This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2ns_fQN8rAFPeXcxzITb-0Q_pJ8.roa File: 2ns_fQN8rAFPeXcxzITb-0Q_pJ8.roa (raw, json) Hash identifier: RHGYP8z1M6gwLjlKqE12VRVcpKzDWcBxA5Nz6uthHmg= Subject key identifier: DA:7B:3F:7D:03:7C:AC:01:4F:79:77:31:CC:84:DB:FB:44:3F:A4:9F Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019B4CF4CB7CE707E510EF222BDA1E60BF2A Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2ns_fQN8rAFPeXcxzITb-0Q_pJ8.roa Signing time: Tue 23 Dec 2025 20:44:29 +0000 ROA not before: Tue 23 Dec 2025 20:44:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204957 IP address blocks: 135.106.5.0/24 maxlen: 24 135.106.26.0/24 maxlen: 24 135.106.66.0/24 maxlen: 24 135.106.85.0/24 maxlen: 24 135.106.94.0/24 maxlen: 24 135.106.107.0/24 maxlen: 24 153.80.11.0/24 maxlen: 24 153.80.13.0/24 maxlen: 24 153.80.19.0/24 maxlen: 24 153.80.44.0/24 maxlen: 24 153.80.84.0/24 maxlen: 24 153.80.97.0/24 maxlen: 24 153.80.108.0/24 maxlen: 24 153.80.115.0/24 maxlen: 24 153.80.142.0/24 maxlen: 24 153.80.143.0/24 maxlen: 24 153.80.144.0/24 maxlen: 24 153.80.145.0/24 maxlen: 24 153.80.155.0/24 maxlen: 24 153.80.156.0/24 maxlen: 24 153.80.157.0/24 maxlen: 24 153.80.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:f4:cb:7c:e7:07:e5:10:ef:22:2b:da:1e:60:bf:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Dec 23 20:44:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=da7b3f7d037cac014f797731cc84dbfb443fa49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:84:bf:2a:52:0a:48:15:87:21:a6:df:97: f3:67:c3:74:74:00:2e:7e:90:da:ee:45:df:30:c8: 7e:a9:13:a1:26:01:34:91:c2:df:bb:72:a7:d8:1f: 32:15:53:90:86:f8:ef:46:39:f4:7d:73:40:09:f7: 86:8e:71:c8:fc:02:02:50:41:57:d9:ea:2d:be:85: ff:d4:9d:2a:bf:a3:ad:0f:4a:b7:f9:fb:41:e0:c2: f4:01:46:96:b6:1f:2f:3a:07:17:85:43:66:88:dd: ec:f6:e4:95:4f:dc:50:6e:19:cf:34:6c:48:e1:18: 2f:41:ce:c5:63:8e:8d:c7:56:28:f2:24:12:1d:ea: 8b:7c:6b:c8:73:66:ec:ea:f5:04:3a:e3:af:c5:53: 47:ad:18:5c:91:58:b7:15:e7:22:33:34:5b:ea:14: fb:09:cf:74:a7:7d:68:e5:0c:66:f8:50:49:41:44: 29:80:57:cb:30:88:89:b0:b3:d0:a9:a4:55:bd:51: fa:0e:38:14:07:b8:18:35:04:36:f8:b7:b2:be:0a: 97:99:75:98:9a:92:bf:2d:41:4b:40:ef:7f:ed:9b: b2:6b:7e:70:78:12:83:8a:13:2f:39:f9:84:c8:52: 0c:26:cd:99:16:c5:b1:b7:50:ac:6a:f3:5f:a8:aa: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7B:3F:7D:03:7C:AC:01:4F:79:77:31:CC:84:DB:FB:44:3F:A4:9F X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2ns_fQN8rAFPeXcxzITb-0Q_pJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.106.5.0/24 135.106.26.0/24 