This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/9-NL_3pPKwjoT10Tknd1fywwh6c.roa File: 9-NL_3pPKwjoT10Tknd1fywwh6c.roa (raw, json) Hash identifier: 2AUz3UyBm+hNCRPuqcyUa4lcxCahpjHfjKeNNTVRWhI= Subject key identifier: F7:E3:4B:FF:7A:4F:2B:08:E8:4F:5D:13:92:77:75:7F:2C:30:87:A7 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C80966490C7A1CFC2CDEE9C3031828D Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/9-NL_3pPKwjoT10Tknd1fywwh6c.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39531 IP address blocks: 93.115.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:96:64:90:c7:a1:cf:c2:cd:ee:9c:30:31:82:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7e34bff7a4f2b08e84f5d139277757f2c3087a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:88:ba:26:d4:d0:9a:b0:25:56:8e:23:bc:00: 88:41:71:e1:6f:4a:92:17:69:64:4a:23:bf:ac:bc: da:27:88:7e:d4:2d:44:60:33:7c:ff:85:54:15:f6: 9c:fe:3b:21:be:a0:bf:56:f5:16:70:62:f4:92:14: 4f:49:70:b9:50:67:aa:b2:d1:02:24:3d:e4:80:68: b6:aa:44:99:4c:3c:58:19:c4:64:a5:ec:09:1e:84: cd:22:b5:0f:e9:45:3f:75:da:29:6f:2a:e5:dc:a0: aa:a8:48:b6:7b:10:58:ea:12:dc:49:ed:64:94:d7: 56:6f:c2:d4:a9:80:12:db:6c:5d:f5:a5:ee:84:31: 05:32:88:09:8f:6c:e1:7e:62:f0:9f:40:e1:7e:f9: 2c:b8:f7:8b:85:e9:bd:bb:b0:4f:6c:af:11:5b:c8: 44:be:47:12:d4:c6:8f:be:59:ae:8b:b3:bc:73:54: 3f:0c:e0:5a:8d:5c:25:21:05:c1:a9:80:bb:b9:18: bb:ef:cc:d3:af:6e:26:27:1a:15:0d:9c:60:d5:77: 86:9d:49:10:b3:de:bc:ee:ba:ef:c0:26:ac:4d:9d: 99:09:fe:61:7d:7e:cc:9c:81:fe:95:c7:59:fd:b6: 04:5d:60:0b:c2:71:39:16:85:cb:41:f9:3f:d6:a4: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E3:4B:FF:7A:4F:2B:08:E8:4F:5D:13:92:77:75:7F:2C:30:87:A7 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/9-NL_3pPKwjoT10Tknd1fywwh6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.115.174.0/24 Signature Algorithm: sha256WithRSAEncryption 46:67:37:a1:cc:3e:5a:9c:08:cb:90:32:28:d6:03:22:c1:c2: 12:ee:39:45:33:1b:9a:8b:84:57:50:7d:9f:3f:ef:df:91:7e: f8:17:c4:d5:ed:1d:5e:9b:0b:37:80:b8:5c:ac:4c:4d:2a:c0: 98:ed:e4:b0:32:4b:2e:d7:d3:a2:f8:bd:78:ff:06:48:14:53: 66:20:78:5b:56:43:01:c0:09:e4:39:8b:39:21:f3:f8:d7:e7: d4:43:6b:e9:13:1b:70:bd:3b:61:c6:07:18:22:66:64:1a:32: 0e:56:f2:27:e0:07:03:0a:cb:14:48:e3:96:e9:19:2e:f0:48: 46:ad:09:4f:d9:4d:bf:6c:2b:4e:44:8a:e5:0f:a5:4c:79:06: ec:68:af:87:67:d2:d4:52:55:52:54:fa:57:96:43:fa:0f:ac: 94:63:9e:24:5e:f5:2a:ee:22:94:e5:3d:a0:25:52:52:f0:3e: 21:e7:6a:de:43:91:e9:9f:6b:ca:68:5d:4c:23:c7:3a:3b:da: ec:f4:d5:80:ea:61:72:73:4a:bc:27:c5:0f:e7:13:48:87:72: 73:77:f8:3a:ca:a3:1b:77:eb:7f:2b:7d:bc:46:b3:3c:ff:e8: 8b:18:84:11:b7:a3:dd:64:06:3b:eb:c8:06:8d:77:2c:58:e3: 5e:11:9a:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJZkkMehz8LN7pwwMYKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2UzNGJmZjdhNGYyYjA4ZTg0ZjVkMTM5Mjc3NzU3ZjJjMzA4N2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYi6JtTQmrAlVo4jvACIQXHhb0qS F2lkSiO/rLzaJ4h+1C1EYDN8/4VUFfac/jshvqC/VvUWcGL0khRPSXC5UGeqstEC JD3kgGi2qkSZTDxYGcRkpewJHoTNIrUP6UU/ddopbyrl3KCqqEi2exBY6hLcSe1k lNdWb8LUqYAS22xd9aXuhDEFMogJj2zhfmLwn0DhfvksuPeLhem9u7BPbK8RW8hE vkcS1MaPvlmui7O8c1Q/DOBajVwlIQXBqYC7uRi778zTr24mJxoVDZxg1XeGnUkQ s9687rrvwCasTZ2ZCf5hfX7MnIH+lcdZ/bYEXWALwnE5FoXLQfk/1qRP4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPfjS/96TysI6E9dE5J3dX8sMIenMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvOS1OTF8zcFBLd2pvVDEwVGtuZDFmeXd3aDZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXOuMA0G CSqGSIb3DQEBCwUAA4IBAQBGZzehzD5anAjLkDIo1gMiwcIS7jlFMxuai4RXUH2f P+/fkX74F8TV7R1emws3gLhcrExNKsCY7eSwMksu19Oi+L14/wZIFFNmIHhbVkMB wAnkOYs5IfP41+fUQ2vpExtwvTthxgcYImZkGjIOVvIn4AcDCssUSOOW6Rku8EhG rQlP2U2/bCtORIrlD6VMeQbsaK+HZ9LUUlVSVPpXlkP6D6yUY54kXvUq7iKU5T2g JVJS8D4h52reQ5Hpn2vKaF1MI8c6O9rs9NWA6mFyc0q8J8UP5xNIh3Jzd/g6yqMb d+t/K328RrM8/+iLGIQRt6PdZAY768gGjXcsWONeEZrU -----END CERTIFICATE-----Generated at Wed Jan 21 10:50:01 2026 by rpki-client