This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/B4wp10Y_OEoAGIhud1FmzSKVNw8.roa
File: B4wp10Y_OEoAGIhud1FmzSKVNw8.roa (raw, json)
Hash identifier: ju3vXvQ0WetT2UBij+oQFWcTFWG7kepUg6hRZtzRnOA=
Subject key identifier: 07:8C:29:D7:46:3F:38:4A:00:18:88:6E:77:51:66:CD:22:95:37:0F
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 019B7F12FB41B8ECB3A8F26B33903481E0DC
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/B4wp10Y_OEoAGIhud1FmzSKVNw8.roa
Signing time: Fri 02 Jan 2026 14:18:28 +0000
ROA not before: Fri 02 Jan 2026 14:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34428
IP address blocks: 193.41.57.0/24 maxlen: 24
2a06:7d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:12:fb:41:b8:ec:b3:a8:f2:6b:33:90:34:81:e0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Jan 2 14:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=078c29d7463f384a0018886e775166cd2295370f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:b3:a1:06:6e:25:23:7b:4e:f9:dd:9e:01:
38:54:30:02:06:47:13:65:3b:a7:b1:d8:cf:7a:3e:
ee:73:c1:42:93:94:22:b3:85:61:c0:d3:30:23:93:
02:db:e4:23:89:a7:73:ec:48:c1:42:f6:eb:b7:bd:
cf:1c:44:3f:83:75:e5:24:ae:f8:e7:7f:b1:30:a1:
6b:fe:e6:3e:df:99:ff:b1:40:31:76:bc:65:cb:48:
fd:24:55:0c:33:3d:4d:f9:e4:4a:a5:23:aa:50:5b:
53:75:a3:ab:25:dd:61:a4:7d:99:b2:10:a0:ac:e7:
0c:20:d8:ba:9e:3d:4a:0b:f3:34:f3:d5:06:56:9c:
18:c3:bb:6a:fb:d4:7a:f9:be:fb:d2:44:a3:f5:6e:
55:35:15:55:a4:ba:8d:27:b7:84:37:bc:85:3d:de:
23:16:f2:a1:49:44:2a:94:54:4e:b8:2b:95:59:26:
9e:00:1f:9d:ea:8d:6f:2d:a9:6c:4e:60:c7:de:42:
fb:59:b3:41:3f:e0:60:80:fb:a4:41:76:20:3a:70:
53:e7:54:75:4e:e1:28:3e:6e:5c:8d:58:89:7a:08:
46:c5:4f:52:97:ef:c9:7b:9d:a9:f8:2a:41:9f:e7:
0a:3a:8f:71:40:95:2b:5e:70:05:ff:c9:b7:37:79:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8C:29:D7:46:3F:38:4A:00:18:88:6E:77:51:66:CD:22:95:37:0F
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/B4wp10Y_OEoAGIhud1FmzSKVNw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.57.0/24
IPv6:
2a06:7d40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:5e:0c:67:a9:ce:dd:60:d8:4f:a6:01:b5:23:e1:4e:44:45:
03:53:bc:62:5c:90:f1:23:55:90:e9:d1:21:d0:b4:f4:5e:00:
cc:6d:40:43:c6:d5:b3:9b:19:af:bd:50:1c:87:06:f3:bf:aa:
7d:28:64:6d:3f:d0:f5:77:9c:d7:99:0b:73:4f:d7:a7:f5:07:
9a:01:30:99:83:38:aa:18:ca:8a:09:b3:ca:b3:90:0f:63:ca:
37:87:1b:e8:22:8c:96:53:f0:4a:4c:4b:3b:96:55:25:b8:dc:
43:2f:f0:88:ac:d6:cc:cc:47:0d:28:2e:2a:a4:10:05:5d:24:
ae:d6:47:ae:0f:7d:20:a4:0a:1b:d6:f7:02:d6:33:12:dd:d7:
a4:96:99:c1:08:8d:f6:e5:20:8c:c8:8f:ac:d3:bb:07:4b:f5:
2e:db:74:96:a4:db:8f:c0:e3:a4:b1:cd:3d:22:eb:58:3e:b6:
76:d2:f9:5a:89:ac:5e:9d:d7:17:cd:ff:43:e3:79:83:39:ec:
b3:09:5a:d3:5e:4f:7d:9a:a8:7f:f6:4a:46:f9:ad:87:05:9b:
5a:c6:2f:f4:8b:ba:d8:8e:b9:c3:b7:77:aa:25:ea:51:b6:6c:
83:04:9b:38:9d:2f:c0:2a:49:42:c0:46:07:4f:17:69:0c:14:
18:83:97:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:06 2026 by rpki-client