This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/neczu-0eWXL7_C-0ccy39y2cZ8o.roa File: neczu-0eWXL7_C-0ccy39y2cZ8o.roa (raw, json) Hash identifier: 2cDrbeT0bwg5vHduQkpsHfB9Ss7w6x/dznF6lDUYx0w= Subject key identifier: 9D:E7:33:BB:ED:1E:59:72:FB:FC:2F:B4:71:CC:B7:F7:2D:9C:67:CA Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019AA05A7A6E532B9C50AEED2E23CF8E4970 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/neczu-0eWXL7_C-0ccy39y2cZ8o.roa Signing time: Thu 20 Nov 2025 08:21:15 +0000 ROA not before: Thu 20 Nov 2025 08:21:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209372 IP address blocks: 89.19.56.0/24 maxlen: 24 89.19.57.0/24 maxlen: 24 89.19.58.0/24 maxlen: 24 89.19.59.0/24 maxlen: 24 185.59.232.0/22 maxlen: 24 185.68.245.0/24 maxlen: 24 185.79.51.0/24 maxlen: 24 185.79.79.0/24 maxlen: 24 185.81.146.0/24 maxlen: 24 185.81.147.0/24 maxlen: 24 185.81.172.0/24 maxlen: 24 185.81.173.0/24 maxlen: 24 185.81.174.0/23 maxlen: 24 185.81.174.0/24 maxlen: 24 185.81.184.0/23 maxlen: 24 185.81.186.0/23 maxlen: 24 185.89.40.0/24 maxlen: 24 185.89.104.0/22 maxlen: 22 185.89.108.0/22 maxlen: 24 185.95.100.0/23 maxlen: 24 185.95.102.0/23 maxlen: 24 185.96.80.0/24 maxlen: 24 185.96.82.0/24 maxlen: 24 185.96.83.0/24 maxlen: 24 185.96.132.0/24 maxlen: 24 185.97.0.0/22 maxlen: 24 185.98.43.0/24 maxlen: 24 185.101.203.0/24 maxlen: 24 185.104.151.0/24 maxlen: 24 185.112.56.0/23 maxlen: 24 185.175.224.0/23 maxlen: 24 185.175.226.0/23 maxlen: 24 185.185.147.0/24 maxlen: 24 193.221.215.0/24 maxlen: 24 213.170.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:5a:7a:6e:53:2b:9c:50:ae:ed:2e:23:cf:8e:49:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Nov 20 08:21:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9de733bbed1e5972fbfc2fb471ccb7f72d9c67ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6e:88:22:3a:8d:96:8c:76:42:a9:cc:16:16: ac:49:87:b7:32:c8:23:47:16:b8:5f:d5:3a:d4:ac: 5e:1b:78:83:db:ac:d6:88:d6:0a:b3:e4:7c:b5:45: 96:52:91:8f:ff:a1:a7:db:39:ab:46:4e:7e:9d:b6: a1:15:95:d1:e2:30:b5:3a:d9:77:d7:a1:bb:f1:c8: 37:49:76:48:52:96:4f:04:29:48:e4:68:a0:84:66: 53:01:fb:7c:9a:7d:a5:a4:c9:1b:e3:7c:08:10:63: ea:26:91:16:84:3c:4f:01:88:da:ac:04:5e:72:ac: e9:5a:59:a2:3f:36:ae:fc:15:85:a2:e1:42:36:46: 5b:08:b8:46:ac:64:b5:c0:d6:f5:ef:ee:93:97:60: 32:f7:02:ad:eb:f5:9c:15:75:2b:d4:11:ac:fe:67: 39:03:59:e2:53:5f:27:46:0e:0d:0b:3e:cd:3a:c2: 5f:e9:79:ea:30:6f:b5:d2:db:ef:13:4b:89:0d:85: ad:0d:3b:20:5e:7e:14:57:b7:5e:18:b1:4a:1d:97: a7:a3:d7:dc:e0:01:60:4c:d5:84:7e:4d:18:21:88: 58:5b:78:63:b2:1c:e4:59:e0:f5:8b:3e:4a:f6:fa: 74:3c:7b:ac:9a:17:11:2f:b1:06:58:14:e6:ec:4f: b8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E7:33:BB:ED:1E:59:72:FB:FC:2F:B4:71:CC:B7:F7:2D:9C:67:CA