This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/neQNKLpCfakNl9D-xr1vgggjRHw.roa File: neQNKLpCfakNl9D-xr1vgggjRHw.roa (raw, json) Hash identifier: fXE9P5Vbl/ZNMcrpupVcZ1b+IXnjJzLD2Jyf3B1lxGU= Subject key identifier: 9D:E4:0D:28:BA:42:7D:A9:0D:97:D0:FE:C6:BD:6F:82:08:23:44:7C Certificate issuer: /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14 Certificate serial: 019B7DCA5D8F7933E811B378DC071F2EC423 Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/neQNKLpCfakNl9D-xr1vgggjRHw.roa Signing time: Fri 02 Jan 2026 08:19:32 +0000 ROA not before: Fri 02 Jan 2026 08:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20860 IP address blocks: 2a04:de40::/42 maxlen: 48 2a04:de40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5d:8f:79:33:e8:11:b3:78:dc:07:1f:2e:c4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14 Validity Not Before: Jan 2 08:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9de40d28ba427da90d97d0fec6bd6f820823447c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:1e:f9:62:8e:7a:55:47:7d:e1:b5:05:cf: bd:bd:4c:46:a1:b4:3b:51:6a:50:e5:14:a5:7f:ab: 23:2f:f1:be:a4:19:0e:1d:ee:86:d7:f1:07:6b:84: 61:42:c1:77:f3:1d:59:9c:da:62:64:a9:91:ce:7f: 10:5a:f6:58:2f:0a:3e:75:64:64:ff:75:28:97:64: 60:e7:e7:06:72:92:33:ff:da:90:f3:42:c0:24:6b: a6:af:a3:d7:ea:7c:fe:0e:b2:8e:06:23:07:5c:c7: 3d:03:f2:5e:47:d4:f6:d4:bf:c6:70:dc:13:8c:6d: 94:5b:62:50:04:c9:c6:8c:38:2e:b5:46:4c:6b:9e: ca:68:d1:95:ee:0f:e7:06:31:d2:85:c9:58:bc:b8: c4:67:bf:7b:5a:5f:39:4d:ac:e1:d1:7e:16:88:66: 41:38:0f:a0:e6:e7:02:5a:67:9c:18:d1:15:eb:51: f2:2a:9f:ff:25:5e:57:60:08:4f:03:70:16:9c:20: b7:ca:e1:99:fb:b6:a3:21:ce:90:43:d3:52:bb:dc: 16:6e:ea:8d:e1:0e:72:04:0f:f3:7c:b0:1e:b8:ea: 14:46:7e:08:e1:e2:8b:54:57:f4:81:27:d7:61:f5: e7:2d:e8:6f:64:3e:b8:63:77:be:6f:3b:68:a9:39: ca:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E4:0D:28:BA:42:7D:A9:0D:97:D0:FE:C6:BD:6F:82:08:23:44:7C X509v3 Authority Key Identifier: keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/neQNKLpCfakNl9D-xr1vgggjRHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:de40::/42 Signature Algorithm: sha256WithRSAEncryption 17:0a:70:7e:cf:0c:11:88:e6:35:36:5e:69:60:a0:f4:ff:d7: 7b:08:19:f0:b0:e8:00:be:81:da:34:b4:27:f8:fe:d0:2f:0a: 7f:58:b8:54:b5:d4:20:54:72:9d:ce:ff:5e:2d:e2:88:1d:73: 89:c8:87:7c:f9:76:bb:1a:1b:36:47:56:6d:9a:16:75:00:fd: 58:3d:03:91:d0:c4:e9:30:14:73:32:d0:fb:24:2c:b3:8e:db: 33:f1:c9:84:dd:b7:3a:ef:4e:b5:c7:56:e1:60:9d:01:6d:86: 6e:e8:a6:fc:d6:e4:43:56:bf:fe:d9:47:ec:25:53:98:f1:61: 98:3c:27:5b:de:ff:6f:6c:ac:a0:22:2c:50:ab:26:19:00:74: 50:cf:03:57:7f:b0:e9:20:32:c2:ae:fa:e6:4f:da:a4:af:3f: 28:8d:b4:01:90:67:82:02:a1:6b:3c:bf:79:1d:37:75:4a:99: db:99:6b:e3:6b:94:32:43:c2:59:a4:9b:9c:11:f1:a8:d9:31: b4:a5:52:31:03:7a:b3:d2:6d:5c:54:b5:3b:e5:06:74:56:fd: 24:1f:7c:87:e8:9b:b9:e6:0e:c3:39:fd:99:af:0d:1d:01:9e: d0:cf:a2:0f:24:e1:22:11:88:a2:cb:ff:73:81:71:cb:e1:c7: 9b:54:55:8b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yl2PeTPoEbN43AcfLsQjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZDA0OTVhY2Y5Yzc4YjkxODNiYmEwYzA1YjhhMjk5NzQz ODJiMTQwHhcNMjYwMTAyMDgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGU0MGQyOGJhNDI3ZGE5MGQ5N2QwZmVjNmJkNmY4MjA4MjM0NDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNEe+WKOelVHfeG1Bc+9vUxGobQ7 UWpQ5RSlf6sjL/G+pBkOHe6G1/EHa4RhQsF38x1ZnNpiZKmRzn8QWvZYLwo+dWRk /3Uol2Rg5+cGcpIz/9qQ80LAJGumr6PX6nz+DrKOBiMHXMc9A/JeR9T21L/GcNwT jG2UW2JQBMnGjDgutUZMa57KaNGV7g/nBjHShclYvLjEZ797Wl85Tazh0X4WiGZB OA+g5ucCWmecGNEV61HyKp//JV5XYAhPA3AWnCC3yuGZ+7ajIc6QQ9NSu9wWbuqN 4Q5yBA/zfLAeuOoURn4I4eKLVFf0gSfXYfXnLehvZD64Y3e+bztoqTnKowIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ3kDSi6Qn2pDZfQ/sa9b4III0R8MB8GA1UdIwQY MBaAFMDQSVrPnHi5GDu6DAW4opl0OCsUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd05CSldzLWNlTGtZTzdvTUJiaWltWFE0S3hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNjUzOTgtYThlYi00ZDE2LTljNGUt MzU4NGUyYWIxZjBkLzEvbmVRTktMcENmYWtObDlELXhyMXZnZ2dqUkh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jNjUzOTgtYThlYi00ZDE2LTljNGUtMzU4NGUyYWIxZjBk LzEvd05CSldzLWNlTGtZTzdvTUJiaWltWFE0S3hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKgTeQAAA MA0GCSqGSIb3DQEBCwUAA4IBAQAXCnB+zwwRiOY1Nl5pYKD0/9d7CBnwsOgAvoHa NLQn+P7QLwp/WLhUtdQgVHKdzv9eLeKIHXOJyId8+Xa7Ghs2R1ZtmhZ1AP1YPQOR 0MTpMBRzMtD7JCyzjtsz8cmE3bc67061x1bhYJ0BbYZu6Kb81uRDVr/+2UfsJVOY 8WGYPCdb3v9vbKygIixQqyYZAHRQzwNXf7DpIDLCrvrmT9qkrz8ojbQBkGeCAqFr PL95HTd1SpnbmWvja5QyQ8JZpJucEfGo2TG0pVIxA3qz0m1cVLU75QZ0Vv0kH3yH 6Ju55g7DOf2Zrw0dAZ7Qz6IPJOEiEYiiy/9zgXHL4cebVFWL -----END CERTIFICATE-----Generated at Mon Jan 19 17:32:55 2026 by rpki-client