This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/NL-GZ6A5efHdGaOTzp86clCa2uc.roa File: NL-GZ6A5efHdGaOTzp86clCa2uc.roa (raw, json) Hash identifier: ncgag6cx1L4BB9efkwTYVUbJ2MuFxWCJXY1VLSVWtpU= Subject key identifier: 34:BF:86:67:A0:39:79:F1:DD:19:A3:93:CE:9F:3A:72:50:9A:DA:E7 Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed Certificate serial: 019B7EA687B7FF1CE5799AF6BF8CC79201F7 Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/NL-GZ6A5efHdGaOTzp86clCa2uc.roa Signing time: Fri 02 Jan 2026 12:20:01 +0000 ROA not before: Fri 02 Jan 2026 12:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3949 IP address blocks: 171.22.145.0/24 maxlen: 24 185.243.129.0/24 maxlen: 24 2a01:f180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 18:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:87:b7:ff:1c:e5:79:9a:f6:bf:8c:c7:92:01:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34bf8667a03979f1dd19a393ce9f3a72509adae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:74:e5:9e:6d:a4:f6:f5:c9:f4:51:4a:de:5f: 03:0b:e1:11:6c:93:db:a1:a0:23:fe:fc:1e:cd:4d: 17:ff:c3:1c:90:2a:69:80:04:73:dd:cf:c8:dd:3b: 42:dd:a1:e6:89:84:43:52:a5:23:92:51:0d:eb:28: e4:6a:d5:f2:94:bd:a9:52:7b:c3:a6:3d:36:97:d3: 98:36:5f:d0:cc:fe:fe:74:1e:e5:1a:91:b5:65:4f: b6:5c:d0:da:92:e2:fe:5a:1d:15:52:a9:82:df:50: 0b:ef:29:96:80:ff:71:30:12:ac:a9:f0:5f:02:39: 4d:54:c3:c9:a2:d2:92:80:91:61:66:2a:2a:0d:3e: bc:38:57:6b:11:5c:15:d1:6b:ef:03:ac:85:14:b9: d2:5c:ae:2f:b0:b5:d9:e0:a8:c2:ec:b8:7d:2a:28: f0:32:ec:da:b6:a3:80:82:66:59:b6:83:b4:5a:65: fb:f6:e2:a5:5b:f3:cc:00:de:de:77:b4:89:df:c5: 09:5f:81:7e:ad:6a:47:a1:e2:66:1f:70:6d:77:71: 6f:e4:3f:70:17:a8:01:94:1d:00:7f:29:fe:cf:f6: 22:8a:c6:64:f5:39:99:2d:f6:a7:6a:fd:6a:c9:43: 3c:9f:59:73:17:83:33:9f:f0:52:fd:e0:27:80:06: 43:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BF:86:67:A0:39:79:F1:DD:19:A3:93:CE:9F:3A:72:50:9A:DA:E7 X509v3 Authority Key Identifier: keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/NL-GZ6A5efHdGaOTzp86clCa2uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.145.0/24 185.243.129.0/24 IPv6: 2a01:f180::/48 Signature Algorithm: sha256WithRSAEncryption 28:be:af:c4:f6:2a:ed:86:e4:31:af:7b:55:ac:14:7c:d1:30: fe:4f:d2:9e:be:d3:4e:40:f4:72:c2:41:7d:79:25:2f:cc:d5: 7d:f4:c0:15:2d:1e:19:bc:fa:3a:d8:e4:20:04:1e:2e:a7:2e: 31:e1:0c:27:20:9a:7f:23:53:1b:c2:13:2f:2b:cb:be:f8:ad: 03:00:62:3b:b6:41:b2:46:c0:7a:c6:6a:96:d3:35:f8:fe:02: 1f:5f:a5:6a:d1:49:d1:fe:7e:92:0e:60:df:c1:02:32:bd:f6: 62:3e:16:66:8d:f2:8d:57:a3:ad:d2:30:65:ad:de:99:97:87: 63:48:99:dd:30:20:d5:f0:d9:d1:25:6f:a1:4a:dd:47:51:9c: f4:28:87:61:da:62:e5:8a:4f:67:56:c0:81:25:5f:97:26:86: 1a:9e:29:1c:ba:1e:13:a0:41:b9:24:2e:fc:cc:04:75:51:57: b9:c3:14:bc:54:b0:98:01:b2:e8:13:61:f5:45:bc:09:9a:00: f9:a5:64:38:df:6e:f0:68:9a:21:ed:87:45:1e:ab:d7:00:c7: f4:6d:b6:8c:d8:66:0b:ef:9b:d4:03:1b:6f:e0:a5:33:a0:de: 89:51:66:ab:36:5e:da:c4:25:74:4a:b0:50:58:b4:19:c3:03: f3:ac:31:8e -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+poe3/xzleZr2v4zHkgH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj ZTUzZWQwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGJmODY2N2EwMzk3OWYxZGQxOWEzOTNjZTlmM2E3MjUwOWFkYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XTlnm2k9vXJ9FFK3l8DC+ERbJPb oaAj/vwezU0X/8MckCppgARz3c/I3TtC3aHmiYRDUqUjklEN6yjkatXylL2pUnvD pj02l9OYNl/QzP7+dB7lGpG1ZU+2XNDakuL+Wh0VUqmC31AL7ymWgP9xMBKsqfBf AjlNVMPJotKSgJFhZioqDT68OFdrEVwV0WvvA6yFFLnSXK4vsLXZ4KjC7Lh9Kijw MuzatqOAgmZZtoO0WmX79uKlW/PMAN7ed7SJ38UJX4F+rWpHoeJmH3Btd3Fv5D9w F6gBlB0Afyn+z/YiisZk9TmZLfanav1qyUM8n1lzF4Mzn/BS/eAngAZDpQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFDS/hmegOXnx3Rmjk86fOnJQmtrnMB8GA1UdIwQY MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt ZDUyYTE4OTg1OTk5LzEvTkwtR1o2QTVlZkhkR2FPVHpwODZjbENhMnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5 LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAqxaRAwQA ufOBMA8EAgACMAkDBwAqAfGAAAAwDQYJKoZIhvcNAQELBQADggEBACi+r8T2Ku2G 5DGve1WsFHzRMP5P0p6+005A9HLCQX15JS/M1X30wBUtHhm8+jrY5CAEHi6nLjHh DCcgmn8jUxvCEy8ry774rQMAYju2QbJGwHrGapbTNfj+Ah9fpWrRSdH+fpIOYN/B AjK99mI+FmaN8o1Xo63SMGWt3pmXh2NImd0wINXw2dElb6FK3UdRnPQoh2HaYuWK T2dWwIElX5cmhhqeKRy6HhOgQbkkLvzMBHVRV7nDFLxUsJgBsugTYfVFvAmaAPml ZDjfbvBomiHth0Ueq9cAx/RttozYZgvvm9QDG2/gpTOg3olRZqs2XtrEJXRKsFBY tBnDA/OsMY4= -----END CERTIFICATE-----Generated at Sun Jan 11 02:59:07 2026 by rpki-client