This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/nbVMFjlQkxqhQWiOR1OlaFColbs.roa File: nbVMFjlQkxqhQWiOR1OlaFColbs.roa (raw, json) Hash identifier: EoptPLj2V0tQS31Kh1XmJGwaUzYaNfCrfr0R+83gtXc= Subject key identifier: 9D:B5:4C:16:39:50:93:1A:A1:41:68:8E:47:53:A5:68:50:A8:95:BB Certificate issuer: /CN=793d9664e29c0beb92c5673db603ab843e0c4caf Certificate serial: 019BC11776A5883DE3E7466769EED0400113 Authority key identifier: 79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/nbVMFjlQkxqhQWiOR1OlaFColbs.roa Signing time: Thu 15 Jan 2026 09:58:18 +0000 ROA not before: Thu 15 Jan 2026 09:58:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 31.177.20.0/22 maxlen: 22 2a0d:3f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:17:76:a5:88:3d:e3:e7:46:67:69:ee:d0:40:01:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=793d9664e29c0beb92c5673db603ab843e0c4caf Validity Not Before: Jan 15 09:58:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9db54c163950931aa141688e4753a56850a895bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:52:69:3f:fe:d9:3a:60:eb:64:d2:4c:d8: 60:bd:4a:da:73:28:ef:e3:5b:9a:a8:33:bf:b6:2f: b2:83:21:ce:4a:78:c1:ab:98:7f:83:cb:36:cd:2b: 2a:8e:43:f4:40:95:50:3b:3c:84:ed:37:73:54:36: 4a:e3:d5:f3:1f:fc:51:31:63:26:50:82:7d:05:4d: 0d:55:45:61:cc:f8:42:56:b8:a7:2d:cf:bd:81:a0: 56:dd:7a:82:a9:ea:4b:93:70:d1:06:28:fe:f3:bb: 63:f4:f0:a2:3f:e9:17:83:8f:0c:a3:90:70:c7:9a: 6a:7f:56:38:84:b0:12:27:8e:e4:a0:ad:fc:9d:d3: ef:76:00:d1:35:cf:cf:fd:9d:11:1e:1f:e4:07:96: e8:c0:25:37:21:63:7d:ae:a8:cd:51:33:48:5f:99: 21:ed:b3:ac:97:d4:f8:f1:5f:60:8e:10:8f:b4:81: c3:7b:32:42:2a:a1:35:77:8e:52:da:dc:70:1a:11: bd:f5:71:88:78:63:6a:75:e2:91:ee:b0:71:6c:bc: a5:40:d8:d3:55:0a:90:a9:7d:62:1b:19:7c:b2:25: 0a:84:34:fa:e8:c8:34:e8:0a:3c:51:5c:9f:64:50: 67:8d:8d:d9:a3:ce:4b:7b:62:70:95:c2:41:da:e4: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B5:4C:16:39:50:93:1A:A1:41:68:8E:47:53:A5:68:50:A8:95:BB X509v3 Authority Key Identifier: keyid:79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/nbVMFjlQkxqhQWiOR1OlaFColbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.20.0/22 IPv6: 2a0d:3f00::/32 Signature Algorithm: sha256WithRSAEncryption b7:56:53:1f:0b:15:43:c3:87:82:a3:52:78:02:b3:1e:6e:4d: 7f:bc:fe:63:39:8b:69:a1:49:b4:b9:f4:28:1a:25:c9:ac:8f: 36:eb:c5:cc:39:d1:ce:7b:09:ac:c6:33:08:2c:e4:71:e7:59: 25:ab:0b:7b:2e:a0:f6:11:4e:f8:68:97:96:25:f7:aa:ed:37: f5:38:e8:04:f5:7f:f8:8b:7b:66:c4:58:92:24:39:82:62:d9: cc:7a:db:82:2d:b6:30:b1:e5:b7:1e:d0:22:ac:b8:3b:23:9c: 1a:c1:be:2d:03:4c:b5:0a:1b:f3:03:d1:2c:c1:83:0f:d0:80: 85:94:cb:1f:8d:21:c8:86:2c:11:f6:da:45:8e:16:b2:76:a3: 1d:40:85:f1:d6:05:e4:4d:89:f5:fd:2d:39:63:95:9b:38:e6: 54:71:bc:44:ab:58:2b:65:e6:80:ef:e4:45:5c:68:5a:77:fd: a9:34:2b:a6:9c:17:7f:3f:41:51:ac:cb:4e:25:36:41:d2:52: bb:a2:42:9a:bd:43:a7:80:e4:81:a9:dd:b1:53:5d:a7:89:89: b9:0f:72:cf:15:3e:4a:96:17:87:26:21:fa:df:ff:74:27:68: 74:66:45:7a:57:74:b9:4f:6c:7d:fe:22:f8:f3:5d:d2:3f:28: d5:8c:d3:ed -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvBF3aliD3j50Znae7QQAETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5M2Q5NjY0ZTI5YzBiZWI5MmM1NjczZGI2MDNhYjg0M2Uw YzRjYWYwHhcNMjYwMTE1MDk1ODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGI1NGMxNjM5NTA5MzFhYTE0MTY4OGU0NzUzYTU2ODUwYTg5NWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGxSaT/+2Tpg62TSTNhgvUracyjv 41uaqDO/ti+ygyHOSnjBq5h/g8s2zSsqjkP0QJVQOzyE7TdzVDZK49XzH/xRMWMm UIJ9BU0NVUVhzPhCVrinLc+9gaBW3XqCqepLk3DRBij+87tj9PCiP+kXg48Mo5Bw x5pqf1Y4hLASJ47koK38ndPvdgDRNc/P/Z0RHh/kB5bowCU3IWN9rqjNUTNIX5kh 7bOsl9T48V9gjhCPtIHDezJCKqE1d45S2txwGhG99XGIeGNqdeKR7rBxbLylQNjT VQqQqX1iGxl8siUKhDT66Mg06Ao8UVyfZFBnjY3Zo85Le2JwlcJB2uQ2GQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJ21TBY5UJMaoUFojkdTpWhQqJW7MB8GA1UdIwQY MBaAFHk9lmTinAvrksVnPbYDq4Q+DEyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82ZWUwNjUtN2YyZS00MmU2LTliOTIt Njg2Mzk5MDAwZDNiLzEvbmJWTUZqbFFreHFoUVdpT1IxT2xhRkNvbGJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82ZWUwNjUtN2YyZS00MmU2LTliOTItNjg2Mzk5MDAwZDNi LzEvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCH7EUMA0E AgACMAcDBQAqDT8AMA0GCSqGSIb3DQEBCwUAA4IBAQC3VlMfCxVDw4eCo1J4ArMe bk1/vP5jOYtpoUm0ufQoGiXJrI8268XMOdHOewmsxjMILORx51klqwt7LqD2EU74 aJeWJfeq7Tf1OOgE9X/4i3tmxFiSJDmCYtnMetuCLbYwseW3HtAirLg7I5wawb4t A0y1ChvzA9EswYMP0ICFlMsfjSHIhiwR9tpFjhaydqMdQIXx1gXkTYn1/S05Y5Wb OOZUcbxEq1grZeaA7+RFXGhad/2pNCumnBd/P0FRrMtOJTZB0lK7okKavUOngOSB qd2xU12niYm5D3LPFT5KlheHJiH63/90J2h0ZkV6V3S5T2x9/iL4813SPyjVjNPt -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:09 2026 by rpki-client