This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/biwapYjW-yR38S3KZARQ10moe30.roa
File: biwapYjW-yR38S3KZARQ10moe30.roa (raw, json)
Hash identifier: 1QN2loKj68piSOW4bamGYfAlPoY1h07q4+Z8Ry6dkfo=
Subject key identifier: 6E:2C:1A:A5:88:D6:FB:24:77:F1:2D:CA:64:04:50:D7:49:A8:7B:7D
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 019B7D5CF515026893654926F001B696A942
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/biwapYjW-yR38S3KZARQ10moe30.roa
Signing time: Fri 02 Jan 2026 06:20:02 +0000
ROA not before: Fri 02 Jan 2026 06:20:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 193.164.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:f5:15:02:68:93:65:49:26:f0:01:b6:96:a9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Jan 2 06:20:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e2c1aa588d6fb2477f12dca640450d749a87b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:03:03:e0:19:dd:5c:4a:77:ad:de:44:9a:
cf:96:54:ff:fb:ca:3c:3b:b3:91:48:aa:85:b7:dc:
17:b4:d0:3b:79:64:13:6f:77:7b:b2:8d:d7:4f:1b:
d3:a3:f7:95:c3:81:01:f3:5f:7c:37:c1:07:ac:0a:
ac:be:1d:41:0e:88:da:ab:e6:5f:51:a1:a2:bd:8c:
14:1e:93:76:4c:a2:88:67:15:b0:8b:bb:05:99:a1:
7e:1c:ad:10:b6:37:a7:b3:5b:b3:be:01:e8:c0:2f:
3a:29:32:6f:cf:80:cf:f4:07:65:08:76:8e:a3:10:
c1:8f:73:4e:c9:d8:7a:d0:b9:cf:04:ec:1b:1b:15:
47:3b:52:2e:35:be:47:26:aa:93:ce:e2:68:9b:7f:
e8:40:80:a0:d8:ac:1f:b4:3c:59:3c:ce:b6:22:ae:
55:57:70:b6:2d:33:32:fc:a5:24:49:7e:d4:d0:d4:
bc:d3:68:f1:13:ab:0a:f1:f6:71:1a:e6:0b:be:36:
f1:00:99:02:a2:c5:9b:9c:a4:74:8b:da:76:90:b9:
97:73:df:05:59:21:c4:0b:6b:3b:94:0c:b5:ab:92:
a9:50:67:fc:17:e8:91:eb:c7:fe:5a:14:9f:d6:0e:
fb:22:d9:7b:e7:db:7f:13:38:1d:6f:de:b5:ac:5b:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2C:1A:A5:88:D6:FB:24:77:F1:2D:CA:64:04:50:D7:49:A8:7B:7D
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/biwapYjW-yR38S3KZARQ10moe30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.197.0/24
Signature Algorithm: sha256WithRSAEncryption
02:92:67:a9:30:5f:c2:e8:62:5d:03:c8:62:61:c8:e5:b0:58:
fa:10:c5:b2:af:00:fd:4b:a6:5c:d8:b7:80:58:1e:2e:f6:78:
cd:29:ad:fb:ed:c2:7c:3e:fc:74:76:9d:d4:de:c0:6d:31:1d:
b1:ad:43:8c:90:1c:08:77:59:b2:ba:b9:9d:b0:32:e0:e8:a8:
fd:c0:08:82:25:ae:d0:38:fb:05:f4:f1:5f:5c:6f:72:51:60:
9c:6c:16:c2:d0:25:21:69:1d:a0:13:bd:eb:f2:e6:2c:d4:57:
e7:ea:7b:1c:52:15:ca:f9:ad:6d:f9:31:a9:5e:c5:7c:87:85:
35:56:74:72:a5:ad:3b:77:9b:3f:97:f8:e3:a8:bc:c6:eb:76:
87:83:5f:22:84:74:51:7f:81:76:52:7d:4a:4f:f0:fb:36:e3:
50:1a:36:8e:58:de:9f:ca:91:15:9e:a0:62:cb:1f:47:08:00:
e5:3c:2f:2a:49:9d:6f:f4:f0:c9:dd:94:b9:f6:ca:f6:f3:0a:
06:8c:fe:c4:b5:25:ee:9e:e3:73:28:9f:be:f2:12:87:1a:11:
02:bd:22:a1:97:ab:94:e4:7a:4c:01:e1:82:0e:50:54:a5:15:
4b:a7:14:9b:b1:09:e6:6e:14:6a:dc:99:71:3b:4d:41:ca:84:
12:05:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 17:06:59 2026 by rpki-client