This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/EXmHI_hbBVc04pTIB5HAdXIvzzk.roa File: EXmHI_hbBVc04pTIB5HAdXIvzzk.roa (raw, json) Hash identifier: W+2ZoywpsdmFxBtGjyF66hb38qU5raVR+0Ofq7fyyMc= Subject key identifier: 11:79:87:23:F8:5B:05:57:34:E2:94:C8:07:91:C0:75:72:2F:CF:39 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019B4CF8748DF9BAC6F296954007DD78D9BD Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/EXmHI_hbBVc04pTIB5HAdXIvzzk.roa Signing time: Tue 23 Dec 2025 20:48:29 +0000 ROA not before: Tue 23 Dec 2025 20:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48031 IP address blocks: 135.106.111.0/24 maxlen: 24 135.106.112.0/24 maxlen: 24 135.106.114.0/24 maxlen: 24 135.106.115.0/24 maxlen: 24 135.106.116.0/24 maxlen: 24 135.106.117.0/24 maxlen: 24 135.106.118.0/24 maxlen: 24 135.106.119.0/24 maxlen: 24 135.106.120.0/24 maxlen: 24 135.106.121.0/24 maxlen: 24 135.106.122.0/24 maxlen: 24 135.106.123.0/24 maxlen: 24 135.106.124.0/24 maxlen: 24 135.106.125.0/24 maxlen: 24 135.106.127.0/24 maxlen: 24 153.80.131.0/24 maxlen: 24 153.80.132.0/24 maxlen: 24 153.80.133.0/24 maxlen: 24 153.80.134.0/24 maxlen: 24 153.80.135.0/24 maxlen: 24 153.80.141.0/24 maxlen: 24 153.80.149.0/24 maxlen: 24 153.80.159.0/24 maxlen: 24 153.80.164.0/24 maxlen: 24 153.80.165.0/24 maxlen: 24 153.80.166.0/24 maxlen: 24 153.80.167.0/24 maxlen: 24 153.80.168.0/24 maxlen: 24 194.69.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:f8:74:8d:f9:ba:c6:f2:96:95:40:07:dd:78:d9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Dec 23 20:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11798723f85b055734e294c80791c075722fcf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:1d:21:73:f9:6b:66:74:4b:99:f2:78:a2: fc:ce:2b:ec:4d:82:97:09:2a:5f:43:30:5d:98:9f: 07:6e:84:32:bc:dc:7b:60:a5:b0:8c:0b:ee:62:c5: fc:25:88:c7:1d:48:e4:28:5b:ba:52:34:96:6c:77: 3d:6d:f0:eb:2a:4a:e2:ca:3e:85:0c:e7:4b:fa:a6: 60:c6:5c:27:00:7a:5a:54:5f:ed:81:8a:d4:71:3e: 3a:9b:e8:63:92:2b:cc:ac:ce:50:ec:dc:6c:f2:58: a3:1a:db:66:de:da:3b:94:93:b0:82:b4:21:5b:5c: 3b:fc:91:6c:df:bc:9f:12:85:30:33:29:b7:8d:7a: 3c:c4:d6:b9:ba:e5:a1:48:8b:a5:54:0a:a2:a7:b5: ed:44:33:bb:a9:3a:5d:68:c3:9d:2d:30:3d:00:0f: 22:0e:12:58:bf:6f:d8:1d:02:85:8a:96:ba:6e:3d: 60:4c:33:83:52:02:5b:ac:e9:71:81:1c:a5:6e:eb: d3:70:02:d7:99:6a:c3:39:94:4f:0e:17:10:45:e7: 54:15:fc:ff:0c:ac:d3:b7:bc:4b:84:d6:88:5a:e8: 10:33:b8:9f:68:fd:da:39:78:b4:a2:7d:20:7c:1e: a8:f6:60:55:18:f6:aa:ca:60:b4:f7:a1:6f:07:22: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:87:23:F8:5B:05:57:34:E2:94:C8:07:91:C0:75:72:2F:CF:39 