This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Nov3Xdv81LcnCnmcgAD3CjUmLBc.roa File: Nov3Xdv81LcnCnmcgAD3CjUmLBc.roa (raw, json) Hash identifier: 0g1yBQKOARCcC9wdHPfwblffWNg4AeJ6Qn3DYGoPcnw= Subject key identifier: 36:8B:F7:5D:DB:FC:D4:B7:27:0A:79:9C:80:00:F7:0A:35:26:2C:17 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019B8341FA9620C8475E8F964D6BBA337A94 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Nov3Xdv81LcnCnmcgAD3CjUmLBc.roa Signing time: Sat 03 Jan 2026 09:48:17 +0000 ROA not before: Sat 03 Jan 2026 09:48:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204957 IP address blocks: 135.106.5.0/24 maxlen: 24 135.106.26.0/24 maxlen: 24 135.106.66.0/24 maxlen: 24 135.106.85.0/24 maxlen: 24 135.106.94.0/24 maxlen: 24 135.106.107.0/24 maxlen: 24 136.234.141.0/24 maxlen: 24 136.234.142.0/24 maxlen: 24 136.234.143.0/24 maxlen: 24 136.234.174.0/24 maxlen: 24 136.234.209.0/24 maxlen: 24 136.234.239.0/24 maxlen: 24 136.234.240.0/24 maxlen: 24 136.234.241.0/24 maxlen: 24 136.234.242.0/24 maxlen: 24 153.80.11.0/24 maxlen: 24 153.80.13.0/24 maxlen: 24 153.80.19.0/24 maxlen: 24 153.80.44.0/24 maxlen: 24 153.80.84.0/24 maxlen: 24 153.80.97.0/24 maxlen: 24 153.80.108.0/24 maxlen: 24 153.80.115.0/24 maxlen: 24 153.80.142.0/24 maxlen: 24 153.80.143.0/24 maxlen: 24 153.80.144.0/24 maxlen: 24 153.80.145.0/24 maxlen: 24 153.80.155.0/24 maxlen: 24 153.80.156.0/24 maxlen: 24 153.80.157.0/24 maxlen: 24 153.80.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:83:41:fa:96:20:c8:47:5e:8f:96:4d:6b:ba:33:7a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Jan 3 09:48:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=368bf75ddbfcd4b7270a799c8000f70a35262c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:30:17:c0:b9:57:e4:97:56:03:a7:13:12: bc:9c:b0:44:ca:b2:12:7e:0f:63:54:8c:c6:d8:3c: 11:e6:4c:6a:35:29:35:2b:9a:bb:73:33:10:92:76: 9c:c0:57:85:b0:87:a6:28:52:7b:87:95:ad:36:88: 53:7c:32:42:00:33:18:28:7c:7a:da:e0:5e:9f:3a: b4:71:e7:33:d4:01:10:b9:6f:ec:09:ed:7d:42:ee: 7d:0a:a6:39:49:77:9a:4a:90:13:f0:c6:a3:43:82: dd:6a:6b:46:a0:1d:dc:d2:e9:f3:7e:f3:55:b8:50: 9b:ba:62:0a:29:dd:98:e5:f6:98:9a:df:e6:a5:ba: 48:bd:bd:b9:6c:1c:6a:83:40:dd:f5:27:b8:27:4c: 5b:dd:81:f4:1f:7c:21:5f:47:b2:67:dc:26:ee:a1: ca:b1:ad:4e:2c:d0:2e:b7:bc:6c:67:20:2a:d2:0d: 89:51:bc:bb:b4:e3:74:31:6e:5e:0d:c6:4a:44:69: d6:83:37:49:35:80:b0:fc:09:c1:0b:a0:7d:30:57: 81:c7:a3:4e:32:23:e6:8c:f9:b7:8a:e0:a9:cb:fe: 29:66:78:94:3c:f8:46:8c:cc:48:b7:fd:16:2c:86: 9a:12:7c:eb:ef:5b:10:e3:c7:d0:20:6e:4b:e1:d9: f7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8B:F7:5D:DB:FC:D4:B7:27:0A:79:9C:80:00:F7:0A:35:26:2C:17 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Nov3Xdv81LcnCnmcgAD3CjUmLBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.106.5.0/24 