This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/npu-xEBPXBXxkjcFkM42ClvBry0.roa File: npu-xEBPXBXxkjcFkM42ClvBry0.roa (raw, json) Hash identifier: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw= Subject key identifier: 9E:9B:BE:C4:40:4F:5C:15:F1:92:37:05:90:CE:36:0A:5B:C1:AF:2D Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d Certificate serial: 019B7DC9E7772492FE120023655E07871250 Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/npu-xEBPXBXxkjcFkM42ClvBry0.roa Signing time: Fri 02 Jan 2026 08:19:02 +0000 ROA not before: Fri 02 Jan 2026 08:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60706 IP address blocks: 109.104.252.0/22 maxlen: 22 109.104.252.0/23 maxlen: 23 109.104.252.0/24 maxlen: 24 109.104.253.0/24 maxlen: 24 109.104.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e7:77:24:92:fe:12:00:23:65:5e:07:87:12:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d Validity Not Before: Jan 2 08:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e9bbec4404f5c15f192370590ce360a5bc1af2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:f8:cd:62:1d:b5:81:30:cc:f2:a9:40:7c: 42:88:5f:50:77:30:37:d9:82:e9:08:35:b0:ff:53: cb:d5:e5:08:29:c5:82:72:9c:0c:1f:1f:d0:23:f2: e8:58:33:26:f0:01:53:cd:d2:a8:b2:55:8e:40:23: 29:5d:a5:af:ae:e3:5d:25:9e:92:8c:d5:a9:31:e4: 7d:68:de:38:2e:c4:26:77:01:5f:b8:ce:9b:4e:1c: 35:90:45:77:fe:a0:81:58:90:e9:5d:21:7c:83:c5: cb:1b:85:5c:5f:5c:5f:9f:f0:6b:9f:ae:57:d0:15: 57:db:be:ba:0b:7a:90:31:0d:81:a4:d6:6a:d9:34: a4:80:e2:05:15:7d:53:fc:45:f2:fc:fe:77:da:d7: ca:89:4e:a8:2e:bd:18:97:0e:cc:40:94:39:e7:68: b5:a7:c3:0d:f6:7c:32:51:5f:52:ac:27:13:8c:99: fe:8a:8b:61:50:a4:44:17:64:4a:cc:8e:48:ad:b7: 54:75:5f:51:2c:39:c0:be:4f:10:36:12:17:6d:29: 57:6b:7d:fe:31:60:80:e6:36:e3:09:c4:af:d6:ae: 3c:6c:85:f7:9f:10:09:b3:df:69:91:ca:98:f1:e6: 6a:5c:07:bb:29:d7:d0:bc:64:87:8c:0b:81:f1:d0: d6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9B:BE:C4:40:4F:5C:15:F1:92:37:05:90:CE:36:0A:5B:C1:AF:2D X509v3 Authority Key Identifier: keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/npu-xEBPXBXxkjcFkM42ClvBry0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.104.252.0/22 Signature Algorithm: sha256WithRSAEncryption 11:b8:ca:cb:e4:cd:cd:fd:e2:5f:6d:7b:7a:6a:ce:b8:a2:89: ca:45:c6:49:e3:97:07:6c:b5:89:f0:20:2c:fe:f7:e0:ba:de: fb:46:21:69:44:a0:4d:82:7a:98:85:cf:2d:05:ba:02:2e:cf: fd:99:85:17:d0:68:d3:c9:7e:9f:88:c4:68:b3:85:2a:53:75: bd:e9:a0:67:c2:32:ae:92:12:ec:67:fc:4b:c6:fe:2e:4a:1e: e8:5f:ce:87:9c:17:a0:f9:2f:08:27:de:15:91:e6:80:38:e9: 5e:51:0f:7e:73:76:53:68:ce:ad:a9:77:3e:37:a3:5e:8a:82: 17:94:12:02:42:c4:d2:26:3b:17:b9:43:ae:a6:2b:1d:3f:7f: a5:38:81:29:ee:e8:63:2d:04:c6:4b:62:68:e6:15:61:52:4f: dc:7f:2b:12:33:58:9b:af:e4:20:a2:f1:f0:76:d8:93:c2:98: 47:f1:33:f2:48:cf:3c:1d:20:73:ec:0d:53:95:86:f0:f9:c6: 96:cc:3b:b2:7b:b5:16:72:07:43:c4:fa:d6:fa:72:75:9f:b2: d3:26:04:b6:55:57:56:7e:5b:61:f3:6b:3b:fc:38:84:c5:b1: 4f:39:38:a7:33:64:c8:76:e6:a4:b6:91:62:ee:a7:eb:6e:e9: ed:e0:66:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yed3JJL+EgAjZV4HhxJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzUwZDAyNGFmMDFmOGVhZjEyNTcxN2NhYTAzYWFmYWQx ODRlMWQwHhcNMjYwMTAyMDgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTliYmVjNDQwNGY1YzE1ZjE5MjM3MDU5MGNlMzYwYTViYzFhZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+z4zWIdtYEwzPKpQHxCiF9QdzA3 2YLpCDWw/1PL1eUIKcWCcpwMHx/QI/LoWDMm8AFTzdKoslWOQCMpXaWvruNdJZ6S jNWpMeR9aN44LsQmdwFfuM6bThw1kEV3/qCBWJDpXSF8g8XLG4VcX1xfn/Brn65X 0BVX2766C3qQMQ2BpNZq2TSkgOIFFX1T/EXy/P532tfKiU6oLr0Ylw7MQJQ552i1 p8MN9nwyUV9SrCcTjJn+iothUKREF2RKzI5IrbdUdV9RLDnAvk8QNhIXbSlXa33+ MWCA5jbjCcSv1q48bIX3nxAJs99pkcqY8eZqXAe7KdfQvGSHjAuB8dDWEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ6bvsRAT1wV8ZI3BZDONgpbwa8tMB8GA1UdIwQY MBaAFHo1DQJK8B+OrxJXF8qgOq+tGE4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTkt ZDAwM2U1NmZlNzUzLzEvbnB1LXhFQlBYQlh4a2pjRmtNNDJDbHZCcnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi83OTY2YWUtOWM4OC00M2U5LWI4OTktZDAwM2U1NmZlNzUz LzEvZWpVTkFrcndINDZ2RWxjWHlxQTZyNjBZVGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbWj8MA0G CSqGSIb3DQEBCwUAA4IBAQARuMrL5M3N/eJfbXt6as64oonKRcZJ45cHbLWJ8CAs /vfgut77RiFpRKBNgnqYhc8tBboCLs/9mYUX0GjTyX6fiMRos4UqU3W96aBnwjKu khLsZ/xLxv4uSh7oX86HnBeg+S8IJ94VkeaAOOleUQ9+c3ZTaM6tqXc+N6NeioIX lBICQsTSJjsXuUOupisdP3+lOIEp7uhjLQTGS2Jo5hVhUk/cfysSM1ibr+QgovHw dtiTwphH8TPySM88HSBz7A1TlYbw+caWzDuye7UWcgdDxPrW+nJ1n7LTJgS2VVdW flth82s7/DiExbFPOTinM2TIduaktpFi7qfrbunt4GaI -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:45 2026 by rpki-client