This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/NbaTUfMsk7ejX5MZafYZHxonFQQ.roa File: NbaTUfMsk7ejX5MZafYZHxonFQQ.roa (raw, json) Hash identifier: D+/uSGFAXyKao2IQp+J+3qbr0DJSF7//qXrhMJ0x1yA= Subject key identifier: 35:B6:93:51:F3:2C:93:B7:A3:5F:93:19:69:F6:19:1F:1A:27:15:04 Certificate issuer: /CN=740df5ac5ef95318859bb63ec14e47342a216e85 Certificate serial: 019C090F901FB46C0A09B0EE5CC5E33B4CBF Authority key identifier: 74:0D:F5:AC:5E:F9:53:18:85:9B:B6:3E:C1:4E:47:34:2A:21:6E:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA31rF75UxiFm7Y-wU5HNCohboU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/NbaTUfMsk7ejX5MZafYZHxonFQQ.roa Signing time: Thu 29 Jan 2026 09:22:20 +0000 ROA not before: Thu 29 Jan 2026 09:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62059 IP address blocks: 31.169.96.0/21 maxlen: 21 46.183.106.0/23 maxlen: 23 185.37.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.mft rsync://rpki.ripe.net/repository/DEFAULT/dA31rF75UxiFm7Y-wU5HNCohboU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:0f:90:1f:b4:6c:0a:09:b0:ee:5c:c5:e3:3b:4c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=740df5ac5ef95318859bb63ec14e47342a216e85 Validity Not Before: Jan 29 09:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35b69351f32c93b7a35f931969f6191f1a271504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:59:fd:1e:8d:4d:c7:e2:91:f7:ae:61:ee: b3:82:03:f5:b8:c8:3c:63:6c:d6:a9:86:cd:50:fd: 9a:74:74:2d:76:30:47:54:c4:0f:b5:ff:3b:ba:b8: c9:c3:54:ce:63:22:52:0c:ad:fb:41:27:d5:b8:07: 90:6d:9c:dd:dd:2c:7f:91:31:b6:b1:ec:b0:a6:cf: cb:d0:7f:cd:62:8a:92:9f:c2:67:dc:fd:c2:1b:82: 91:80:0d:b6:77:83:54:14:91:bd:a2:4b:6d:9c:59: 79:d3:0e:8f:be:1f:5f:b2:77:d4:46:48:ff:a6:8e: e8:33:f5:7c:2e:50:1a:d4:cb:ce:fb:05:2e:b9:de: 1e:63:ac:4f:cc:78:5f:e9:71:46:1e:7b:be:12:75: d8:b1:14:d9:ee:25:29:88:8d:c3:bf:2c:3f:e7:a9: 2a:fe:de:83:83:cb:6b:46:f0:f4:c6:e9:16:12:70: d2:7a:f8:4f:f1:18:63:1e:6b:be:ca:d8:22:19:15: 06:0e:ca:3d:de:ff:17:b6:a1:ff:05:b7:91:77:ae: d0:bd:d4:a8:a9:76:32:bd:9b:d4:30:ab:e9:53:58: 58:61:c9:16:87:79:2e:22:61:ca:16:1a:86:08:a3: cc:07:3b:4c:13:db:28:19:30:f3:54:d2:fb:0f:52: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B6:93:51:F3:2C:93:B7:A3:5F:93:19:69:F6:19:1F:1A:27:15:04 X509v3 Authority Key Identifier: keyid:74:0D:F5:AC:5E:F9:53:18:85:9B:B6:3E:C1:4E:47:34:2A:21:6E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA31rF75UxiFm7Y-wU5HNCohboU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/NbaTUfMsk7ejX5MZafYZHxonFQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.96.0/21 46.183.106.0/23 185.37.120.