlVSmZwUGY4ZkJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQt ODM2YWM5N2MwMWJiLzEvQm9ueDgzSEY3NkJFNjFaWDBWb0l1bjUyQTk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQtODM2YWM5N2MwMWJi LzEvaFhvc2RLOWFSTm1xNUhvTGlVSmZwUGY4ZkJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAlTa0D BAAlTa4wDQYJKoZIhvcNAQELBQADggEBAMbyrR95bME1nsRRWaSh6Yyi7AnNNl+R vzy8NTUdVZQnam3wPjx9pP+JXw4u/107ITC8ckj1gnfZ/MuALUXl7DjFBdQSFQuy hhGBt5YLaF/Yp9W2GfyuRQLD5iazNeIEqjZZILKcIR20ZgAYowf99MbOKnoIFI1k gUfvhKOmiYTYmlpMY4BI7YUhikb9+jr8cxaWbwfyeLNj6oSEm5Cn6pZusso8gCdb +V8JqlCR6gAi4vuuqonB3hwuc5mn3Fl1yf9udY6bWX7z7fjsIma0fWshJRhL+0Mx 9m1ckK26jJlbC5x1+3xYsgCECDvtVu4Jx+Z805axH9e6ueky1X6329o= -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:14 2026 by rpki-client