This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/ndAxHc3VnkS73TWIqm8iAAZy9_k.roa File: ndAxHc3VnkS73TWIqm8iAAZy9_k.roa (raw, json) Hash identifier: d8ACwc3xMwTKBD/Rj4Jwn8VZBThWrsDZp4lALyC1e/E= Subject key identifier: 9D:D0:31:1D:CD:D5:9E:44:BB:DD:35:88:AA:6F:22:00:06:72:F7:F9 Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d Certificate serial: 019B7F1360295127CE40EDC4587DF5848CE7 Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/ndAxHc3VnkS73TWIqm8iAAZy9_k.roa Signing time: Fri 02 Jan 2026 14:18:54 +0000 ROA not before: Fri 02 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15447 IP address blocks: 31.169.56.0/23 maxlen: 24 31.169.56.0/24 maxlen: 24 31.169.57.0/24 maxlen: 24 31.169.58.0/23 maxlen: 24 31.169.58.0/24 maxlen: 24 31.169.59.0/24 maxlen: 24 31.169.60.0/23 maxlen: 24 31.169.60.0/24 maxlen: 24 31.169.61.0/24 maxlen: 24 31.169.62.0/23 maxlen: 24 31.169.62.0/24 maxlen: 24 31.169.63.0/24 maxlen: 24 85.119.48.0/23 maxlen: 24 85.119.48.0/24 maxlen: 24 85.119.49.0/24 maxlen: 24 85.119.50.0/23 maxlen: 24 85.119.50.0/24 maxlen: 24 85.119.51.0/24 maxlen: 24 85.119.52.0/24 maxlen: 24 85.119.53.0/24 maxlen: 24 85.119.54.0/23 maxlen: 23 85.119.54.0/24 maxlen: 24 85.119.55.0/24 maxlen: 24 185.162.145.0/24 maxlen: 24 185.162.146.0/24 maxlen: 24 188.94.184.0/23 maxlen: 24 188.94.184.0/24 maxlen: 24 188.94.185.0/24 maxlen: 24 188.94.186.0/23 maxlen: 24 188.94.186.0/24 maxlen: 24 188.94.187.0/24 maxlen: 24 2a10:9d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:60:29:51:27:ce:40:ed:c4:58:7d:f5:84:8c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d Validity Not Before: Jan 2 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dd0311dcdd59e44bbdd3588aa6f22000672f7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:57:39:21:4f:70:d6:ab:6a:73:17:f9:e9: 34:e1:e0:b6:6c:fe:69:ab:9d:96:7a:f2:99:41:72: 7b:0d:bb:f5:ce:72:75:c7:29:bd:fe:3d:5d:ca:06: 3f:bf:15:83:ce:2b:af:7c:bb:4a:fd:65:6d:7b:58: 03:b2:38:09:b8:00:cf:61:cf:08:67:81:ab:d1:61: 29:75:f7:7b:61:28:87:e7:7c:e0:da:ee:5e:18:f2: 58:e4:36:55:96:35:bc:92:3b:38:43:b0:af:3d:78: 25:8f:19:e7:0a:bb:aa:4c:68:31:5a:a9:ff:1a:08: 63:ae:76:73:b6:f4:a8:67:fc:0c:5a:a6:46:ea:c9: 9d:53:7d:2f:f3:43:0c:46:71:55:c3:75:68:12:7a: e2:fa:48:86:50:5d:9e:d6:a3:4a:ee:5a:46:59:4d: e5:4b:12:c4:b4:47:7c:22:f2:68:53:85:61:09:4a: 41:a4:53:19:79:c9:f5:f8:16:00:72:58:00:21:0a: 43:85:b4:64:fb:cf:a8:f7:e7:2c:02:dd:4a:57:00: 45:30:40:8b:ed:72:da:85:56:21:03:2d:94:a6:13: a4:9e:d2:f4:30:35:e4:5e:85:15:0d:28:f2:43:92: 98:ad:86:c3:25:3c:51:12:f1:96:a3:03:a5:d8:5d: 3e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D0:31:1D:CD:D5:9E:44:BB:DD:35:88:AA:6F:22:00:06:72:F7:F9 X509v3 Authority Key Identifier: keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/ndAxHc3VnkS73TWIqm8iAAZy9_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.56.0/21 85.119.48.0/21 185.162.145.0-185.162.146.255 188.94.184.0/22 IPv6: 2a10:9d80::/29 Signature Algorithm: sha256WithRSAEncryption 1c:17:49:86:e5:f9:77:99:c6:e4:71:63:48:a1:a3:c8:c7:c0: b9:24:1b:19:32:60:fc:53:c3:e1:40:e1:0f:21:04:be:15:ae: c2:31:21:b2:19:c0:c9:e3:b3:68:e1:63:49:f0:ec:17:f5:c2: 7b:9a:9c:86:6b:b3:24:ae:9f:6f:d0:0d:16:96:af:e2:bb:a4: 95:61:53:02:95:fb:76:6d:dd:8d:19:d8:23:71:42:37:6e:52: 15:65:c1:9a:e5:88:47:00:df:0b:7a:13:f4:1b:29:aa:d2:f1: c3:6f:47:f9:6f:0f:1c:7f:b0:e3:ad:1a:72:5d:23:02:6b:b3: f4:0e:7e:44:07:f7:9f:4c:c0:b1:e1:0a:49:d3:9c:d3:32:24: fb:65:ff:b5:84:24:3f:b6:38:bf:54:bd:b0:8f:6b:4b:68:10: aa:88:9f:0d:65:2e:b2:eb:6f:f0:76:f1:ea:f9:7c:2e:a1:a5: 8e:5a:14:44:81:79:a4:82:5b:46:6d:a6:ff:ff:72:7d:f3:23: 25:a0:1c:c0:d4:89:5a:0e:04:ec:e6:c7:86:78:14:5d:29:fe: ff:ec:80:46:ab:5b:ed:f5:d0:43:1a:6f:ae:da:9b:80:37:fa: 0b:e6:ac:fb:09:0e:dd:88:c4:df:91:a0:f0:61:a2:bb:2a:01: e6:75:47:0b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt/E2ApUSfOQO3EWH31hIznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MDUxMDgwNDAwOTQwZmY0N2M4MDdkZDY3NDJiZWNiYjRl ZGYyMmQwHhcNMjYwMTAyMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGQwMzExZGNkZDU5ZTQ0YmJkZDM1ODhhYTZmMjIwMDA2NzJmN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkVXOSFPcNaranMX+ek04eC2bP5p q52WevKZQXJ7Dbv1znJ1xym9/j1dygY/vxWDziuvfLtK/WVte1gDsjgJuADPYc8I Z4Gr0WEpdfd7YSiH53zg2u5eGPJY5DZVljW8kjs4Q7CvPXgljxnnCruqTGgxWqn/ GghjrnZztvSoZ/wMWqZG6smdU30v80MMRnFVw3VoEnri+kiGUF2e1qNK7lpGWU3l SxLEtEd8IvJoU4VhCUpBpFMZecn1+BYAclgAIQpDhbRk+8+o9+csAt1KVwBFMECL 7XLahVYhAy2UphOkntL0MDXkXoUVDSjyQ5KYrYbDJTxREvGWowOl2F0++wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFJ3QMR3N1Z5Eu901iKpvIgAGcvf5MB8GA1UdIwQY MBaAFCQFEIBACUD/R8gH3WdCvsu07fItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wYmY1ZTktZDkxMC00MDM3LThkMzct NWQzOWQ1MDE4Zjc4LzEvbmRBeEhjM1Zua1M3M1RXSXFtOGlBQVp5OV9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wYmY1ZTktZDkxMC00MDM3LThkMzctNWQzOWQ1MDE4Zjc4 LzEvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQDH6k4AwQD VXcwMAwDBAC5opEDBAC5opIDBAK8XrgwDQQCAAIwBwMFAyoQnYAwDQYJKoZIhvcN AQELBQADggEBABwXSYbl+XeZxuRxY0iho8jHwLkkGxkyYPxTw+FA4Q8hBL4VrsIx IbIZwMnjs2jhY0nw7Bf1wnuanIZrsySun2/QDRaWr+K7pJVhUwKV+3Zt3Y0Z2CNx QjduUhVlwZrliEcA3wt6E/QbKarS8cNvR/lvDxx/sOOtGnJdIwJrs/QOfkQH959M wLHhCknTnNMyJPtl/7WEJD+2OL9UvbCPa0toEKqInw1lLrLrb/B28er5fC6hpY5a FESBeaSCW0Ztpv//cn3zIyWgHMDUiVoOBOzmx4Z4FF0p/v/sgEarW+310EMab67a m4A3+gvmrPsJDt2IxN+RoPBhorsqAeZ1Rws= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:56 2026 by rpki-client