This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa
File: NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (raw, json)
Hash identifier: b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=
Subject key identifier: 35:77:A8:F8:9F:D9:0E:E9:01:ED:23:B6:0E:45:D6:99:8F:2B:F1:EF
Certificate issuer: /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial: 019B7C807ECB9A772CA890A5D7ED704415B9
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa
Signing time: Fri 02 Jan 2026 02:19:14 +0000
ROA not before: Fri 02 Jan 2026 02:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201076
IP address blocks: 141.226.248.0/24 maxlen: 24
188.64.208.0/24 maxlen: 24
188.64.209.0/24 maxlen: 24
188.64.210.0/24 maxlen: 24
188.64.211.0/24 maxlen: 24
2a07:e7c0::/48 maxlen: 48
2a07:e7c0:1::/48 maxlen: 48
2a07:e7c0:2::/48 maxlen: 48
2a07:e7c0:3::/48 maxlen: 48
2a07:e7c0:147::/48 maxlen: 48
2a07:e7c0:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:7e:cb:9a:77:2c:a8:90:a5:d7:ed:70:44:15:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Validity
Not Before: Jan 2 02:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3577a8f89fd90ee901ed23b60e45d6998f2bf1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:44:41:e2:f5:bb:4a:b9:4c:35:42:53:90:
2f:11:6c:97:fd:b0:99:bb:28:08:f4:62:7e:02:87:
ae:67:77:19:40:0e:95:74:63:c0:b2:b3:28:cf:73:
4b:40:c5:76:c4:60:42:0b:ee:91:83:4c:f2:4c:7b:
2d:6f:c1:ef:a2:de:1e:49:3c:8d:a0:68:13:9f:99:
14:5a:3a:79:5d:da:ea:cb:4c:4b:65:92:3d:ab:93:
75:c4:24:e0:cc:e3:c9:c1:69:36:ab:23:e6:8a:82:
7c:34:fa:25:c8:ed:5a:64:cd:6e:f2:1a:3f:2b:fe:
0b:e8:2d:e3:c9:54:c3:fa:ff:ab:e1:8f:db:37:bd:
b1:ea:70:e4:3f:cb:d9:90:31:e1:26:b3:5c:8d:29:
d9:dd:c8:5c:0f:be:3c:1a:3c:fa:62:90:e6:3f:c5:
e5:a3:d4:db:9f:e9:ad:f3:d3:e7:00:69:a7:19:b3:
9f:3e:8f:14:5b:c5:39:6a:ab:e3:bd:99:01:72:36:
6d:20:67:83:44:ab:16:75:93:a8:af:8c:ec:50:29:
f0:8b:a7:f8:4e:06:3d:30:27:4b:78:33:62:51:14:
d8:59:66:2c:b4:37:d1:9b:00:77:65:5d:14:aa:9b:
5a:6f:d4:e6:84:fb:aa:e3:a2:de:ed:c4:33:7c:a8:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:77:A8:F8:9F:D9:0E:E9:01:ED:23:B6:0E:45:D6:99:8F:2B:F1:EF
X509v3 Authority Key Identifier:
keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.248.0/24
188.64.208.0/22
IPv6:
2a07:e7c0::/46
2a07:e7c0:147::/48
2a07:e7c0:1000::/48
Signature Algorithm: sha256WithRSAEncryption
28:39:0d:b7:31:80:26:23:6b:6e:14:11:c4:2f:cc:39:01:fe:
e2:90:1e:2b:4a:54:75:7c:f6:bb:30:8e:d8:35:8b:4a:b1:7f:
45:00:b9:f2:5a:3b:30:e5:d6:fc:dc:01:73:06:22:e3:24:ed:
d9:68:31:c6:22:24:1e:02:24:ba:95:fb:2b:96:32:cf:86:21:
bf:bb:a5:47:07:c5:05:27:d9:4c:76:cc:67:83:c1:d7:48:6c:
47:84:54:9d:8c:bb:68:f6:d0:71:71:20:dc:2a:ed:99:99:77:
78:77:84:f3:ac:56:b8:32:8f:a0:89:b2:4d:c9:85:0d:29:a1:
bc:9c:73:9a:e2:05:57:ec:8e:e7:42:a4:3b:88:f7:c8:d3:80:
e6:30:6d:fc:cc:6b:7d:ae:3d:fc:8a:46:6b:9f:66:0f:2e:dc:
05:cb:cc:34:3a:a8:1b:66:92:4b:54:15:18:03:aa:c2:7f:3f:
d7:ac:98:ad:6b:f1:8f:96:22:49:52:cc:b3:45:27:b5:84:0e:
5d:fd:ee:8c:60:34:9b:a3:9e:f0:6b:a7:36:85:13:30:72:73:
8e:af:4b:64:fa:55:ce:51:94:0a:44:41:74:f3:25:a9:0a:92:
31:67:f9:e0:a8:df:47:95:1a:dd:7c:c6:8d:be:67:c9:98:2e:
7e:c0:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:08 2026 by rpki-client