This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/a-CgzoXvE2hu-YwXYdKcp2hz5Ug.roa File: a-CgzoXvE2hu-YwXYdKcp2hz5Ug.roa (raw, json) Hash identifier: srRhmYTojfw0V75m9Uir4SINROzB9s+phSnylA1do3w= Subject key identifier: 6B:E0:A0:CE:85:EF:13:68:6E:F9:8C:17:61:D2:9C:A7:68:73:E5:48 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019B4D0D837FD88EEF4774F0242C4F9BC045 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/a-CgzoXvE2hu-YwXYdKcp2hz5Ug.roa Signing time: Tue 23 Dec 2025 21:11:29 +0000 ROA not before: Tue 23 Dec 2025 21:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202656 IP address blocks: 153.80.128.0/24 maxlen: 24 153.80.129.0/24 maxlen: 24 153.80.139.0/24 maxlen: 24 153.80.140.0/24 maxlen: 24 153.80.160.0/24 maxlen: 24 153.80.169.0/24 maxlen: 24 153.80.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:0d:83:7f:d8:8e:ef:47:74:f0:24:2c:4f:9b:c0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Dec 23 21:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6be0a0ce85ef13686ef98c1761d29ca76873e548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:77:1f:4f:fb:7c:0a:53:8a:6a:70:72:f6: 35:2f:44:ea:3f:a7:44:43:ce:a4:a3:6b:e8:2b:d6: f4:b8:91:b4:c6:80:0c:3f:7b:76:07:7b:f8:74:e6: fc:9e:82:49:2d:23:40:cd:64:e6:e4:69:a9:cc:df: 42:76:6b:b1:4f:99:23:bd:83:0d:b3:83:33:71:ce: d0:ba:0f:7d:e8:c3:4b:b2:b0:6e:f9:e1:6f:fa:1d: 82:2a:02:9a:81:2e:5d:9f:b7:63:da:46:e3:68:ed: 9f:b1:f4:99:ec:21:f4:55:47:83:17:17:46:53:c2: 01:b0:02:9c:0d:2b:a8:4f:95:38:86:11:19:0d:bc: 6f:76:8d:d3:83:fa:7a:59:39:34:ad:fe:d4:1e:58: c5:ad:94:71:f5:91:77:c1:13:b8:3c:98:4f:0a:36: 10:80:76:0a:d4:83:22:d2:db:64:44:59:c9:bc:4a: 66:80:d2:df:14:0f:cf:5e:0d:60:c7:37:ab:d0:0f: 46:dc:18:2c:3d:1f:32:8a:64:82:de:b2:10:26:0a: 95:a4:33:d8:1b:d1:25:64:f5:ff:d2:aa:a3:8f:a6: 99:b5:f9:37:f6:9d:26:03:6a:fd:c0:4c:5f:f2:de: 7e:a8:31:e5:59:cd:31:30:c3:7b:01:ac:17:38:d7: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E0:A0:CE:85:EF:13:68:6E:F9:8C:17:61:D2:9C:A7:68:73:E5:48 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/a-CgzoXvE2hu-YwXYdKcp2hz5Ug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.80.128.0/23 153.80.139.0-153.80.140.255 153.80.160.0/24 153.80.169.0/24 153.80.171.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:3a:e9:3b:5a:2e:12:7c:7f:48:56:f2:e7:de:1b:41:c3:55: b9:7d:32:e7:c3:0d:79:17:45:47:78:60:bd:a5:47:07:e8:25: b2:7b:0b:11:8e:dd:09:ac:48:33:28:32:79:77:56:72:4e:70: 7c:60:31:0c:88:b2:83:8e:11:52:39:a3:6f:1a:44:9f:26:76: a4:e7:f0:1b:87:52:95:c0:d0:eb:d7:ed:23:e6:c2:88:bb:30: b4:d1:3f:a2:76:b3:98:81:4b:aa:3c:ab:3e:8c:26:a8:50:ba: 6f:82:39:d8:f0:d0:d8:08:c5:be:72:88:da:44:01:1b:e2:b7: b7:0f:86:e7:38:c3:2c:3d:1a:eb:6f:95:0b:f8:91:fa:3e:f5: 26:a8:58:ae:4b:6b:22:40:8e:98:2f:7b:ba:ca:0f:99:0b:de: a4:09:e3:3c:3d:c7:39:e0:5c:71:e4:83:5e:63:56:84:e1:41: 9e:a2:d6:ff:63:3a:ef:ad:b5:c6:b8:b8:ea:83:8e:b8:48:87: 42:da:0a:c5:29:21:fd:3f:05:41:14:20:aa:6f:4d:8d:bc:81: b0:52:88:3c:05:3b:f3:c4:67:11:b3:4b:77:84:e9:10:68:54: e7:aa:88:cb:51:13:f9:8e:46:45:3e:a2:cc:16:a5:f7:a6:6c: 52:1e:20:21 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZtNDYN/2I7vR3TwJCxPm8BFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMjIzMjExMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmUwYTBjZTg1ZWYxMzY4NmVmOThjMTc2MWQyOWNhNzY4NzNlNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpB3H0/7fApTimpwcvY1L0TqP6dE Q86ko2voK9b0uJG0xoAMP3t2B3v4dOb8noJJLSNAzWTm5GmpzN9CdmuxT5kjvYMN s4Mzcc7Qug996MNLsrBu+eFv+h2CKgKagS5dn7dj2kbjaO2fsfSZ7CH0VUeDFxdG U8IBsAKcDSuoT5U4hhEZDbxvdo3Tg/p6WTk0rf7UHljFrZRx9ZF3wRO4PJhPCjYQ gHYK1IMi0ttkRFnJvEpmgNLfFA/PXg1gxzer0A9G3BgsPR8yimSC3rIQJgqVpDPY G9ElZPX/0qqjj6aZtfk39p0mA2r9wExf8t5+qDHlWc0xMMN7AawXONec0wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFGvgoM6F7xNobvmMF2HSnKdoc+VIMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvYS1DZ3pvWHZFMmh1LVl3WFlkS2NwMmh6NVVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBmVCAMAwD BACZUIsDBACZUIwDBACZUKADBACZUKkDBACZUKswDQYJKoZIhvcNAQELBQADggEB AIw66TtaLhJ8f0hW8ufeG0HDVbl9MufDDXkXRUd4YL2lRwfoJbJ7CxGO3QmsSDMo Mnl3VnJOcHxgMQyIsoOOEVI5o28aRJ8mdqTn8BuHUpXA0OvX7SPmwoi7MLTRP6J2 s5iBS6o8qz6MJqhQum+COdjw0NgIxb5yiNpEARvit7cPhuc4wyw9GutvlQv4kfo+ 9SaoWK5LayJAjpgve7rKD5kL3qQJ4zw9xzngXHHkg15jVoThQZ6i1v9jOu+ttca4 uOqDjrhIh0LaCsUpIf0/BUEUIKpvTY28gbBSiDwFO/PEZxGzS3eE6RBoVOeqiMtR E/mORkU+oswWpfembFIeICE= -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:40 2025 by rpki-client