This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa
File: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (raw, json)
Hash identifier: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=
Subject key identifier: 9E:5C:0F:0A:A7:71:DA:53:93:56:0C:FC:95:92:F4:8B:55:4D:6D:83
Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial: 019B7D5BF4F35C9456F862424078BC448C1F
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa
Signing time: Fri 02 Jan 2026 06:18:56 +0000
ROA not before: Fri 02 Jan 2026 06:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60111
IP address blocks: 193.27.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:f4:f3:5c:94:56:f8:62:42:40:78:bc:44:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Validity
Not Before: Jan 2 06:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e5c0f0aa771da5393560cfc9592f48b554d6d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:34:f8:a9:88:7a:2d:80:12:e6:c2:41:38:
ab:79:53:65:59:cd:6c:f8:5f:5e:14:bb:f1:61:7d:
88:76:86:9a:cb:fa:8b:6a:46:2f:92:a4:54:5b:fc:
7d:d6:81:f9:e8:3e:76:0e:fa:ea:73:ae:c6:7c:a2:
7a:5a:35:cb:58:fa:f6:15:94:f2:59:90:28:83:2f:
3b:47:e0:00:9c:e9:ef:d0:91:6d:e4:43:bb:66:6a:
8f:65:7b:21:68:a8:30:20:c9:74:5a:0a:ad:f9:c0:
ee:20:24:33:71:67:4b:f9:0b:ca:ce:e2:20:e5:54:
45:35:2f:e1:6f:20:30:7b:ac:70:f2:b7:57:7e:c6:
6c:c9:8b:58:27:a6:cb:49:dd:cf:13:f7:ca:ac:c2:
b6:74:68:42:54:38:27:15:a9:f6:10:c3:08:be:3d:
b3:07:a0:fb:92:ea:a7:14:9e:91:b8:89:0f:99:5a:
7f:12:e3:7e:f5:97:ff:e2:3c:d2:a3:47:ba:e2:6b:
27:84:dd:93:14:81:a7:0c:5d:5d:d9:b9:fc:a0:b4:
86:03:9c:6e:e8:f5:76:46:78:d7:bb:f7:63:c5:64:
3e:af:d9:c3:c8:6f:87:82:dd:8a:44:99:63:a5:39:
f1:cd:0c:a5:c5:b0:5c:3c:c0:66:97:a7:6d:e2:b6:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:0F:0A:A7:71:DA:53:93:56:0C:FC:95:92:F4:8B:55:4D:6D:83
X509v3 Authority Key Identifier:
keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.44.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:9e:cf:9a:1c:d6:50:ac:73:ba:64:75:be:50:08:e0:be:29:
ef:b2:1b:1f:6c:c8:c8:b7:49:31:5b:8e:f8:cb:3d:c9:3a:8f:
a7:54:a3:28:41:1b:9e:d0:f8:4b:d5:00:a6:60:f5:2b:8d:28:
ee:75:42:37:a3:c8:6f:b4:ef:7e:80:d5:73:5f:8f:9a:fb:ed:
d2:91:d0:9d:c1:55:e5:3d:bb:35:eb:f7:63:44:37:b3:a8:cf:
65:24:eb:07:32:19:71:d4:e8:37:64:2c:09:87:4d:b8:f8:4d:
15:e5:d1:c3:fd:3d:30:46:d1:79:6b:09:21:2f:07:81:a9:a2:
c9:7a:27:91:ba:36:ce:c9:65:20:2b:7b:b6:d8:d7:67:98:5c:
68:34:0d:86:c3:04:fd:4b:0b:26:cd:6a:0d:c5:c6:c8:99:bc:
4a:84:c3:a5:f9:2e:bb:4a:01:8b:2b:f3:3d:89:1c:c9:f3:ba:
c6:ba:ef:c8:23:06:bd:a0:f6:c6:90:9b:96:76:7d:f7:04:15:
13:3b:df:ed:c7:3a:f9:59:09:96:92:20:04:1e:41:ce:1e:73:
85:ea:35:d2:4e:d1:17:5f:89:e7:a5:21:e0:7b:bc:97:88:ac:
21:40:66:4d:e4:94:0a:68:8e:9e:e9:d3:6d:18:9b:cd:8d:e5:
14:96:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:41 2026 by rpki-client