This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/ob4RLJ_y_7wEvkHKUSSog54LQNw.roa
File: ob4RLJ_y_7wEvkHKUSSog54LQNw.roa (raw, json)
Hash identifier: Jads8EK5VWX+m/AfmuiROvWcFDNzh7waaTO1j/WWRvo=
Subject key identifier: A1:BE:11:2C:9F:F2:FF:BC:04:BE:41:CA:51:24:A8:83:9E:0B:40:DC
Certificate issuer: /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial: 019B7BA351DB1B24783D90CE0E0188459D37
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/ob4RLJ_y_7wEvkHKUSSog54LQNw.roa
Signing time: Thu 01 Jan 2026 22:17:39 +0000
ROA not before: Thu 01 Jan 2026 22:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44410
IP address blocks: 193.3.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:51:db:1b:24:78:3d:90:ce:0e:01:88:45:9d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
Validity
Not Before: Jan 1 22:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1be112c9ff2ffbc04be41ca5124a8839e0b40dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:7a:32:3b:be:28:b7:2e:09:3f:6b:52:5b:
a7:a4:4f:2f:a8:77:32:c7:65:b0:1d:c5:51:fe:7c:
29:34:aa:19:09:4e:4b:2c:8f:62:87:2b:65:e6:86:
aa:81:2b:0e:40:0b:a2:29:c9:09:55:ec:d6:cc:25:
fe:bb:78:58:b5:8f:f3:49:d9:b2:84:52:5f:4f:b1:
fb:ce:e9:67:44:87:dc:8a:72:8b:4c:85:0e:13:13:
50:91:2d:bc:eb:ea:3b:00:1a:26:1b:4b:fd:73:56:
fe:ee:67:0e:18:f3:5e:31:af:8b:a9:3c:70:65:c9:
5d:94:c2:c9:90:e2:e2:19:e9:53:ec:53:c6:89:0f:
ac:64:e8:e8:a8:ea:03:17:72:14:86:2f:ce:c9:5d:
1b:90:27:99:b9:a5:fa:0e:91:bd:b3:b2:fc:b1:5e:
1b:d1:00:3f:bb:b3:cd:1b:52:f2:cb:99:76:5b:6a:
be:2f:3e:7a:07:b3:ee:89:68:c7:75:61:50:7f:91:
b6:c9:67:7e:7a:cf:97:d9:b4:43:5b:23:3a:75:06:
48:e2:4c:e0:b6:95:4d:99:56:c0:8d:f9:9b:0e:f9:
c4:69:82:e9:18:19:5e:4a:bd:c8:2e:ef:bd:29:65:
3e:ba:dd:5c:db:99:56:1c:28:23:4e:dd:86:03:56:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BE:11:2C:9F:F2:FF:BC:04:BE:41:CA:51:24:A8:83:9E:0B:40:DC
X509v3 Authority Key Identifier:
keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/ob4RLJ_y_7wEvkHKUSSog54LQNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:16:e2:02:04:2b:88:3b:48:55:b4:9a:dd:8f:21:a1:32:c6:
74:46:47:52:5e:b8:7a:a4:d2:44:4b:bc:f8:2a:f3:34:25:5d:
fd:0b:f1:94:24:64:9c:e8:e3:b6:9b:a6:98:d0:3d:90:43:42:
01:bd:9f:b4:cc:38:62:7a:0f:1d:dc:72:9e:1a:6d:b7:1f:bc:
34:65:04:86:bc:79:44:0c:c8:69:79:0e:21:ed:cc:9d:e5:96:
8c:b8:e8:f2:c7:96:99:eb:d1:72:d5:9e:80:5c:7b:fd:26:91:
b8:8e:5a:a8:0c:07:36:75:ad:c6:31:a1:9b:67:c4:c2:b4:52:
f3:09:e8:09:17:ea:50:e3:43:0d:e6:8a:91:20:41:07:79:39:
32:d4:44:7c:d8:28:0e:72:24:00:a4:81:c6:f2:50:9c:a6:9f:
30:e8:5c:00:6f:b6:e6:85:be:c3:a1:37:8c:f4:56:22:e7:ea:
16:a2:84:f1:0c:8b:e8:1a:bf:91:78:e7:7b:bd:f8:39:cc:05:
8b:75:31:17:1b:61:f9:16:4b:f4:00:72:d7:08:26:c0:bd:ec:
21:f8:08:70:3c:43:44:50:b7:a4:4e:be:2d:b8:10:f1:34:a7:
5e:dd:0e:62:ef:dd:8b:ba:70:25:f2:0f:a6:76:1d:17:1f:0a:
0a:7b:08:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:35 2026 by rpki-client