This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/NE7mP6LXofTtetMrz0bZ4gVjQZQ.roa File: NE7mP6LXofTtetMrz0bZ4gVjQZQ.roa (raw, json) Hash identifier: OKq/sE5vI4Tp87JPYnyleJOP67qF4AH8+fsvJkq27uQ= Subject key identifier: 34:4E:E6:3F:A2:D7:A1:F4:ED:7A:D3:2B:CF:46:D9:E2:05:63:41:94 Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01 Certificate serial: 019B7CEE616E0D388F68D1ECFED2E721EADB Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/NE7mP6LXofTtetMrz0bZ4gVjQZQ.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215413 IP address blocks: 194.150.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:61:6e:0d:38:8f:68:d1:ec:fe:d2:e7:21:ea:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=344ee63fa2d7a1f4ed7ad32bcf46d9e205634194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:7e:73:58:d9:38:56:ca:9c:bb:fb:06:a6: 4a:f4:b1:3d:2e:d0:52:03:3c:c9:1f:1a:44:d8:07: 22:4d:00:92:84:38:f4:31:d9:cf:3f:53:d3:0e:5b: da:cf:aa:3c:41:23:ad:c3:04:bb:12:22:24:42:3e: 9a:fa:cb:66:a5:a0:1f:05:41:37:6d:c0:1b:87:9e: 95:25:ae:3c:e5:50:61:bd:f5:54:9f:a0:7a:7b:a1: 39:9e:b5:cf:33:a2:a6:59:d0:6e:57:4f:43:4c:74: f0:c3:e2:34:27:31:03:79:3d:56:e6:8a:09:f3:0c: 24:af:5d:d0:57:82:45:99:c1:2d:6c:16:7a:00:20: 63:32:ae:5d:2a:27:ca:1e:fa:b9:a3:5b:bd:3c:cb: 12:1b:56:90:e6:d8:88:44:0b:c3:6a:16:e1:fb:d4: aa:23:67:5a:21:61:4a:d8:5c:fd:47:7a:02:bb:52: 20:34:36:d1:e5:e3:7d:1f:ce:bb:34:5e:08:02:bf: 05:ac:b7:d5:14:16:9f:08:29:03:42:7a:bd:ad:71: 08:9f:10:12:c8:d0:d1:90:74:db:0f:5f:37:c1:68: c0:97:06:66:6c:67:ce:99:da:46:28:6e:ce:ae:b3: 11:f3:08:06:f1:b9:7b:17:0b:99:93:8b:7a:16:72: 6c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4E:E6:3F:A2:D7:A1:F4:ED:7A:D3:2B:CF:46:D9:E2:05:63:41:94 X509v3 Authority Key Identifier: keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/NE7mP6LXofTtetMrz0bZ4gVjQZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.150.73.0/24 Signature Algorithm: sha256WithRSAEncryption 23:e4:07:7b:e7:56:ec:cf:76:42:55:97:99:ec:8a:dd:46:1b: 35:0a:8d:29:cf:93:ef:e3:7b:aa:d9:12:38:ea:4a:44:9f:36: 31:2d:92:34:ea:cb:52:31:49:48:e4:4a:be:e0:55:e3:0c:08: f6:72:d8:ab:65:7e:6c:32:b7:d4:47:8a:7a:a9:5a:1d:3b:26: 61:94:54:ef:bd:27:37:15:f5:4b:9f:23:20:a9:de:19:26:a0: d8:d1:e7:24:ca:cd:c4:4c:d7:d6:3a:4e:14:f1:ff:1c:c1:23: 3a:a8:dd:bf:e5:74:d1:ab:e7:23:dd:e4:30:36:54:8f:e7:5d: b6:25:c3:a7:f6:5f:56:5c:a7:50:1a:9c:ee:a9:9d:5a:d4:e3: 73:3c:4f:09:90:87:2f:9d:ad:cb:c9:b5:04:2c:2f:55:d6:ab: de:b4:91:03:4c:c3:96:14:1a:0f:eb:d0:45:05:dd:d2:19:33: 42:c4:6e:e6:74:c0:13:09:4b:b7:d1:7d:74:a3:cc:43:5b:8f: eb:67:c3:05:5e:56:32:72:52:f8:a4:cb:bd:44:b6:09:70:7d: e6:4b:8f:f9:52:ef:23:4b:14:88:cf:cd:76:e7:22:21:07:bd: a7:99:d1:ff:1b:2d:66:32:46:8d:50:9a:5a:74:6c:8c:79:a5: 65:17:87:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mFuDTiPaNHs/tLnIerbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkM2MzOTg3ZTdjMzRiMzY2YWEwZjA5YzQwZWE0YzgwYmZl ZDBlMDEwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDRlZTYzZmEyZDdhMWY0ZWQ3YWQzMmJjZjQ2ZDllMjA1NjM0MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIJ+c1jZOFbKnLv7BqZK9LE9LtBS AzzJHxpE2AciTQCShDj0MdnPP1PTDlvaz6o8QSOtwwS7EiIkQj6a+stmpaAfBUE3 bcAbh56VJa485VBhvfVUn6B6e6E5nrXPM6KmWdBuV09DTHTww+I0JzEDeT1W5ooJ 8wwkr13QV4JFmcEtbBZ6ACBjMq5dKifKHvq5o1u9PMsSG1aQ5tiIRAvDahbh+9Sq I2daIWFK2Fz9R3oCu1IgNDbR5eN9H867NF4IAr8FrLfVFBafCCkDQnq9rXEInxAS yNDRkHTbD183wWjAlwZmbGfOmdpGKG7OrrMR8wgG8bl7FwuZk4t6FnJs5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRO5j+i16H07XrTK89G2eIFY0GUMB8GA1UdIwQY MBaAFC08OYfnw0s2aqDwnEDqTIC/7Q4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2Ut M2E2ZGU5OWVkZTQ3LzEvTkU3bVA2TFhvZlR0ZXRNcnowYlo0Z1ZqUVpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2UtM2E2ZGU5OWVkZTQ3 LzEvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpZJMA0G CSqGSIb3DQEBCwUAA4IBAQAj5Ad751bsz3ZCVZeZ7IrdRhs1Co0pz5Pv43uq2RI4 6kpEnzYxLZI06stSMUlI5Eq+4FXjDAj2ctirZX5sMrfUR4p6qVodOyZhlFTvvSc3 FfVLnyMgqd4ZJqDY0eckys3ETNfWOk4U8f8cwSM6qN2/5XTRq+cj3eQwNlSP5122 JcOn9l9WXKdQGpzuqZ1a1ONzPE8JkIcvna3LybUELC9V1qvetJEDTMOWFBoP69BF Bd3SGTNCxG7mdMATCUu30X10o8xDW4/rZ8MFXlYyclL4pMu9RLYJcH3mS4/5Uu8j SxSIz8125yIhB72nmdH/Gy1mMkaNUJpadGyMeaVlF4cm -----END CERTIFICATE-----Generated at Fri Jan 9 00:11:55 2026 by rpki-client