This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bwTWMTGlp3PAxUq-8Oa3B8x8GyU.roa
File: bwTWMTGlp3PAxUq-8Oa3B8x8GyU.roa (raw, json)
Hash identifier: aTZ6UiSLkIspKvCJio7i5SmhPXj5+KI+3Y+Vu1e4DAU=
Subject key identifier: 6F:04:D6:31:31:A5:A7:73:C0:C5:4A:BE:F0:E6:B7:07:CC:7C:1B:25
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7759030756E252BC710B426839A50122
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bwTWMTGlp3PAxUq-8Oa3B8x8GyU.roa
Signing time: Thu 01 Jan 2026 02:18:00 +0000
ROA not before: Thu 01 Jan 2026 02:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201373
IP address blocks: 193.192.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:03:07:56:e2:52:bc:71:0b:42:68:39:a5:01:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f04d63131a5a773c0c54abef0e6b707cc7c1b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:3a:ee:2f:64:3d:df:db:85:2e:13:9a:de:
e8:60:8f:62:d9:07:33:f8:95:ad:be:b6:ad:27:8b:
89:bd:25:04:00:76:60:a6:36:40:f0:7c:bc:ec:1f:
d6:0d:fd:39:d6:e2:8d:2d:f8:31:57:ba:7d:2c:fd:
bd:56:68:a0:db:32:f5:d5:a7:f7:2b:a5:46:5c:5c:
12:ac:71:c8:44:89:a6:75:b1:7c:f7:8b:27:cb:ad:
bd:d1:d8:e0:8e:b7:4e:6f:a4:11:dd:50:ea:2e:e2:
14:a3:8a:a3:d9:da:9a:cf:d4:b6:76:d1:01:3f:3b:
5a:c8:59:69:0f:92:81:5b:4b:0b:84:c5:7d:ff:c3:
63:22:3f:16:a8:3b:73:22:e1:08:94:02:e2:82:37:
12:f7:bb:20:65:65:10:76:b4:c2:be:45:34:8b:94:
c4:38:0f:3e:f8:3c:f3:19:bc:66:6c:9c:55:f8:36:
fc:44:03:1e:8f:c7:6d:fb:3e:76:61:73:bf:70:bb:
9f:52:dc:46:ed:ec:4f:84:db:bb:60:b9:9d:3a:ac:
fd:b2:fd:b3:9a:5a:8e:d9:28:66:cb:19:b3:43:22:
03:c2:00:24:04:cf:93:fa:60:38:c6:ec:29:62:ec:
6c:7e:66:6e:6c:ff:8e:2f:48:8d:c6:89:9a:4a:b2:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:04:D6:31:31:A5:A7:73:C0:C5:4A:BE:F0:E6:B7:07:CC:7C:1B:25
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bwTWMTGlp3PAxUq-8Oa3B8x8GyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.190.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9c:9d:47:5d:76:7d:66:ed:b4:98:df:f7:77:7a:11:fe:9e:
fc:64:48:fc:dc:72:71:6f:1d:3a:88:ef:4c:71:c4:74:e5:69:
79:7d:16:87:cd:f9:f4:08:75:a4:c3:40:13:7a:4a:35:8e:e3:
65:2e:f7:16:3e:d4:1d:c6:08:5e:84:75:88:78:fe:00:8f:5c:
3b:06:1d:d1:72:d0:d4:f0:8a:84:fc:ae:55:f2:e0:4f:49:76:
50:1b:c0:6f:73:6f:77:7d:bc:29:ee:56:2d:2b:77:1f:48:79:
1c:e4:28:1d:71:80:ea:26:78:b2:88:a1:17:2e:da:d2:bd:8a:
1e:74:e5:46:8d:a4:e3:32:a1:b5:8e:6f:c5:db:d2:2d:ec:18:
96:95:71:77:0e:4f:fe:d1:de:3a:be:ea:1f:6b:35:16:6f:3f:
d3:55:a7:bb:4f:67:a9:c9:a0:d8:3c:1b:40:df:83:ac:03:04:
71:b1:56:82:dd:12:29:2c:3b:ca:3b:f4:61:04:42:cd:df:a7:
e6:d4:b4:3d:55:74:c6:c0:77:d6:9f:fd:33:0a:69:79:4c:fd:
36:a8:18:c5:b7:93:fe:63:41:3d:98:f6:6f:6c:5d:4b:3a:9c:
9d:87:37:16:9d:7e:c6:66:ec:55:ba:6d:07:56:fb:17:be:ee:
43:16:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:31:40 2026 by rpki-client