This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/nehss--I5fmpoVCvb0Oo4Ab0mGQ.roa File: nehss--I5fmpoVCvb0Oo4Ab0mGQ.roa (raw, json) Hash identifier: QL6FWPRVEjAfMv/oZtTE230B/5xMRz1J6W0IaVZGkq0= Subject key identifier: 9D:E8:6C:B3:EF:88:E5:F9:A9:A1:50:AF:6F:43:A8:E0:06:F4:98:64 Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861 Certificate serial: 019B7910627857BE6978F3C1316B453CDE9E Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/nehss--I5fmpoVCvb0Oo4Ab0mGQ.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208985 IP address blocks: 193.46.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:62:78:57:be:69:78:f3:c1:31:6b:45:3c:de:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861 Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9de86cb3ef88e5f9a9a150af6f43a8e006f49864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:69:6b:a3:ea:38:a2:70:64:d2:93:a2:43: 09:5c:ed:9f:17:21:04:d5:e8:f4:91:a0:38:84:23: 64:60:bc:4a:f5:e4:3a:39:5d:69:8c:e6:6c:50:67: a0:2b:fc:8f:58:ea:aa:fb:b0:a7:5c:0d:cd:8a:8d: 67:e2:24:32:d0:15:d9:4d:cf:82:86:01:b2:0c:e6: 06:8f:93:09:25:22:c8:83:92:5c:14:24:f3:2a:45: b2:98:c1:5a:ac:82:66:10:ff:d9:4d:22:69:83:1b: f1:3f:ec:8c:24:70:17:32:ab:43:a9:2e:c7:28:2a: 19:cb:41:ae:6b:99:79:1a:b1:d1:5a:d5:2a:01:ec: 9f:43:dc:26:b7:8c:48:01:8d:30:7a:64:4b:f5:51: 65:ba:dd:4d:8a:66:a9:38:03:f0:50:60:cb:eb:be: 6a:75:b9:18:48:68:61:f1:bc:32:7b:32:51:84:9f: 24:28:80:5f:e4:40:59:89:b5:c0:3b:46:9e:62:19: 0c:eb:52:bd:16:4d:ad:a8:a4:43:21:aa:e9:cb:d1: a5:84:e7:84:35:28:d4:5b:db:05:7d:a3:1f:24:45: c7:95:02:31:4c:91:aa:65:c0:5e:2b:19:08:9f:06: a3:cc:7b:cd:6b:5f:bd:31:52:5a:a5:85:cd:45:df: 44:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E8:6C:B3:EF:88:E5:F9:A9:A1:50:AF:6F:43:A8:E0:06:F4:98:64 X509v3 Authority Key Identifier: keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/nehss--I5fmpoVCvb0Oo4Ab0mGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.36.0/23 Signature Algorithm: sha256WithRSAEncryption 31:1d:be:ca:c5:fc:05:3b:06:ae:11:d0:10:ef:49:95:13:4f: c7:e6:53:26:96:b3:9a:6d:15:71:28:32:0f:c7:2b:76:7a:85: 04:12:1c:4b:71:c3:ab:c7:16:01:ce:70:33:37:a6:99:0b:63: 86:c0:02:9d:9d:53:66:8c:3f:8a:1a:f1:ea:e7:01:ab:86:f0: 53:d0:89:7b:a3:2d:03:91:10:60:42:b9:19:0d:ae:a3:55:f0: a3:27:46:fb:08:10:e4:88:44:98:12:78:b4:89:e6:63:60:c7: 2d:9c:3e:bd:34:5d:f3:f8:cc:9d:7d:71:45:6d:c1:79:a3:37: e7:40:95:e2:ea:15:55:fd:e7:6c:52:a0:ed:c3:4b:b5:ec:6d: b1:09:24:7c:06:82:4f:43:78:f1:bd:97:61:ca:8b:2d:d6:d2: eb:f6:a9:c9:d8:36:0f:82:1d:c5:ad:da:cd:17:ff:ed:67:3f: 43:5a:b5:a1:ab:3a:8b:7a:92:9c:c9:d6:bf:5a:bd:a4:5c:eb: 32:82:ee:5d:ce:fc:f1:ab:6b:3d:f5:05:73:0b:c4:d4:f5:c2: e1:11:44:62:01:1e:dd:38:5c:e6:b0:67:13:9a:c4:05:29:72: dc:fd:99:44:5b:f0:26:75:1e:d6:a6:43:a2:bb:49:bd:e4:33: 5a:06:47:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGJ4V75pePPBMWtFPN6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjNmODI1OWIzMGVjMDM3MjJmOTQyMDM1YTk0ZTIwOWY4 ODI4NjEwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGU4NmNiM2VmODhlNWY5YTlhMTUwYWY2ZjQzYThlMDA2ZjQ5ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy9pa6PqOKJwZNKTokMJXO2fFyEE 1ej0kaA4hCNkYLxK9eQ6OV1pjOZsUGegK/yPWOqq+7CnXA3Nio1n4iQy0BXZTc+C hgGyDOYGj5MJJSLIg5JcFCTzKkWymMFarIJmEP/ZTSJpgxvxP+yMJHAXMqtDqS7H KCoZy0Gua5l5GrHRWtUqAeyfQ9wmt4xIAY0wemRL9VFlut1NimapOAPwUGDL675q dbkYSGhh8bwyezJRhJ8kKIBf5EBZibXAO0aeYhkM61K9Fk2tqKRDIarpy9GlhOeE NSjUW9sFfaMfJEXHlQIxTJGqZcBeKxkInwajzHvNa1+9MVJapYXNRd9ETQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ3obLPviOX5qaFQr29DqOAG9JhkMB8GA1UdIwQY MBaAFAPz+CWbMOwDci+UIDWpTiCfiChhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQt YWIxMzM1NmU1ZmVjLzEvbmVoc3MtLUk1Zm1wb1ZDdmIwT280QWIwbUdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQtYWIxMzM1NmU1ZmVj LzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwS4kMA0G CSqGSIb3DQEBCwUAA4IBAQAxHb7KxfwFOwauEdAQ70mVE0/H5lMmlrOabRVxKDIP xyt2eoUEEhxLccOrxxYBznAzN6aZC2OGwAKdnVNmjD+KGvHq5wGrhvBT0Il7oy0D kRBgQrkZDa6jVfCjJ0b7CBDkiESYEni0ieZjYMctnD69NF3z+MydfXFFbcF5ozfn QJXi6hVV/edsUqDtw0u17G2xCSR8BoJPQ3jxvZdhyost1tLr9qnJ2DYPgh3FrdrN F//tZz9DWrWhqzqLepKcyda/Wr2kXOsygu5dzvzxq2s99QVzC8TU9cLhEURiAR7d OFzmsGcTmsQFKXLc/ZlEW/AmdR7WpkOiu0m95DNaBkcA -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:13 2026 by rpki-client