This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/6posoPXsPfdouDKLy145i8ANfKA.roa File: 6posoPXsPfdouDKLy145i8ANfKA.roa (raw, json) Hash identifier: NU4GuqMh1vLiMyOmJa+XaD8bTTXs/eW9FEQvrEdIOTI= Subject key identifier: EA:9A:2C:A0:F5:EC:3D:F7:68:B8:32:8B:CB:5E:39:8B:C0:0D:7C:A0 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019AEAB82B7911227C9F80F44C4213859875 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/6posoPXsPfdouDKLy145i8ANfKA.roa Signing time: Thu 04 Dec 2025 18:55:29 +0000 ROA not before: Thu 04 Dec 2025 18:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42375 IP address blocks: 135.106.252.0/24 maxlen: 24 135.106.253.0/24 maxlen: 24 135.106.254.0/24 maxlen: 24 135.106.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:b8:2b:79:11:22:7c:9f:80:f4:4c:42:13:85:98:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Dec 4 18:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ea9a2ca0f5ec3df768b8328bcb5e398bc00d7ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:1b:37:56:84:1d:5f:6a:69:94:a1:ef:4d: 41:02:cc:9d:ad:0d:37:0b:67:3d:f2:14:17:b0:55: f7:5a:24:f6:be:ef:32:84:9c:71:d4:0e:3d:1c:7a: 27:d9:47:da:45:20:e5:1a:fe:87:00:13:84:15:f4: 8d:e3:2a:57:11:34:78:f7:0e:6f:dc:3a:7b:02:83: a1:04:61:a3:0a:b6:76:2d:d7:30:a9:43:ec:df:0d: 6f:11:c8:fc:6b:30:dc:85:22:a1:63:25:a5:c9:57: 9d:90:0e:f7:63:a7:df:c7:62:de:9f:17:b3:26:2b: 49:9f:7a:a9:33:28:4c:b8:50:4c:50:c6:df:03:a2: 2d:e2:b1:f4:9a:72:4f:10:c8:5c:8e:4b:b1:22:cc: a8:46:b0:f2:51:69:ed:e0:0e:79:60:90:ff:a1:b8: 22:85:f9:ad:ab:d2:f4:bc:aa:aa:9a:5a:a7:c3:12: 71:2b:60:c5:4d:f3:0f:64:d5:bb:12:f0:9b:66:ca: 70:df:2b:67:03:72:35:4b:eb:b4:cc:89:c1:51:b7: 86:14:98:bf:ff:bd:73:a8:fd:af:56:f1:57:c1:78: 33:53:dd:b7:94:fb:dd:f5:9f:a2:a2:95:f3:ac:f0: dd:05:80:9d:d9:e3:8c:9a:b8:3c:b5:bf:94:2b:9c: 57:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9A:2C:A0:F5:EC:3D:F7:68:B8:32:8B:CB:5E:39:8B:C0:0D:7C:A0 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/6posoPXsPfdouDKLy145i8ANfKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.106.252.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:a4:95:1e:8c:a1:bc:33:45:27:b1:b0:54:67:8a:fa:5a:cd: 57:97:33:b3:a1:de:49:d9:56:95:79:34:9d:fb:e7:6a:8b:08: 4f:18:9e:c7:3b:0d:42:16:a7:8b:49:6e:24:b5:80:6a:57:85: ac:38:83:e5:18:f5:52:da:b9:bb:a4:6e:4a:a7:8f:48:f5:fe: 08:5c:c8:92:24:24:37:57:87:b5:69:77:2f:dc:aa:96:ef:74: 07:66:5d:b4:6e:5f:1a:7d:0e:a2:80:a4:ad:99:24:e0:e3:fe: c9:2a:e2:fe:a6:c9:94:fd:02:d2:8a:0b:0c:f3:11:d6:9a:c9: 4e:7b:a3:21:64:53:e5:cb:4e:6f:94:f2:4b:17:d2:1a:4e:4e: a0:26:11:c6:a8:78:47:87:80:8a:e9:fa:09:24:54:b9:1d:12: 72:ff:27:56:0f:03:10:fd:a4:e3:0c:ee:4c:d5:c6:58:10:76: d4:74:65:d8:23:94:70:49:e2:96:13:8a:bf:c7:42:d3:79:e3: 79:0a:ca:d5:7c:0c:72:14:5e:ef:52:8f:a7:69:3e:7f:d9:fe: 08:2b:d3:3f:ef:a7:d6:2b:f1:8b:5c:7b:ff:ba:a8:08:ff:55: 04:fb:9b:d7:37:f0:c9:ca:c4:2f:b9:41:7e:0b:7e:db:9d:53: 86:13:a3:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrquCt5ESJ8n4D0TEIThZh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMjA0MTg1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTlhMmNhMGY1ZWMzZGY3NjhiODMyOGJjYjVlMzk4YmMwMGQ3Y2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYkbN1aEHV9qaZSh701BAsydrQ03 C2c98hQXsFX3WiT2vu8yhJxx1A49HHon2UfaRSDlGv6HABOEFfSN4ypXETR49w5v 3Dp7AoOhBGGjCrZ2LdcwqUPs3w1vEcj8azDchSKhYyWlyVedkA73Y6ffx2Lenxez JitJn3qpMyhMuFBMUMbfA6It4rH0mnJPEMhcjkuxIsyoRrDyUWnt4A55YJD/obgi hfmtq9L0vKqqmlqnwxJxK2DFTfMPZNW7EvCbZspw3ytnA3I1S+u0zInBUbeGFJi/ /71zqP2vVvFXwXgzU923lPvd9Z+iopXzrPDdBYCd2eOMmrg8tb+UK5xXGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOqaLKD17D33aLgyi8teOYvADXygMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvNnBvc29QWHNQZmRvdURLTHkxNDVpOEFOZktBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCh2r8MA0G CSqGSIb3DQEBCwUAA4IBAQAPpJUejKG8M0UnsbBUZ4r6Ws1XlzOzod5J2VaVeTSd ++dqiwhPGJ7HOw1CFqeLSW4ktYBqV4WsOIPlGPVS2rm7pG5Kp49I9f4IXMiSJCQ3 V4e1aXcv3KqW73QHZl20bl8afQ6igKStmSTg4/7JKuL+psmU/QLSigsM8xHWmslO e6MhZFPly05vlPJLF9IaTk6gJhHGqHhHh4CK6foJJFS5HRJy/ydWDwMQ/aTjDO5M 1cZYEHbUdGXYI5RwSeKWE4q/x0LTeeN5CsrVfAxyFF7vUo+naT5/2f4IK9M/76fW K/GLXHv/uqgI/1UE+5vXN/DJysQvuUF+C37bnVOGE6PX -----END CERTIFICATE-----Generated at Sat Dec 6 18:08:55 2025 by rpki-client