This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/NlDeDV4WzeoUvKdIW3pq1ndiD6Q.roa File: NlDeDV4WzeoUvKdIW3pq1ndiD6Q.roa (raw, json) Hash identifier: gXt+Eq5uxoOgBwvqy+Kxf+ntZAhbrgykVlmEcwvKBeA= Subject key identifier: 36:50:DE:0D:5E:16:CD:EA:14:BC:A7:48:5B:7A:6A:D6:77:62:0F:A4 Certificate issuer: /CN=4d16240897b01305681c9425fe523f58fab27415 Certificate serial: 019B77C6AFEEEA2682199DCD8B4E71E2C168 Authority key identifier: 4D:16:24:08:97:B0:13:05:68:1C:94:25:FE:52:3F:58:FA:B2:74:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/NlDeDV4WzeoUvKdIW3pq1ndiD6Q.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20963 IP address blocks: 46.227.112.0/21 maxlen: 21 80.77.128.0/20 maxlen: 20 81.25.176.0/20 maxlen: 20 185.88.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:af:ee:ea:26:82:19:9d:cd:8b:4e:71:e2:c1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d16240897b01305681c9425fe523f58fab27415 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3650de0d5e16cdea14bca7485b7a6ad677620fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:18:96:8c:02:65:29:37:f6:3d:88:69:d0:71: c0:98:fd:8e:55:e2:bb:b5:43:3f:5d:43:47:8b:8c: 1c:3c:94:b6:4e:6e:c8:42:d5:f2:f7:c9:0a:27:4a: 22:02:dc:7e:73:9c:39:f3:a4:9e:33:5a:f9:4d:e8: 2b:8e:b3:38:16:2c:9f:97:b0:50:72:c0:08:46:a0: 8c:11:35:69:49:54:14:c2:c2:48:e4:2b:7b:e5:b3: 34:27:a6:ff:0f:53:b1:29:02:a2:d1:46:3c:28:cc: 43:39:f5:05:ca:ff:da:74:8c:18:74:30:b5:45:5b: 62:4e:7e:8b:d9:a0:47:b2:3e:3f:5a:44:60:30:b3: 12:b4:dc:3f:21:ce:13:32:d0:57:92:64:60:67:7a: 52:a2:47:a2:90:72:ea:72:ce:17:77:d6:5b:fe:67: b5:06:21:a9:91:8a:67:78:e0:84:9b:1a:7f:a7:67: 1b:b1:8c:4e:67:cc:97:98:ac:f7:b7:2a:1e:07:7b: d9:66:70:7a:10:39:d2:10:c9:17:a2:53:26:ca:38: 54:88:07:72:e9:b5:b9:ce:6f:8d:cb:cc:98:97:a9: ce:9f:cd:f3:48:1c:d2:e9:98:c5:9f:a8:9f:9d:59: 9b:62:09:dd:5a:1e:ce:5b:ba:f7:e3:e6:e8:d1:8c: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:50:DE:0D:5E:16:CD:EA:14:BC:A7:48:5B:7A:6A:D6:77:62:0F:A4 X509v3 Authority Key Identifier: keyid:4D:16:24:08:97:B0:13:05:68:1C:94:25:FE:52:3F:58:FA:B2:74:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/NlDeDV4WzeoUvKdIW3pq1ndiD6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.112.0/21 80.77.128.0/20 81.25.176.0/20 185.88.228.