This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/x2674gpeOOkrgbaldgBcetLScA0.roa
File: x2674gpeOOkrgbaldgBcetLScA0.roa (raw, json)
Hash identifier: slI9OZiOgpY/PPO59egGhNigxJguaSBoswQUZlXaUCM=
Subject key identifier: C7:6E:BB:E2:0A:5E:38:E9:2B:81:B6:A5:76:00:5C:7A:D2:D2:70:0D
Certificate issuer: /CN=a040f968fa52e6cb2fe657109700fa074c190b85
Certificate serial: 019B7DCA3559B7080C2D7C860388A0EF5546
Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/x2674gpeOOkrgbaldgBcetLScA0.roa
Signing time: Fri 02 Jan 2026 08:19:22 +0000
ROA not before: Fri 02 Jan 2026 08:19:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62352
IP address blocks: 86.105.199.0/24 maxlen: 24
93.117.174.0/24 maxlen: 24
109.205.140.0/23 maxlen: 23
109.205.140.0/24 maxlen: 24
109.205.141.0/24 maxlen: 24
109.205.142.0/23 maxlen: 23
109.205.142.0/24 maxlen: 24
109.205.143.0/24 maxlen: 24
176.126.173.0/24 maxlen: 24
185.39.40.0/22 maxlen: 22
185.39.40.0/24 maxlen: 24
185.39.41.0/24 maxlen: 24
185.39.42.0/24 maxlen: 24
185.39.43.0/24 maxlen: 24
188.241.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:35:59:b7:08:0c:2d:7c:86:03:88:a0:ef:55:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85
Validity
Not Before: Jan 2 08:19:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c76ebbe20a5e38e92b81b6a576005c7ad2d2700d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:56:6a:b7:95:c2:08:07:ec:a6:97:bd:83:
c5:0c:16:17:87:3d:7a:86:91:84:86:fb:fa:8b:7b:
6f:0a:e3:7d:d1:db:b4:ad:e2:cb:1b:96:0f:4f:99:
72:f1:b9:8d:e9:39:5f:7f:bb:36:e7:65:9e:8d:4c:
e1:ce:ca:f9:90:a2:9c:b5:5b:e6:3f:a4:89:3c:b7:
d6:c9:43:aa:85:73:d6:85:8f:07:70:4c:f5:94:d3:
12:5d:4a:c2:fd:87:09:fe:61:f2:ed:4b:bb:3d:13:
e8:6f:89:b0:e4:cf:98:36:e2:52:9c:a4:f3:d4:d1:
91:df:7e:76:70:e0:fc:e5:71:12:b2:f1:21:84:23:
9d:cc:1f:f3:b7:bf:62:ba:e1:8c:aa:6f:50:88:b6:
e4:af:19:65:a4:72:6d:00:36:d8:f7:9c:8b:69:96:
27:63:d0:26:bc:51:8b:b8:54:b1:88:21:f3:fa:8a:
72:a0:57:ea:7c:9e:c6:e1:93:24:10:c7:af:74:c5:
a4:1e:60:34:4a:6a:c4:23:bf:7e:35:3e:fe:c5:ea:
75:84:0d:c0:5f:c8:43:5a:5b:f9:48:fa:b7:e2:a2:
af:81:37:8d:02:bb:18:20:88:64:d1:a7:8a:91:c5:
10:75:ac:9d:58:7f:b0:20:51:fc:47:0a:cc:23:91:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6E:BB:E2:0A:5E:38:E9:2B:81:B6:A5:76:00:5C:7A:D2:D2:70:0D
X509v3 Authority Key Identifier:
keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/x2674gpeOOkrgbaldgBcetLScA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.199.0/24
93.117.174.0/24
109.205.140.0/22
176.126.173.0/24
185.39.40.0/22
188.241.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:eb:3a:9e:00:1d:84:76:62:f4:3f:1e:bb:f7:aa:19:b4:88:
3d:01:d0:ed:25:f8:36:8b:d4:40:c2:40:7b:47:28:a3:dc:8f:
05:bf:84:d1:4e:89:25:fa:16:a2:e1:54:9e:4f:2a:a3:26:43:
30:78:52:a9:ff:05:b5:47:44:7a:7f:4a:95:49:ef:79:36:76:
7f:81:02:42:28:fc:cf:8f:ef:40:35:f1:db:23:9e:00:a5:29:
4b:96:cc:a9:df:0f:39:83:ba:26:0b:df:5e:52:05:32:1c:38:
4a:36:f6:38:9f:83:42:cb:46:f2:ab:8e:47:27:14:23:0e:2e:
8d:07:57:a5:d3:d5:35:70:7d:60:2d:01:f2:52:d3:15:6f:6c:
bf:55:83:fc:2b:76:21:1b:c6:6d:4a:8a:03:9c:6d:90:ec:94:
fe:b1:05:ac:86:92:5e:db:42:83:7c:56:38:84:6a:e6:2e:cb:
fe:5e:ce:63:db:32:d0:88:61:80:0d:1a:62:dd:b7:b7:5a:90:
b6:d1:5a:7b:a4:f7:71:50:53:8b:54:95:d6:e8:98:b8:ab:3d:
94:08:37:b8:9a:9a:ce:94:eb:12:90:e9:7d:3b:ac:50:fb:85:
95:dd:4d:4e:25:67:f2:f7:17:bd:c5:fd:bb:c1:34:53:94:a7:
04:f2:fa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:19 2026 by rpki-client