This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/CQgaU_gV_z52Gy5x1amZnUjbI34.roa File: CQgaU_gV_z52Gy5x1amZnUjbI34.roa (raw, json) Hash identifier: eHf4u3mdQwYoNKfo4UKjoMvAPcWz3cXXrc8isy/gtbA= Subject key identifier: 09:08:1A:53:F8:15:FF:3E:76:1B:2E:71:D5:A9:99:9D:48:DB:23:7E Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019AFE36EF2E0EB5EB5A728CD1776F946B94 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/CQgaU_gV_z52Gy5x1amZnUjbI34.roa Signing time: Mon 08 Dec 2025 13:46:44 +0000 ROA not before: Mon 08 Dec 2025 13:46:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214238 IP address blocks: 135.106.1.0/24 maxlen: 24 135.106.27.0/24 maxlen: 24 135.106.36.0/24 maxlen: 24 135.106.45.0/24 maxlen: 24 135.106.64.0/24 maxlen: 24 135.106.65.0/24 maxlen: 24 135.106.83.0/24 maxlen: 24 135.106.84.0/24 maxlen: 24 135.106.100.0/24 maxlen: 24 153.80.1.0/24 maxlen: 24 153.80.5.0/24 maxlen: 24 153.80.10.0/24 maxlen: 24 153.80.32.0/24 maxlen: 24 153.80.33.0/24 maxlen: 24 153.80.45.0/24 maxlen: 24 153.80.46.0/24 maxlen: 24 153.80.74.0/24 maxlen: 24 153.80.95.0/24 maxlen: 24 153.80.96.0/24 maxlen: 24 153.80.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:36:ef:2e:0e:b5:eb:5a:72:8c:d1:77:6f:94:6b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Dec 8 13:46:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=09081a53f815ff3e761b2e71d5a9999d48db237e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:cc:1d:02:d1:3b:4a:82:63:4f:19:eb:64: 14:a7:46:c9:40:98:ae:82:4e:72:fe:7e:a8:74:a6: 62:29:38:a2:85:42:65:fa:06:f2:04:02:3d:2a:e4: 50:1e:a8:96:b2:12:2e:38:d2:73:b0:87:1c:d6:f0: 54:53:91:72:34:2e:56:39:cd:20:89:1a:4e:3a:31: 13:9b:31:99:5a:56:0c:a9:75:67:98:b5:d0:8b:3f: 9b:ae:e6:bf:e2:8c:4c:19:7e:4b:8c:1e:d0:92:d4: ca:fe:0f:ab:88:00:22:3d:cc:a0:3f:5a:9a:b9:00: 25:45:f6:b3:04:9b:19:32:23:67:97:fa:f5:c6:9c: f7:fa:07:86:d0:4b:5f:47:37:95:36:41:ba:50:1d: f7:d8:66:3b:18:73:04:4f:41:c3:b3:28:d1:f4:d5: e1:f5:9f:8a:0d:13:7c:b5:ad:eb:25:42:ea:bb:7c: 24:2b:c9:7a:08:6a:db:7f:70:61:64:18:01:98:c8: a6:8d:ef:d4:86:2f:18:4e:4f:d1:e2:a9:5e:9b:c6: 6d:67:6d:57:33:1d:86:05:9a:4c:71:a1:f7:de:1e: 04:ad:f6:ba:cc:3c:5a:ae:bc:df:ea:9b:a8:2a:9e: ec:0d:2f:3e:bb:d4:c5:a8:70:14:4b:a1:6a:fd:87: ed:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:08:1A:53:F8:15:FF:3E:76:1B:2E:71:D5:A9:99:9D:48:DB:23:7E X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/CQgaU_gV_z52Gy5x1amZnUjbI34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.106.1.0/24 135.106.27.0/24 135.106.36.0/24 135.106.45.0/24 135.106.64.0/23 135.106.83.0-135.106.84.255 135.106.100.0/24 153.80.1.0/24 153.80.5.0/24 153.80.10.0/24 153.80.32.0/23 153.80.45.0-153.80.46.255 153.80.74.0/24 153.80.95.0-153.80.96.255 153.80.110.