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:4c:7f:b6:bd:a8:12:dd:40:51:d3:ae:82:56:7c:e4:31:d1: 4a:1a:de:d7:67:79:80:37:25:49:5e:e7:51:a4:26:4e:b3:c3: e0:47:10:c8:ae:a7:97:30:25:ed:7d:40:e4:00:cf:6f:c9:20: 58:89:6b:dc:5e:fd:3b:13:2c:a6:14:da:74:19:ae:db:aa:c6: 59:f8:c2:b7:e8:2c:38:c4:0d:d1:c7:7d:23:6e:e2:e0:a6:d8: 67:ad:06:58:96:68:dc:47:79:9e:8c:16:27:79:4d:d1:ed:c2: 00:1f:df:07:27:35:ff:6d:6a:11:d8:26:fa:db:01:d1:d5:61: 73:fa:9d:5e:95:ea:a6:76:9d:2e:0a:48:d2:8b:08:df:88:d1: f0:b1:58:5b:18:25:eb:5f:75:7a:99:41:7b:38:cc:34:ec:8b: af:18:5c:9e:e1:e5:d0:77:5b:07:f9:4a:ac:fc:7b:2a:10:80: 77:c8:5b:73:71:5a:6f:7e:a1:c9:d0:4c:50:80:5d:00:3c:42: 24:1f:e3:16:83:02:b8:db:51:c9:d8:8e:85:a7:21:c1:82:b5: 14:40:43:90:a6:b2:49:ed:96:63:68:3e:6e:d9:5c:01:c0:6b: fe:7c:dc:c4:6f:bf:1c:ad:09:6e:8c:6c:69:1c:7e:3a:69:75: 5e:c4:7d:62 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xq/u6iaCGZ3Ni05x4sFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTYyNDA4OTdiMDEzMDU2ODFjOTQyNWZlNTIzZjU4ZmFi Mjc0MTUwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjUwZGUwZDVlMTZjZGVhMTRiY2E3NDg1YjdhNmFkNjc3NjIwZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hiWjAJlKTf2PYhp0HHAmP2OVeK7 tUM/XUNHi4wcPJS2Tm7IQtXy98kKJ0oiAtx+c5w586SeM1r5TegrjrM4Fiyfl7BQ csAIRqCMETVpSVQUwsJI5Ct75bM0J6b/D1OxKQKi0UY8KMxDOfUFyv/adIwYdDC1 RVtiTn6L2aBHsj4/WkRgMLMStNw/Ic4TMtBXkmRgZ3pSokeikHLqcs4Xd9Zb/me1 BiGpkYpneOCEmxp/p2cbsYxOZ8yXmKz3tyoeB3vZZnB6EDnSEMkXolMmyjhUiAdy 6bW5zm+Ny8yYl6nOn83zSBzS6ZjFn6ifnVmbYgndWh7OW7r34+bo0YyelQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDZQ3g1eFs3qFLynSFt6atZ3Yg+kMB8GA1UdIwQY MBaAFE0WJAiXsBMFaByUJf5SP1j6snQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJZa0NKZXdFd1ZvSEpRbF9sSV9XUHF5ZEJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mYzQ4MWEtYWIwMS00ZjgyLTllNmUt ZWIwMmYzZDNmNDBjLzEvTmxEZURWNFd6ZW9VdktkSVczcHExbmRpRDZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mYzQ4MWEtYWIwMS00ZjgyLTllNmUtZWIwMmYzZDNmNDBj LzEvVFJZa0NKZXdFd1ZvSEpRbF9sSV9XUHF5ZEJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDLuNwAwQE UE2AAwQEURmwAwQCuVjkMA0GCSqGSIb3DQEBCwUAA4IBAQBOTH+2vagS3UBR066C VnzkMdFKGt7XZ3mANyVJXudRpCZOs8PgRxDIrqeXMCXtfUDkAM9vySBYiWvcXv07 EyymFNp0Ga7bqsZZ+MK36Cw4xA3Rx30jbuLgpthnrQZYlmjcR3mejBYneU3R7cIA H98HJzX/bWoR2Cb62wHR1WFz+p1eleqmdp0uCkjSiwjfiNHwsVhbGCXrX3V6mUF7 OMw07IuvGFye4eXQd1sH+Uqs/HsqEIB3yFtzcVpvfqHJ0ExQgF0APEIkH+MWgwK4 21HJ2I6FpyHBgrUUQEOQprJJ7ZZjaD5u2VwBwGv+fNzEb78crQlujGxpHH46aXVe xH1i -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:58 2026 by rpki-client