This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ne-lWoAhvXNVcNT4QDBvW70Weo8.roa File: ne-lWoAhvXNVcNT4QDBvW70Weo8.roa (raw, json) Hash identifier: +YXWJ04orc0hld5vrDRmchz14zDf/BHaDLHp5DAnzuQ= Subject key identifier: 9D:EF:A5:5A:80:21:BD:73:55:70:D4:F8:40:30:6F:5B:BD:16:7A:8F Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84BF5BD8361489D8022A59189011D9 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ne-lWoAhvXNVcNT4QDBvW70Weo8.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50916 IP address blocks: 93.170.124.0/22 maxlen: 24 2a02:128:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bf:5b:d8:36:14:89:d8:02:2a:59:18:90:11:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9defa55a8021bd735570d4f840306f5bbd167a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:ca:2a:e3:6a:3f:e6:d5:80:67:dc:b3:b0: 9b:83:b1:06:cf:98:6d:d7:38:61:b2:e9:2f:96:c9: 59:40:f6:81:ae:be:03:ba:86:63:c9:e7:42:be:10: f7:fe:d8:41:57:15:5d:51:10:9e:37:cd:97:5e:dc: a0:c4:d9:04:e6:12:bf:8e:94:a4:09:39:20:19:32: b8:da:63:87:2b:36:c5:e8:bf:a7:22:db:a8:ea:9c: 77:65:82:30:85:9e:10:04:ca:b0:a6:a0:a0:33:90: ff:8c:41:be:0a:1e:fd:4c:45:0e:79:28:7e:00:fa: b5:89:e2:4c:d0:7a:74:97:ff:55:ad:c2:5a:69:7c: 68:71:10:27:6a:29:7c:29:ed:55:14:2c:be:a7:19: 09:23:e2:1c:0a:6e:46:5e:83:88:0a:6e:84:16:a3: 4b:82:93:cb:dc:30:7d:b2:3e:04:76:0b:b4:54:21: 9f:98:97:7c:d4:7c:8c:a5:5f:a6:68:22:6b:04:c4: dd:ab:d6:3c:74:3f:5a:94:40:2d:ee:e6:02:3e:7a: be:d4:62:a0:95:6c:98:71:d6:dc:8d:74:47:ad:34: dd:69:8a:41:e9:37:46:42:c3:13:c4:22:f4:7d:79: b4:03:67:1e:aa:7b:37:38:b4:13:8b:e2:32:7a:4c: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EF:A5:5A:80:21:BD:73:55:70:D4:F8:40:30:6F:5B:BD:16:7A:8F X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ne-lWoAhvXNVcNT4QDBvW70Weo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.124.0/22 IPv6: 2a02:128:8::/48 Signature Algorithm: sha256WithRSAEncryption 51:70:6d:d8:2d:6b:59:85:78:00:13:af:84:09:4a:62:23:6d: 16:50:84:3b:0f:58:92:25:a3:b5:33:59:c4:60:47:f9:17:d1: b8:6b:5a:60:b3:84:d9:1f:33:9d:e5:bc:1e:b7:68:be:ed:5a: 99:a6:c2:10:39:68:cf:43:8f:d4:98:b5:87:b0:7d:c2:16:76: db:1d:29:df:79:a8:f4:dc:87:ce:1c:38:c7:9b:36:34:8f:63: c3:26:93:21:18:34:77:fe:ec:74:f8:bf:83:2a:75:c4:69:03: db:60:c2:64:ab:c9:2f:dd:7b:5e:56:8e:74:73:8f:60:90:48: 61:95:10:78:91:14:df:b6:04:85:f3:8e:80:77:98:3a:12:61: a5:e2:41:40:8b:7d:8d:27:28:24:af:03:43:90:31:2b:47:44: 3e:4d:27:67:40:98:ca:74:5e:d6:0c:06:54:cc:d8:00:95:3f: 4e:8f:3d:3c:4b:9e:c9:c1:f4:18:6a:b0:16:4c:4d:3d:9c:0f: 78:b0:31:6b:aa:00:f6:24:05:64:43:11:4c:dd:ea:c4:43:6d: 88:b3:33:9f:34:fd:98:99:8a:92:0f:cf:c7:c0:ba:38:46:63: 3c:0f:8a:6b:8a:e1:17:27:40:3c:f1:ac:17:1a:11:be:94:f9: 50:8c:26:3d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hL9b2DYUidgCKlkYkBHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGVmYTU1YTgwMjFiZDczNTU3MGQ0Zjg0MDMwNmY1YmJkMTY3YThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7rKKuNqP+bVgGfcs7Cbg7EGz5ht 1zhhsukvlslZQPaBrr4DuoZjyedCvhD3/thBVxVdURCeN82XXtygxNkE5hK/jpSk CTkgGTK42mOHKzbF6L+nItuo6px3ZYIwhZ4QBMqwpqCgM5D/jEG+Ch79TEUOeSh+ APq1ieJM0Hp0l/9VrcJaaXxocRAnail8Ke1VFCy+pxkJI+IcCm5GXoOICm6EFqNL gpPL3DB9sj4Edgu0VCGfmJd81HyMpV+maCJrBMTdq9Y8dD9alEAt7uYCPnq+1GKg lWyYcdbcjXRHrTTdaYpB6TdGQsMTxCL0fXm0A2ceqns3OLQTi+IyekxibQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJ3vpVqAIb1zVXDU+EAwb1u9FnqPMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvbmUtbFdvQWh2WE5WY05UNFFEQnZXNzBXZW84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCXap8MA8E AgACMAkDBwAqAgEoAAgwDQYJKoZIhvcNAQELBQADggEBAFFwbdgta1mFeAATr4QJ SmIjbRZQhDsPWJIlo7UzWcRgR/kX0bhrWmCzhNkfM53lvB63aL7tWpmmwhA5aM9D j9SYtYewfcIWdtsdKd95qPTch84cOMebNjSPY8MmkyEYNHf+7HT4v4MqdcRpA9tg wmSryS/de15WjnRzj2CQSGGVEHiRFN+2BIXzjoB3mDoSYaXiQUCLfY0nKCSvA0OQ MStHRD5NJ2dAmMp0XtYMBlTM2ACVP06PPTxLnsnB9BhqsBZMTT2cD3iwMWuqAPYk BWRDEUzd6sRDbYizM580/ZiZipIPz8fAujhGYzwPimuK4RcnQDzxrBcaEb6U+VCM Jj0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:53 2026 by rpki-client