This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/BmeWkQ2qsdxjGzo0GXTJOh2jlRc.roa
File: BmeWkQ2qsdxjGzo0GXTJOh2jlRc.roa (raw, json)
Hash identifier: BpAZQxUpOARnv01FH0kV+NBxmmSBpk1Oz9AcYOSnpdI=
Subject key identifier: 06:67:96:91:0D:AA:B1:DC:63:1B:3A:34:19:74:C9:3A:1D:A3:95:17
Certificate issuer: /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Certificate serial: 019B7AC8C0EAF53C6A7D6C26811FCA2EEB93
Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/BmeWkQ2qsdxjGzo0GXTJOh2jlRc.roa
Signing time: Thu 01 Jan 2026 18:18:55 +0000
ROA not before: Thu 01 Jan 2026 18:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200346
IP address blocks: 193.22.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:c0:ea:f5:3c:6a:7d:6c:26:81:1f:ca:2e:eb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Validity
Not Before: Jan 1 18:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=066796910daab1dc631b3a341974c93a1da39517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:4f:d5:cb:bd:65:04:4a:3c:31:fb:17:7e:
9e:2d:dc:ed:87:e5:0d:ca:55:bb:66:66:93:6d:1b:
ff:d7:77:8b:f8:dc:9f:56:78:5f:01:12:ff:08:19:
f4:b8:a4:16:e9:1e:fe:6f:d0:03:c4:e2:73:b8:95:
2a:90:74:dc:99:8e:89:dc:d5:52:15:86:1e:2a:90:
77:84:1b:ea:9d:e4:aa:22:9b:0c:9c:c7:00:e8:09:
5b:55:ee:fe:cd:12:f4:b4:2c:2c:ba:34:db:af:34:
78:22:12:c7:ac:ae:d1:d0:8e:a5:00:5f:54:58:5f:
1d:65:61:e6:26:61:34:e1:86:8d:8e:3f:5f:20:d9:
80:36:d7:a3:b6:fa:93:fa:1f:77:95:cc:2a:fb:42:
f0:47:1a:ef:94:1c:09:41:59:58:c3:6c:29:77:67:
34:f0:ac:9d:e7:9d:88:69:4b:2d:b7:ea:74:aa:2b:
b6:de:07:7d:91:47:da:9a:eb:50:9b:d2:58:1b:65:
70:4d:7a:67:f5:5e:3e:44:24:63:f0:c2:e8:26:29:
c7:33:3c:49:77:e2:3a:f5:2b:86:2d:1c:63:0c:e0:
d8:25:40:be:23:a6:51:45:46:86:2c:85:9d:d6:8c:
89:2a:27:92:fb:00:bf:04:ad:02:ac:3b:0d:94:8d:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:96:91:0D:AA:B1:DC:63:1B:3A:34:19:74:C9:3A:1D:A3:95:17
X509v3 Authority Key Identifier:
keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/BmeWkQ2qsdxjGzo0GXTJOh2jlRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5f:76:37:69:32:9a:51:5a:87:49:bf:7e:75:1a:90:3e:56:
47:86:53:ac:e9:31:65:79:5f:4d:6a:83:ae:d2:7b:a8:ed:6d:
8f:20:5d:0c:c1:f7:8a:1f:85:bd:1c:9d:ae:80:cf:ef:ef:b0:
69:30:b1:bd:b2:f7:58:9a:6d:08:5e:57:f3:79:db:5c:e1:76:
ae:3f:4e:fd:81:bf:af:84:9a:de:4c:c9:ac:9b:67:33:80:41:
ba:a5:71:67:a8:88:90:9e:06:1e:2b:b6:1d:95:76:83:8f:5a:
e9:1a:ca:f5:28:51:7b:3f:9d:8c:a5:a6:24:69:f0:76:47:c0:
85:ac:eb:af:f8:e9:40:f4:4f:21:79:48:57:5c:ea:55:f8:2a:
0c:fc:73:10:18:aa:e4:1a:6f:32:0c:3f:ef:86:cb:27:7a:f4:
fe:09:bd:48:77:32:d1:d8:55:97:97:67:94:28:82:30:0a:7d:
c7:37:c5:d5:85:30:4c:5c:06:d7:ee:17:8f:6e:2f:30:67:74:
00:71:9c:56:16:fb:99:8f:ed:83:69:ea:ae:99:96:b2:21:29:
ac:8a:f1:b9:61:a0:69:b4:3b:80:99:43:5d:51:02:4b:f9:c7:
6c:0b:34:2f:d7:b2:02:53:14:ce:71:46:98:56:54:16:c4:34:
63:7d:fd:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yMDq9TxqfWwmgR/KLuuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2Y3ODc2ZDRjNTU1NGI3NzJhNTdlN2YxYzRjZWQzN2Zi
NWUxOWUwHhcNMjYwMTAxMTgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjY3OTY5MTBkYWFiMWRjNjMxYjNhMzQxOTc0YzkzYTFkYTM5NTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR9P1cu9ZQRKPDH7F36eLdzth+UN
ylW7ZmaTbRv/13eL+NyfVnhfARL/CBn0uKQW6R7+b9ADxOJzuJUqkHTcmY6J3NVS
FYYeKpB3hBvqneSqIpsMnMcA6AlbVe7+zRL0tCwsujTbrzR4IhLHrK7R0I6lAF9U
WF8dZWHmJmE04YaNjj9fINmANtejtvqT+h93lcwq+0LwRxrvlBwJQVlYw2wpd2c0
8Kyd552IaUstt+p0qiu23gd9kUfamutQm9JYG2VwTXpn9V4+RCRj8MLoJinHMzxJ
d+I69SuGLRxjDODYJUC+I6ZRRUaGLIWd1oyJKieS+wC/BK0CrDsNlI23CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAZnlpENqrHcYxs6NBl0yTodo5UXMB8GA1UdIwQY
MBaAFEp/eHbUxVVLdypX5/HEztN/teGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQt
YWIxZWE0MzUzYjdmLzEvQm1lV2tRMnFzZHhqR3pvMEdYVEpPaDJqbFJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQtYWIxZWE0MzUzYjdm
LzEvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRb+MA0G
CSqGSIb3DQEBCwUAA4IBAQAKX3Y3aTKaUVqHSb9+dRqQPlZHhlOs6TFleV9NaoOu
0nuo7W2PIF0MwfeKH4W9HJ2ugM/v77BpMLG9svdYmm0IXlfzedtc4XauP079gb+v
hJreTMmsm2czgEG6pXFnqIiQngYeK7YdlXaDj1rpGsr1KFF7P52MpaYkafB2R8CF
rOuv+OlA9E8heUhXXOpV+CoM/HMQGKrkGm8yDD/vhssnevT+Cb1IdzLR2FWXl2eU
KIIwCn3HN8XVhTBMXAbX7hePbi8wZ3QAcZxWFvuZj+2DaequmZayISmsivG5YaBp
tDuAmUNdUQJL+cdsCzQv17ICUxTOcUaYVlQWxDRjff19
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:25 2026 by rpki-client