This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/NECq5bb7SIXry0rZHvapUwXLa2Q.roa File: NECq5bb7SIXry0rZHvapUwXLa2Q.roa (raw, json) Hash identifier: dYpsXQiT0mqcppDxERSn5No7Emz9UKQhwW4R+PdVL/o= Subject key identifier: 34:40:AA:E5:B6:FB:48:85:EB:CB:4A:D9:1E:F6:A9:53:05:CB:6B:64 Certificate issuer: /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde Certificate serial: 019B7DCAC7CF7379EB892FF731A2D2296F0F Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/NECq5bb7SIXry0rZHvapUwXLa2Q.roa Signing time: Fri 02 Jan 2026 08:19:59 +0000 ROA not before: Fri 02 Jan 2026 08:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39069 IP address blocks: 147.84.0.0/16 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c7:cf:73:79:eb:89:2f:f7:31:a2:d2:29:6f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde Validity Not Before: Jan 2 08:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3440aae5b6fb4885ebcb4ad91ef6a95305cb6b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:4b:c1:11:1e:64:9b:20:1f:5d:c4:fa:cc: 5a:b4:81:e3:4d:6d:1d:33:37:a1:f8:55:22:55:c8: fa:46:de:61:d9:ac:02:61:56:15:2a:7f:f1:0f:5d: 44:36:b1:9a:10:bc:a6:a5:11:d7:e4:9c:c4:94:fb: 81:67:cf:db:cf:df:02:a0:d1:2e:13:4f:18:a7:1d: 6c:1a:2b:ef:e5:03:40:48:2d:84:57:73:47:98:35: 10:06:3a:6b:53:01:d0:e3:41:4c:ce:1d:92:bf:33: d7:5f:9a:94:10:91:8e:13:13:5b:34:38:10:a6:26: b0:8f:ba:2f:3b:1b:3b:5c:f2:88:d9:8f:fc:f8:88: 81:40:6a:56:36:17:6a:e5:49:7a:38:2e:95:bf:b7: 6a:ea:03:8b:b0:12:95:1e:08:4b:88:8d:b6:99:53: 04:59:f3:d0:cd:bd:64:be:0a:4b:ba:2a:65:56:12: 04:13:3d:6e:e7:25:23:7c:3f:45:c1:42:cd:9a:c2: f9:6e:1d:35:5f:4c:5e:cb:09:9f:41:04:05:46:ae: 9f:76:41:0d:27:1b:8e:1a:e5:68:ca:83:78:bc:90: 63:87:7a:86:7c:c0:1c:af:a4:d0:6d:e2:ca:03:b8: 5f:5b:d3:61:db:64:63:a7:1b:8c:89:7d:30:d1:48: 67:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:40:AA:E5:B6:FB:48:85:EB:CB:4A:D9:1E:F6:A9:53:05:CB:6B:64 X509v3 Authority Key Identifier: keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/NECq5bb7SIXry0rZHvapUwXLa2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.84.0.0/16 Signature Algorithm: sha256WithRSAEncryption 23:7d:b2:d3:0e:f7:96:77:45:d8:d1:fa:58:5d:f1:aa:43:2a: 90:3c:6f:26:61:a5:38:40:51:68:21:ca:24:b6:e2:cc:8e:dc: a6:1a:51:4a:e0:a5:e8:73:cc:25:3b:69:03:26:8e:6f:3c:58: be:00:94:71:4a:2e:19:fa:6c:3b:fd:cc:9a:fb:83:bc:0d:c7: 9f:9e:af:88:ad:30:13:64:84:09:67:39:b2:b0:52:b8:13:1c: ef:12:f6:f0:b8:80:46:01:e2:53:08:61:dc:44:94:8d:a2:f6: 13:70:4b:ea:72:f3:02:66:8e:d6:19:e9:82:3f:a6:92:bd:bf: f6:83:88:eb:49:42:3c:11:d2:00:b9:12:95:17:74:25:6e:4c: 05:fa:4b:1e:2e:fc:7f:40:02:76:a3:93:11:8e:13:00:df:40: ff:cc:d8:15:2b:c1:a6:75:b8:3e:b5:cf:fe:7f:f3:61:12:04: 10:7d:cf:60:35:0e:ac:eb:c5:55:5c:e8:66:9e:f0:06:8e:df: ae:37:95:34:fb:65:b5:48:fe:b9:28:9d:f8:5f:d5:f7:77:89: ad:9c:d9:55:eb:a9:70:0c:c9:54:90:c2:32:be:3a:fa:f0:0f: 8a:ff:b4:5d:03:8d:e4:94:af:7a:e6:0f:3b:01:0c:36:d4:03: b1:bc:db:bd -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9ysfPc3nriS/3MaLSKW8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzNhN2ZjMzA0YmMwMmQ4MDc0NDc2ZDA3NWRiNWNkY2Qy ZGFiZGUwHhcNMjYwMTAyMDgxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDQwYWFlNWI2ZmI0ODg1ZWJjYjRhZDkxZWY2YTk1MzA1Y2I2YjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEpLwREeZJsgH13E+sxatIHjTW0d Mzeh+FUiVcj6Rt5h2awCYVYVKn/xD11ENrGaELympRHX5JzElPuBZ8/bz98CoNEu E08Ypx1sGivv5QNASC2EV3NHmDUQBjprUwHQ40FMzh2SvzPXX5qUEJGOExNbNDgQ piawj7ovOxs7XPKI2Y/8+IiBQGpWNhdq5Ul6OC6Vv7dq6gOLsBKVHghLiI22mVME WfPQzb1kvgpLuiplVhIEEz1u5yUjfD9FwULNmsL5bh01X0xeywmfQQQFRq6fdkEN JxuOGuVoyoN4vJBjh3qGfMAcr6TQbeLKA7hfW9Nh22RjpxuMiX0w0UhnNwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFDRAquW2+0iF68tK2R72qVMFy2tkMB8GA1UdIwQY MBaAFBxzp/wwS8AtgHRHbQddtc3NLaveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhPbl9EQkx3QzJBZEVkdEIxMjF6YzB0cTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84MTBjNzItZDQxNi00YTE0LThhY2Et YThmYWVlYjdlZTUyLzEvTkVDcTViYjdTSVhyeTByWkh2YXBVd1hMYTJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy84MTBjNzItZDQxNi00YTE0LThhY2EtYThmYWVlYjdlZTUy LzEvSEhPbl9EQkx3QzJBZEVkdEIxMjF6YzB0cTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk1QwDQYJ KoZIhvcNAQELBQADggEBACN9stMO95Z3RdjR+lhd8apDKpA8byZhpThAUWghyiS2 4syO3KYaUUrgpehzzCU7aQMmjm88WL4AlHFKLhn6bDv9zJr7g7wNx5+er4itMBNk hAlnObKwUrgTHO8S9vC4gEYB4lMIYdxElI2i9hNwS+py8wJmjtYZ6YI/ppK9v/aD iOtJQjwR0gC5EpUXdCVuTAX6Sx4u/H9AAnajkxGOEwDfQP/M2BUrwaZ1uD61z/5/ 82ESBBB9z2A1DqzrxVVc6Gae8AaO3643lTT7ZbVI/rkonfhf1fd3ia2c2VXrqXAM yVSQwjK+OvrwD4r/tF0DjeSUr3rmDzsBDDbUA7G8270= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:11 2026 by rpki-client