This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Bo58gylRbQlTZmOuABRX3XagLXc.roa File: Bo58gylRbQlTZmOuABRX3XagLXc.roa (raw, json) Hash identifier: aJoWe70kAi++zILuYJYv5N6he0X6TdzYHN+WF4rakhQ= Subject key identifier: 06:8E:7C:83:29:51:6D:09:53:66:63:AE:00:14:57:DD:76:A0:2D:77 Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d Certificate serial: 019B7BA451FBD4E6AD44B6799D521FD38E69 Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Bo58gylRbQlTZmOuABRX3XagLXc.roa Signing time: Thu 01 Jan 2026 22:18:45 +0000 ROA not before: Thu 01 Jan 2026 22:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49451 IP address blocks: 185.1.177.0/24 maxlen: 24 2001:7f8:fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:51:fb:d4:e6:ad:44:b6:79:9d:52:1f:d3:8e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d Validity Not Before: Jan 1 22:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=068e7c8329516d09536663ae001457dd76a02d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:6c:ad:92:2b:9e:07:5f:9c:39:d9:ff:20: be:24:4f:b6:d8:af:cd:25:72:4d:0a:62:54:bd:d0: e8:a9:cf:dc:ec:93:00:1e:7f:1c:c3:6f:88:68:4d: 2c:11:76:3c:a1:5e:ef:6f:d6:41:55:44:46:11:52: 9c:1b:4c:56:10:7c:8a:d5:e3:86:b8:41:04:41:18: e7:44:61:41:5c:b1:e4:0b:ed:b9:0e:24:bc:c4:f1: 24:df:40:87:e9:5f:7e:83:fa:22:32:16:d2:c3:0e: 92:cd:23:7c:d5:38:0d:99:3f:87:ac:b7:5e:cd:b7: 12:06:17:a0:28:76:e8:d0:cf:43:28:38:f7:0a:32: 7b:62:8b:06:c3:c9:cc:f0:1d:01:1f:76:e4:fc:77: d1:a4:41:b8:27:c7:9c:0d:b4:57:c8:6b:89:2b:47: bb:8b:0d:7e:75:51:cc:05:6a:b1:08:4c:3f:de:77: 36:93:6a:20:4d:2b:71:c3:95:c3:a4:2d:50:52:0e: 2e:98:9b:c6:9e:40:d1:6e:e6:a9:7f:a7:f4:9a:87: 3d:d5:60:0d:24:75:9e:f6:98:48:12:0c:db:4e:7e: e1:42:eb:07:ff:15:64:d5:de:f5:b1:7b:bf:d6:32: 6a:e9:5b:6c:df:a0:9e:40:3f:5d:de:b7:3d:da:f4: 48:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8E:7C:83:29:51:6D:09:53:66:63:AE:00:14:57:DD:76:A0:2D:77 X509v3 Authority Key Identifier: keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Bo58gylRbQlTZmOuABRX3XagLXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.177.0/24 IPv6: 2001:7f8:fa::/48 Signature Algorithm: sha256WithRSAEncryption b8:c8:4d:54:70:fb:79:77:8f:2a:83:ef:34:32:49:f3:3c:4b: 3f:2a:4b:3b:e0:78:0f:5b:e3:0d:bc:cd:82:4d:55:fa:71:2d: 63:31:e7:20:88:bd:7a:c4:b5:5d:09:e1:6a:b9:60:60:c6:0b: 81:f5:11:54:f6:5e:37:a3:49:46:c4:93:59:5b:64:d7:13:99: 0f:af:68:5a:b0:35:a3:d5:f4:fa:90:2f:00:4d:56:d6:d1:2d: 08:06:94:2e:d0:7e:86:63:03:c1:20:db:45:9b:db:09:c3:76: 24:40:c2:95:d2:25:db:25:6d:8a:d0:2f:c0:5a:06:73:5e:6d: 42:c9:70:30:f8:a5:b9:34:df:91:c3:7c:b0:0f:fe:5f:40:27: e8:84:52:f9:00:b7:43:b3:5e:3b:eb:3f:60:d9:15:56:d9:57: e0:8b:0d:12:65:f1:e3:c7:f5:88:2e:18:b8:03:1e:87:03:01: b4:14:21:97:74:52:0d:da:5b:bf:3a:42:44:67:a8:08:21:75: d2:3a:2b:4b:28:9f:cf:b9:96:3a:90:85:7d:25:ca:14:88:02: 35:d6:08:18:44:08:9b:17:94:02:37:ac:7c:c6:e0:87:7e:14: e4:63:c5:89:08:6a:6d:59:b3:b1:e9:15:ae:8e:ae:cf:64:33: 57:11:54:a4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pFH71OatRLZ5nVIf045pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjllYThiZGMzNzFiNWE2NjA0MjAwYzUxNzE3ODk3ZDYw YzdkM2QwHhcNMjYwMTAxMjIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjhlN2M4MzI5NTE2ZDA5NTM2NjYzYWUwMDE0NTdkZDc2YTAyZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sNsrZIrngdfnDnZ/yC+JE+22K/N JXJNCmJUvdDoqc/c7JMAHn8cw2+IaE0sEXY8oV7vb9ZBVURGEVKcG0xWEHyK1eOG uEEEQRjnRGFBXLHkC+25DiS8xPEk30CH6V9+g/oiMhbSww6SzSN81TgNmT+HrLde zbcSBhegKHbo0M9DKDj3CjJ7YosGw8nM8B0BH3bk/HfRpEG4J8ecDbRXyGuJK0e7 iw1+dVHMBWqxCEw/3nc2k2ogTStxw5XDpC1QUg4umJvGnkDRbuapf6f0moc91WAN JHWe9phIEgzbTn7hQusH/xVk1d71sXu/1jJq6Vts36CeQD9d3rc92vRImwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAaOfIMpUW0JU2ZjrgAUV912oC13MB8GA1UdIwQY MBaAFDr56ovcNxtaZgQgDFFxeJfWDH09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUt YWE4OTgxMzg5OTRjLzEvQm81OGd5bFJiUWxUWm1PdUFCUlgzWGFnTFhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUtYWE4OTgxMzg5OTRj LzEvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQGxMA8E AgACMAkDBwAgAQf4APowDQYJKoZIhvcNAQELBQADggEBALjITVRw+3l3jyqD7zQy SfM8Sz8qSzvgeA9b4w28zYJNVfpxLWMx5yCIvXrEtV0J4Wq5YGDGC4H1EVT2Xjej SUbEk1lbZNcTmQ+vaFqwNaPV9PqQLwBNVtbRLQgGlC7QfoZjA8Eg20Wb2wnDdiRA wpXSJdslbYrQL8BaBnNebULJcDD4pbk035HDfLAP/l9AJ+iEUvkAt0OzXjvrP2DZ FVbZV+CLDRJl8ePH9YguGLgDHocDAbQUIZd0Ug3aW786QkRnqAghddI6K0son8+5 ljqQhX0lyhSIAjXWCBhECJsXlAI3rHzG4Id+FORjxYkIam1Zs7HpFa6Ors9kM1cR VKQ= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:08 2026 by rpki-client