This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/NUFFNkGU4JYbyy4RYS95qukxk74.roa File: NUFFNkGU4JYbyy4RYS95qukxk74.roa (raw, json) Hash identifier: 6qIGa/yfIOna0n6jM1wvUBaSfiq9oHST89COIeie1Dw= Subject key identifier: 35:41:45:36:41:94:E0:96:1B:CB:2E:11:61:2F:79:AA:E9:31:93:BE Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Certificate serial: 019BBCD511F6ACF05A6DD051E52FD1CFBBD1 Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/NUFFNkGU4JYbyy4RYS95qukxk74.roa Signing time: Wed 14 Jan 2026 14:07:18 +0000 ROA not before: Wed 14 Jan 2026 14:07:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 81.85.72.0/24 maxlen: 24 81.85.74.0/24 maxlen: 24 81.85.75.0/24 maxlen: 24 185.9.24.0/24 maxlen: 24 185.9.25.0/24 maxlen: 24 185.9.26.0/24 maxlen: 24 185.28.172.0/24 maxlen: 24 185.28.173.0/24 maxlen: 24 185.28.174.0/24 maxlen: 24 213.155.28.0/24 maxlen: 24 217.179.48.0/24 maxlen: 24 2a11:2cc0:2::/47 maxlen: 47 2a11:2cc0:4::/47 maxlen: 47 2a11:2cc0:6::/47 maxlen: 47 2a11:2cc0:8::/47 maxlen: 47 2a11:2cc0:10::/47 maxlen: 47 2a11:2cc0:20::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:d5:11:f6:ac:f0:5a:6d:d0:51:e5:2f:d1:cf:bb:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Validity Not Before: Jan 14 14:07:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=354145364194e0961bcb2e11612f79aae93193be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:33:96:d6:29:2a:ea:4a:a7:e7:7c:d8:40:ec: cd:fb:52:72:94:4f:5c:03:0f:a0:c2:22:8a:49:f1: b6:e2:2b:c3:62:13:1e:31:2d:df:4c:d0:11:d7:8d: 4b:67:c5:a2:0b:1d:fe:a1:42:4b:a5:13:2d:e8:34: de:0d:ff:f5:95:bd:48:13:00:bb:66:2e:a3:c3:8f: 85:cf:7e:49:a2:05:bf:64:3d:49:e5:4d:0c:fc:e6: b5:ad:57:2f:0d:3a:8f:1d:01:34:23:5e:42:ee:f5: 14:a8:be:fd:83:16:2a:6f:ba:df:6f:46:c6:f4:1f: fa:6c:4e:21:47:6c:2c:40:78:d8:60:45:44:08:ab: 02:fb:48:f2:68:c2:2f:52:b8:c8:b5:64:36:4e:f6: 41:38:be:ba:db:ce:01:22:b9:16:1d:89:66:49:71: be:f1:d2:d6:97:19:e4:bb:6b:ed:1b:e9:df:3f:83: 85:fb:ac:78:53:ed:01:07:cb:7c:52:4d:84:88:8a: 7b:45:95:3c:f8:88:12:d8:86:38:bf:0a:3f:63:70: c4:fe:ea:ce:a1:30:c9:5d:bf:d8:5d:18:e3:9f:b6: b9:b1:f4:8c:34:78:5f:ba:b9:c1:3e:2f:65:34:80: 9e:53:76:c1:25:91:6f:a0:6d:8c:0e:2c:c3:cb:84: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:45:36:41:94:E0:96:1B:CB:2E:11:61:2F:79:AA:E9:31:93:BE X509v3 Authority Key Identifier: keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/NUFFNkGU4JYbyy4RYS95qukxk74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.72.0/24 81.85.74.0/23 185.9.24.0-185.9.26.255 