This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/B4ECW0jtt5KyrtkmlUhbFQBxuus.roa
File: B4ECW0jtt5KyrtkmlUhbFQBxuus.roa (raw, json)
Hash identifier: Z8JjmJ/Yv+fCZ4euDC+I0rty80LYQ117ydvucBAt8Uw=
Subject key identifier: 07:81:02:5B:48:ED:B7:92:B2:AE:D9:26:95:48:5B:15:00:71:BA:EB
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 019B7AC7FD06CC0BEF7C2DE3E44DBB7652F6
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/B4ECW0jtt5KyrtkmlUhbFQBxuus.roa
Signing time: Thu 01 Jan 2026 18:18:05 +0000
ROA not before: Thu 01 Jan 2026 18:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20860
IP address blocks: 93.174.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:fd:06:cc:0b:ef:7c:2d:e3:e4:4d:bb:76:52:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Jan 1 18:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0781025b48edb792b2aed92695485b150071baeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:00:08:eb:f4:1f:14:21:64:ff:e9:9f:a2:
a8:3b:fe:d8:5f:2a:34:d4:99:d1:0f:7f:3f:df:6c:
ce:3c:7d:23:ad:52:ca:2c:67:34:c3:76:45:7c:bf:
9e:11:41:c6:cd:ad:d5:8c:d3:f1:b0:d2:30:3a:44:
ed:7a:fe:d9:42:c1:43:76:15:01:6b:6a:20:2d:a2:
6b:44:e9:5a:22:16:6f:cf:dc:60:b6:0e:d2:4f:16:
e5:0e:8e:7a:59:1e:5d:d7:42:0c:c0:ca:89:dc:29:
9a:60:74:f1:d3:f2:c5:85:5c:4c:f5:02:38:de:40:
79:64:e6:4d:85:33:23:f8:c0:7e:b9:2c:58:a2:f4:
d1:29:cb:cf:51:6d:0e:89:70:32:d5:66:42:cb:73:
71:9e:fa:f6:08:01:1c:48:9e:46:e5:db:02:d0:a2:
36:df:2d:be:1e:14:6f:64:fc:10:56:35:cc:4e:82:
ce:7f:8f:6b:dd:4d:57:6a:6a:49:5a:c4:3b:62:93:
2e:d6:a5:f3:88:7f:15:d2:52:37:0b:74:a3:a7:72:
66:b1:27:b7:15:ef:3f:b8:09:16:44:08:f7:ad:0d:
5b:ba:9c:76:94:48:e7:fc:4d:6b:0a:1a:1b:56:69:
aa:d6:01:9b:6c:5c:df:c1:c3:d6:41:a1:b0:45:6f:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:81:02:5B:48:ED:B7:92:B2:AE:D9:26:95:48:5B:15:00:71:BA:EB
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/B4ECW0jtt5KyrtkmlUhbFQBxuus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.12.0/24
Signature Algorithm: sha256WithRSAEncryption
07:21:1c:22:43:ff:d7:ee:12:1c:f1:66:fd:13:0e:d4:d3:1b:
d3:90:d0:5f:05:20:8b:50:fb:95:21:7d:b6:3a:bb:5c:74:74:
2f:f5:57:c7:dd:e2:97:ac:97:07:15:f1:9b:21:43:f6:ea:4d:
37:2e:c1:ec:26:7c:03:73:85:3b:10:fa:0a:cc:97:57:83:79:
ef:51:21:c8:72:33:58:8e:5e:00:cc:1f:b7:a6:ba:ad:30:30:
22:91:b6:45:9e:21:d4:15:a3:83:eb:9f:4e:0d:5f:fd:cc:33:
07:99:80:34:d1:3a:c0:20:ff:65:2d:76:ff:39:ed:1d:74:c5:
ea:e4:67:1d:8d:4f:a7:35:35:b1:00:ce:45:29:5f:8d:b4:ed:
cd:0b:44:1e:13:79:d5:66:c6:cc:fb:6a:84:7d:40:31:b7:7d:
e9:aa:76:aa:3d:80:89:17:1c:6a:29:56:96:57:9a:59:b7:f2:
da:7c:c1:61:c1:7c:56:1d:7e:1d:82:3b:43:9e:90:6c:2b:c2:
7c:85:df:28:48:f6:86:6f:77:47:ea:6f:4c:bf:71:e1:cf:6f:
2f:61:22:a2:10:94:22:bc:d6:64:26:97:55:c7:bb:33:85:6c:
fd:63:e9:01:a0:6e:6b:2d:3b:00:f5:89:e1:d8:87:37:b9:6a:
9b:83:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:31:25 2026 by rpki-client