This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/BkeMBpLUWgqrfQcp4liiEC-fNog.roa
File: BkeMBpLUWgqrfQcp4liiEC-fNog.roa (raw, json)
Hash identifier: CNX30ei/1ARWUwhB6OtVE1WJLmIAFc4BETfwZmdj7/s=
Subject key identifier: 06:47:8C:06:92:D4:5A:0A:AB:7D:07:29:E2:58:A2:10:2F:9F:36:88
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 019B7CEE30FC3B458F24EB3AEA2F0B9E97EA
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/BkeMBpLUWgqrfQcp4liiEC-fNog.roa
Signing time: Fri 02 Jan 2026 04:19:03 +0000
ROA not before: Fri 02 Jan 2026 04:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207850
IP address blocks: 193.108.20.0/24 maxlen: 24
193.108.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:30:fc:3b:45:8f:24:eb:3a:ea:2f:0b:9e:97:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Jan 2 04:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06478c0692d45a0aab7d0729e258a2102f9f3688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:8a:cb:f2:b2:26:bc:44:99:c7:68:b0:58:
ae:76:32:3d:d4:bd:09:98:2b:e5:d2:b4:84:5a:7c:
84:1c:8e:8f:41:d4:85:7c:ad:c7:9a:c9:1b:f3:b6:
6b:46:c6:21:4b:d2:49:d0:a0:8b:6a:ef:76:52:b1:
64:d5:b5:89:f7:85:a5:d3:ab:89:7d:71:26:d0:da:
18:12:14:b1:b2:85:f5:d3:23:70:6c:5f:ac:16:37:
88:f0:9d:db:10:99:f7:54:70:18:ce:10:62:59:25:
e1:f6:e1:77:0b:46:94:f7:19:16:32:1d:91:16:85:
75:90:64:52:b2:15:93:f3:13:19:b3:76:e7:4f:0d:
fb:d2:61:13:19:c2:ec:91:4a:e0:2f:8e:2e:27:84:
30:94:01:fb:35:1d:3b:67:13:54:24:1d:3b:af:01:
cf:69:64:c0:39:d3:91:8c:e6:92:2e:46:e1:92:5e:
7e:4e:82:81:6f:42:00:91:54:59:d1:9d:e4:58:24:
25:22:30:76:f7:cb:5f:16:82:76:0c:a0:c0:93:65:
71:0e:d4:0c:5d:7d:06:e0:f3:fb:bf:03:b8:16:9b:
d6:cd:ef:c6:2c:9f:e1:dd:ce:dc:b3:45:65:9f:5b:
3e:bb:6c:82:09:7d:15:95:3e:62:68:9f:30:b9:7b:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:47:8C:06:92:D4:5A:0A:AB:7D:07:29:E2:58:A2:10:2F:9F:36:88
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/BkeMBpLUWgqrfQcp4liiEC-fNog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.20.0/24
193.108.178.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0f:57:97:e2:c6:23:2b:50:62:d0:d4:ed:7f:65:14:5e:80:
3b:d3:d1:3d:6a:01:6e:4d:e2:08:2a:b4:3e:7e:9d:2e:d9:ef:
a2:74:8b:a2:b4:57:33:b8:53:ba:12:7b:2a:8b:b8:df:f3:40:
56:17:17:63:3e:4a:50:fb:73:19:c9:ca:9c:6a:66:c0:90:73:
32:50:cc:68:60:c9:40:8a:d7:80:32:1e:e0:16:45:af:cc:94:
b6:4d:cb:19:a3:c1:29:89:23:2f:3f:46:77:7e:a1:d8:f8:90:
c4:bd:86:14:a7:bb:25:a0:04:3b:da:01:49:7b:54:74:e4:32:
7e:bc:86:32:9d:81:c7:34:17:6d:1b:88:45:b5:86:8c:c1:6d:
92:ca:3b:15:f6:e6:63:ff:c5:62:58:4f:03:32:a8:88:7b:4e:
ae:97:2b:23:80:03:ac:12:28:57:c9:29:dd:77:b1:b7:70:92:
65:6b:10:1a:a9:c4:7a:cf:9f:d8:0c:a6:0c:a0:b4:68:f8:8e:
43:1c:bf:f4:7c:c5:05:2b:57:d5:62:3f:f8:b2:69:08:cc:b9:
95:60:f8:2a:d8:7e:db:f3:62:1c:39:c8:ba:95:16:f3:f2:c3:
bc:85:a3:d1:ef:9e:f4:ba:46:8a:4d:7d:0c:a3:72:16:af:5e:
67:ff:4e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:18 2026 by rpki-client