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:67:3a:c6:6b:20:23:bc:d2:31:d6:a5:f4:7b:cb:56:1b:f7: 67:9b:2e:10:d9:bd:da:b3:a1:8b:7a:40:5a:91:11:43:03:d5: 02:91:48:54:0d:35:5b:b9:fa:3d:9a:d2:ac:78:05:7d:7b:a7: c3:a7:ff:83:fe:40:a5:79:2c:da:b1:13:1e:d7:13:77:a8:38: 7d:dc:2c:35:32:a6:78:5a:fd:f8:9d:48:17:e0:66:c5:8d:96: b9:55:8f:ef:e4:1c:05:e4:45:51:68:4a:d8:74:7f:63:07:67: 88:b5:7a:6c:11:d7:21:b5:5a:af:11:92:33:fd:f1:58:58:46: 66:3e:49:4f:2b:2d:bb:bb:83:5a:39:2b:a4:7f:8e:a4:8e:d9: b8:28:11:82:a2:98:4e:c3:8d:33:5c:32:30:a8:7e:79:71:64: c4:43:dc:01:0c:4f:7a:86:b1:31:f4:9a:32:e5:2b:f5:32:0f: e3:6f:a1:1f:a6:8a:55:f8:df:ba:b4:4b:70:33:96:74:7a:5f: 04:42:5f:d6:a1:b7:0d:15:42:ae:4c:10:bf:f7:96:28:35:eb: 4e:6b:86:4b:5e:7d:70:91:3e:2f:09:2b:68:88:7b:5f:d1:ab: fb:58:66:ae:20:2c:a0:f1:68:c5:f9:0e:85:8d:cc:27:48:9d: 48:77:3c:e0 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZr+Nu8uDrXrWnKM0XdvlGuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMjA4MTM0NjQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTA4MWE1M2Y4MTVmZjNlNzYxYjJlNzFkNWE5OTk5ZDQ4ZGIyMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXPMHQLRO0qCY08Z62QUp0bJQJiu gk5y/n6odKZiKTiihUJl+gbyBAI9KuRQHqiWshIuONJzsIcc1vBUU5FyNC5WOc0g iRpOOjETmzGZWlYMqXVnmLXQiz+brua/4oxMGX5LjB7QktTK/g+riAAiPcygP1qa uQAlRfazBJsZMiNnl/r1xpz3+geG0EtfRzeVNkG6UB332GY7GHMET0HDsyjR9NXh 9Z+KDRN8ta3rJULqu3wkK8l6CGrbf3BhZBgBmMimje/Uhi8YTk/R4qlem8ZtZ21X Mx2GBZpMcaH33h4Erfa6zDxarrzf6puoKp7sDS8+u9TFqHAUS6Fq/Yft0wIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFAkIGlP4Ff8+dhsucdWpmZ1I2yN+MB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvQ1FnYVVfZ1ZfejUyR3k1eDFhbVpuVWpiSTM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAIdqAQME AIdqGwMEAIdqJAMEAIdqLQMEAYdqQDAMAwQAh2pTAwQAh2pUAwQAh2pkAwQAmVAB AwQAmVAFAwQAmVAKAwQBmVAgMAwDBACZUC0DBACZUC4DBACZUEowDAMEAJlQXwME AJlQYAMEAJlQbjANBgkqhkiG9w0BAQsFAAOCAQEAL2c6xmsgI7zSMdal9HvLVhv3 Z5suENm92rOhi3pAWpERQwPVApFIVA01W7n6PZrSrHgFfXunw6f/g/5ApXks2rET HtcTd6g4fdwsNTKmeFr9+J1IF+BmxY2WuVWP7+QcBeRFUWhK2HR/YwdniLV6bBHX IbVarxGSM/3xWFhGZj5JTystu7uDWjkrpH+OpI7ZuCgRgqKYTsONM1wyMKh+eXFk xEPcAQxPeoaxMfSaMuUr9TIP42+hH6aKVfjfurRLcDOWdHpfBEJf1qG3DRVCrkwQ v/eWKDXrTmuGS159cJE+LwkraIh7X9Gr+1hmriAsoPFoxfkOhY3MJ0idSHc84A== -----END CERTIFICATE-----Generated at Sat Dec 13 00:36:30 2025 by rpki-client