This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/RKaybm4puvMHQhQpClzAoK5EGkg.roa File: RKaybm4puvMHQhQpClzAoK5EGkg.roa (raw, json) Hash identifier: Rw8BoqEJ+XOx00/IUrG/sI05DoCPOaxoODu9OIjPMrw= Subject key identifier: 44:A6:B2:6E:6E:29:BA:F3:07:42:14:29:0A:5C:C0:A0:AE:44:1A:48 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019BB6C4E1152F5448782A156FBF069B994A Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/RKaybm4puvMHQhQpClzAoK5EGkg.roa Signing time: Tue 13 Jan 2026 09:51:54 +0000 ROA not before: Tue 13 Jan 2026 09:51:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214238 IP address blocks: 135.106.1.0/24 maxlen: 24 135.106.27.0/24 maxlen: 24 135.106.36.0/24 maxlen: 24 135.106.45.0/24 maxlen: 24 135.106.64.0/24 maxlen: 24 135.106.65.0/24 maxlen: 24 135.106.83.0/24 maxlen: 24 135.106.84.0/24 maxlen: 24 135.106.100.0/24 maxlen: 24 136.234.149.0/24 maxlen: 24 136.234.220.0/24 maxlen: 24 136.234.233.0/24 maxlen: 24 136.234.247.0/24 maxlen: 24 153.80.1.0/24 maxlen: 24 153.80.5.0/24 maxlen: 24 153.80.10.0/24 maxlen: 24 153.80.32.0/24 maxlen: 24 153.80.33.0/24 maxlen: 24 153.80.45.0/24 maxlen: 24 153.80.46.0/24 maxlen: 24 153.80.74.0/24 maxlen: 24 153.80.95.0/24 maxlen: 24 153.80.96.0/24 maxlen: 24 153.80.110.0/24 maxlen: 24 153.80.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:c4:e1:15:2f:54:48:78:2a:15:6f:bf:06:9b:99:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Jan 13 09:51:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44a6b26e6e29baf3074214290a5cc0a0ae441a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e1:4a:90:ce:b4:8a:f4:0b:a4:00:88:63:f3: 5c:93:1d:03:bc:21:85:47:0a:2b:2d:92:1a:2e:7b: 8f:61:bc:c6:c1:a6:38:01:31:70:1f:a9:a1:d9:26: 83:ce:4c:19:e6:b9:d6:14:de:04:f7:19:ba:27:95: 01:6c:fa:28:d0:67:5a:56:5b:f8:d7:40:fd:22:4f: ee:34:03:c3:a7:c0:8f:32:9d:a0:27:39:ec:4b:f8: 1b:53:9d:7f:dc:c8:7c:12:d3:13:12:4c:52:4a:51: 8a:2c:77:ef:3a:8c:ed:ff:e1:2f:45:a9:c7:48:26: 5e:9a:79:8b:65:b9:d5:e2:04:d5:27:da:4e:7f:ed: b0:cc:d3:8a:ff:65:f9:e5:19:fa:df:bd:db:e0:f5: 84:7c:16:13:97:00:cd:36:b0:21:0b:65:f4:0a:0a: 2f:b9:45:99:98:8a:ea:27:ca:ef:c2:53:9a:af:d8: 01:fa:8a:40:c1:e8:a8:e6:ec:38:fd:01:eb:45:58: 8d:e2:5a:1e:b1:5d:a9:95:fd:08:3f:70:10:a6:2e: d3:74:74:cf:88:9a:5e:25:6f:8e:0b:43:f6:85:85: c5:f7:99:dc:6c:de:b4:c2:1a:00:6b:df:97:05:52: e3:69:8f:70:dd:65:21:cc:ac:2f:58:03:ad:d5:53: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A6:B2:6E:6E:29:BA:F3:07:42:14:29:0A:5C:C0:A0:AE:44:1A:48 