This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/nlcpl9ulhW9UJP1m-NfebbvM-08.roa File: nlcpl9ulhW9UJP1m-NfebbvM-08.roa (raw, json) Hash identifier: IBQWkMt/VVWxVDIuSxk0QRhZsHES5xi9v/NlOWNnx9k= Subject key identifier: 9E:57:29:97:DB:A5:85:6F:54:24:FD:66:F8:D7:DE:6D:BB:CC:FB:4F Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2 Certificate serial: 019B797E9A3C2A83F99932B1BC490C41030E Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/nlcpl9ulhW9UJP1m-NfebbvM-08.roa Signing time: Thu 01 Jan 2026 12:18:18 +0000 ROA not before: Thu 01 Jan 2026 12:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20712 IP address blocks: 176.110.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9a:3c:2a:83:f9:99:32:b1:bc:49:0c:41:03:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2 Validity Not Before: Jan 1 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e572997dba5856f5424fd66f8d7de6dbbccfb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:b5:35:a8:f1:83:57:ca:d6:42:80:ee:91: 85:07:a4:4e:e3:6c:0e:f8:1c:ac:e7:6f:59:5d:ad: e6:37:fb:8b:0a:78:6e:d1:09:9c:80:91:70:29:7d: 06:fc:91:4e:51:9a:ef:b1:70:19:78:8d:35:37:12: 86:d7:ba:ea:b0:42:16:99:3a:af:c5:91:8c:91:70: 47:94:23:8d:98:5d:81:26:98:a2:38:0c:99:1c:eb: f3:47:f4:c0:69:c6:ab:70:bb:8b:45:18:e0:a4:a5: bd:7c:09:13:81:7c:bf:85:43:9e:f3:fa:8a:54:bf: d9:ee:6d:b6:90:c5:3a:21:96:c9:21:7d:70:66:d7: 74:4a:2d:65:f3:34:0c:b6:fb:1f:d9:6b:89:a8:3f: ad:98:85:2c:73:38:da:04:ea:9a:df:32:bd:ec:a2: 4b:01:35:b9:f3:8e:e3:df:79:f6:45:39:6e:f0:6e: e1:92:87:10:5a:37:db:5d:7a:c8:0c:17:e7:6e:21: 9a:3f:3d:c1:3b:05:92:c7:43:5b:91:4e:0f:66:64: 7c:a9:1e:4e:73:f1:04:c3:65:0d:ae:4f:31:b0:38: 71:4d:93:cf:a1:c8:e4:8b:73:f8:3c:a0:28:83:c2: 4c:15:ff:a0:0d:0c:23:4b:87:a1:d1:39:62:97:a3: 2a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:29:97:DB:A5:85:6F:54:24:FD:66:F8:D7:DE:6D:BB:CC:FB:4F X509v3 Authority Key Identifier: keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/nlcpl9ulhW9UJP1m-NfebbvM-08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.110.118.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:8e:4c:e7:b2:e7:80:e0:3d:54:08:0a:cb:76:37:ba:8b:80: d0:18:42:ae:9a:a8:23:3a:83:c0:45:95:98:5a:a2:65:7c:09: e8:b1:bb:dc:1e:47:6f:c0:8b:a6:08:c2:8e:81:11:90:ae:66: 14:14:2b:77:95:3d:d0:99:f3:b1:c3:6d:ab:41:04:41:bd:4d: 77:6c:f4:47:d1:19:81:ad:a7:85:87:1f:9e:5e:58:a3:e5:a8: 67:bb:75:51:e0:57:f0:f3:91:35:71:ed:ff:06:9d:04:c1:de: bb:c0:79:5e:d7:0b:88:92:82:63:36:d3:a3:85:46:5e:f2:23: 51:d0:4e:f8:88:ec:66:94:ea:9a:f5:b0:d5:9c:5b:03:b4:2b: a7:98:49:f2:de:d8:de:69:77:bb:c3:b5:cd:e9:b5:4b:63:56: 53:bb:ff:45:94:e0:52:88:3f:7d:a1:56:54:14:1e:6d:0e:bc: 19:be:dc:f8:57:8b:3f:c5:e1:1c:01:96:b7:0f:e9:57:d1:eb: 6b:4f:1c:fe:85:61:2a:80:9f:99:4a:8a:48:1a:13:18:16:f3: 16:44:50:67:f2:99:ce:44:08:2a:3e:e7:d2:ba:96:b5:0e:9a: 0f:14:72:24:d4:fe:3b:c2:c5:f5:85:b8:8b:a7:9c:78:a8:c6: 06:e6:c9:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpo8KoP5mTKxvEkMQQMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0M2I2N2I5ZDRjOTljNzI1ZTM1N2Q4MTc0ZmI3ZTAyNGEx NTAyZTIwHhcNMjYwMTAxMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTU3Mjk5N2RiYTU4NTZmNTQyNGZkNjZmOGQ3ZGU2ZGJiY2NmYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUu1Najxg1fK1kKA7pGFB6RO42wO +Bys529ZXa3mN/uLCnhu0QmcgJFwKX0G/JFOUZrvsXAZeI01NxKG17rqsEIWmTqv xZGMkXBHlCONmF2BJpiiOAyZHOvzR/TAacarcLuLRRjgpKW9fAkTgXy/hUOe8/qK VL/Z7m22kMU6IZbJIX1wZtd0Si1l8zQMtvsf2WuJqD+tmIUsczjaBOqa3zK97KJL ATW5847j33n2RTlu8G7hkocQWjfbXXrIDBfnbiGaPz3BOwWSx0NbkU4PZmR8qR5O c/EEw2UNrk8xsDhxTZPPocjki3P4PKAog8JMFf+gDQwjS4eh0Tlil6Mq+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ5XKZfbpYVvVCT9ZvjX3m27zPtPMB8GA1UdIwQY MBaAFEQ7Z7nUyZxyXjV9gXT7fgJKFQLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTIt YzgzYjVmYzI2NTQ1LzEvbmxjcGw5dWxoVzlVSlAxbS1OZmViYnZNLTA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTItYzgzYjVmYzI2NTQ1 LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsG52MA0G CSqGSIb3DQEBCwUAA4IBAQBfjkznsueA4D1UCArLdje6i4DQGEKumqgjOoPARZWY WqJlfAnosbvcHkdvwIumCMKOgRGQrmYUFCt3lT3QmfOxw22rQQRBvU13bPRH0RmB raeFhx+eXlij5ahnu3VR4Ffw85E1ce3/Bp0Ewd67wHle1wuIkoJjNtOjhUZe8iNR 0E74iOxmlOqa9bDVnFsDtCunmEny3tjeaXe7w7XN6bVLY1ZTu/9FlOBSiD99oVZU FB5tDrwZvtz4V4s/xeEcAZa3D+lX0etrTxz+hWEqgJ+ZSopIGhMYFvMWRFBn8pnO RAgqPufSupa1DpoPFHIk1P47wsX1hbiLp5x4qMYG5slL -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:10 2026 by rpki-client