This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Nl-eEL120I92QYaSDuZeUPPF4V8.roa File: Nl-eEL120I92QYaSDuZeUPPF4V8.roa (raw, json) Hash identifier: 5tIjFcqAUsEjRs7AcpVNkDfUMCA5YEEVIkOLGTP4kTk= Subject key identifier: 36:5F:9E:10:BD:76:D0:8F:76:41:86:92:0E:E6:5E:50:F3:C5:E1:5F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B35AF79B5BB07CC7AEBC0138BC08B17B4 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Nl-eEL120I92QYaSDuZeUPPF4V8.roa Signing time: Fri 19 Dec 2025 08:17:31 +0000 ROA not before: Fri 19 Dec 2025 08:17:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48266 IP address blocks: 151.242.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:af:79:b5:bb:07:cc:7a:eb:c0:13:8b:c0:8b:17:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 19 08:17:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=365f9e10bd76d08f764186920ee65e50f3c5e15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:44:cc:05:67:de:a9:a7:f7:01:38:d2:34: 5d:34:0d:0e:25:3a:cc:bf:b6:cc:0d:df:bc:0d:d0: bf:a6:87:92:71:aa:c1:44:d3:e3:35:21:92:23:ee: b8:4a:03:1d:cd:3b:6c:4c:b4:e3:ca:62:63:4c:cb: a3:e5:34:36:9f:fc:5d:cc:ba:24:00:21:84:75:a6: 9b:7b:f1:08:ce:e5:5d:de:07:6a:33:8b:cf:c5:fe: d2:9d:67:9f:ae:da:cd:b6:cf:cf:55:7b:c2:b7:38: d4:93:4f:ce:8a:77:f9:41:6f:14:38:75:1f:75:5e: f8:96:b5:87:3f:13:34:a2:47:99:e5:f1:da:6f:37: 80:f9:25:8a:72:b7:5f:d7:78:6c:87:a5:5e:83:1c: b1:3e:58:53:2a:81:1a:66:34:6e:ca:04:ee:48:17: 50:9a:4a:be:04:1d:30:ab:c6:62:47:a0:f1:02:67: 15:92:14:c2:0c:db:20:e9:29:2c:7d:bf:5b:07:72: 0b:64:45:72:08:c9:f7:59:59:92:08:e2:7d:c9:99: 4e:9e:bf:fe:ce:f5:bc:0e:81:27:a3:19:8d:33:33: 30:75:06:40:3f:6d:95:16:c8:c7:f7:45:34:54:f1: be:f9:a9:33:ad:dc:b0:ae:ad:a3:a8:af:eb:b8:e2: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5F:9E:10:BD:76:D0:8F:76:41:86:92:0E:E6:5E:50:F3:C5:E1:5F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Nl-eEL120I92QYaSDuZeUPPF4V8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.125.0/24 Signature Algorithm: sha256WithRSAEncryption 45:cd:33:49:b2:a0:4b:66:de:cf:f2:6a:40:d0:44:24:61:ff: bf:f9:2f:95:dc:6d:5e:73:b6:d4:5b:10:c7:bb:8a:ed:a7:cd: 46:77:fb:d6:13:d9:3f:43:3b:e2:6a:69:0a:20:c7:7b:69:a8: 21:d8:f6:ac:fd:1c:c6:ec:cc:2d:ea:0a:8c:1e:f2:88:ff:a1: 91:97:77:a6:c3:70:ac:bf:c1:b1:b8:61:76:ce:ff:09:c8:75: f4:e7:ac:85:a3:3f:17:72:f3:ed:d6:a7:73:da:87:84:e8:6a: 1e:69:b0:43:74:e8:5a:f5:40:8a:27:e3:fe:16:0f:87:94:8a: 91:80:d6:bb:54:97:9e:35:b4:44:0d:69:8b:3a:93:11:20:2b: 5b:1b:71:de:cf:48:86:ce:8a:09:65:30:0e:07:8c:4e:f4:2e: e5:6f:91:ec:ca:b2:64:c4:a5:bb:18:50:0b:79:8a:d5:17:e6: 97:d4:07:f4:ea:b9:36:15:62:b0:9e:99:42:b0:4f:2d:de:fd: e2:79:40:bb:11:79:c4:53:55:a5:20:ed:1a:82:74:ca:63:89: 3d:ed:99:ad:2d:49:c6:06:b8:fc:9e:de:16:d8:69:d9:70:cc: 76:48:96:1b:5c:2c:4f:4c:a1:d7:be:a0:24:49:f3:b8:ba:0a: 1e:ac:57:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs1r3m1uwfMeuvAE4vAixe0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE5MDgxNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjVmOWUxMGJkNzZkMDhmNzY0MTg2OTIwZWU2NWU1MGYzYzVlMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdhEzAVn3qmn9wE40jRdNA0OJTrM v7bMDd+8DdC/poeScarBRNPjNSGSI+64SgMdzTtsTLTjymJjTMuj5TQ2n/xdzLok ACGEdaabe/EIzuVd3gdqM4vPxf7SnWefrtrNts/PVXvCtzjUk0/Oinf5QW8UOHUf dV74lrWHPxM0okeZ5fHabzeA+SWKcrdf13hsh6VegxyxPlhTKoEaZjRuygTuSBdQ mkq+BB0wq8ZiR6DxAmcVkhTCDNsg6Sksfb9bB3ILZEVyCMn3WVmSCOJ9yZlOnr/+ zvW8DoEnoxmNMzMwdQZAP22VFsjH90U0VPG++akzrdywrq2jqK/ruOL8swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDZfnhC9dtCPdkGGkg7mXlDzxeFfMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTmwtZUVMMTIwSTkyUVlhU0R1WmVVUFBGNFY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/J9MA0G CSqGSIb3DQEBCwUAA4IBAQBFzTNJsqBLZt7P8mpA0EQkYf+/+S+V3G1ec7bUWxDH u4rtp81Gd/vWE9k/QzviamkKIMd7aagh2Pas/RzG7Mwt6gqMHvKI/6GRl3emw3Cs v8GxuGF2zv8JyHX056yFoz8XcvPt1qdz2oeE6GoeabBDdOha9UCKJ+P+Fg+HlIqR gNa7VJeeNbREDWmLOpMRICtbG3Hez0iGzooJZTAOB4xO9C7lb5HsyrJkxKW7GFAL eYrVF+aX1Af06rk2FWKwnplCsE8t3v3ieUC7EXnEU1WlIO0agnTKY4k97ZmtLUnG Brj8nt4W2GnZcMx2SJYbXCxPTKHXvqAkSfO4ugoerFdN -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:14 2025 by rpki-client