This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/1RmyaRsZXJPfoBlY2E0l9Y54_ZE.roa File: 1RmyaRsZXJPfoBlY2E0l9Y54_ZE.roa (raw, json) Hash identifier: whorgJaT5hcUDFPDkYQ9eOt8h5cYDwAEftEPphvS28w= Subject key identifier: D5:19:B2:69:1B:19:5C:93:DF:A0:19:58:D8:4D:25:F5:8E:78:FD:91 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019AF0241C44EDFCF37B15CC115F8CCAAFCA Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/1RmyaRsZXJPfoBlY2E0l9Y54_ZE.roa Signing time: Fri 05 Dec 2025 20:11:29 +0000 ROA not before: Fri 05 Dec 2025 20:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48031 IP address blocks: 135.106.111.0/24 maxlen: 24 135.106.112.0/24 maxlen: 24 135.106.114.0/24 maxlen: 24 135.106.115.0/24 maxlen: 24 135.106.116.0/24 maxlen: 24 135.106.117.0/24 maxlen: 24 135.106.118.0/24 maxlen: 24 135.106.119.0/24 maxlen: 24 135.106.120.0/24 maxlen: 24 135.106.121.0/24 maxlen: 24 135.106.122.0/24 maxlen: 24 135.106.123.0/24 maxlen: 24 135.106.124.0/24 maxlen: 24 135.106.125.0/24 maxlen: 24 135.106.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:24:1c:44:ed:fc:f3:7b:15:cc:11:5f:8c:ca:af:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Dec 5 20:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d519b2691b195c93dfa01958d84d25f58e78fd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:8c:d3:8e:91:25:de:9f:4c:d7:15:20:ef: 04:94:bd:56:f3:53:45:af:66:89:d3:5b:c4:2e:ed: 5c:56:9a:3e:c4:a8:a5:e5:09:60:f5:80:cd:a5:11: be:12:b1:82:45:54:8b:a4:f8:83:07:c9:08:43:d7: b6:87:a1:a8:7a:f0:4b:06:1b:92:01:2f:a6:1e:7c: 79:c2:fb:44:dd:39:f5:0e:8b:4b:cd:17:5d:93:c8: 57:e3:06:2b:b1:78:67:54:52:f7:e5:c7:ae:dc:53: 77:99:c3:91:3f:be:9f:65:fc:69:1d:e9:a6:4a:8c: ec:5f:9d:24:81:d6:eb:ed:09:41:c1:46:96:26:1b: 03:1a:70:f2:65:01:30:0a:2f:d5:31:8d:0a:6f:6d: 75:57:57:1e:42:73:b3:44:b9:f8:48:50:4f:4f:54: c9:f3:ac:ee:25:26:c6:8c:6b:ac:d3:83:75:dc:85: d2:90:03:e9:f9:ca:c9:b4:76:62:5a:94:ed:4f:9d: 5b:04:67:00:a4:4f:7b:12:f4:fb:f8:85:02:8e:a5: 4c:51:f5:de:4a:b7:4a:8b:32:e8:5c:9c:d4:bd:5a: f0:c7:4c:77:55:95:b1:b9:cc:34:e6:c5:29:2f:59: b3:53:56:6e:d2:21:55:ef:da:ba:8c:33:6b:17:7e: 85:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:19:B2:69:1B:19:5C:93:DF:A0:19:58:D8:4D:25:F5:8E:78:FD:91 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/1RmyaRsZXJPfoBlY2E0l9Y54_ZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.106.111.0-135.106.112.255 135.106.114.0-135.106.125.255 135.106.127.0/24 Signature Algorithm: sha256WithRSAEncryption a1:11:07:d5:2e:2e:b9:51:15:3c:c2:76:ab:9a:13:49:47:91: 04:65:42:6e:83:22:5b:2f:03:95:36:b3:10:3a:c2:61:10:41: 7e:66:97:a5:a3:30:42:c4:10:9f:b8:c1:c0:c7:80:18:dd:38: a9:ff:aa:43:98:ed:ad:77:c8:b9:75:b7:eb:ed:95:50:a0:ce: ac:1f:46:cb:9f:1f:b5:25:54:28:fb:be:78:8b:23:6b:8f:8f: b4:35:98:62:12:6b:c8:e0:70:e0:07:0c:b1:86:fb:98:76:8c: 14:e6:70:3a:f2:7c:1d:52:fe:05:db:22:d9:68:7f:0f:ba:da: 35:02:a3:b2:1a:3b:9f:fd:2d:74:ac:02:62:57:c7:8b:59:7c: 48:eb:b3:80:39:f2:ed:0c:57:c4:9a:b3:be:70:b1:5f:73:71: 71:a4:c4:70:d9:e2:07:52:c5:dd:aa:ad:43:09:4d:5c:e6:01: a3:4e:64:c9:0a:38:24:9e:21:e3:7a:e3:4a:9a:86:9d:6c:a4: 7b:67:e8:5b:aa:41:e3:b7:20:7e:de:45:4f:e8:d8:a5:b0:2c: 88:e5:1b:1b:04:bd:eb:56:db:35:cb:6d:fb:27:2e:5c:72:a4: 24:cd:aa:b0:87:03:c9:da:06:fd:84:04:6f:b2:e6:3f:c6:5e: 8f:74:a9:d9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwJBxE7fzzexXMEV+Myq/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMjA1MjAxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTE5YjI2OTFiMTk1YzkzZGZhMDE5NThkODRkMjVmNThlNzhmZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupaM046RJd6fTNcVIO8ElL1W81NF r2aJ01vELu1cVpo+xKil5Qlg9YDNpRG+ErGCRVSLpPiDB8kIQ9e2h6GoevBLBhuS AS+mHnx5wvtE3Tn1DotLzRddk8hX4wYrsXhnVFL35ceu3FN3mcORP76fZfxpHemm SozsX50kgdbr7QlBwUaWJhsDGnDyZQEwCi/VMY0Kb211V1ceQnOzRLn4SFBPT1TJ 86zuJSbGjGus04N13IXSkAPp+crJtHZiWpTtT51bBGcApE97EvT7+IUCjqVMUfXe SrdKizLoXJzUvVrwx0x3VZWxucw05sUpL1mzU1Zu0iFV79q6jDNrF36F6wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNUZsmkbGVyT36AZWNhNJfWOeP2RMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvMVJteWFSc1pYSlBmb0JsWTJFMGw5WTU0X1pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBACHam8D BACHanAwDAMEAYdqcgMEAYdqfAMEAIdqfzANBgkqhkiG9w0BAQsFAAOCAQEAoREH 1S4uuVEVPMJ2q5oTSUeRBGVCboMiWy8DlTazEDrCYRBBfmaXpaMwQsQQn7jBwMeA GN04qf+qQ5jtrXfIuXW36+2VUKDOrB9Gy58ftSVUKPu+eIsja4+PtDWYYhJryOBw 4AcMsYb7mHaMFOZwOvJ8HVL+Bdsi2Wh/D7raNQKjsho7n/0tdKwCYlfHi1l8SOuz gDny7QxXxJqzvnCxX3NxcaTEcNniB1LF3aqtQwlNXOYBo05kyQo4JJ4h43rjSpqG nWyke2foW6pB47cgft5FT+jYpbAsiOUbGwS961bbNctt+ycuXHKkJM2qsIcDydoG /YQEb7LmP8Zej3Sp2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:15 2025 by rpki-client