135.106.26.0/24 135.106.66.0/24 135.106.85.0/24 135.106.94.0/24 135.106.107.0/24 136.234.141.0-136.234.143.255 136.234.174.0/24 136.234.209.0/24 136.234.239.0-136.234.242.255 153.80.11.0/24 153.80.13.0/24 153.80.19.0/24 153.80.44.0/24 153.80.84.0/24 153.80.97.0/24 153.80.108.0/24 153.80.115.0/24 153.80.142.0-153.80.145.255 153.80.155.0-153.80.158.255 Signature Algorithm: sha256WithRSAEncryption a5:c6:86:78:7a:18:02:e7:ef:79:d5:f2:0c:0f:2e:0c:0e:c6: db:5e:85:57:b4:c2:3d:30:7a:e0:ec:cc:6c:b5:28:d3:79:65: 39:cc:ea:18:03:38:73:93:2d:5a:21:d9:2d:b7:38:30:7c:65: 6a:83:44:bc:02:38:c8:6e:45:49:94:51:e7:50:74:84:88:bd: 35:86:ee:d2:7e:2c:77:e3:f6:7c:ec:33:45:6c:c5:05:5f:37: a4:d7:46:7e:a4:7d:d6:71:78:c2:a7:07:8e:0c:72:83:4d:ca: 68:0a:9b:d5:06:91:85:2f:46:5a:3c:94:36:57:9e:90:4f:37: 3c:3e:02:7e:65:03:82:cd:24:bf:a1:2f:ae:e1:71:25:5a:66: 52:2b:67:b8:71:e4:02:f4:22:17:bc:24:a2:7b:81:94:0b:ef: f7:39:f9:fb:4d:c4:b7:2a:b0:79:ae:47:de:2e:14:cd:f0:ed: 04:57:6b:28:07:89:9c:3e:45:97:b6:df:da:cc:b5:c8:ad:c8: 59:30:5c:a8:47:1d:e3:bb:14:51:32:e0:ce:3f:4e:45:f7:08: 68:32:06:5c:5f:7a:6d:b9:f4:f0:ee:8f:b3:c8:24:a2:c5:b3: 5b:30:79:10:25:dc:b4:80:32:c1:3f:2c:ba:34:52:59:c9:2e: c3:b9:8d:a5 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZuDQfqWIMhHXo+WTWu6M3qUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjYwMTAzMDk0ODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjhiZjc1ZGRiZmNkNGI3MjcwYTc5OWM4MDAwZjcwYTM1MjYyYzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi4wF8C5V+SXVgOnExK8nLBEyrIS fg9jVIzG2DwR5kxqNSk1K5q7czMQknacwFeFsIemKFJ7h5WtNohTfDJCADMYKHx6 2uBenzq0cecz1AEQuW/sCe19Qu59CqY5SXeaSpAT8MajQ4LdamtGoB3c0unzfvNV uFCbumIKKd2Y5faYmt/mpbpIvb25bBxqg0Dd9Se4J0xb3YH0H3whX0eyZ9wm7qHK sa1OLNAut7xsZyAq0g2JUby7tON0MW5eDcZKRGnWgzdJNYCw/AnBC6B9MFeBx6NO MiPmjPm3iuCpy/4pZniUPPhGjMxIt/0WLIaaEnzr71sQ48fQIG5L4dn3UwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDaL913b/NS3Jwp5nIAA9wo1JiwXMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvTm92M1hkdjgxTGNuQ25tY2dBRDNDalVtTEJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBACH agUDBACHahoDBACHakIDBACHalUDBACHal4DBACHamswDAMEAIjqjQMEBIjqgAME AIjqrgMEAIjq0TAMAwQAiOrvAwQAiOryAwQAmVALAwQAmVANAwQAmVATAwQAmVAs AwQAmVBUAwQAmVBhAwQAmVBsAwQAmVBzMAwDBAGZUI4DBAGZUJAwDAMEAJlQmwME AJlQnjANBgkqhkiG9w0BAQsFAAOCAQEApcaGeHoYAufvedXyDA8uDA7G216FV7TC PTB64OzMbLUo03llOczqGAM4c5MtWiHZLbc4MHxlaoNEvAI4yG5FSZRR51B0hIi9 NYbu0n4sd+P2fOwzRWzFBV83pNdGfqR91nF4wqcHjgxyg03KaAqb1QaRhS9GWjyU NleekE83PD4CfmUDgs0kv6EvruFxJVpmUitnuHHkAvQiF7wkonuBlAvv9zn5+03E tyqwea5H3i4UzfDtBFdrKAeJnD5Fl7bf2sy1yK3IWTBcqEcd47sUUTLgzj9ORfcI aDIGXF96bbn08O6Ps8gkosWzWzB5ECXctIAywT8sujRSWckuw7mNpQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:32:02 2026 by rpki-client