This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/NRE_ExP25AUx8aw3isiH4EnLbWo.roa File: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (raw, json) Hash identifier: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE= Subject key identifier: 35:11:3F:13:13:F6:E4:05:31:F1:AC:37:8A:C8:87:E0:49:CB:6D:6A Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 019B79ECBD68F61C9BA7AE3A3586171147E9 Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/NRE_ExP25AUx8aw3isiH4EnLbWo.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20115 IP address blocks: 37.143.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bd:68:f6:1c:9b:a7:ae:3a:35:86:17:11:47:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35113f1313f6e40531f1ac378ac887e049cb6d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:df:3b:cf:78:f8:c8:bd:6d:1e:0d:21:74: cd:6b:7a:a6:b4:7e:66:75:c9:d0:d7:4a:23:ab:69: 29:46:18:82:45:ee:5e:22:49:30:58:86:db:cb:54: 46:55:07:cb:19:f6:4b:b6:81:25:c4:1b:e0:44:79: 10:0f:65:4b:f4:38:74:5c:b0:55:83:1b:bb:ec:04: b1:ed:87:c5:20:99:f4:70:10:26:52:88:7d:54:5a: 52:63:60:37:56:d2:be:b7:b6:62:5f:9b:63:7e:2b: 96:3c:a6:8d:d4:25:c5:dc:41:0b:08:ab:db:30:35: 81:31:e0:97:3e:a6:19:35:c6:14:3a:4b:c6:40:d6: 5c:28:14:93:35:99:0a:87:41:6b:8e:42:91:85:c9: 96:fd:a5:64:6f:7c:fc:15:76:76:3c:15:f0:1b:11: 48:35:fe:59:50:33:ee:09:f6:c2:d6:65:6d:df:e5: 7d:df:b5:0d:47:e9:6d:91:7a:fd:23:61:0a:52:e6: 86:2f:ef:b2:e7:e2:89:5c:b2:2b:5a:e4:d8:f2:29: 51:81:a7:ae:e0:63:7d:4e:52:7e:7d:8b:72:68:4a: 1c:f2:e3:ab:8f:9a:f8:75:aa:d8:e0:eb:63:d6:1a: 1c:71:f1:ee:4a:65:16:ef:57:b0:6e:aa:cd:28:59: 8e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:11:3F:13:13:F6:E4:05:31:F1:AC:37:8A:C8:87:E0:49:CB:6D:6A X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/NRE_ExP25AUx8aw3isiH4EnLbWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.0.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:2f:86:29:b0:34:4e:b4:2a:24:58:ed:25:2a:35:17:2f:57: e0:7f:bb:7c:77:3f:ad:e9:e8:8d:5e:40:18:4e:c8:88:d2:f1: e1:61:e0:7c:06:69:ee:72:01:4c:50:14:5b:9f:1c:46:70:5b: f5:4a:10:6c:67:c5:7c:69:57:c9:d2:0d:bb:d9:c9:bf:c0:86: 60:c7:d4:93:70:aa:74:52:ef:43:d9:fd:9f:2a:83:d9:70:f0: fe:73:c3:33:6a:5c:ef:e7:88:d8:d5:3e:dc:d9:69:9e:48:31: 16:2c:97:e3:87:56:13:ed:34:77:a6:3c:05:ad:13:3d:5e:fa: ac:1e:a1:a7:b1:1a:4a:9f:e3:fc:df:0b:9d:86:9c:96:ea:00: d1:37:3e:26:9f:32:ba:68:37:e6:84:7d:b3:b6:88:34:9b:48: 1f:5e:20:1a:44:e8:ff:80:4a:57:d8:b6:2c:79:eb:f7:9b:40: e3:38:36:a2:4f:f9:35:11:f2:5b:e6:0f:75:b5:f4:40:be:db: 8c:e6:ec:9d:38:b7:bb:49:83:2a:c1:65:24:57:1a:f1:c1:f4: 3a:75:52:f6:ba:d3:d4:6d:15:13:68:e4:55:cf:14:b6:37:78: 92:a9:2c:b6:a7:b4:db:54:45:26:29:39:48:c6:97:e8:f3:4b: 88:fa:3d:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57L1o9hybp646NYYXEUfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTExM2YxMzEzZjZlNDA1MzFmMWFjMzc4YWM4ODdlMDQ5Y2I2ZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMnfO894+Mi9bR4NIXTNa3qmtH5m dcnQ10ojq2kpRhiCRe5eIkkwWIbby1RGVQfLGfZLtoElxBvgRHkQD2VL9Dh0XLBV gxu77ASx7YfFIJn0cBAmUoh9VFpSY2A3VtK+t7ZiX5tjfiuWPKaN1CXF3EELCKvb MDWBMeCXPqYZNcYUOkvGQNZcKBSTNZkKh0FrjkKRhcmW/aVkb3z8FXZ2PBXwGxFI Nf5ZUDPuCfbC1mVt3+V937UNR+ltkXr9I2EKUuaGL++y5+KJXLIrWuTY8ilRgaeu 4GN9TlJ+fYtyaEoc8uOrj5r4darY4Otj1hoccfHuSmUW71ewbqrNKFmORwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDURPxMT9uQFMfGsN4rIh+BJy21qMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvTlJFX0V4UDI1QVV4OGF3M2lzaUg0RW5MYldvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJY8AMA0G CSqGSIb3DQEBCwUAA4IBAQBcL4YpsDROtCokWO0lKjUXL1fgf7t8dz+t6eiNXkAY TsiI0vHhYeB8BmnucgFMUBRbnxxGcFv1ShBsZ8V8aVfJ0g272cm/wIZgx9STcKp0 Uu9D2f2fKoPZcPD+c8Mzalzv54jY1T7c2WmeSDEWLJfjh1YT7TR3pjwFrRM9Xvqs HqGnsRpKn+P83wudhpyW6gDRNz4mnzK6aDfmhH2ztog0m0gfXiAaROj/gEpX2LYs eev3m0DjODaiT/k1EfJb5g91tfRAvtuM5uydOLe7SYMqwWUkVxrxwfQ6dVL2utPU bRUTaORVzxS2N3iSqSy2p7TbVEUmKTlIxpfo80uI+j2N -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:28 2026 by rpki-client