This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/NpEslkLQpMRfUYNHCdxghvt4Fuo.roa
File: NpEslkLQpMRfUYNHCdxghvt4Fuo.roa (raw, json)
Hash identifier: 4MFoFAiwtLl6PnmPgJEPHQ6e0gvExzrzCAzRmjSMODw=
Subject key identifier: 36:91:2C:96:42:D0:A4:C4:5F:51:83:47:09:DC:60:86:FB:78:16:EA
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7759188052B505F2063DB6A9666F079E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/NpEslkLQpMRfUYNHCdxghvt4Fuo.roa
Signing time: Thu 01 Jan 2026 02:18:06 +0000
ROA not before: Thu 01 Jan 2026 02:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212915
IP address blocks: 77.65.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:18:80:52:b5:05:f2:06:3d:b6:a9:66:6f:07:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36912c9642d0a4c45f51834709dc6086fb7816ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:19:aa:41:4d:0a:f7:ea:88:af:02:fb:24:
8d:7a:d5:17:5d:4d:32:dd:62:15:73:e9:95:1d:b9:
92:56:ec:0e:30:d3:1c:e9:cb:4a:1a:df:bd:38:a4:
07:02:fd:c0:b9:b3:a3:cb:9d:1c:a1:39:89:f7:f9:
b5:ca:54:d2:54:7f:4a:8f:48:56:e9:e5:ca:3b:f3:
e3:68:21:d4:68:d1:29:35:ce:79:6b:79:bd:ad:47:
59:60:f5:b9:8d:81:5a:82:ec:36:2c:3a:29:ee:5b:
ef:96:99:8a:a0:aa:07:ef:01:69:ca:af:93:a1:75:
a7:92:a5:9a:ae:95:43:19:9c:2d:b3:f8:6f:48:98:
d2:5c:a1:7e:7a:e5:55:f2:60:7f:63:78:cb:c3:fe:
2c:8d:c1:57:69:97:91:6c:05:11:cf:7c:98:15:a0:
45:86:05:89:f9:e5:a9:54:d2:b4:73:ed:d1:bd:16:
6b:1f:52:22:8e:6a:bb:20:7c:4e:28:35:47:3d:f5:
9c:53:c8:15:a7:6f:f9:f9:f8:9f:68:34:98:12:56:
b5:9d:b9:13:80:bf:7b:ab:1a:ef:75:f7:71:09:b7:
c9:80:80:d3:84:38:a2:eb:ff:bf:ac:39:df:7a:bf:
38:11:90:8b:ba:d4:24:02:ef:43:f8:18:22:8f:d0:
e7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:2C:96:42:D0:A4:C4:5F:51:83:47:09:DC:60:86:FB:78:16:EA
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/NpEslkLQpMRfUYNHCdxghvt4Fuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.170.0/24
Signature Algorithm: sha256WithRSAEncryption
92:90:ad:d1:50:83:ce:6d:30:85:0d:bb:40:a6:76:e3:bb:d0:
db:da:a1:75:1c:0f:e9:33:62:59:c0:e1:9d:66:38:7a:9f:c1:
68:04:47:91:53:3f:c6:e0:8b:cb:20:b1:ea:82:1f:6d:aa:22:
13:2f:df:4f:19:1c:64:ab:47:aa:4b:a1:2a:72:a8:dd:9d:57:
d7:0f:c9:2b:5e:05:38:7a:04:96:2a:38:3d:fa:d4:79:c0:df:
ec:02:98:87:b0:cc:93:b9:87:53:71:77:4d:01:a9:7e:57:45:
e2:42:b7:eb:2e:70:0f:6a:42:38:2b:41:21:19:3f:72:99:a5:
dc:5a:ce:33:1b:e1:e3:56:74:6d:3a:ed:c2:b1:fd:40:2b:29:
a3:13:c6:fa:80:81:4d:90:98:fd:5a:91:54:b4:60:26:47:2f:
89:44:1f:54:5c:73:ab:d2:78:e3:ec:82:77:bc:de:a8:9b:36:
ef:b7:fc:6b:f3:96:df:4a:50:76:e1:73:bd:8f:d8:aa:f4:2b:
ce:0f:37:d5:0c:f4:c1:ba:3c:2c:7c:81:15:2d:81:40:31:fb:
76:e6:dd:10:91:e5:58:38:4f:00:26:b0:79:04:93:fe:8e:e6:
c0:ba:33:35:be:44:ea:79:72:40:35:af:96:a1:49:fc:14:6a:
ae:7e:0b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:30:21 2026 by rpki-client