This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa
File: bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa (raw, json)
Hash identifier: 9tpXPxjrcGnuiYj+mPBltbwiQGnnVBk/rVL0p+GtkMk=
Subject key identifier: 6C:CC:3F:B4:C8:04:17:72:63:91:67:65:23:F9:1B:CA:19:A2:64:1F
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 019B7E38D6E45EF5F20294F969C8A3DE461F
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa
Signing time: Fri 02 Jan 2026 10:20:12 +0000
ROA not before: Fri 02 Jan 2026 10:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47474
IP address blocks: 193.110.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:d6:e4:5e:f5:f2:02:94:f9:69:c8:a3:de:46:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Jan 2 10:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ccc3fb4c80417726391676523f91bca19a2641f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:e4:0b:69:40:73:03:56:48:ab:89:14:0a:
8b:04:49:19:ab:6a:eb:2f:2f:65:a0:c6:3e:f8:a0:
7f:4f:15:69:aa:68:09:1d:47:72:da:1a:f2:c4:17:
8c:02:6e:1a:76:1f:aa:74:1c:17:9f:2d:44:19:99:
fb:28:56:54:d9:1f:32:39:10:5b:d4:60:46:f9:c2:
89:9b:4f:11:5a:b7:b2:9c:42:86:fc:70:29:1b:08:
6b:15:f8:96:0a:4a:d6:f4:1c:47:58:7d:d7:8a:c3:
cd:ac:43:72:84:46:00:6b:fb:00:fc:bf:5c:2b:9a:
0d:f6:65:d6:34:55:01:2e:81:df:5d:b5:f9:d1:58:
00:3b:04:65:ca:e7:fb:bc:57:20:e3:8d:1c:84:29:
2c:8c:73:83:66:93:3b:32:e8:f7:5e:00:ce:33:6c:
a4:6d:85:10:3b:db:9c:b2:93:ce:f3:9a:a8:d9:08:
e2:41:27:7c:0f:87:6b:35:17:77:a3:91:e0:51:c3:
ac:44:7e:f2:82:fa:fc:f2:bd:de:bb:3e:66:b2:f1:
f0:56:2e:7f:f8:dc:53:98:e8:34:d2:b1:be:ea:3e:
3f:ee:03:c4:22:4b:55:7a:41:b8:3a:4b:c8:76:f2:
80:0c:81:dd:95:85:08:a4:b6:a0:f1:35:a0:30:bb:
d8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CC:3F:B4:C8:04:17:72:63:91:67:65:23:F9:1B:CA:19:A2:64:1F
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.240.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:3e:5e:21:5d:61:08:7d:21:83:76:e1:41:ed:fd:61:ff:30:
45:66:c1:d4:c9:a9:23:a4:9d:12:51:eb:0a:1e:11:60:5b:f3:
fd:f5:75:7e:fa:68:7c:ce:7c:63:c2:f2:ad:e6:56:a7:79:3f:
61:b9:94:7f:57:71:bd:ea:cb:20:e8:5c:2d:28:43:ce:ea:8e:
61:6f:6a:c6:9a:8a:59:06:7d:11:30:44:16:fd:d8:c3:1a:97:
ba:ff:38:95:57:49:ff:0a:4f:94:3d:a9:e7:e5:67:5c:4a:67:
7b:15:c3:84:d9:81:57:ee:a9:f2:0f:24:75:14:51:ed:8b:69:
a7:24:3f:2c:9f:db:a4:39:53:bf:f5:e6:d7:0a:dd:5a:58:35:
7d:3f:72:22:8d:1e:6e:55:8f:45:95:62:d7:f1:b7:d4:5e:d7:
51:a0:a6:41:d9:f2:87:95:a9:d3:3e:a8:ce:f8:73:5e:46:85:
8b:b6:be:b0:de:55:b9:ba:12:1e:34:b3:8e:c0:9a:1a:3e:f2:
5e:6d:81:a7:e2:6a:8e:b8:e9:b6:85:8b:45:db:cf:9e:c2:a7:
71:8a:8c:87:60:6c:5c:5a:66:d4:f2:4b:35:f8:38:01:dc:ec:
c9:8d:50:f7:f2:58:ec:92:bb:f2:9e:ee:2d:27:d3:d2:76:1f:
9b:22:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:13 2026 by rpki-client