This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1bdVaeXhYZVzx5_SFxbxFDY_neo.roa File: 1bdVaeXhYZVzx5_SFxbxFDY_neo.roa (raw, json) Hash identifier: oQfCTBgtToG+wGHU09l9PkLGVh/vxd/l8ZOfRhdXXP8= Subject key identifier: D5:B7:55:69:E5:E1:61:95:73:C7:9F:D2:17:16:F1:14:36:3F:9D:EA Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6EC4482BAC6C8E6F49CCF9D938E62 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1bdVaeXhYZVzx5_SFxbxFDY_neo.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205418 IP address blocks: 2a0c:9a40:8700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ec:44:82:ba:c6:c8:e6:f4:9c:cf:9d:93:8e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5b75569e5e1619573c79fd21716f114363f9dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:30:d5:6c:d9:c2:e4:ea:3b:43:7b:83:78: 07:f0:ff:dc:af:35:20:e7:24:93:b6:c1:30:55:87: 68:ec:aa:4c:76:0f:45:85:0c:e6:94:cb:72:df:4f: 29:a6:7c:f1:64:6d:9c:ed:cc:46:e4:1a:f6:47:42: 9b:7c:86:20:33:00:55:9e:d5:90:0c:b8:34:34:79: 84:53:0a:fd:7e:ef:68:61:7a:5c:b0:d8:fd:74:97: 22:e3:cc:9a:65:cc:68:73:aa:e2:6c:4c:fd:12:c9: f4:ae:d2:42:19:19:69:01:7a:cf:c5:3c:a2:a1:50: 50:8b:0f:2d:a7:19:3a:96:31:3f:1a:9c:2a:23:55: bf:94:cb:c7:8d:35:a6:1d:63:ca:b7:80:1e:3f:ec: f7:db:c6:ff:c7:7a:bb:1e:76:81:72:4c:34:37:e1: f1:e4:e1:4e:0c:7b:48:00:b0:2e:f5:d7:ce:95:8c: 53:6e:9c:07:1b:76:7a:53:fd:91:06:58:c6:d7:d7: aa:d3:74:d9:e0:8e:c0:38:ba:1e:94:01:2d:4e:c9: 4e:7e:e9:38:ba:17:7d:00:03:2d:78:d9:92:ec:88: ba:e8:d5:0d:13:72:db:3e:9d:5b:79:e4:37:40:49: 45:31:b6:3a:75:02:94:b3:41:11:c3:6d:e9:2f:72: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B7:55:69:E5:E1:61:95:73:C7:9F:D2:17:16:F1:14:36:3F:9D:EA X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1bdVaeXhYZVzx5_SFxbxFDY_neo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8700::/48 Signature Algorithm: sha256WithRSAEncryption 2b:96:fb:0a:81:27:5a:8c:ba:30:05:ef:a3:1f:fb:da:80:39: e2:24:80:07:78:b6:fc:40:b1:9c:a4:bd:ac:58:6a:3b:9b:83: d8:97:5a:ab:5a:ac:8d:55:64:8c:31:bb:39:3c:e0:e3:c6:a9: 3c:80:60:5e:c4:f5:42:04:0e:38:51:42:92:ac:77:50:14:77: aa:12:e0:fd:b2:39:f1:47:de:34:31:fa:db:10:2a:cc:f2:b1: de:04:11:98:0b:85:3e:e3:f8:40:2c:e6:27:ba:52:31:35:15: 97:a5:95:6c:de:2a:50:b2:09:6b:5d:a1:9b:27:6a:1a:26:a1: 13:8b:d2:68:66:4b:a2:6a:b2:8f:c7:20:bd:95:41:ea:d1:ac: 2e:4a:12:da:28:36:64:1b:e9:60:17:dd:34:22:39:03:74:64: b4:47:7a:84:fe:41:19:6c:12:4f:ec:a7:af:a8:f5:4d:20:69: 68:bc:b2:c0:77:ab:ef:b0:13:da:fb:c2:83:64:08:72:e9:95: 12:8b:fa:14:e0:ef:a3:05:fe:58:ba:58:c2:b5:ca:0c:6b:62: 74:55:e7:e6:5f:bc:df:1e:7d:21:13:ee:91:36:3a:f4:45:02: be:08:77:b3:a8:dd:2f:9e:13:03:8f:58:67:5a:58:21:9d:0d: 66:51:fb:86 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+puxEgrrGyOb0nM+dk45iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWI3NTU2OWU1ZTE2MTk1NzNjNzlmZDIxNzE2ZjExNDM2M2Y5ZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodQw1WzZwuTqO0N7g3gH8P/crzUg 5ySTtsEwVYdo7KpMdg9FhQzmlMty308ppnzxZG2c7cxG5Br2R0KbfIYgMwBVntWQ DLg0NHmEUwr9fu9oYXpcsNj9dJci48yaZcxoc6ribEz9Esn0rtJCGRlpAXrPxTyi oVBQiw8tpxk6ljE/GpwqI1W/lMvHjTWmHWPKt4AeP+z328b/x3q7HnaBckw0N+Hx 5OFODHtIALAu9dfOlYxTbpwHG3Z6U/2RBljG19eq03TZ4I7AOLoelAEtTslOfuk4 uhd9AAMteNmS7Ii66NUNE3LbPp1beeQ3QElFMbY6dQKUs0ERw23pL3JIXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNW3VWnl4WGVc8ef0hcW8RQ2P53qMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvMWJkVmFlWGhZWlZ6eDVfU0Z4YnhGRFlfbmVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIcA MA0GCSqGSIb3DQEBCwUAA4IBAQArlvsKgSdajLowBe+jH/vagDniJIAHeLb8QLGc pL2sWGo7m4PYl1qrWqyNVWSMMbs5PODjxqk8gGBexPVCBA44UUKSrHdQFHeqEuD9 sjnxR940MfrbECrM8rHeBBGYC4U+4/hALOYnulIxNRWXpZVs3ipQsglrXaGbJ2oa JqETi9JoZkuiarKPxyC9lUHq0awuShLaKDZkG+lgF900IjkDdGS0R3qE/kEZbBJP 7KevqPVNIGlovLLAd6vvsBPa+8KDZAhy6ZUSi/oU4O+jBf5YuljCtcoMa2J0Vefm X7zfHn0hE+6RNjr0RQK+CHezqN0vnhMDj1hnWlghnQ1mUfuG -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:53 2026 by rpki-client