This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/28elMHIYvn3pcU0OGIrU2epJeiA.roa File: 28elMHIYvn3pcU0OGIrU2epJeiA.roa (raw, json) Hash identifier: Hfg+/ah1i9raUfwV0xuMkx9Crie6y92PxJXcwV0p494= Subject key identifier: DB:C7:A5:30:72:18:BE:7D:E9:71:4D:0E:18:8A:D4:D9:EA:49:7A:20 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019B8F18B17D3DF222D44287F291830CAF15 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/28elMHIYvn3pcU0OGIrU2epJeiA.roa Signing time: Mon 05 Jan 2026 16:58:38 +0000 ROA not before: Mon 05 Jan 2026 16:58:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48031 IP address blocks: 135.106.111.0/24 maxlen: 24 135.106.112.0/24 maxlen: 24 135.106.114.0/24 maxlen: 24 135.106.115.0/24 maxlen: 24 135.106.116.0/24 maxlen: 24 135.106.117.0/24 maxlen: 24 135.106.118.0/24 maxlen: 24 135.106.119.0/24 maxlen: 24 135.106.120.0/24 maxlen: 24 135.106.121.0/24 maxlen: 24 135.106.122.0/24 maxlen: 24 135.106.123.0/24 maxlen: 24 135.106.124.0/24 maxlen: 24 135.106.125.0/24 maxlen: 24 135.106.127.0/24 maxlen: 24 136.234.131.0/24 maxlen: 24 136.234.134.0/24 maxlen: 24 136.234.175.0/24 maxlen: 24 136.234.181.0/24 maxlen: 24 136.234.182.0/24 maxlen: 24 136.234.183.0/24 maxlen: 24 136.234.186.0/24 maxlen: 24 136.234.187.0/24 maxlen: 24 136.234.188.0/24 maxlen: 24 136.234.189.0/24 maxlen: 24 136.234.190.0/24 maxlen: 24 136.234.191.0/24 maxlen: 24 136.234.192.0/24 maxlen: 24 136.234.193.0/24 maxlen: 24 136.234.194.0/24 maxlen: 24 136.234.195.0/24 maxlen: 24 136.234.196.0/24 maxlen: 24 136.234.197.0/24 maxlen: 24 136.234.200.0/24 maxlen: 24 136.234.201.0/24 maxlen: 24 136.234.208.0/24 maxlen: 24 153.80.131.0/24 maxlen: 24 153.80.132.0/24 maxlen: 24 153.80.133.0/24 maxlen: 24 153.80.134.0/24 maxlen: 24 153.80.135.0/24 maxlen: 24 153.80.141.0/24 maxlen: 24 153.80.149.0/24 maxlen: 24 153.80.159.0/24 maxlen: 24 153.80.164.0/24 maxlen: 24 153.80.165.0/24 maxlen: 24 153.80.166.0/24 maxlen: 24 153.80.167.0/24 maxlen: 24 153.80.168.0/24 maxlen: 24 194.69.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:18:b1:7d:3d:f2:22:d4:42:87:f2:91:83:0c:af:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Jan 5 16:58:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbc7a5307218be7de9714d0e188ad4d9ea497a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:27:14:d0:63:3a:a7:6e:bd:63:6b:68:4d:de: 4a:74:fb:d6:ea:80:b7:62:f9:48:cb:76:2c:d3:47: f4:62:50:16:2b:b4:1a:dc:12:80:db:29:21:7d:09: aa:fb:11:e7:e0:45:6f:37:41:21:2f:16:8e:36:5f: e0:d0:e0:0a:ca:33:00:79:07:bc:f9:f4:51:ec:1b: e6:16:aa:d2:50:22:ba:f3:92:1f:16:39:7a:89:9f: 70:a0:16:cf:b2:b4:8d:22:06:70:61:e2:d5:55:a4: 42:82:eb:10:2f:3a:8d:ea:cf:94:c7:fd:dc:76:ac: 35:25:bc:7a:ac:55:7e:f1:23:b4:a2:c6:ff:e3:00: d3:97:b5:ee:4e:79:c2:b2:f5:f9:99:d0:34:42:0b: 6c:12:df:72:46:ff:c1:40:fc:4d:c3:b6:59:98:8e: 10:f7:a7:7c:bc:9a:ec:49:4f:04:1f:b1:b4:41:e0: c4:dd:be:bb:47:3f:ad:0e:4c:bd:33:02:c8:1f:91: f0:23:08:4b:79:b3:44:5f:2a:5e:89:c7:48:b6:c6: 35:5e:e3:cd:71:dd:3f:98:e7:61:dd:7e:b6:e3:d4: 