This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/NE-Gskahv4yhz4NSW0eOQznOBbc.roa File: NE-Gskahv4yhz4NSW0eOQznOBbc.roa (raw, json) Hash identifier: 2cjZe+aPFDte9rIu8wJCuhBoVs4OYpmJVxKR+K10wPw= Subject key identifier: 34:4F:86:B2:46:A1:BF:8C:A1:CF:83:52:5B:47:8E:43:39:CE:05:B7 Certificate issuer: /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb Certificate serial: 019B7F14D200B00CF8396A573E0C36E8B97B Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/NE-Gskahv4yhz4NSW0eOQznOBbc.roa Signing time: Fri 02 Jan 2026 14:20:29 +0000 ROA not before: Fri 02 Jan 2026 14:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15704 IP address blocks: 77.27.140.0/22 maxlen: 22 77.27.148.0/22 maxlen: 22 83.165.112.0/21 maxlen: 21 91.116.156.0/22 maxlen: 22 91.116.160.0/22 maxlen: 22 91.116.220.0/22 maxlen: 22 91.116.236.0/22 maxlen: 22 91.116.244.0/22 maxlen: 22 91.117.16.0/21 maxlen: 21 91.117.40.0/22 maxlen: 22 91.117.72.0/22 maxlen: 22 91.117.108.0/22 maxlen: 22 91.117.176.0/22 maxlen: 22 91.117.228.0/22 maxlen: 22 93.156.192.0/21 maxlen: 21 93.156.200.0/21 maxlen: 21 93.156.208.0/21 maxlen: 21 93.156.216.0/21 maxlen: 21 93.156.224.0/21 maxlen: 21 93.156.232.0/21 maxlen: 21 93.156.240.0/21 maxlen: 21 93.156.248.0/21 maxlen: 21 178.60.4.0/22 maxlen: 22 178.60.180.0/22 maxlen: 22 178.60.184.0/22 maxlen: 22 213.60.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d2:00:b0:0c:f8:39:6a:57:3e:0c:36:e8:b9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb Validity Not Before: Jan 2 14:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=344f86b246a1bf8ca1cf83525b478e4339ce05b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:1f:c1:dd:df:c6:cd:bf:e4:fe:07:07:d7: a2:32:96:01:06:2a:78:40:9f:55:64:19:b6:88:c3: e0:3d:dd:d6:35:64:ac:7e:d9:a2:87:a0:a5:06:37: ca:0b:49:4f:e1:ad:af:c0:a8:1f:86:c4:aa:ff:06: e9:50:5d:e3:2e:a4:07:fe:95:04:1a:74:bc:d4:58: 2d:db:67:af:f2:4f:16:6c:5b:7c:61:a9:d9:46:4e: 18:ab:48:98:8a:a1:df:3e:22:fd:af:ba:15:76:12: 0e:1c:87:3a:49:63:e1:8c:43:cf:f4:48:32:52:72: 88:3b:0e:c1:48:12:a5:98:87:ef:af:ab:d5:23:6e: 43:60:8d:6c:fa:4d:28:34:5b:52:d7:17:64:09:83: 84:db:76:7b:48:74:8b:17:6d:1b:0f:b0:cb:98:3f: 67:eb:34:51:69:ed:22:ca:8c:82:98:be:ed:34:7d: a5:07:95:36:49:95:bb:9d:02:32:49:c0:a0:07:9f: 83:ae:7d:99:11:58:8a:56:c2:ba:a0:54:e8:8c:ce: 6c:c4:63:74:5f:77:c2:47:32:1e:63:84:26:e4:10: 22:f1:8d:2a:1e:04:9b:01:e3:5a:1a:54:5e:66:6a: 45:f3:a6:12:7e:35:46:bb:54:20:c6:10:49:79:35: 3a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4F:86:B2:46:A1:BF:8C:A1:CF:83:52:5B:47:8E:43:39:CE:05:B7 X509v3 Authority Key Identifier: keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/NE-Gskahv4yhz4NSW0eOQznOBbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.27.140.0/22 77.27.148.0/22 