This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa
File: NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa (raw, json)
Hash identifier: nHBSYWCWMkjsq8eIHvyxI7K4o3nKXMreU+r6LsPFSas=
Subject key identifier: 34:4F:D1:06:02:CD:F9:61:19:D6:9A:1F:4D:9A:51:58:72:90:2E:15
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 019B78A32EDBA9D6F7A737D65978A03C9615
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa
Signing time: Thu 01 Jan 2026 08:18:38 +0000
ROA not before: Thu 01 Jan 2026 08:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50597
IP address blocks: 185.254.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:2e:db:a9:d6:f7:a7:37:d6:59:78:a0:3c:96:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Jan 1 08:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=344fd10602cdf96119d69a1f4d9a515872902e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6c:08:c0:34:6d:0f:10:6e:5d:31:a6:79:2b:
53:63:33:66:cd:72:1b:2d:24:1b:86:6d:92:fe:cb:
15:dc:2e:e4:98:0c:fb:e8:67:93:2b:a9:07:64:a1:
08:20:42:a1:f6:08:e0:44:5f:cf:ff:a0:57:ea:54:
fa:34:c5:8f:a4:19:96:39:90:bb:90:2e:65:60:b6:
39:de:f9:09:dd:ae:46:bd:3d:7c:2b:81:92:f2:20:
c3:ab:52:d0:35:64:1a:17:60:d0:a0:e2:e1:ba:be:
18:5c:4a:b3:ec:b9:49:77:14:e6:c3:2a:44:a4:cb:
52:49:06:91:56:bd:2e:10:7c:64:8f:7d:aa:e6:23:
92:4e:a1:45:2c:b5:57:65:59:3a:cd:e1:f4:81:b7:
71:85:70:79:ad:d5:ee:80:3a:11:78:75:3a:da:b3:
d1:51:0e:44:90:82:5f:2e:65:0e:43:40:c6:db:e2:
99:b3:83:7a:32:f8:f2:0f:dd:ae:83:1e:30:1e:18:
7c:5a:34:35:31:81:95:a5:24:75:fd:00:bc:76:f0:
03:58:81:83:81:b6:74:bd:e6:fd:37:ab:6b:d7:3d:
b8:ca:db:e5:f6:0b:82:33:20:a3:fd:37:bb:e9:97:
c0:4d:7e:b8:4b:43:cb:fd:43:57:c9:b8:c4:9c:af:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:D1:06:02:CD:F9:61:19:D6:9A:1F:4D:9A:51:58:72:90:2E:15
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.87.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a8:20:2f:93:ee:48:dd:4e:5b:23:02:2e:78:24:39:c2:91:
f6:d4:cf:bc:f7:10:86:a7:f4:bd:68:b4:d0:d2:ce:97:ef:89:
08:4f:07:4e:2b:53:48:11:7c:c6:c0:57:65:87:62:f8:33:1f:
65:c6:af:7d:1a:2f:9f:a0:7e:65:af:d9:85:dd:f5:f2:27:f4:
83:a2:5c:a0:c6:64:f3:ac:a7:6f:68:7f:ce:6d:9a:f9:99:9c:
aa:c0:e8:a3:b5:5e:15:10:48:fe:0b:b8:08:a7:5e:c5:b5:ca:
b0:9d:52:e5:ec:43:db:28:4e:4f:85:f0:f3:45:4a:56:35:c2:
79:f6:16:e2:3d:47:5e:db:22:e2:2d:b3:17:68:80:b9:a8:05:
7e:97:03:1b:67:6a:2a:bb:0a:1d:95:73:40:26:96:e8:2f:84:
b2:d8:5e:2b:ce:5e:50:35:e4:94:e5:13:41:11:32:44:c2:46:
47:61:d9:7f:60:6e:c1:b3:40:27:9a:dc:a1:de:82:b3:d0:4f:
3c:3c:d8:17:37:43:33:1c:a6:ea:e9:76:d0:49:93:3d:71:3d:
2b:21:12:6c:17:a8:e0:b4:8c:30:43:50:2f:c3:79:c7:b8:40:
4b:bc:02:a4:6e:0c:24:0c:6c:83:48:a1:a0:6e:e4:68:e8:8e:
e7:c3:e5:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4oy7bqdb3pzfWWXigPJYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjM4MTJhMTU5N2U5NjA1ZTJhOWJmNDlhY2Y4ZDYzODk4
MWE1ZjQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDRmZDEwNjAyY2RmOTYxMTlkNjlhMWY0ZDlhNTE1ODcyOTAyZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GwIwDRtDxBuXTGmeStTYzNmzXIb
LSQbhm2S/ssV3C7kmAz76GeTK6kHZKEIIEKh9gjgRF/P/6BX6lT6NMWPpBmWOZC7
kC5lYLY53vkJ3a5GvT18K4GS8iDDq1LQNWQaF2DQoOLhur4YXEqz7LlJdxTmwypE
pMtSSQaRVr0uEHxkj32q5iOSTqFFLLVXZVk6zeH0gbdxhXB5rdXugDoReHU62rPR
UQ5EkIJfLmUOQ0DG2+KZs4N6MvjyD92ugx4wHhh8WjQ1MYGVpSR1/QC8dvADWIGD
gbZ0veb9N6tr1z24ytvl9guCMyCj/Te76ZfATX64S0PL/UNXybjEnK/FiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDRP0QYCzflhGdaaH02aUVhykC4VMB8GA1UdIwQY
MBaAFJkjgSoVl+lgXiqb9JrPjWOJgaX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQt
NmIxNmM3ODhhOTBmLzEvTkVfUkJnTE4tV0VaMXBvZlRacFJXSEtRTGhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQtNmIxNmM3ODhhOTBm
LzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf5XMA0G
CSqGSIb3DQEBCwUAA4IBAQCbqCAvk+5I3U5bIwIueCQ5wpH21M+89xCGp/S9aLTQ
0s6X74kITwdOK1NIEXzGwFdlh2L4Mx9lxq99Gi+foH5lr9mF3fXyJ/SDolygxmTz
rKdvaH/ObZr5mZyqwOijtV4VEEj+C7gIp17FtcqwnVLl7EPbKE5PhfDzRUpWNcJ5
9hbiPUde2yLiLbMXaIC5qAV+lwMbZ2oquwodlXNAJpboL4Sy2F4rzl5QNeSU5RNB
ETJEwkZHYdl/YG7Bs0Anmtyh3oKz0E88PNgXN0MzHKbq6XbQSZM9cT0rIRJsF6jg
tIwwQ1Avw3nHuEBLvAKkbgwkDGyDSKGgbuRo6I7nw+V+
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:36 2026 by rpki-client