57:5d:55:ac:c9:f1:a9:a8:38:be:ca:eb:be:bd:2f: ff:49:97:86:b7:a9:98:a2:a5:68:90:0d:62:36:ac: e9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C7:A5:30:72:18:BE:7D:E9:71:4D:0E:18:8A:D4:D9:EA:49:7A:20 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/28elMHIYvn3pcU0OGIrU2epJeiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.106.111.0-135.106.112.255 135.106.114.0-135.106.125.255 135.106.127.0/24 136.234.131.0/24 136.234.134.0/24 136.234.175.0/24 136.234.181.0-136.234.183.255 136.234.186.0-136.234.197.255 136.234.200.0/23 136.234.208.0/24 153.80.131.0-153.80.135.255 153.80.141.0/24 153.80.149.0/24 153.80.159.0/24 153.80.164.0-153.80.168.255 194.69.253.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:e5:34:b9:8f:8e:37:9a:2d:6c:ec:a3:a2:8b:69:7e:dc:9d: 04:11:7f:51:bb:e6:d7:82:80:db:e7:9b:e6:2e:c1:bc:20:30: dd:1b:38:21:3d:8f:82:e8:ab:a3:69:04:2d:d7:28:fe:ae:25: e1:30:63:ff:b2:ed:07:e1:e3:5e:14:88:ad:82:7c:bc:2e:14: dd:b7:30:8f:7f:1a:8e:ae:d1:09:1c:8d:f6:8a:b7:4a:32:b9: ea:5d:b3:c4:a2:27:53:6f:39:ef:72:bd:3a:52:81:15:12:eb: 62:b7:bf:7f:c6:3e:c9:c1:25:d1:d8:11:d6:5f:cc:39:1e:4b: 23:51:73:79:29:97:03:28:83:e1:f5:7c:7c:5d:cd:ad:d9:26: e8:5f:fd:b7:cd:f5:2f:85:bc:b6:e1:5b:ec:7b:2b:58:3e:83: b6:29:b1:0a:63:5a:2e:d3:5f:21:cf:cc:c6:72:44:a7:ec:1b: d1:b7:d7:cf:85:b5:a4:1a:36:73:7b:01:de:9c:ce:4f:a3:7a: f1:9c:cd:cc:f6:de:3c:db:62:69:c6:dc:cb:2e:9a:88:88:58: 24:47:49:cb:5c:93:e2:53:5d:ff:30:03:3c:28:7f:10:68:3c: d1:f5:7c:19:36:3d:51:6a:bf:a1:c3:f7:93:01:39:57:f3:f3: b9:86:c7:50 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZuPGLF9PfIi1EKH8pGDDK8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjYwMTA1MTY1ODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmM3YTUzMDcyMThiZTdkZTk3MTRkMGUxODhhZDRkOWVhNDk3YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CcU0GM6p269Y2toTd5KdPvW6oC3 YvlIy3Ys00f0YlAWK7Qa3BKA2ykhfQmq+xHn4EVvN0EhLxaONl/g0OAKyjMAeQe8 +fRR7BvmFqrSUCK685IfFjl6iZ9woBbPsrSNIgZwYeLVVaRCgusQLzqN6s+Ux/3c dqw1Jbx6rFV+8SO0osb/4wDTl7XuTnnCsvX5mdA0QgtsEt9yRv/BQPxNw7ZZmI4Q 96d8vJrsSU8EH7G0QeDE3b67Rz+tDky9MwLIH5HwIwhLebNEXypeicdItsY1XuPN cd0/mOdh3X6249RXXVWsyfGpqDi+yuu+vS//SZeGt6mYoqVokA1iNqzpaQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFNvHpTByGL596XFNDhiK1NnqSXogMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvMjhlbE1ISVl2bjNwY1UwT0dJclUyZXBKZWlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZAwDAME AIdqbwMEAIdqcDAMAwQBh2pyAwQBh2p8AwQAh2p/AwQAiOqDAwQAiOqGAwQAiOqv MAwDBACI6rUDBAOI6rAwDAMEAYjqugMEAYjqxAMEAYjqyAMEAIjq0DAMAwQAmVCD AwQDmVCAAwQAmVCNAwQAmVCVAwQAmVCfMAwDBAKZUKQDBACZUKgDBADCRf0wDQYJ KoZIhvcNAQELBQADggEBAArlNLmPjjeaLWzso6KLaX7cnQQRf1G75teCgNvnm+Yu wbwgMN0bOCE9j4Loq6NpBC3XKP6uJeEwY/+y7Qfh414UiK2CfLwuFN23MI9/Go6u 0QkcjfaKt0oyuepds8SiJ1NvOe9yvTpSgRUS62K3v3/GPsnBJdHYEdZfzDkeSyNR c3kplwMog+H1fHxdza3ZJuhf/bfN9S+FvLbhW+x7K1g+g7YpsQpjWi7TXyHPzMZy RKfsG9G318+FtaQaNnN7Ad6czk+jevGczcz23jzbYmnG3MsumoiIWCRHSctck+JT Xf8wAzwofxBoPNH1fBk2PVFqv6HD95MBOVfz87mGx1A= -----END CERTIFICATE-----Generated at Mon Jan 19 23:58:38 2026 by rpki-client