This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ne1Hve3IxHD6J17bvXlDCoPZloI.roa File: ne1Hve3IxHD6J17bvXlDCoPZloI.roa (raw, json) Hash identifier: E85TTNY9E00OvFpACeu2MfPIAJt6N64uMbnXW5x8sCM= Subject key identifier: 9D:ED:47:BD:ED:C8:C4:70:FA:27:5E:DB:BD:79:43:0A:83:D9:96:82 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D20DB4FC3CBBE9D9B5FE0A219F3BD Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ne1Hve3IxHD6J17bvXlDCoPZloI.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58079 IP address blocks: 84.1.241.0/24 maxlen: 24 84.1.242.0/24 maxlen: 24 84.1.243.0/24 maxlen: 24 84.1.244.0/24 maxlen: 24 84.1.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:20:db:4f:c3:cb:be:9d:9b:5f:e0:a2:19:f3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ded47bdedc8c470fa275edbbd79430a83d99682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:a6:c5:42:f2:d8:70:5f:0b:3f:9a:99:39: 2f:9a:13:ea:f1:23:c1:b3:4c:e6:d3:e2:3c:06:1d: 03:96:ec:52:e8:1a:7c:61:49:64:3a:3e:f8:56:0e: 9f:1a:11:8b:64:de:95:d6:43:79:8a:e6:61:2c:c0: c8:55:d2:23:9c:9d:89:ce:e3:41:29:69:c6:8a:c9: bf:76:a0:fc:ce:96:87:5e:3e:eb:52:0f:16:ca:48: e6:68:e5:10:c2:d4:25:5b:62:51:6f:89:98:c4:e8: e5:8c:c7:93:5f:c1:ae:e4:2c:eb:f8:0f:4d:c1:0d: 80:f1:7d:2e:6a:e6:3c:65:fa:50:98:08:f5:18:09: 02:48:0c:7c:f7:73:2f:bd:fd:e3:8d:89:3e:be:32: bb:72:4f:1b:44:73:da:db:1c:d3:a8:c6:bc:51:1a: a2:ce:3a:67:85:f9:9b:b5:49:63:f0:a1:d0:b4:29: 48:95:e3:53:20:08:26:ac:a4:9b:71:c1:1d:fb:9a: bc:25:67:a8:d1:c7:2d:b7:90:1e:97:45:63:78:50: ee:a0:5b:ea:ca:1e:bd:97:57:8b:07:12:33:5e:25: 49:f4:51:41:2c:57:6f:cc:35:cf:32:48:d9:74:e5: 07:c5:a0:00:f2:10:b6:71:ce:6d:e3:13:76:98:2d: 37:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:ED:47:BD:ED:C8:C4:70:FA:27:5E:DB:BD:79:43:0A:83:D9:96:82 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ne1Hve3IxHD6J17bvXlDCoPZloI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.1.241.0-84.1.245.255 Signature Algorithm: sha256WithRSAEncryption 71:19:00:63:9f:54:4f:3e:a3:0b:08:96:d9:ee:88:6e:86:4b: 1c:80:23:91:1a:3a:68:23:be:71:53:56:0f:a7:a7:19:c7:3b: c2:93:1d:67:5d:49:9f:4d:9d:1b:dc:04:ac:45:9a:39:ad:4e: a0:c6:4f:64:d0:bb:f4:3f:54:d8:75:88:42:51:32:e1:a8:e3: 36:95:b7:6a:a1:8d:72:63:46:60:58:5b:9e:04:c5:62:e9:b2: 18:6e:36:94:a1:7e:05:59:1d:b6:3e:ec:69:aa:80:96:54:36: 4d:d3:98:cd:a5:95:47:de:99:4d:6a:aa:85:28:19:f2:d5:83: 8b:40:66:ab:83:3c:66:cc:b3:2b:ff:a4:8f:55:8e:84:c7:ef: 49:05:c8:8f:12:14:d6:fc:1a:2c:3c:a7:ad:47:d5:58:7f:a4: a8:12:96:49:25:e9:4e:4e:1c:94:8e:f4:d6:98:b2:9f:02:11: 93:eb:f2:e2:d2:7f:46:8e:84:60:79:d6:43:05:f1:af:b3:aa: 67:86:0d:97:7a:97:96:04:ca:d1:2b:e6:ee:20:bf:36:2f:83: 5c:56:9c:9e:4e:09:fe:3f:7b:4e:5d:84:75:7d:52:0a:bb:5e: 5a:ed:61:90:02:3b:5b:5c:2d:7f:bf:e3:1d:6e:27:ff:8d:2c: f4:8f:09:24 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XSDbT8PLvp2bX+CiGfO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGVkNDdiZGVkYzhjNDcwZmEyNzVlZGJiZDc5NDMwYTgzZDk5NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshumxULy2HBfCz+amTkvmhPq8SPB s0zm0+I8Bh0DluxS6Bp8YUlkOj74Vg6fGhGLZN6V1kN5iuZhLMDIVdIjnJ2JzuNB KWnGism/dqD8zpaHXj7rUg8WykjmaOUQwtQlW2JRb4mYxOjljMeTX8Gu5Czr+A9N wQ2A8X0uauY8ZfpQmAj1GAkCSAx893Mvvf3jjYk+vjK7ck8bRHPa2xzTqMa8URqi zjpnhfmbtUlj8KHQtClIleNTIAgmrKSbccEd+5q8JWeo0cctt5Ael0VjeFDuoFvq yh69l1eLBxIzXiVJ9FFBLFdvzDXPMkjZdOUHxaAA8hC2cc5t4xN2mC03FwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJ3tR73tyMRw+ide2715QwqD2ZaCMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvbmUxSHZlM0l4SEQ2SjE3YnZYbERDb1BabG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABUAfED BAFUAfQwDQYJKoZIhvcNAQELBQADggEBAHEZAGOfVE8+owsIltnuiG6GSxyAI5Ea OmgjvnFTVg+npxnHO8KTHWddSZ9NnRvcBKxFmjmtTqDGT2TQu/Q/VNh1iEJRMuGo 4zaVt2qhjXJjRmBYW54ExWLpshhuNpShfgVZHbY+7GmqgJZUNk3TmM2llUfemU1q qoUoGfLVg4tAZquDPGbMsyv/pI9VjoTH70kFyI8SFNb8Giw8p61H1Vh/pKgSlkkl 6U5OHJSO9NaYsp8CEZPr8uLSf0aOhGB51kMF8a+zqmeGDZd6l5YEytEr5u4gvzYv g1xWnJ5OCf4/e05dhHV9Ugq7XlrtYZACO1tcLX+/4x1uJ/+NLPSPCSQ= -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:16 2026 by rpki-client