185.28.172.0-185.28.174.255 213.155.28.0/24 217.179.48.0/24 IPv6: 2a11:2cc0:2::-2a11:2cc0:9:ffff:ffff:ffff:ffff:ffff 2a11:2cc0:10::/47 2a11:2cc0:20::/47 Signature Algorithm: sha256WithRSAEncryption 73:4e:73:a0:39:b2:2b:09:85:cf:08:5a:53:f7:3b:4a:77:79: d1:ae:36:6a:b6:46:89:8f:3d:8b:78:78:63:6e:20:8d:90:ad: 2b:d1:83:b8:fb:22:d9:b1:b8:a1:af:84:d3:ff:bc:4a:b3:07: 8b:48:bb:c6:9b:fd:0c:e0:0a:3f:4f:dd:ca:a5:33:99:1b:c1: 45:ae:9a:6f:4a:15:23:96:2d:a8:33:ea:19:f4:30:65:05:c0: ed:e2:e7:f3:dd:a9:35:c3:b4:bb:3c:15:5a:64:d9:89:41:c8: e3:3b:91:a2:9b:70:47:05:d5:e4:50:51:7f:56:5b:40:2d:8c: df:fb:38:14:bd:a4:06:24:b6:cb:fb:5d:6e:f7:2c:b3:d8:f7: 82:6e:d2:a5:c7:e3:9c:d7:f7:06:ec:05:db:6a:c3:d4:b9:20: 4b:23:89:b1:d7:3d:65:da:2f:f9:70:ab:7f:77:0c:eb:5b:29: 85:a1:96:85:df:4a:20:c9:34:f7:09:21:64:28:96:f7:79:7c: 0e:ca:32:7e:b7:f3:11:c3:e7:f9:39:74:3c:91:5d:7e:91:76: f1:d8:80:33:63:cd:36:02:79:96:06:00:3d:00:b3:c5:85:aa: e3:1c:69:20:03:f0:7b:95:ef:67:6a:2c:e6:d3:ed:d0:53:09: 27:59:7e:32 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZu81RH2rPBabdBR5S/Rz7vRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm NDI2MTEwHhcNMjYwMTE0MTQwNzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTQxNDUzNjQxOTRlMDk2MWJjYjJlMTE2MTJmNzlhYWU5MzE5M2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTOW1ikq6kqn53zYQOzN+1JylE9c Aw+gwiKKSfG24ivDYhMeMS3fTNAR141LZ8WiCx3+oUJLpRMt6DTeDf/1lb1IEwC7 Zi6jw4+Fz35JogW/ZD1J5U0M/Oa1rVcvDTqPHQE0I15C7vUUqL79gxYqb7rfb0bG 9B/6bE4hR2wsQHjYYEVECKsC+0jyaMIvUrjItWQ2TvZBOL66284BIrkWHYlmSXG+ 8dLWlxnku2vtG+nfP4OF+6x4U+0BB8t8Uk2EiIp7RZU8+IgS2IY4vwo/Y3DE/urO oTDJXb/YXRjjn7a5sfSMNHhfurnBPi9lNICeU3bBJZFvoG2MDizDy4RNdQIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFDVBRTZBlOCWG8suEWEvearpMZO+MB8GA1UdIwQY MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct MjQyNDY2ODJiZjAwLzEvTlVGRk5rR1U0SllieXk0UllTOTVxdWt4azc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajA6BAIAATA0AwQAUVVIAwQB UVVKMAwDBAO5CRgDBAC5CRowDAMEArkcrAMEALkcrgMEANWbHAMEANmzMDAsBAIA AjAmMBIDBwEqESzAAAIDBwEqESzAAAgDBwEqESzAABADBwEqESzAACAwDQYJKoZI hvcNAQELBQADggEBAHNOc6A5sisJhc8IWlP3O0p3edGuNmq2RomPPYt4eGNuII2Q rSvRg7j7ItmxuKGvhNP/vEqzB4tIu8ab/QzgCj9P3cqlM5kbwUWumm9KFSOWLagz 6hn0MGUFwO3i5/PdqTXDtLs8FVpk2YlByOM7kaKbcEcF1eRQUX9WW0AtjN/7OBS9 pAYktsv7XW73LLPY94Ju0qXH45zX9wbsBdtqw9S5IEsjibHXPWXaL/lwq393DOtb KYWhloXfSiDJNPcJIWQolvd5fA7KMn638xHD5/k5dDyRXX6RdvHYgDNjzTYCeZYG AD0As8WFquMcaSAD8HuV72dqLObT7dBTCSdZfjI= -----END CERTIFICATE-----Generated at Sun Jan 25 13:08:30 2026 by rpki-client