This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/nlfrfn24osfntQHsu8evHx4ar1o.roa File: nlfrfn24osfntQHsu8evHx4ar1o.roa (raw, json) Hash identifier: Q2Oonu/mgcyQ29viLLMKjLOBF64WUB0mkAHoMi7xoGU= Subject key identifier: 9E:57:EB:7E:7D:B8:A2:C7:E7:B5:01:EC:BB:C7:AF:1F:1E:1A:AF:5A Certificate issuer: /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4 Certificate serial: 019B7E37F6585309EE70EF315BF60BCBCFCF Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/nlfrfn24osfntQHsu8evHx4ar1o.roa Signing time: Fri 02 Jan 2026 10:19:15 +0000 ROA not before: Fri 02 Jan 2026 10:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205687 IP address blocks: 185.209.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f6:58:53:09:ee:70:ef:31:5b:f6:0b:cb:cf:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4 Validity Not Before: Jan 2 10:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e57eb7e7db8a2c7e7b501ecbbc7af1f1e1aaf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:d0:bc:4f:bc:a0:cb:2a:04:88:f2:c1:c0: fb:19:b0:32:1b:79:51:19:12:41:46:27:75:ff:31: db:5f:31:45:7d:cb:8a:37:4c:99:ed:f8:01:ab:bb: 6e:32:1e:bf:dd:0e:11:56:18:37:59:8f:cf:66:e2: 1e:e9:35:bb:9f:20:f3:92:d5:ae:3d:e8:dc:1e:9d: 25:b6:43:66:ef:99:2e:2d:d0:18:8e:82:bb:33:d0: 67:06:93:4b:90:9e:f1:34:f3:88:0e:47:ed:b1:45: 17:39:58:ab:05:b6:94:aa:f9:fb:99:99:68:0f:52: f6:49:8c:6a:cf:86:d6:61:77:48:26:2f:2b:30:8e: 36:e6:1d:f4:e4:a8:fd:3d:bc:67:7f:b1:93:ff:ca: 9b:90:82:e0:8a:17:b1:ad:4a:f0:0f:2a:2e:53:c8: 80:c9:64:31:bd:1c:6f:a2:c7:e0:d6:f1:01:ce:1c: cd:78:35:7e:af:b2:c5:7e:e1:de:9c:8d:62:8f:d7: 5a:c9:0c:44:38:14:78:49:b4:da:46:48:d3:5e:d6: 85:06:50:13:b8:32:55:d5:a0:08:47:73:ca:5b:dc: d5:ce:4b:62:5d:c3:a6:83:8a:33:77:27:80:98:b4: d1:c5:f7:37:8a:64:a8:10:ff:fe:f8:42:2b:72:a7: eb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:EB:7E:7D:B8:A2:C7:E7:B5:01:EC:BB:C7:AF:1F:1E:1A:AF:5A X509v3 Authority Key Identifier: keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/nlfrfn24osfntQHsu8evHx4ar1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.172.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:a9:d0:e7:93:4a:c6:5c:69:50:5c:78:f5:55:01:f5:d6:56: 2d:e3:fa:bc:b0:f8:cf:49:4b:f5:28:de:3a:62:f8:3d:48:5f: 78:f7:e0:69:46:a2:3a:68:62:ef:38:e3:88:79:09:ac:82:42: 6e:aa:bb:2a:67:fc:61:86:60:fd:f0:96:b2:6c:f9:b8:19:d4: 93:2e:2d:af:53:2b:3b:97:69:42:43:dd:ab:3e:f5:ae:ad:41: 24:4f:10:e6:df:44:e7:e1:e0:9f:7a:87:d9:97:b0:0a:69:8d: ea:c7:f7:2d:80:eb:c4:1c:e8:65:b8:64:2f:6c:6b:f6:b7:42: 63:c9:79:3a:ea:41:d6:7c:13:fb:74:ff:ba:de:d1:9d:41:a1: 8d:24:59:a8:b6:c8:eb:39:ab:5f:1a:53:45:89:d2:7e:81:ac: 9a:ef:05:9c:ae:ce:4a:71:63:7f:a1:eb:14:0f:36:52:9a:0c: d0:9a:a1:2a:b8:e2:dd:5e:88:36:9d:ec:d6:8c:34:bf:75:0c: 74:ff:bd:65:6e:c6:af:e2:7b:a2:ae:e3:e2:b1:c6:45:c0:02: 13:fe:e2:aa:fc:fc:e4:cc:7f:61:5a:e7:ee:1a:8b:6a:86:fc: 8d:63:7f:b2:7a:ad:b4:e2:16:de:ac:70:68:1f:6e:e2:dc:0f: c5:b7:aa:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/ZYUwnucO8xW/YLy8/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMWE5ZjcyOTM4OGMxNjliYWNjMWNiYWY5OGUyMzZkNGU4 MDhhYjQwHhcNMjYwMTAyMTAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTU3ZWI3ZTdkYjhhMmM3ZTdiNTAxZWNiYmM3YWYxZjFlMWFhZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj7QvE+8oMsqBIjywcD7GbAyG3lR GRJBRid1/zHbXzFFfcuKN0yZ7fgBq7tuMh6/3Q4RVhg3WY/PZuIe6TW7nyDzktWu PejcHp0ltkNm75kuLdAYjoK7M9BnBpNLkJ7xNPOIDkftsUUXOVirBbaUqvn7mZlo D1L2SYxqz4bWYXdIJi8rMI425h305Kj9Pbxnf7GT/8qbkILgihexrUrwDyouU8iA yWQxvRxvosfg1vEBzhzNeDV+r7LFfuHenI1ij9dayQxEOBR4SbTaRkjTXtaFBlAT uDJV1aAIR3PKW9zVzktiXcOmg4ozdyeAmLTRxfc3imSoEP/++EIrcqfrwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ5X6359uKLH57UB7LvHrx8eGq9aMB8GA1UdIwQY MBaAFMwan3KTiMFpuswcuvmOI21OgIq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEt N2ZmYzRmNDAzNjZhLzEvbmxmcmZuMjRvc2ZudFFIc3U4ZXZIeDRhcjFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEtN2ZmYzRmNDAzNjZh LzEvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudGsMA0G CSqGSIb3DQEBCwUAA4IBAQAOqdDnk0rGXGlQXHj1VQH11lYt4/q8sPjPSUv1KN46 Yvg9SF949+BpRqI6aGLvOOOIeQmsgkJuqrsqZ/xhhmD98JaybPm4GdSTLi2vUys7 l2lCQ92rPvWurUEkTxDm30Tn4eCfeofZl7AKaY3qx/ctgOvEHOhluGQvbGv2t0Jj yXk66kHWfBP7dP+63tGdQaGNJFmotsjrOatfGlNFidJ+gaya7wWcrs5KcWN/oesU DzZSmgzQmqEquOLdXog2nezWjDS/dQx0/71lbsav4nuiruPiscZFwAIT/uKq/Pzk zH9hWufuGotqhvyNY3+yeq204hberHBoH27i3A/Ft6r/ -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:56 2026 by rpki-client