This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/nL_aguQpzIBZS3kFzk0GEh4Kv14.roa File: nL_aguQpzIBZS3kFzk0GEh4Kv14.roa (raw, json) Hash identifier: gVKNRs2PmMSobccBYIWx5t0HLiyk7RnkUIOuOgpaP2A= Subject key identifier: 9C:BF:DA:82:E4:29:CC:80:59:4B:79:05:CE:4D:06:12:1E:0A:BF:5E Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0 Certificate serial: 019B79ED1F2AE235AF0277CAEC809613F559 Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/nL_aguQpzIBZS3kFzk0GEh4Kv14.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58209 IP address blocks: 194.117.92.0/24 maxlen: 24 217.18.81.0/24 maxlen: 24 2a0e:5e40::/31 maxlen: 31 2a0e:5e42::/31 maxlen: 31 2a0e:5e47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1f:2a:e2:35:af:02:77:ca:ec:80:96:13:f5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cbfda82e429cc80594b7905ce4d06121e0abf5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fb:ee:dd:f1:45:e5:8e:d5:3f:a9:b0:dd:18: f4:95:a3:2d:83:77:3d:30:d2:2a:05:d6:9d:2d:3e: be:84:57:d3:1b:76:dc:77:e2:9e:3b:e4:48:34:d9: 82:c2:be:7f:c2:95:6e:be:60:64:b7:13:62:5b:77: b6:3c:5a:e6:02:91:f0:38:ee:9e:a6:ec:87:74:a0: c2:bd:fb:c0:5c:86:e0:eb:8d:62:e0:2c:31:81:65: d2:b3:37:1b:a6:10:60:25:4f:9f:07:73:04:a2:7a: ae:9c:e6:b9:5f:a8:5a:62:95:5a:33:61:8e:3e:74: 21:4e:b7:42:2d:ed:e8:ce:44:6e:92:16:2b:b5:fb: de:13:07:86:08:12:03:1b:84:d9:20:83:27:2a:9b: a4:91:07:24:d8:ba:45:69:bd:c3:94:83:76:f0:05: f6:b2:59:37:d1:a0:79:e9:69:ad:0e:48:6c:97:d4: 7f:36:65:93:19:24:da:d0:01:28:36:20:26:33:44: 85:f6:40:0f:e2:c9:ab:dd:b1:93:60:46:80:5a:f9: b5:b6:5f:19:40:c7:ab:d9:b7:b1:c9:59:33:51:a5: cb:1d:22:61:f6:df:45:4c:7b:cc:f7:88:dc:c3:99: 2a:66:ba:e2:7d:f6:f0:39:64:4b:16:fa:02:89:01: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BF:DA:82:E4:29:CC:80:59:4B:79:05:CE:4D:06:12:1E:0A:BF:5E X509v3 Authority Key Identifier: keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/nL_aguQpzIBZS3kFzk0GEh4Kv14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.92.0/24 217.18.81.0/24 IPv6: 2a0e:5e40::/30 2a0e:5e47::/32 Signature Algorithm: sha256WithRSAEncryption 2c:68:e0:b4:bc:2b:07:49:9c:57:35:23:62:b3:44:ac:2a:1f: f0:81:1e:71:13:51:f0:d3:c3:a3:75:92:6e:72:9f:d2:c1:f7: 0e:fa:25:ef:57:d2:16:37:54:f6:3b:63:33:1f:af:a7:50:fd: aa:8f:16:fc:f3:47:73:f7:8e:76:42:ec:f6:1b:f6:52:cf:06: bd:f3:4e:5b:72:72:5f:dc:34:5c:bd:81:23:6e:ea:62:8f:75: 4c:94:ec:84:fa:98:d0:f2:73:fe:4a:cb:36:9d:af:54:a6:62: 86:a9:00:0e:15:9a:0c:2c:6b:30:de:6b:93:26:47:d0:de:26: 28:1e:22:45:0a:de:ee:31:44:93:61:73:64:aa:0c:4d:c0:8e: 47:16:23:53:da:00:e3:b4:61:74:7d:73:5c:04:73:c0:e3:f6: b3:76:95:ad:9a:1a:78:7a:a1:49:ff:d2:5d:29:61:04:8d:0e: 71:43:bf:da:b2:f8:d3:4e:d7:39:7e:79:ac:e2:59:cd:ee:8d: d7:d5:07:8d:03:01:5d:bc:11:db:2e:86:78:d5:36:c0:1b:4f: 0e:a3:2c:41:94:0c:b4:65:2a:55:04:7b:82:b0:a5:ff:37:0f: 15:84:16:18:c3:bd:41:c1:e0:33:53:7e:09:a8:4a:54:3b:46: a7:34:d0:5a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt57R8q4jWvAnfK7ICWE/VZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDNkMjI0NzhlYzg2Yjg1NDRkZmI5OGFkZGVhYzIyNmY4 ZjA3ZTAwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2JmZGE4MmU0MjljYzgwNTk0Yjc5MDVjZTRkMDYxMjFlMGFiZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/vu3fFF5Y7VP6mw3Rj0laMtg3c9 MNIqBdadLT6+hFfTG3bcd+KeO+RINNmCwr5/wpVuvmBktxNiW3e2PFrmApHwOO6e puyHdKDCvfvAXIbg641i4CwxgWXSszcbphBgJU+fB3MEonqunOa5X6haYpVaM2GO PnQhTrdCLe3ozkRukhYrtfveEweGCBIDG4TZIIMnKpukkQck2LpFab3DlIN28AX2 slk30aB56WmtDkhsl9R/NmWTGSTa0AEoNiAmM0SF9kAP4smr3bGTYEaAWvm1tl8Z QMer2bexyVkzUaXLHSJh9t9FTHvM94jcw5kqZrriffbwOWRLFvoCiQFEuwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJy/2oLkKcyAWUt5Bc5NBhIeCr9eMB8GA1UdIwQY MBaAFGwD0iR47Ia4VE37mK3erCJvjwfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iODQ0ZjYtOWQxOC00ODQzLThhYTIt ZWI2ZWU1MzU2NjEzLzEvbkxfYWd1UXB6SUJaUzNrRnprMEdFaDRLdjE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9iODQ0ZjYtOWQxOC00ODQzLThhYTItZWI2ZWU1MzU2NjEz LzEvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAwnVcAwQA 2RJRMBQEAgACMA4DBQIqDl5AAwUAKg5eRzANBgkqhkiG9w0BAQsFAAOCAQEALGjg tLwrB0mcVzUjYrNErCof8IEecRNR8NPDo3WSbnKf0sH3Dvol71fSFjdU9jtjMx+v p1D9qo8W/PNHc/eOdkLs9hv2Us8GvfNOW3JyX9w0XL2BI27qYo91TJTshPqY0PJz /krLNp2vVKZihqkADhWaDCxrMN5rkyZH0N4mKB4iRQre7jFEk2FzZKoMTcCORxYj U9oA47RhdH1zXARzwOP2s3aVrZoaeHqhSf/SXSlhBI0OcUO/2rL4007XOX55rOJZ ze6N19UHjQMBXbwR2y6GeNU2wBtPDqMsQZQMtGUqVQR7grCl/zcPFYQWGMO9QcHg M1N+CahKVDtGpzTQWg== -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:55 2026 by rpki-client