This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/NES_Di85pZi5ENKpgDz8EQo01i8.roa File: NES_Di85pZi5ENKpgDz8EQo01i8.roa (raw, json) Hash identifier: ohM4Ey0EufRoQF8r1FlwKpwiQqOYJ9oFC/DI4pckWkI= Subject key identifier: 34:44:BF:0E:2F:39:A5:98:B9:10:D2:A9:80:3C:FC:11:0A:34:D6:2F Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73 Certificate serial: 019B7D5B59C14815196B7C996681DCB56E0E Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/NES_Di85pZi5ENKpgDz8EQo01i8.roa Signing time: Fri 02 Jan 2026 06:18:17 +0000 ROA not before: Fri 02 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62749 IP address blocks: 185.32.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:59:c1:48:15:19:6b:7c:99:66:81:dc:b5:6e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73 Validity Not Before: Jan 2 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3444bf0e2f39a598b910d2a9803cfc110a34d62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:64:88:b7:5c:51:c3:dc:98:03:6e:c6:ef: 75:d7:a0:f1:7d:d1:70:ac:20:c7:eb:99:3e:a4:7c: 99:87:27:11:18:da:e1:02:7b:ca:a6:bc:2e:66:9f: b5:a9:40:aa:2b:b6:07:fd:3a:e2:9d:c6:83:e9:06: c0:66:f3:fb:ae:cd:29:62:9d:7f:8f:d7:6b:c7:b2: 33:b5:43:97:19:a8:99:68:93:94:aa:35:7b:4a:22: ab:07:81:46:ad:68:3a:bf:2a:aa:26:22:98:fe:5b: 3c:53:9a:85:d5:5e:c7:de:31:c1:f7:39:ca:0f:21: d1:2f:b8:6c:36:2c:d3:ec:30:cb:ae:80:ad:42:e3: 17:c1:47:da:fd:35:e2:39:c1:f7:27:a9:de:62:ce: 82:ff:b9:0c:bf:90:6f:30:62:68:34:1d:92:d2:54: 1f:5d:af:58:62:b6:1e:8c:44:27:e6:79:ba:e2:34: 9c:63:89:8c:2b:f2:1b:b4:10:aa:19:30:07:0e:0f: e7:7f:12:75:e9:fd:21:5f:02:56:55:ea:09:42:9e: 45:f6:96:6d:ca:02:07:31:2b:ab:e9:8c:ac:d7:74: cf:92:53:ba:d0:11:9a:ff:88:c2:6e:e8:20:06:a7: 02:96:45:0d:c0:7f:82:89:d0:f1:23:57:59:30:cc: 0b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:44:BF:0E:2F:39:A5:98:B9:10:D2:A9:80:3C:FC:11:0A:34:D6:2F X509v3 Authority Key Identifier: keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/NES_Di85pZi5ENKpgDz8EQo01i8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.76.0/24 Signature Algorithm: sha256WithRSAEncryption 44:fa:b5:dd:1b:12:f0:50:c3:f6:11:0c:6f:ff:20:bc:a4:30: 67:10:b1:1b:69:ca:05:1a:0d:a0:62:89:d9:a1:51:37:0a:ca: c0:e5:79:ba:f6:80:2e:ee:ee:4f:97:8d:c2:6e:f8:ef:28:be: 0d:2b:65:41:02:6b:16:da:22:17:f2:50:a5:5f:a3:cf:35:8f: 00:10:20:68:5e:ec:35:0a:25:c8:35:c1:b8:2a:ac:93:4f:95: c1:ea:44:12:72:60:5e:0e:e7:c4:61:2b:35:7d:1f:18:3c:15: 56:3c:c1:b2:9c:2b:0f:49:ac:49:5e:e9:4f:c6:8e:a6:a8:39: 3b:78:08:b1:d1:bb:23:09:72:dc:54:6b:68:4c:77:8b:b6:a7: 72:28:96:b4:4b:a1:b3:8c:0a:e6:e2:09:84:5f:24:bd:f6:5f: b5:c0:15:04:ee:6d:e6:af:e4:9b:1c:e8:09:01:7e:24:17:c4: ed:42:f3:a7:7a:24:20:ea:0a:a8:23:57:0e:a1:19:58:ac:fb: 81:8f:7c:50:71:40:29:51:d6:ae:35:eb:c8:9a:57:c1:1a:47: c5:87:9a:b5:82:49:7a:4e:db:2f:e5:f1:8e:04:a8:ca:ec:f8: f6:e1:e3:0a:f2:78:d8:34:ec:1d:25:a4:63:8d:93:43:aa:44: 14:d1:a2:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W1nBSBUZa3yZZoHctW4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODQ2YzhjMGRiNjVkYzc0NmVmNjRjZmQ4MmJiOWMxOTRl MjdmNzMwHhcNMjYwMTAyMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDQ0YmYwZTJmMzlhNTk4YjkxMGQyYTk4MDNjZmMxMTBhMzRkNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOJkiLdcUcPcmANuxu9116DxfdFw rCDH65k+pHyZhycRGNrhAnvKprwuZp+1qUCqK7YH/TrincaD6QbAZvP7rs0pYp1/ j9drx7IztUOXGaiZaJOUqjV7SiKrB4FGrWg6vyqqJiKY/ls8U5qF1V7H3jHB9znK DyHRL7hsNizT7DDLroCtQuMXwUfa/TXiOcH3J6neYs6C/7kMv5BvMGJoNB2S0lQf Xa9YYrYejEQn5nm64jScY4mMK/IbtBCqGTAHDg/nfxJ16f0hXwJWVeoJQp5F9pZt ygIHMSur6Yys13TPklO60BGa/4jCbuggBqcClkUNwH+CidDxI1dZMMwLsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDREvw4vOaWYuRDSqYA8/BEKNNYvMB8GA1UdIwQY MBaAFG+EbIwNtl3HRu9kz9grucGU4n9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMt NDhiYTkyOGZiMWJlLzEvTkVTX0RpODVwWmk1RU5LcGdEejhFUW8wMWk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMtNDhiYTkyOGZiMWJl LzEvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSBMMA0G CSqGSIb3DQEBCwUAA4IBAQBE+rXdGxLwUMP2EQxv/yC8pDBnELEbacoFGg2gYonZ oVE3CsrA5Xm69oAu7u5Pl43CbvjvKL4NK2VBAmsW2iIX8lClX6PPNY8AECBoXuw1 CiXINcG4KqyTT5XB6kQScmBeDufEYSs1fR8YPBVWPMGynCsPSaxJXulPxo6mqDk7 eAix0bsjCXLcVGtoTHeLtqdyKJa0S6GzjArm4gmEXyS99l+1wBUE7m3mr+SbHOgJ AX4kF8TtQvOneiQg6gqoI1cOoRlYrPuBj3xQcUApUdauNevImlfBGkfFh5q1gkl6 Ttsv5fGOBKjK7Pj24eMK8njYNOwdJaRjjZNDqkQU0aJN -----END CERTIFICATE-----Generated at Mon Jan 26 14:21:43 2026 by rpki-client