This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/NVXaED00Tks0cffjpQE1Y8p8He4.roa File: NVXaED00Tks0cffjpQE1Y8p8He4.roa (raw, json) Hash identifier: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI= Subject key identifier: 35:55:DA:10:3D:34:4E:4B:34:71:F7:E3:A5:01:35:63:CA:7C:1D:EE Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319 Certificate serial: 019B783476340DA38F0BAC20B15FCBB9912D Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/NVXaED00Tks0cffjpQE1Y8p8He4.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198188 IP address blocks: 31.186.104.0/24 maxlen: 24 31.186.105.0/24 maxlen: 24 31.186.106.0/24 maxlen: 24 31.186.107.0/24 maxlen: 24 31.186.108.0/24 maxlen: 24 31.186.109.0/24 maxlen: 24 31.186.110.0/24 maxlen: 24 31.186.111.0/24 maxlen: 24 185.220.16.0/24 maxlen: 24 185.220.17.0/24 maxlen: 24 185.220.18.0/24 maxlen: 24 185.220.19.0/24 maxlen: 24 2a0b:ea40::/32 maxlen: 32 2a0b:ea41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:76:34:0d:a3:8f:0b:ac:20:b1:5f:cb:b9:91:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319 Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3555da103d344e4b3471f7e3a5013563ca7c1dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:31:d5:01:2a:3d:6d:5a:73:cb:63:91:b1: 75:97:35:1f:69:21:f6:95:aa:7d:ea:96:ae:7d:fd: ce:e3:28:d0:64:31:0e:85:bf:b9:ab:01:f4:cf:dc: 88:47:09:41:30:d5:8a:4a:33:9b:b1:42:45:e9:78: 5d:4d:3b:a3:e7:43:ba:2e:9d:c4:34:c7:ec:43:25: 59:dd:4a:2f:33:a2:32:b9:d8:0f:39:ed:20:e2:a9: d3:d6:30:f7:a1:99:0a:20:ce:0b:e1:f2:46:50:c9: e3:be:35:0d:9c:6e:1c:0c:d8:bd:32:4e:55:c8:3b: 1f:b2:64:9d:b5:67:7d:ca:2b:b1:f0:9b:31:e4:6a: 54:c8:97:f4:f3:ae:97:c4:d0:0f:42:aa:7c:2d:77: 75:73:58:52:fb:e7:8a:7b:1d:6a:ad:fc:96:4d:b8: fb:57:f8:01:10:05:23:16:b6:dc:eb:7f:95:2d:7c: d1:aa:50:9d:02:2c:c2:c4:45:63:56:04:0c:2c:45: dd:12:c2:cd:bf:68:b7:bc:b6:ff:35:2b:5b:0f:aa: ba:d4:a5:a4:53:34:1f:54:cf:c2:73:60:e2:51:c3: 6b:d0:e3:a9:13:9d:ed:40:0a:c8:d2:1c:b8:1e:7f: c5:ee:11:e6:76:25:a2:dd:bd:94:36:a1:1e:4c:f0: df:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:55:DA:10:3D:34:4E:4B:34:71:F7:E3:A5:01:35:63:CA:7C:1D:EE X509v3 Authority Key Identifier: keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/NVXaED00Tks0cffjpQE1Y8p8He4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.104.0/21 185.220.16.0/22 IPv6: 2a0b:ea40::/31 Signature Algorithm: sha256WithRSAEncryption 8a:34:c1:23:a6:8a:62:58:b8:14:77:73:98:7f:55:d8:f5:2a: f1:cb:77:de:e1:2f:43:58:a2:9a:c8:9e:ba:47:e0:3f:3e:e6: 55:67:58:bc:22:99:0e:cd:26:70:31:ef:b8:69:e5:de:38:30: 95:ff:2e:85:16:1e:84:2f:ff:80:7e:f1:83:c7:7a:f9:e3:60: cd:cf:36:4a:aa:16:fc:98:af:85:9b:8f:0b:81:2d:ed:06:c7: 46:12:6c:70:f5:70:14:38:f3:3d:cd:a6:41:5d:37:ac:02:1b: c5:8e:15:bf:aa:ac:7b:19:f7:23:a9:1a:1e:92:53:a8:8b:dd: 69:fc:1f:9f:50:14:00:a6:ce:93:76:ed:56:99:73:eb:d9:ae: 14:c4:47:71:f4:86:4b:50:f4:69:e2:65:36:8e:16:19:4b:f2: cf:1a:73:e5:b3:1b:53:ad:f6:cf:7c:b2:90:51:4e:c5:8b:af: ff:d7:e3:27:c5:5a:fe:38:69:cc:07:fc:dd:02:ee:1c:fd:ce: 28:4c:76:f4:41:03:75:6f:3d:33:45:d1:64:5c:dc:19:0f:08: a1:67:00:6a:e7:94:f3:2d:e1:05:40:5f:dc:e5:c6:8d:bf:fd: 4e:e8:de:3c:1d:db:c5:9d:8c:91:da:9d:8e:50:a5:b1:5a:3f: e2:88:20:40 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NHY0DaOPC6wgsV/LuZEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjJiYmFjYjQ3NGRkNjEwM2U4OTExN2E2MzY3NDU2OTY0 ZGYzMTkwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTU1ZGExMDNkMzQ0ZTRiMzQ3MWY3ZTNhNTAxMzU2M2NhN2MxZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYAx1QEqPW1ac8tjkbF1lzUfaSH2 lap96pauff3O4yjQZDEOhb+5qwH0z9yIRwlBMNWKSjObsUJF6XhdTTuj50O6Lp3E NMfsQyVZ3UovM6IyudgPOe0g4qnT1jD3oZkKIM4L4fJGUMnjvjUNnG4cDNi9Mk5V yDsfsmSdtWd9yiux8Jsx5GpUyJf0866XxNAPQqp8LXd1c1hS++eKex1qrfyWTbj7 V/gBEAUjFrbc63+VLXzRqlCdAizCxEVjVgQMLEXdEsLNv2i3vLb/NStbD6q61KWk UzQfVM/Cc2DiUcNr0OOpE53tQArI0hy4Hn/F7hHmdiWi3b2UNqEeTPDf3QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDVV2hA9NE5LNHH346UBNWPKfB3uMB8GA1UdIwQY MBaAFAvyu6y0dN1hA+iRF6Y2dFaWTfMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUt ZDZiOTZlODhhNjExLzEvTlZYYUVEMDBUa3MwY2ZmanBRRTFZOHA4SGU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUtZDZiOTZlODhhNjEx LzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDH7poAwQC udwQMA0EAgACMAcDBQEqC+pAMA0GCSqGSIb3DQEBCwUAA4IBAQCKNMEjpopiWLgU d3OYf1XY9Srxy3fe4S9DWKKayJ66R+A/PuZVZ1i8IpkOzSZwMe+4aeXeODCV/y6F Fh6EL/+AfvGDx3r542DNzzZKqhb8mK+Fm48LgS3tBsdGEmxw9XAUOPM9zaZBXTes AhvFjhW/qqx7GfcjqRoeklOoi91p/B+fUBQAps6Tdu1WmXPr2a4UxEdx9IZLUPRp 4mU2jhYZS/LPGnPlsxtTrfbPfLKQUU7Fi6//1+MnxVr+OGnMB/zdAu4c/c4oTHb0 QQN1bz0zRdFkXNwZDwihZwBq55TzLeEFQF/c5caNv/1O6N48HdvFnYyR2p2OUKWx Wj/iiCBA -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:30 2026 by rpki-client