This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/NPH-fpbfT4l7tqIfzpWpmBL612E.roa File: NPH-fpbfT4l7tqIfzpWpmBL612E.roa (raw, json) Hash identifier: usDB/lMLbqs1qEd8MJSCM8v9kpKJXr8T1CUNQ60yINA= Subject key identifier: 34:F1:FE:7E:96:DF:4F:89:7B:B6:A2:1F:CE:95:A9:98:12:FA:D7:61 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019B7C801364326D13988A5DF32D7ECC22F6 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/NPH-fpbfT4l7tqIfzpWpmBL612E.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209470 IP address blocks: 2a13:2200:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:64:32:6d:13:98:8a:5d:f3:2d:7e:cc:22:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34f1fe7e96df4f897bb6a21fce95a99812fad761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e6:47:14:8b:3d:54:c1:4c:ef:8d:d4:80:f2: 6d:2d:69:76:44:0d:7b:92:0c:b6:67:d2:8d:e9:ad: 70:f4:52:e2:aa:7a:bf:f9:c9:5a:52:64:aa:92:4c: cc:23:3a:0e:f8:02:79:e4:4e:42:5f:be:2f:e7:50: 47:de:e3:71:37:35:ac:15:55:9c:46:b8:3e:78:6b: 33:30:b9:05:21:f6:8b:4c:16:3d:45:ab:42:6f:89: a0:27:13:4a:2f:9a:2d:86:fa:69:1a:e0:2c:62:ce: 3d:2d:70:59:cf:86:67:34:aa:d0:94:c9:b6:b5:7f: 09:98:4f:6e:f2:9a:f0:55:86:c7:4f:e4:ad:4e:93: d3:fb:08:d3:4e:12:2f:fb:6b:23:05:e3:19:51:1c: 09:07:16:70:47:79:ee:4a:6a:7d:38:f5:5e:03:6b: 4b:b8:62:2e:0f:77:2c:83:f1:ff:79:e5:e3:d5:47: 4e:db:fd:88:71:80:9f:50:48:b4:36:91:0e:c8:03: 3d:f6:fe:43:f0:72:52:fa:5c:e1:3a:b7:4d:76:3c: 4d:0e:0a:f0:a8:5e:d1:18:a4:fa:15:87:3d:8b:3f: a3:54:88:78:98:6b:1d:47:01:a7:af:d2:b1:41:f4: 51:3a:1e:0c:84:4a:6f:49:62:c0:bd:f2:60:3a:15: 1e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F1:FE:7E:96:DF:4F:89:7B:B6:A2:1F:CE:95:A9:98:12:FA:D7:61 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/NPH-fpbfT4l7tqIfzpWpmBL612E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2200:d::/48 Signature Algorithm: sha256WithRSAEncryption 0c:de:72:8c:34:7b:cc:30:be:51:37:44:9d:de:46:e1:59:a3: b9:cd:78:0e:af:75:a9:f3:be:5d:ab:e7:16:10:c4:59:60:e8: b8:82:96:53:1d:72:b4:75:27:53:f9:17:bf:50:4f:18:d3:08: b1:4a:62:ae:65:71:44:01:1c:87:8b:18:59:f9:00:f8:c5:7c: 16:63:23:d0:0a:b3:c1:df:ea:4f:65:03:5d:79:27:97:4f:ec: ce:f3:b6:59:4c:ed:c0:44:b5:94:47:05:e7:e0:80:f7:20:51: 8b:89:ce:d1:e6:e2:19:b0:a2:ca:02:70:5e:e0:57:4b:ac:ef: af:8a:5e:f0:41:ff:56:3a:56:46:f1:b4:b1:6b:fe:2a:be:3b: 70:e1:f1:16:b6:41:bb:41:b5:84:f7:2f:9b:1b:2c:6f:a5:0f: a2:82:9e:ee:cc:72:2e:be:b0:cb:39:a4:65:2a:95:bc:71:47: 6f:8f:ec:01:36:7d:9b:35:92:09:6b:29:a8:c5:bb:63:a1:16: 25:e1:04:a0:9d:9a:bf:eb:7d:e8:a8:80:3d:6f:83:2e:f7:a9: 19:12:d2:40:e8:be:1b:72:6f:91:c6:e9:5d:7c:ee:df:f3:ba: d2:69:78:b7:e8:11:c7:46:39:25:88:84:e4:b6:93:c2:7e:54: 84:14:f3:85 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gBNkMm0TmIpd8y1+zCL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGYxZmU3ZTk2ZGY0Zjg5N2JiNmEyMWZjZTk1YTk5ODEyZmFkNzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOZHFIs9VMFM743UgPJtLWl2RA17 kgy2Z9KN6a1w9FLiqnq/+claUmSqkkzMIzoO+AJ55E5CX74v51BH3uNxNzWsFVWc Rrg+eGszMLkFIfaLTBY9RatCb4mgJxNKL5othvppGuAsYs49LXBZz4ZnNKrQlMm2 tX8JmE9u8prwVYbHT+StTpPT+wjTThIv+2sjBeMZURwJBxZwR3nuSmp9OPVeA2tL uGIuD3csg/H/eeXj1UdO2/2IcYCfUEi0NpEOyAM99v5D8HJS+lzhOrdNdjxNDgrw qF7RGKT6FYc9iz+jVIh4mGsdRwGnr9KxQfRROh4MhEpvSWLAvfJgOhUeiQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDTx/n6W30+Je7aiH86VqZgS+tdhMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvTlBILWZwYmZUNGw3dHFJZnpwV3BtQkw2MTJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMiAAAN MA0GCSqGSIb3DQEBCwUAA4IBAQAM3nKMNHvMML5RN0Sd3kbhWaO5zXgOr3Wp875d q+cWEMRZYOi4gpZTHXK0dSdT+Re/UE8Y0wixSmKuZXFEARyHixhZ+QD4xXwWYyPQ CrPB3+pPZQNdeSeXT+zO87ZZTO3ARLWURwXn4ID3IFGLic7R5uIZsKLKAnBe4FdL rO+vil7wQf9WOlZG8bSxa/4qvjtw4fEWtkG7QbWE9y+bGyxvpQ+igp7uzHIuvrDL OaRlKpW8cUdvj+wBNn2bNZIJaymoxbtjoRYl4QSgnZq/633oqIA9b4Mu96kZEtJA 6L4bcm+RxuldfO7f87rSaXi36BHHRjkliITktpPCflSEFPOF -----END CERTIFICATE-----Generated at Sat Jan 3 06:25:49 2026 by rpki-client