This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/BOJBhBflJi-uu1X2XQPYWnbiKz4.roa
File: BOJBhBflJi-uu1X2XQPYWnbiKz4.roa (raw, json)
Hash identifier: REDh9lP6i4JwdwN/cHBiNdARVyI8eed3Ks7q9bf3lPs=
Subject key identifier: 04:E2:41:84:17:E5:26:2F:AE:BB:55:F6:5D:03:D8:5A:76:E2:2B:3E
Certificate issuer: /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial: 019B7E37AB0647642FFE2C279AB11BF43D80
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/BOJBhBflJi-uu1X2XQPYWnbiKz4.roa
Signing time: Fri 02 Jan 2026 10:18:55 +0000
ROA not before: Fri 02 Jan 2026 10:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208681
IP address blocks: 45.89.128.0/22 maxlen: 22
2a0b:a200::/48 maxlen: 48
2a0b:a200:1::/48 maxlen: 48
2a0b:a200:2::/48 maxlen: 48
2a0b:a200:3::/48 maxlen: 48
2a0b:a200:4::/48 maxlen: 48
2a0b:a200:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:ab:06:47:64:2f:fe:2c:27:9a:b1:1b:f4:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Validity
Not Before: Jan 2 10:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04e2418417e5262faebb55f65d03d85a76e22b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:65:a4:25:79:ac:dc:4f:4c:0c:f4:13:dd:
6f:55:5d:2e:1c:a5:1d:5d:2c:4c:d8:65:c6:cf:23:
c6:fa:a0:41:bc:f5:96:42:14:29:43:a9:e8:2f:e8:
47:17:82:5b:a6:70:25:74:c3:b5:59:20:03:02:68:
62:56:5e:b3:e7:d9:55:27:c5:b8:96:2a:13:48:19:
01:b8:27:d6:4b:13:63:67:99:98:81:09:d6:9b:61:
ea:5a:26:b3:3f:9b:29:7f:41:1c:f0:ac:26:04:89:
1c:62:9e:aa:f4:bf:24:04:27:13:02:22:00:48:04:
2c:19:ba:87:58:e1:8a:19:e1:4b:49:c2:db:5b:c1:
f9:59:00:a8:3d:07:e3:2d:78:75:2a:44:37:99:4b:
90:d9:28:e8:e5:1d:19:04:23:b4:fb:c4:05:5f:c2:
35:34:1f:04:2b:02:0e:45:ef:5a:a2:c7:a4:34:9c:
f3:98:24:f2:c1:6e:b6:21:08:3c:f6:a2:81:c9:13:
b2:34:0d:9c:f4:cc:7a:e1:51:e6:8f:58:26:f9:04:
37:f4:12:15:de:69:3b:05:13:d6:d1:e1:23:90:69:
c0:00:8d:c3:83:e8:61:c1:52:cd:b0:b8:8b:d1:80:
6a:47:cb:77:d2:16:75:64:1b:09:4e:e9:20:90:1a:
55:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E2:41:84:17:E5:26:2F:AE:BB:55:F6:5D:03:D8:5A:76:E2:2B:3E
X509v3 Authority Key Identifier:
keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/BOJBhBflJi-uu1X2XQPYWnbiKz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.128.0/22
IPv6:
2a0b:a200::-2a0b:a200:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:6e:77:58:ac:2e:43:d6:16:52:2a:0b:83:c1:53:87:35:34:
2f:b0:af:4a:07:3c:4d:b8:62:ae:c4:41:d1:bf:bc:2c:ae:3b:
8c:2c:29:9c:a1:ec:c3:fb:39:9c:c2:bc:58:b9:7b:a4:fc:62:
60:18:de:2d:61:86:6c:4d:e3:18:7f:d6:68:6d:20:c4:5a:dc:
21:75:7a:66:78:2c:bb:0b:49:c2:83:b4:1e:11:4d:7f:35:5c:
a0:87:54:68:49:dd:7b:73:9f:ef:65:b5:da:06:62:5d:b3:40:
09:6d:0d:c5:ff:4b:b5:53:b4:5d:bb:8c:24:34:e9:6e:48:c3:
05:cb:77:97:98:7a:a5:88:53:14:51:07:78:21:24:5f:16:52:
ab:6b:57:d1:85:4b:b6:d9:f6:0a:96:e1:a8:08:65:71:6d:78:
67:7a:c4:b6:71:ce:1c:9f:b7:1a:ed:b2:5c:39:97:65:e9:14:
85:a1:95:8a:6a:be:55:61:b7:e0:f3:5a:02:af:b8:b9:ab:fc:
3c:ab:22:68:c6:d4:96:54:a4:15:19:ee:9e:e7:60:51:de:c3:
2f:19:8a:da:9e:d1:2a:29:5a:84:1c:2d:02:19:35:d1:b1:c3:
35:36:e2:88:b1:d3:36:63:54:8b:cb:61:ed:d2:40:e1:36:b4:
2d:89:2e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:43:05 2026 by rpki-client