This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/R1-sQ-aIXEFJT-93CGHyULWdzGI.roa
File: R1-sQ-aIXEFJT-93CGHyULWdzGI.roa (raw, json)
Hash identifier: wTAnQ3p13dmuTH6bJb6Zb4Pwzwq21wLmg4ze6Go9HJA=
Subject key identifier: 47:5F:AC:43:E6:88:5C:41:49:4F:EF:77:08:61:F2:50:B5:9D:CC:62
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 019B797F1DD5C608930570F8A03E4B6AC6F6
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/R1-sQ-aIXEFJT-93CGHyULWdzGI.roa
Signing time: Thu 01 Jan 2026 12:18:52 +0000
ROA not before: Thu 01 Jan 2026 12:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39274
IP address blocks: 195.250.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:1d:d5:c6:08:93:05:70:f8:a0:3e:4b:6a:c6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: Jan 1 12:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=475fac43e6885c41494fef770861f250b59dcc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:f1:4f:32:ec:30:90:ac:b2:14:e8:bb:7c:
f7:a3:15:e9:18:ce:f2:40:21:40:5c:63:06:e6:2d:
4d:61:4d:51:eb:3a:43:a5:26:ce:4f:35:cb:69:65:
bf:43:5c:cb:f9:dd:79:07:1b:55:5b:6d:d6:9a:02:
59:84:3d:95:55:03:b8:80:10:83:02:cd:8c:8f:01:
11:8e:0d:34:10:77:1c:46:ae:b1:5c:0f:74:15:06:
3b:7b:21:ec:51:00:14:f5:60:fb:10:88:b5:cb:c5:
b4:e6:ff:33:d2:53:aa:f2:e2:d4:61:07:f4:92:5c:
08:82:ae:fd:5f:5a:cf:03:cb:1e:43:27:4c:5b:0b:
01:45:95:56:06:88:f0:8d:87:17:b5:a6:52:c1:5d:
43:79:01:c8:7f:e1:28:ec:ea:48:52:1f:6a:bd:1a:
1a:51:5f:c4:e0:98:40:ec:7c:b1:cb:ad:9f:25:9d:
5d:3d:c8:91:bb:30:10:e4:bb:a6:73:52:5f:27:7d:
15:c0:14:2e:28:15:68:b3:3a:76:0f:3a:96:40:90:
a5:52:fd:be:15:b9:72:8c:4b:c2:de:04:c1:80:a8:
c5:a4:da:c0:12:ce:be:ed:19:e5:41:d2:bc:31:b8:
f8:52:2b:42:78:35:67:b2:40:05:ea:6a:74:77:a0:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:AC:43:E6:88:5C:41:49:4F:EF:77:08:61:F2:50:B5:9D:CC:62
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/R1-sQ-aIXEFJT-93CGHyULWdzGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.33.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e5:5b:74:84:c8:b8:47:18:13:36:a2:0d:73:6a:f5:4d:83:
90:2a:21:eb:81:59:e0:a8:4b:30:24:58:9e:ba:14:67:75:39:
b4:00:a2:e7:e6:d8:65:71:4d:63:8a:3c:62:16:03:ca:ee:6a:
3b:bb:e8:36:a3:83:d5:2c:09:4f:8a:a8:73:a7:32:5f:e2:4d:
6e:4b:ad:22:90:82:1b:95:f8:0e:e4:85:4e:db:8d:41:ff:7a:
c8:cb:93:ae:ec:d6:9e:00:d2:4b:b3:cb:91:5b:34:c1:d1:5c:
f3:74:c9:8d:dd:3e:6d:c9:58:41:d6:d1:ea:61:11:f3:a3:cb:
2b:ee:c9:e6:69:be:37:fd:8c:01:37:b8:ec:c3:54:76:26:04:
4c:ff:5a:02:b2:97:93:51:0e:0f:31:a8:66:09:51:de:2d:ad:
b5:16:aa:a8:85:08:14:56:55:a8:c5:d4:22:7e:cd:50:f7:a8:
b2:dd:24:46:2d:29:b1:66:33:51:ef:2d:4f:87:e6:cd:a6:0a:
5a:81:05:cb:d8:97:72:37:f8:b4:cc:b4:76:31:24:1b:40:d5:
27:cc:04:dc:1c:9d:05:d4:33:58:36:6a:fd:25:48:28:8d:0c:
bc:2f:a2:c4:67:b4:91:f0:cb:72:91:e6:94:e6:53:b4:7e:32:
37:d9:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:50 2026 by rpki-client