135.106.66.0/24 135.106.85.0/24 135.106.94.0/24 135.106.107.0/24 153.80.11.0/24 153.80.13.0/24 153.80.19.0/24 153.80.44.0/24 153.80.84.0/24 153.80.97.0/24 153.80.108.0/24 153.80.115.0/24 153.80.142.0-153.80.145.255 153.80.155.0-153.80.158.255 Signature Algorithm: sha256WithRSAEncryption 4f:3c:10:53:8e:a0:1e:00:f9:ea:05:37:3b:51:a6:eb:b8:7e: b6:2a:52:2c:eb:95:94:5c:59:fe:e2:e8:2a:1c:4e:67:29:37: 42:ef:40:2f:bb:c1:e7:27:c0:5a:6e:c7:d7:36:ec:eb:42:14: 56:78:ff:bf:cf:71:5d:7f:11:c5:a1:13:d1:e9:2d:b0:b6:2b: 9d:64:35:a8:99:2e:c5:73:57:19:b9:cb:88:ff:c7:3e:92:7f: 30:28:5b:10:6f:c7:1c:23:96:3b:f1:be:b8:d2:bc:6e:cf:4a: d3:c4:8b:09:5e:e6:79:90:7e:b1:39:2a:dc:f4:de:f5:57:92: ca:88:1f:66:6c:b6:34:e2:f6:c0:ab:f5:58:9c:48:4c:c7:bd: fb:6f:6b:cc:96:37:ac:9e:d0:eb:f3:f9:11:a7:bb:59:8f:1d: 15:2c:1d:79:54:ee:4b:0b:c1:4c:3a:88:59:af:06:e3:c5:42: 2a:06:89:2f:ff:74:1d:78:46:49:f4:07:bf:01:49:cd:b5:12: 78:63:5f:71:97:7e:18:49:7c:b7:ba:0d:af:f9:06:48:fb:a6: 7e:27:12:ab:b4:6a:22:53:71:74:3b:c2:9c:86:39:94:ab:a9: ff:05:bb:cd:75:00:70:6a:e2:41:fd:58:b8:81:3f:c9:65:b0: 58:fc:c4:6c -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZtM9Mt85wflEO8iK9oeYL8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMjIzMjA0NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTdiM2Y3ZDAzN2NhYzAxNGY3OTc3MzFjYzg0ZGJmYjQ0M2ZhNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx2EvypSCkgVhyGm35fzZ8N0dAAu fpDa7kXfMMh+qROhJgE0kcLfu3Kn2B8yFVOQhvjvRjn0fXNACfeGjnHI/AICUEFX 2eotvoX/1J0qv6OtD0q3+ftB4ML0AUaWth8vOgcXhUNmiN3s9uSVT9xQbhnPNGxI 4RgvQc7FY46Nx1Yo8iQSHeqLfGvIc2bs6vUEOuOvxVNHrRhckVi3FeciMzRb6hT7 Cc90p31o5Qxm+FBJQUQpgFfLMIiJsLPQqaRVvVH6DjgUB7gYNQQ2+LeyvgqXmXWY mpK/LUFLQO9/7Zuya35weBKDihMvOfmEyFIMJs2ZFsWxt1CsavNfqKpD5wIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFNp7P30DfKwBT3l3McyE2/tEP6SfMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvMm5zX2ZRTjhyQUZQZVhjeHpJVGItMFFfcEo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEAIdqBQME AIdqGgMEAIdqQgMEAIdqVQMEAIdqXgMEAIdqawMEAJlQCwMEAJlQDQMEAJlQEwME AJlQLAMEAJlQVAMEAJlQYQMEAJlQbAMEAJlQczAMAwQBmVCOAwQBmVCQMAwDBACZ UJsDBACZUJ4wDQYJKoZIhvcNAQELBQADggEBAE88EFOOoB4A+eoFNztRpuu4frYq UizrlZRcWf7i6CocTmcpN0LvQC+7wecnwFpux9c27OtCFFZ4/7/PcV1/EcWhE9Hp LbC2K51kNaiZLsVzVxm5y4j/xz6SfzAoWxBvxxwjljvxvrjSvG7PStPEiwle5nmQ frE5Ktz03vVXksqIH2ZstjTi9sCr9VicSEzHvftva8yWN6ye0Ovz+RGnu1mPHRUs HXlU7ksLwUw6iFmvBuPFQioGiS//dB14Rkn0B78BSc21EnhjX3GXfhhJfLe6Da/5 Bkj7pn4nEqu0aiJTcXQ7wpyGOZSrqf8Fu811AHBq4kH9WLiBP8llsFj8xGw= -----END CERTIFICATE-----Generated at Fri Dec 26 17:16:28 2025 by rpki-client