This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/NE1cSr4PhSWQqxI3RwadUkiTzr4.roa File: NE1cSr4PhSWQqxI3RwadUkiTzr4.roa (raw, json) Hash identifier: gTOFfm6+4dqvFvqDPuHaiv7nUh/TeTbmvELpqBUfVtQ= Subject key identifier: 34:4D:5C:4A:BE:0F:85:25:90:AB:12:37:47:06:9D:52:48:93:CE:BE Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56 Certificate serial: 019B7EA70D103FF6DF010E4407AA9125E90B Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/NE1cSr4PhSWQqxI3RwadUkiTzr4.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2635 IP address blocks: 185.138.28.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0d:10:3f:f6:df:01:0e:44:07:aa:91:25:e9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=344d5c4abe0f852590ab123747069d524893cebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:21:f5:f4:80:29:4b:5e:2a:f4:49:4a:f8: 2c:13:4d:22:f6:36:8c:ba:b0:7a:ff:cc:93:3e:27: 79:04:b9:dc:2d:a8:d1:ee:79:4c:88:2d:06:8e:fb: c7:06:6b:f7:50:14:d1:53:4c:c3:c5:5f:88:18:36: f0:f7:4e:69:7f:57:4e:7f:22:b3:58:08:21:ce:63: ba:2a:15:50:a8:ee:09:28:7d:c3:93:60:f0:c1:25: 23:e1:86:3c:97:f5:5a:93:52:c1:fa:15:a3:d5:5a: b1:fc:96:51:6d:ad:4e:63:1b:08:b4:83:a5:15:1f: 9c:dc:8a:d1:8a:48:a4:8a:08:5f:64:00:28:65:fa: 40:fe:a2:f2:d9:da:c9:51:d0:2a:81:32:e3:d4:aa: a3:16:a7:f6:76:44:bb:f2:4c:72:92:41:47:46:80: 6b:f9:93:33:2a:12:a4:92:14:42:b7:86:a8:9b:35: f9:3b:b2:38:eb:a6:60:29:f8:29:45:7f:f2:80:0d: 83:36:bd:b0:4b:8f:be:2d:f0:16:22:fd:83:05:37: 81:f5:92:41:8f:45:9f:d8:62:36:53:3f:3d:2d:34: 9b:fd:4d:f7:78:fe:13:ab:b9:6a:35:a8:db:70:fb: 7c:dd:91:94:90:2e:ac:57:6f:1e:11:8d:8d:6f:e2: 23:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4D:5C:4A:BE:0F:85:25:90:AB:12:37:47:06:9D:52:48:93:CE:BE X509v3 Authority Key Identifier: keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/NE1cSr4PhSWQqxI3RwadUkiTzr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.28.0/22 Signature Algorithm: sha256WithRSAEncryption 45:7a:97:66:f5:07:72:01:64:a2:dd:3e:f2:89:60:71:db:24: 9f:1d:d3:7e:51:57:93:40:64:c2:93:41:e6:f7:b5:3e:a9:75: 54:6b:fe:c4:42:80:81:33:23:7e:f6:8b:e9:63:0a:37:90:63: c6:6b:97:d1:3c:91:2f:12:7b:b2:24:2f:f6:e6:2e:05:ab:1d: a3:5e:00:ee:21:cc:24:bf:df:b0:92:76:81:14:90:23:98:d7: 69:22:0e:d3:ae:60:f2:9a:8c:88:7d:d1:4d:d9:a8:50:4c:a7: f6:7b:51:d8:1f:f6:d8:b7:1c:bb:ac:9f:b6:51:cd:f9:83:42: 35:2f:88:46:b7:51:88:c3:5c:ca:d8:88:a9:a8:98:71:90:de: 95:b0:3d:a8:f5:34:31:fe:f3:17:18:74:d2:3e:44:a8:a7:ab: 58:37:94:61:08:38:e9:a9:c6:72:28:8f:aa:16:02:71:cb:af: d3:ee:0e:09:d7:87:f5:54:3f:be:3a:13:be:a5:81:c0:b3:51: fd:58:8b:85:bc:d8:39:19:88:c3:b7:15:b6:d5:33:5c:f6:40: 6c:13:86:4a:16:cf:8f:18:d2:74:39:ce:3a:4a:f9:85:6e:e3: 10:77:40:17:d7:a6:0e:56:c6:8f:13:17:94:91:15:c2:41:e7: 3e:a0:a9:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pw0QP/bfAQ5EB6qRJekLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNGQwMzk0MDg0ZjdlNDA2MjYwOTcyOGY0ZDRkNTdiMDY0 NTVhNTYwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDRkNWM0YWJlMGY4NTI1OTBhYjEyMzc0NzA2OWQ1MjQ4OTNjZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva8h9fSAKUteKvRJSvgsE00i9jaM urB6/8yTPid5BLncLajR7nlMiC0GjvvHBmv3UBTRU0zDxV+IGDbw905pf1dOfyKz WAghzmO6KhVQqO4JKH3Dk2DwwSUj4YY8l/Vak1LB+hWj1Vqx/JZRba1OYxsItIOl FR+c3IrRikikighfZAAoZfpA/qLy2drJUdAqgTLj1KqjFqf2dkS78kxykkFHRoBr +ZMzKhKkkhRCt4aomzX5O7I466ZgKfgpRX/ygA2DNr2wS4++LfAWIv2DBTeB9ZJB j0Wf2GI2Uz89LTSb/U33eP4Tq7lqNajbcPt83ZGUkC6sV28eEY2Nb+IjOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDRNXEq+D4UlkKsSN0cGnVJIk86+MB8GA1UdIwQY MBaAFOxNA5QIT35AYmCXKPTU1XsGRVpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2Et MjY4Y2VkODQzNWI1LzEvTkUxY1NyNFBoU1dRcXhJM1J3YWRVa2lUenI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8yMzY2MTAtMjQ0OC00MjNiLTliY2EtMjY4Y2VkODQzNWI1 LzEvN0UwRGxBaFBma0JpWUpjbzlOVFZld1pGV2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYocMA0G CSqGSIb3DQEBCwUAA4IBAQBFepdm9QdyAWSi3T7yiWBx2ySfHdN+UVeTQGTCk0Hm 97U+qXVUa/7EQoCBMyN+9ovpYwo3kGPGa5fRPJEvEnuyJC/25i4Fqx2jXgDuIcwk v9+wknaBFJAjmNdpIg7TrmDymoyIfdFN2ahQTKf2e1HYH/bYtxy7rJ+2Uc35g0I1 L4hGt1GIw1zK2IipqJhxkN6VsD2o9TQx/vMXGHTSPkSop6tYN5RhCDjpqcZyKI+q FgJxy6/T7g4J14f1VD++OhO+pYHAs1H9WIuFvNg5GYjDtxW21TNc9kBsE4ZKFs+P GNJ0Oc46SvmFbuMQd0AX16YOVsaPExeUkRXCQec+oKnW -----END CERTIFICATE-----Generated at Sun Jan 25 16:56:04 2026 by rpki-client