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/EXmHI_hbBVc04pTIB5HAdXIvzzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.106.111.0-135.106.112.255 135.106.114.0-135.106.125.255 135.106.127.0/24 153.80.131.0-153.80.135.255 153.80.141.0/24 153.80.149.0/24 153.80.159.0/24 153.80.164.0-153.80.168.255 194.69.253.0/24 Signature Algorithm: sha256WithRSAEncryption 21:a3:33:c7:cd:6a:92:14:ac:b0:70:6c:01:9c:8f:e5:7a:44: 83:8e:7f:d2:4b:b4:e4:57:4c:7e:87:42:2d:0a:e4:d0:4e:e8: 39:d2:8d:99:74:b4:cc:aa:7c:ca:51:8b:cf:6f:0c:ae:4c:57: 0b:b9:45:03:52:55:99:66:06:8b:09:9a:af:ce:eb:d4:7d:bf: 62:78:84:6a:6b:07:be:53:85:d2:fb:9d:00:3b:6d:8a:ed:0b: 02:b4:25:5e:91:12:63:ed:9d:eb:43:ac:30:35:bb:29:91:ab: d6:ca:ae:8d:77:6a:13:3d:69:f1:b3:53:cb:d5:6c:dd:1a:bf: ab:64:c2:12:da:67:c8:00:cf:27:51:78:0a:b0:5e:a2:08:2d: 42:50:5f:0e:4d:14:22:8c:fd:3b:91:2b:16:a2:81:6f:b6:85: 19:b3:e5:75:49:07:d8:3a:23:69:c5:bb:15:b2:fc:df:45:08: 92:6b:d1:64:21:d2:cf:da:d8:60:5a:7c:20:a7:03:dc:04:71: 4e:f3:a5:e5:56:99:b6:1c:fe:e4:73:98:c8:2f:40:89:86:90: 11:08:04:b4:18:e1:74:64:0e:01:53:4c:1b:94:cb:74:b5:d9: 01:19:36:aa:84:ad:bc:cc:35:f3:b6:47:37:10:c2:5d:19:be: 8d:f9:d6:1d -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZtM+HSN+brG8paVQAfdeNm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMjIzMjA0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTc5ODcyM2Y4NWIwNTU3MzRlMjk0YzgwNzkxYzA3NTcyMmZjZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU8dIXP5a2Z0S5nyeKL8zivsTYKX CSpfQzBdmJ8HboQyvNx7YKWwjAvuYsX8JYjHHUjkKFu6UjSWbHc9bfDrKkriyj6F DOdL+qZgxlwnAHpaVF/tgYrUcT46m+hjkivMrM5Q7Nxs8lijGttm3to7lJOwgrQh W1w7/JFs37yfEoUwMym3jXo8xNa5uuWhSIulVAqip7XtRDO7qTpdaMOdLTA9AA8i DhJYv2/YHQKFipa6bj1gTDODUgJbrOlxgRylbuvTcALXmWrDOZRPDhcQRedUFfz/ DKzTt7xLhNaIWugQM7ifaP3aOXi0on0gfB6o9mBVGPaqymC096FvByIVQwIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFBF5hyP4WwVXNOKUyAeRwHVyL885MB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvRVhtSElfaGJCVmMwNHBUSUI1SEFkWEl2enprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWMAwDBACHam8D BACHanAwDAMEAYdqcgMEAYdqfAMEAIdqfzAMAwQAmVCDAwQDmVCAAwQAmVCNAwQA mVCVAwQAmVCfMAwDBAKZUKQDBACZUKgDBADCRf0wDQYJKoZIhvcNAQELBQADggEB ACGjM8fNapIUrLBwbAGcj+V6RIOOf9JLtORXTH6HQi0K5NBO6DnSjZl0tMyqfMpR i89vDK5MVwu5RQNSVZlmBosJmq/O69R9v2J4hGprB75ThdL7nQA7bYrtCwK0JV6R EmPtnetDrDA1uymRq9bKro13ahM9afGzU8vVbN0av6tkwhLaZ8gAzydReAqwXqII LUJQXw5NFCKM/TuRKxaigW+2hRmz5XVJB9g6I2nFuxWy/N9FCJJr0WQh0s/a2GBa fCCnA9wEcU7zpeVWmbYc/uRzmMgvQImGkBEIBLQY4XRkDgFTTBuUy3S12QEZNqqE rbzMNfO2RzcQwl0Zvo351h0= -----END CERTIFICATE-----Generated at Fri Dec 26 17:17:38 2025 by rpki-client