This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NE9EGE-BbaJpUFMjlYYIO8X8Ey4.roa File: NE9EGE-BbaJpUFMjlYYIO8X8Ey4.roa (raw, json) Hash identifier: xzZlMLZFNCcGCrlhAXkKZycJsiBph5s1foVhmnJy28M= Subject key identifier: 34:4F:44:18:4F:81:6D:A2:69:50:53:23:95:86:08:3B:C5:FC:13:2E Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84D0774C9B563957E0CB6F83E5BB8D Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NE9EGE-BbaJpUFMjlYYIO8X8Ey4.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59734 IP address blocks: 93.171.32.0/23 maxlen: 24 95.46.120.0/23 maxlen: 24 95.47.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d0:77:4c:9b:56:39:57:e0:cb:6f:83:e5:bb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=344f44184f816da2695053239586083bc5fc132e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:b2:6d:00:6c:3b:1f:83:07:47:55:ae:c8: 8b:6d:63:fc:00:2c:27:40:8b:9f:fd:31:d4:93:22: 6b:f2:88:1e:70:fc:7d:d5:18:75:88:5a:92:b5:b0: 76:d1:f8:2a:4d:c4:40:21:92:7b:02:73:fa:c4:5f: 36:3b:f4:11:6b:98:fc:b5:f2:87:77:ba:b5:9b:b2: 3e:cc:69:71:26:a1:b7:e5:b6:ef:4e:db:39:d8:d6: 59:a2:a7:24:8e:60:ff:c1:2d:29:98:e2:f4:83:0c: a9:9b:b3:b9:14:8b:61:21:81:d8:87:d0:32:2c:c8: 6f:c3:80:b9:02:84:47:0d:fc:b3:93:0a:2a:f7:c6: 88:95:08:80:10:1b:68:05:c8:f7:ff:df:4a:b1:29: 45:9c:09:7f:41:57:12:02:a2:66:fd:db:93:d2:b2: 56:e8:2e:23:31:25:e5:96:42:5c:c0:bb:f8:1e:0f: 49:75:10:33:4b:bd:be:61:f0:86:d8:bf:a8:5c:09: 97:53:a1:9d:66:00:c9:f7:89:10:cd:26:30:df:f8: ae:b0:72:4b:d7:31:20:be:7d:27:53:92:49:94:34: 47:e0:ef:4f:0d:ba:bb:9a:d2:e1:c1:b5:07:e0:8f: 58:ce:60:b5:86:f6:a5:5f:b8:41:12:52:d8:be:77: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4F:44:18:4F:81:6D:A2:69:50:53:23:95:86:08:3B:C5:FC:13:2E X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NE9EGE-BbaJpUFMjlYYIO8X8Ey4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.32.0/23 95.46.120.0/23 95.47.240.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:bc:ee:49:b9:8c:f6:78:3e:3b:d5:3d:33:0c:01:43:2f:d5: 5d:59:a6:54:04:61:b7:4a:96:40:b5:86:c6:16:1a:46:86:1c: 4b:ec:69:ad:c0:74:8d:07:a7:f2:99:d4:19:8d:3a:54:34:f4: 6b:91:46:61:f8:fc:76:c0:90:92:30:bc:3d:5e:60:a3:97:80: e9:5c:70:79:13:4b:e0:47:97:85:d9:21:be:33:fd:6b:31:ef: f0:c2:d0:d1:92:d8:dc:87:58:38:5c:b4:c0:17:5b:9e:2f:f0: 16:0f:60:f7:16:d9:75:87:de:42:9c:a0:8a:ac:77:10:55:a8: 89:a8:5c:1c:fe:06:a2:b5:25:98:57:5a:89:bb:15:25:0f:e5: 6c:5c:de:0d:33:a2:45:60:47:a0:4c:06:8f:2c:2a:c8:be:6a: a0:a5:22:65:5d:e0:69:4e:16:ed:93:e5:3d:8c:c4:8a:73:34: 16:4e:11:9d:ff:e4:1e:08:d9:01:d9:15:7e:fc:1d:8d:70:cc: ba:a8:f0:40:53:b9:10:ba:6a:32:51:ae:67:ea:4c:f4:2a:b1: 09:c1:5f:ca:f1:56:d9:d6:6d:9b:f6:44:7c:50:38:74:67:6c: 27:cb:37:a5:72:52:ae:66:67:07:2f:76:8a:40:50:3a:42:cc: aa:6b:17:8f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hNB3TJtWOVfgy2+D5buNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDRmNDQxODRmODE2ZGEyNjk1MDUzMjM5NTg2MDgzYmM1ZmMxMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IaybQBsOx+DB0dVrsiLbWP8ACwn QIuf/THUkyJr8ogecPx91Rh1iFqStbB20fgqTcRAIZJ7AnP6xF82O/QRa5j8tfKH d7q1m7I+zGlxJqG35bbvTts52NZZoqckjmD/wS0pmOL0gwypm7O5FIthIYHYh9Ay LMhvw4C5AoRHDfyzkwoq98aIlQiAEBtoBcj3/99KsSlFnAl/QVcSAqJm/duT0rJW 6C4jMSXllkJcwLv4Hg9JdRAzS72+YfCG2L+oXAmXU6GdZgDJ94kQzSYw3/iusHJL 1zEgvn0nU5JJlDRH4O9PDbq7mtLhwbUH4I9YzmC1hvalX7hBElLYvndErwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDRPRBhPgW2iaVBTI5WGCDvF/BMuMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvTkU5RUdFLUJiYUpwVUZNamxZWUlPOFg4RXk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXasgAwQB Xy54AwQBXy/wMA0GCSqGSIb3DQEBCwUAA4IBAQA+vO5JuYz2eD471T0zDAFDL9Vd WaZUBGG3SpZAtYbGFhpGhhxL7GmtwHSNB6fymdQZjTpUNPRrkUZh+Px2wJCSMLw9 XmCjl4DpXHB5E0vgR5eF2SG+M/1rMe/wwtDRktjch1g4XLTAF1ueL/AWD2D3Ftl1 h95CnKCKrHcQVaiJqFwc/gaitSWYV1qJuxUlD+VsXN4NM6JFYEegTAaPLCrIvmqg pSJlXeBpThbtk+U9jMSKczQWThGd/+QeCNkB2RV+/B2NcMy6qPBAU7kQumoyUa5n 6kz0KrEJwV/K8VbZ1m2b9kR8UDh0Z2wnyzelclKuZmcHL3aKQFA6QsyqaxeP -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:16 2026 by rpki-client