X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/neczu-0eWXL7_C-0ccy39y2cZ8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.56.0/22 185.59.232.0/22 185.68.245.0/24 185.79.51.0/24 185.79.79.0/24 185.81.146.0/23 185.81.172.0/22 185.81.184.0/22 185.89.40.0/24 185.89.104.0/21 185.95.100.0/22 185.96.80.0/24 185.96.82.0/23 185.96.132.0/24 185.97.0.0/22 185.98.43.0/24 185.101.203.0/24 185.104.151.0/24 185.112.56.0/23 185.175.224.0/22 185.185.147.0/24 193.221.215.0/24 213.170.223.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:96:44:e7:f5:68:ca:79:09:48:32:28:8e:53:87:c6:e6:f4: a0:3b:66:fb:32:9d:75:15:b6:6d:29:51:e2:a0:32:ab:25:55: 42:a0:07:18:06:ef:75:f4:bd:03:e7:bf:fe:71:f4:38:92:c2: 08:4b:a0:c5:a3:40:5b:c3:fb:c0:71:fd:02:a7:16:ba:c5:9f: 5c:89:91:59:32:e0:4e:69:85:f1:01:3a:92:de:33:a8:48:ab: 25:c2:20:cb:26:f2:85:db:14:51:ea:4b:95:34:e1:5f:c3:aa: 90:73:61:65:e5:6e:0a:e4:43:04:f5:a5:0b:b7:a7:63:61:e6: 0e:fe:51:09:a3:8b:e9:15:62:fd:a2:a0:d2:63:06:26:d2:4e: 3c:47:ab:b2:d1:cf:2f:bd:95:73:1a:7e:d2:20:43:a4:d4:4e: 5f:96:e3:14:51:05:c7:6e:4b:6c:1a:50:d3:07:bb:66:c0:3c: 64:93:ca:ee:47:4f:04:87:a2:8d:2f:f0:46:c1:c2:d7:e9:f5: 7b:a9:8b:92:06:94:6b:92:d5:ab:ce:43:71:00:20:61:ef:4c: d7:a7:e2:69:21:4b:a1:ab:1e:10:45:b2:ff:4b:9e:9a:d2:41: a1:fb:02:f0:05:cf:ac:f5:55:83:1a:ea:2c:0b:9a:81:7d:3f: 6b:60:65:00 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZqgWnpuUyucUK7tLiPPjklwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjUxMTIwMDgyMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGU3MzNiYmVkMWU1OTcyZmJmYzJmYjQ3MWNjYjdmNzJkOWM2N2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m6IIjqNlox2QqnMFhasSYe3Msgj Rxa4X9U61KxeG3iD26zWiNYKs+R8tUWWUpGP/6Gn2zmrRk5+nbahFZXR4jC1Otl3 16G78cg3SXZIUpZPBClI5GighGZTAft8mn2lpMkb43wIEGPqJpEWhDxPAYjarARe cqzpWlmiPzau/BWFouFCNkZbCLhGrGS1wNb17+6Tl2Ay9wKt6/WcFXUr1BGs/mc5 A1niU18nRg4NCz7NOsJf6XnqMG+10tvvE0uJDYWtDTsgXn4UV7deGLFKHZeno9fc 4AFgTNWEfk0YIYhYW3hjshzkWeD1iz5K9vp0PHusmhcRL7EGWBTm7E+4XwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFJ3nM7vtHlly+/wvtHHMt/ctnGfKMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvbmVjenUtMGVXWEw3X0MtMGNjeTM5eTJjWjhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAJZ EzgDBAK5O+gDBAC5RPUDBAC5TzMDBAC5T08DBAG5UZIDBAK5UawDBAK5UbgDBAC5 WSgDBAO5WWgDBAK5X2QDBAC5YFADBAG5YFIDBAC5YIQDBAK5YQADBAC5YisDBAC5 ZcsDBAC5aJcDBAG5cDgDBAK5r+ADBAC5uZMDBADB3dcDBADVqt8wDQYJKoZIhvcN AQELBQADggEBADyWROf1aMp5CUgyKI5Th8bm9KA7ZvsynXUVtm0pUeKgMqslVUKg BxgG73X0vQPnv/5x9DiSwghLoMWjQFvD+8Bx/QKnFrrFn1yJkVky4E5phfEBOpLe M6hIqyXCIMsm8oXbFFHqS5U04V/DqpBzYWXlbgrkQwT1pQu3p2Nh5g7+UQmji+kV Yv2ioNJjBibSTjxHq7LRzy+9lXMaftIgQ6TUTl+W4xRRBcduS2waUNMHu2bAPGST yu5HTwSHoo0v8EbBwtfp9Xupi5IGlGuS1avOQ3EAIGHvTNen4mkhS6GrHhBFsv9L nprSQaH7AvAFz6z1VYMa6iwLmoF9P2tgZQA= -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:43 2025 by rpki-client