83.165.112.0/21 91.116.156.0-91.116.163.255 91.116.220.0/22 91.116.236.0/22 91.116.244.0/22 91.117.16.0/21 91.117.40.0/22 91.117.72.0/22 91.117.108.0/22 91.117.176.0/22 91.117.228.0/22 93.156.192.0/18 178.60.4.0/22 178.60.180.0-178.60.187.255 213.60.76.0/22 Signature Algorithm: sha256WithRSAEncryption ac:a9:40:2a:82:84:96:9a:e1:70:b0:68:d7:f7:40:2f:b2:36: 82:85:b3:a1:f8:fe:5b:0c:0b:a1:16:09:b9:f1:80:f7:a7:2c: a3:6e:c6:db:a5:5f:d0:e4:0d:2d:f1:94:3c:f3:57:4c:05:66: c8:79:d4:65:ca:c7:0b:f6:21:67:18:b2:7c:3e:e3:8c:08:86: f9:2a:e6:8d:5b:50:ae:52:21:34:7d:71:60:cd:9a:07:71:da: 93:c8:5e:12:bd:8e:7b:ba:13:8a:89:c3:ff:91:eb:71:48:a9: c4:03:84:7e:89:73:84:e0:10:4d:d1:10:33:7f:5c:f0:d8:45: 0d:96:94:8b:e0:4d:55:20:1e:80:87:8f:9b:2e:35:52:5f:8b: d4:dd:2c:74:dc:f2:9a:c7:00:7f:7d:a3:75:ac:03:ec:36:c4: c5:78:08:84:14:96:ba:fd:fc:0a:3a:b9:39:84:3f:fd:5c:ec: 3c:36:ae:34:bd:8e:3e:3c:aa:37:bf:0d:79:68:db:d5:b2:4c: 36:6c:f7:9b:33:1c:d4:29:4b:28:60:c6:42:c2:07:ae:74:9d: 5d:70:85:b5:85:e2:20:5a:56:d5:b7:07:2a:3b:5b:51:6b:18: a1:98:15:4a:e8:73:8a:24:85:ba:eb:6d:6f:53:dc:bd:11:8f: 4f:0d:be:67 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZt/FNIAsAz4OWpXPgw26Ll7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYTY1YzdlZGJhNDY5ZDA5OWQ3NmFhY2Q3ZGMyNjNmNGRm ZWM1ZWIwHhcNMjYwMTAyMTQyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDRmODZiMjQ2YTFiZjhjYTFjZjgzNTI1YjQ3OGU0MzM5Y2UwNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDIfwd3fxs2/5P4HB9eiMpYBBip4 QJ9VZBm2iMPgPd3WNWSsftmih6ClBjfKC0lP4a2vwKgfhsSq/wbpUF3jLqQH/pUE GnS81Fgt22ev8k8WbFt8YanZRk4Yq0iYiqHfPiL9r7oVdhIOHIc6SWPhjEPP9Egy UnKIOw7BSBKlmIfvr6vVI25DYI1s+k0oNFtS1xdkCYOE23Z7SHSLF20bD7DLmD9n 6zRRae0iyoyCmL7tNH2lB5U2SZW7nQIyScCgB5+Drn2ZEViKVsK6oFTojM5sxGN0 X3fCRzIeY4Qm5BAi8Y0qHgSbAeNaGlReZmpF86YSfjVGu1QgxhBJeTU64wIDAQAB o4ICezCCAncwHQYDVR0OBBYEFDRPhrJGob+Moc+DUltHjkM5zgW3MB8GA1UdIwQY MBaAFE6mXH7bpGnQmddqrNfcJj9N/sXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYt NTEwMGEyNmQyNzRiLzEvTkUtR3NrYWh2NHloejROU1cwZU9Rem5PQmJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYtNTEwMGEyNmQyNzRi LzEvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAJNG4wD BAJNG5QDBANTpXAwDAMEAlt0nAMEAlt0oAMEAlt03AMEAlt07AMEAlt09AMEA1t1 EAMEAlt1KAMEAlt1SAMEAlt1bAMEAlt1sAMEAlt15AMEBl2cwAMEArI8BDAMAwQC sjy0AwQCsjy4AwQC1TxMMA0GCSqGSIb3DQEBCwUAA4IBAQCsqUAqgoSWmuFwsGjX 90AvsjaChbOh+P5bDAuhFgm58YD3pyyjbsbbpV/Q5A0t8ZQ881dMBWbIedRlyscL 9iFnGLJ8PuOMCIb5KuaNW1CuUiE0fXFgzZoHcdqTyF4SvY57uhOKicP/ketxSKnE A4R+iXOE4BBN0RAzf1zw2EUNlpSL4E1VIB6Ah4+bLjVSX4vU3Sx03PKaxwB/faN1 rAPsNsTFeAiEFJa6/fwKOrk5hD/9XOw8Nq40vY4+PKo3vw15aNvVskw2bPebMxzU KUsoYMZCwgeudJ1dcIW1heIgWlbVtwcqO1tRaxihmBVK6HOKJIW6621vU9y9EY9P Db5n -----END CERTIFICATE-----Generated at Mon Jan 26 12:27:02 2026 by rpki-client