This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/Bq4526EIqoqpYSGwEOXSHnLadwc.roa
File: Bq4526EIqoqpYSGwEOXSHnLadwc.roa (raw, json)
Hash identifier: 0HtnJjE+xNk1fnpx9yk3mp6kCM+9p+rqJEmGAdZohrk=
Subject key identifier: 06:AE:39:DB:A1:08:AA:8A:A9:61:21:B0:10:E5:D2:1E:72:DA:77:07
Certificate issuer: /CN=750e52de53330d5005498b0fc409e64dd98bb099
Certificate serial: 019C3233AB6F31B6AC7A00D38007BDB513DF
Authority key identifier: 75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/Bq4526EIqoqpYSGwEOXSHnLadwc.roa
Signing time: Fri 06 Feb 2026 09:06:12 +0000
ROA not before: Fri 06 Feb 2026 09:06:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212030
IP address blocks: 194.33.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:32:33:ab:6f:31:b6:ac:7a:00:d3:80:07:bd:b5:13:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750e52de53330d5005498b0fc409e64dd98bb099
Validity
Not Before: Feb 6 09:06:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06ae39dba108aa8aa96121b010e5d21e72da7707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:5e:25:20:7a:2d:0c:46:d0:33:6c:20:23:
67:01:04:c1:57:66:b3:7e:0e:e8:25:ab:ff:e1:18:
a4:ac:e2:e4:2a:63:b6:57:42:5b:b3:ae:ab:a9:11:
a6:b3:32:a9:7f:2c:48:b4:54:79:36:de:04:af:05:
ba:c9:58:bf:e7:88:02:7e:07:f5:4b:e7:44:83:1f:
51:a0:cf:35:0c:23:a4:47:e5:68:3c:44:5f:41:fb:
83:29:1b:75:a9:cc:1c:cf:4f:69:33:e4:f1:d2:bb:
92:ec:71:6f:f1:76:a7:63:a8:c3:f1:ed:fe:83:15:
ef:d6:a5:db:a1:34:97:77:c9:5d:d1:97:ca:3f:a1:
d0:6f:77:ad:1b:b5:a3:9b:dd:f9:70:a7:d0:9e:bf:
10:5a:2b:61:69:9b:0e:38:bc:dc:57:5c:fd:f9:e8:
c3:06:2e:16:ab:25:5e:f5:c3:f0:03:b1:c2:5f:7a:
bb:9e:75:df:a1:8f:05:77:73:a0:69:79:37:64:e3:
50:d6:98:f1:39:29:cd:54:79:98:ee:94:a1:d3:62:
7b:fb:7f:f8:45:a6:08:56:fb:89:94:3e:6e:7c:51:
7e:92:1c:34:e1:ac:0a:1b:62:6f:c4:11:c3:8e:6d:
54:15:4e:25:f9:5f:a8:68:e3:e6:a4:f8:df:fe:ec:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:39:DB:A1:08:AA:8A:A9:61:21:B0:10:E5:D2:1E:72:DA:77:07
X509v3 Authority Key Identifier:
keyid:75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/Bq4526EIqoqpYSGwEOXSHnLadwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.22.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2d:81:91:34:4f:11:b3:16:80:12:0b:93:8d:e9:32:1d:01:
e8:9b:df:24:87:1b:7e:a6:74:98:71:0f:4b:c2:46:36:92:98:
3f:d9:96:fc:c2:18:af:2e:15:6e:fb:c4:eb:b0:fe:f4:30:e7:
3e:65:29:e2:ad:d6:d5:c6:84:50:b0:a2:51:5b:f8:bc:dc:22:
cd:52:a6:40:5b:00:9f:17:c5:ec:6a:05:b1:c6:d3:ef:e5:d2:
cd:b7:1d:42:a0:fb:41:2d:e1:13:3f:11:6e:51:c2:81:5f:cd:
49:82:b2:81:02:b7:3c:b3:56:b6:79:ad:19:64:e3:71:c6:c1:
45:81:ea:7d:92:d9:fc:b4:9c:b1:c3:93:06:97:90:14:48:b6:
24:83:25:3a:7a:35:c8:26:cd:61:0e:88:77:b4:ba:47:99:53:
3e:7e:52:85:15:99:70:cb:96:32:e9:51:e6:95:34:fb:d2:ab:
1d:e7:94:d5:6d:a5:2c:dd:f1:82:16:fe:e5:d6:94:df:62:dd:
1e:37:44:86:96:b9:7c:50:72:46:c0:39:dd:0c:54:f0:d8:dc:
61:25:25:73:55:03:71:9b:4d:5a:66:bd:0a:34:2b:ef:78:d2:
9c:3b:f6:c1:26:86:28:64:ee:69:61:b9:a0:57:ad:49:cc:56:
c4:e0:49:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:12 2026 by rpki-client