This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/ALL72x2uiNRr-gJc-rE0B3ud96o.roa
File: ALL72x2uiNRr-gJc-rE0B3ud96o.roa (raw, json)
Hash identifier: urwIbNmeE1XUBZZdgKv39JnzgCWK6gzsKlpOmoQqnlI=
Subject key identifier: 00:B2:FB:DB:1D:AE:88:D4:6B:FA:02:5C:FA:B1:34:07:7B:9D:F7:AA
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 019B78A2E4BC6471F126829A124FF4AD830F
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/ALL72x2uiNRr-gJc-rE0B3ud96o.roa
Signing time: Thu 01 Jan 2026 08:18:19 +0000
ROA not before: Thu 01 Jan 2026 08:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6851
IP address blocks: 195.246.226.0/23 maxlen: 23
195.246.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:e4:bc:64:71:f1:26:82:9a:12:4f:f4:ad:83:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Jan 1 08:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00b2fbdb1dae88d46bfa025cfab134077b9df7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:b1:be:bc:58:f1:0f:a4:b1:f9:f4:f2:c2:
c7:fb:f4:d5:d3:64:8a:eb:ef:d5:3f:91:f6:f5:0e:
b9:e5:c5:ff:d3:b9:47:c7:da:0e:d3:02:8b:99:2b:
87:26:00:03:50:1d:00:9a:df:3f:d5:54:63:b1:b1:
cf:f6:4e:79:b7:76:b9:55:2a:3a:1a:a5:7e:e5:6d:
c2:fb:9f:98:df:4e:df:cb:2a:74:22:2a:d8:f0:0b:
fb:8c:31:36:83:30:a3:fb:51:b7:de:c4:1d:a4:f8:
07:01:fb:9c:9f:07:b3:c7:04:5b:6b:39:be:6b:bc:
42:98:74:4b:9a:78:ae:0c:2b:61:9b:7a:28:d8:45:
c4:d2:d3:f3:63:b4:1d:0b:62:e2:63:5c:ae:ec:0b:
34:85:05:f6:cd:92:f1:43:0a:8d:41:1d:8a:a5:43:
24:0e:6d:19:30:db:16:9f:35:b8:41:6f:ec:4b:5e:
f1:61:f7:3a:10:e1:b2:23:c8:39:4b:82:57:9d:cd:
e5:4b:8d:e0:49:51:ad:00:f7:7b:25:0d:4d:88:19:
9b:90:0f:4a:6d:26:2e:1b:3a:a0:01:76:49:c7:f9:
1a:63:a4:20:aa:9f:50:58:f9:ec:4f:18:0e:54:e6:
c3:65:ff:e8:53:18:70:c2:30:04:1d:41:aa:34:f9:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B2:FB:DB:1D:AE:88:D4:6B:FA:02:5C:FA:B1:34:07:7B:9D:F7:AA
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/ALL72x2uiNRr-gJc-rE0B3ud96o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.226.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:92:5c:1a:d9:05:3a:b0:7a:f8:73:69:55:2e:1a:0a:2a:cd:
ba:eb:06:c3:31:c3:94:8a:11:07:e4:14:c9:e5:46:d3:bb:22:
57:82:f2:11:d0:fa:6b:e2:48:ec:99:cb:5e:ee:c3:85:c1:77:
20:7c:4c:de:17:4d:89:09:8b:03:93:3c:52:0f:8b:4f:4a:e0:
64:33:b3:cc:ec:cf:b3:4b:14:6f:9e:0e:cf:b7:9d:c7:e9:80:
31:95:90:51:06:78:7c:d0:e6:bd:7d:17:88:6b:35:0d:25:27:
31:2b:41:f7:a0:1a:da:19:d8:d2:06:79:b0:c9:04:92:af:2f:
7d:01:08:07:21:b2:27:3c:ae:18:1d:bf:59:36:df:c6:ab:e6:
fe:1b:72:38:f7:d9:65:93:8c:49:57:14:7f:26:7d:69:a5:91:
37:bc:16:46:55:64:d1:23:ed:a5:65:b8:47:e4:08:a2:2f:1d:
ec:36:c8:6a:83:1b:d4:5c:7b:d6:6a:79:39:95:34:36:74:5a:
36:b2:cb:c7:b7:9a:19:87:15:34:a7:26:a7:b1:9d:bf:90:4b:
9f:89:5c:76:f7:b2:95:dc:f8:cd:ba:8e:22:b5:fe:ba:f7:83:
49:1f:77:2f:58:45:2d:92:97:de:60:81:a8:66:e1:3c:76:ef:
e7:be:7e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:16:41 2026 by rpki-client