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:39:36:95:66:41:88:a2:24:94:64:b3:62:83:16:75:02:99: 99:60:75:66:6f:08:7a:e7:79:f4:36:46:21:dd:27:e1:52:1d: db:45:41:12:4c:f1:8b:2e:8d:84:46:e9:ef:7b:f6:d3:fe:f1: c1:33:7d:a8:dd:aa:0b:08:f7:36:6f:83:b0:98:e5:ec:7d:12: e5:d5:45:fa:3d:08:92:73:ba:62:7c:41:85:ff:bd:7d:04:2a: 30:e7:af:1a:28:46:32:ea:5b:3f:5c:1e:cd:ef:b3:df:15:28: e3:ab:49:25:44:7f:02:b6:17:45:b1:00:83:1f:96:67:b7:7c: 33:c7:10:da:c7:2d:50:79:3c:bb:f4:b1:bf:9b:83:37:c9:c7: eb:7e:85:c4:22:11:ea:03:0a:ae:f6:a8:e2:82:6f:f7:46:fd: c6:2f:89:1c:cc:c9:75:d8:88:66:e6:37:d8:74:be:c3:fd:b4: be:dd:92:d8:79:27:8f:24:b9:dd:2d:70:4f:25:70:fa:77:75: 5e:6d:d1:56:3d:ab:b5:72:6b:f2:3f:a1:9f:31:e1:6e:a9:2a: f4:7b:20:b0:73:db:6c:18:39:58:88:d2:31:ad:4f:17:dc:56: f3:0e:25:2f:f4:a6:f2:81:12:f1:68:7e:43:7b:e0:7f:65:3e: 95:37:5f:e6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwJD5AftGwKCbDuXMXjO0y/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MGRmNWFjNWVmOTUzMTg4NTliYjYzZWMxNGU0NzM0MmEy MTZlODUwHhcNMjYwMTI5MDkyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWI2OTM1MWYzMmM5M2I3YTM1ZjkzMTk2OWY2MTkxZjFhMjcxNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxBZ/R6NTcfikfeuYe6zggP1uMg8 Y2zWqYbNUP2adHQtdjBHVMQPtf87urjJw1TOYyJSDK37QSfVuAeQbZzd3Sx/kTG2 seywps/L0H/NYoqSn8Jn3P3CG4KRgA22d4NUFJG9okttnFl50w6Pvh9fsnfURkj/ po7oM/V8LlAa1MvO+wUuud4eY6xPzHhf6XFGHnu+EnXYsRTZ7iUpiI3Dvyw/56kq /t6Dg8trRvD0xukWEnDSevhP8RhjHmu+ytgiGRUGDso93v8XtqH/BbeRd67QvdSo qXYyvZvUMKvpU1hYYckWh3kuImHKFhqGCKPMBztME9soGTDzVNL7D1J35QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDW2k1HzLJO3o1+TGWn2GR8aJxUEMB8GA1UdIwQY MBaAFHQN9axe+VMYhZu2PsFORzQqIW6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEEzMXJGNzVVeGlGbTdZLXdVNUhOQ29oYm9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mNGE2MDYtZTMxNi00NWNjLTgxNWMt MDFkYTFmNGE4Y2YwLzEvTmJhVFVmTXNrN2VqWDVNWmFmWVpIeG9uRlFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mNGE2MDYtZTMxNi00NWNjLTgxNWMtMDFkYTFmNGE4Y2Yw LzEvZEEzMXJGNzVVeGlGbTdZLXdVNUhOQ29oYm9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDH6lgAwQB LrdqAwQCuSV4MA0GCSqGSIb3DQEBCwUAA4IBAQBKOTaVZkGIoiSUZLNigxZ1ApmZ YHVmbwh653n0NkYh3SfhUh3bRUESTPGLLo2ERunve/bT/vHBM32o3aoLCPc2b4Ow mOXsfRLl1UX6PQiSc7pifEGF/719BCow568aKEYy6ls/XB7N77PfFSjjq0klRH8C thdFsQCDH5Znt3wzxxDaxy1QeTy79LG/m4M3ycfrfoXEIhHqAwqu9qjigm/3Rv3G L4kczMl12Ihm5jfYdL7D/bS+3ZLYeSePJLndLXBPJXD6d3VebdFWPau1cmvyP6Gf MeFuqSr0eyCwc9tsGDlYiNIxrU8X3FbzDiUv9KbygRLxaH5De+B/ZT6VN1/m -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:51 2026 by rpki-client