This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/neAhPNqPa8HLmM-II12T6MhnRb0.roa File: neAhPNqPa8HLmM-II12T6MhnRb0.roa (raw, json) Hash identifier: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY= Subject key identifier: 9D:E0:21:3C:DA:8F:6B:C1:CB:98:CF:88:23:5D:93:E8:C8:67:45:BD Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B7BA3D793A9A818887523721724C1A2E6 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/neAhPNqPa8HLmM-II12T6MhnRb0.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10753 IP address blocks: 85.255.176.0/21 maxlen: 24 91.200.212.0/22 maxlen: 24 217.67.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d7:93:a9:a8:18:88:75:23:72:17:24:c1:a2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9de0213cda8f6bc1cb98cf88235d93e8c86745bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:80:ef:41:b7:e6:39:ce:9e:0c:6a:8b:b7: 3f:00:7c:67:17:33:cb:b1:95:c8:f5:09:7c:b6:c0: a2:ac:88:b9:ec:1c:30:8b:f1:a1:63:c2:ef:b8:8f: 87:ea:3a:1c:be:45:5b:9c:e9:02:85:38:c1:17:83: 36:3e:9b:c8:3f:08:c7:f0:ae:c1:b3:30:49:68:48: e3:46:12:98:1e:f3:f9:a5:72:21:5b:ab:70:89:48: 59:29:42:cb:58:a3:ae:44:b1:37:af:26:22:ff:cb: 43:88:d4:fb:4f:b3:2c:11:de:99:5a:63:18:cf:8d: b3:d5:f5:0f:f6:2f:2b:c4:37:bc:21:94:ac:99:f1: 26:d0:eb:12:51:d8:b0:50:0b:ec:21:80:47:a7:7d: 28:e0:c1:4a:f7:a8:62:d8:0b:2f:60:ca:66:34:ee: c6:d4:eb:86:35:d3:c1:c9:72:11:fb:a5:fd:3d:1e: d6:3d:be:45:2f:8c:b6:41:1b:0e:10:cd:13:0a:83: bc:88:26:40:c4:3d:fc:d8:f4:d3:74:5f:aa:85:8c: 67:de:d3:bb:ae:a2:3d:22:f9:14:ad:c5:ec:aa:e4: b6:c3:c5:52:44:7b:e5:0d:14:a8:cb:c3:46:1a:c6: b3:66:5e:24:3a:cd:7b:62:50:70:e8:e7:f3:1b:b2: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E0:21:3C:DA:8F:6B:C1:CB:98:CF:88:23:5D:93:E8:C8:67:45:BD X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/neAhPNqPa8HLmM-II12T6MhnRb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.176.0/21 91.200.212.0/22 217.67.68.0/22 Signature Algorithm: sha256WithRSAEncryption 52:77:e3:26:34:d8:04:22:8e:ff:90:34:9e:31:b6:12:cd:fc: f5:2b:76:7d:37:fe:94:21:78:d2:7b:96:fa:db:c8:3e:e9:75: 39:dc:1a:14:35:03:74:c1:b5:c7:c4:8b:06:a8:21:53:3e:39: 1a:fd:4f:d9:85:eb:69:cf:4f:22:33:01:01:16:48:73:de:ad: 78:3e:df:18:4a:f6:4e:cd:2c:b0:c5:a3:a2:1c:9f:1c:64:05: f4:95:16:fb:ac:ad:d2:dc:6c:f0:71:10:e3:80:93:78:2b:0e: 80:ab:65:c8:96:05:78:bb:66:d1:6c:0b:32:92:30:63:ef:85: f1:7a:8a:91:d5:eb:21:99:c8:7d:a3:75:bb:df:85:52:ea:bb: 38:2c:02:53:c7:7d:22:df:fc:a8:12:3b:47:56:16:21:82:e3: 3a:e5:37:53:bd:cf:ff:91:2f:e0:62:f0:56:80:72:95:fa:df: f2:c3:ad:99:28:e3:3b:09:ef:01:ce:48:f6:64:00:c8:c4:ed: a0:c4:4d:d3:22:5c:3d:15:d0:73:75:eb:e7:6b:3c:04:8f:21: e1:f5:1b:a0:90:d0:10:dd:e8:bb:6a:0b:65:6b:b1:c6:a1:fc: 0e:c4:b9:31:9f:8c:a7:ad:3a:5e:8e:4c:76:ec:5e:97:c5:fe: 9d:b2:69:f9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o9eTqagYiHUjchckwaLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGUwMjEzY2RhOGY2YmMxY2I5OGNmODgyMzVkOTNlOGM4Njc0NWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihmA70G35jnOngxqi7c/AHxnFzPL sZXI9Ql8tsCirIi57Bwwi/GhY8LvuI+H6jocvkVbnOkChTjBF4M2PpvIPwjH8K7B szBJaEjjRhKYHvP5pXIhW6twiUhZKULLWKOuRLE3ryYi/8tDiNT7T7MsEd6ZWmMY z42z1fUP9i8rxDe8IZSsmfEm0OsSUdiwUAvsIYBHp30o4MFK96hi2AsvYMpmNO7G 1OuGNdPByXIR+6X9PR7WPb5FL4y2QRsOEM0TCoO8iCZAxD382PTTdF+qhYxn3tO7 rqI9IvkUrcXsquS2w8VSRHvlDRSoy8NGGsazZl4kOs17YlBw6OfzG7LQMwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ3gITzaj2vBy5jPiCNdk+jIZ0W9MB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvbmVBaFBOcVBhOEhMbU0tSUkxMlQ2TWhuUmIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDVf+wAwQC W8jUAwQC2UNEMA0GCSqGSIb3DQEBCwUAA4IBAQBSd+MmNNgEIo7/kDSeMbYSzfz1 K3Z9N/6UIXjSe5b628g+6XU53BoUNQN0wbXHxIsGqCFTPjka/U/Zhetpz08iMwEB Fkhz3q14Pt8YSvZOzSywxaOiHJ8cZAX0lRb7rK3S3GzwcRDjgJN4Kw6Aq2XIlgV4 u2bRbAsykjBj74XxeoqR1eshmch9o3W734VS6rs4LAJTx30i3/yoEjtHVhYhguM6 5TdTvc//kS/gYvBWgHKV+t/yw62ZKOM7Ce8Bzkj2ZADIxO2gxE3TIlw9FdBzdevn azwEjyHh9RugkNAQ3ei7agtla7HGofwOxLkxn4ynrTpejkx27F6Xxf6dsmn5 -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:04 2026 by rpki-client