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/RKaybm4puvMHQhQpClzAoK5EGkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.106.1.0/24 135.106.27.0/24 135.106.36.0/24 135.106.45.0/24 135.106.64.0/23 135.106.83.0-135.106.84.255 135.106.100.0/24 136.234.149.0/24 136.234.220.0/24 136.234.233.0/24 136.234.247.0/24 153.80.1.0/24 153.80.5.0/24 153.80.10.0/24 153.80.32.0/23 153.80.45.0-153.80.46.255 153.80.74.0/24 153.80.95.0-153.80.96.255 153.80.110.0/24 153.80.137.0/24 Signature Algorithm: sha256WithRSAEncryption 91:53:cf:d4:4e:2e:b4:fd:b8:a4:8d:37:d8:62:e6:93:61:44: 5e:fd:b7:89:24:58:be:61:91:ca:80:95:a6:6b:bd:7e:4c:ef: 18:26:87:13:3e:28:69:1c:0f:b5:6b:e8:12:1d:4a:99:3b:76: a5:f1:03:d9:82:67:69:ec:63:72:c1:7d:42:e4:41:2f:1a:e6: 73:4f:8c:24:51:81:0c:85:2c:f0:5a:86:d8:03:f5:f2:f3:f9: 34:45:64:3f:d6:4c:50:41:31:aa:5c:4b:c6:94:8a:3c:8c:e0: ea:c5:0e:31:1c:cd:32:7a:2c:7d:23:a7:5d:6c:30:b4:d8:da: 5e:9f:19:7c:8a:b0:48:07:dc:b4:c4:ad:da:d8:cc:dd:e9:68: 2c:df:ab:36:6b:c6:d6:ee:e6:1a:98:db:3d:1b:dd:05:74:75: 63:e1:f7:97:9e:a3:fb:25:93:bc:e2:5b:e7:7d:fb:28:0f:55: d3:a4:36:2d:ef:8b:af:5f:1c:8c:e1:6e:dc:8c:52:b1:e9:b7: 64:1a:b4:3f:b6:81:66:fd:8a:25:0b:8d:2d:fa:27:85:0b:cf: c1:91:81:28:d0:0f:4f:24:09:20:53:69:12:bb:cc:2a:8c:7e: 77:a5:15:62:78:68:bc:f8:a8:b5:39:43:e3:a1:e1:50:fc:0b: f1:22:63:cf -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZu2xOEVL1RIeCoVb78Gm5lKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjYwMTEzMDk1MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGE2YjI2ZTZlMjliYWYzMDc0MjE0MjkwYTVjYzBhMGFlNDQxYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uFKkM60ivQLpACIY/Nckx0DvCGF RworLZIaLnuPYbzGwaY4ATFwH6mh2SaDzkwZ5rnWFN4E9xm6J5UBbPoo0GdaVlv4 10D9Ik/uNAPDp8CPMp2gJznsS/gbU51/3Mh8EtMTEkxSSlGKLHfvOozt/+EvRanH SCZemnmLZbnV4gTVJ9pOf+2wzNOK/2X55Rn6373b4PWEfBYTlwDNNrAhC2X0Cgov uUWZmIrqJ8rvwlOar9gB+opAweio5uw4/QHrRViN4loesV2plf0IP3AQpi7TdHTP iJpeJW+OC0P2hYXF95ncbN60whoAa9+XBVLjaY9w3WUhzKwvWAOt1VMY6QIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFESmsm5uKbrzB0IUKQpcwKCuRBpIMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvUktheWJtNHB1dk1IUWhRcENsekFvSzVFR2tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBACH agEDBACHahsDBACHaiQDBACHai0DBAGHakAwDAMEAIdqUwMEAIdqVAMEAIdqZAME AIjqlQMEAIjq3AMEAIjq6QMEAIjq9wMEAJlQAQMEAJlQBQMEAJlQCgMEAZlQIDAM AwQAmVAtAwQAmVAuAwQAmVBKMAwDBACZUF8DBACZUGADBACZUG4DBACZUIkwDQYJ KoZIhvcNAQELBQADggEBAJFTz9ROLrT9uKSNN9hi5pNhRF79t4kkWL5hkcqAlaZr vX5M7xgmhxM+KGkcD7Vr6BIdSpk7dqXxA9mCZ2nsY3LBfULkQS8a5nNPjCRRgQyF LPBahtgD9fLz+TRFZD/WTFBBMapcS8aUijyM4OrFDjEczTJ6LH0jp11sMLTY2l6f GXyKsEgH3LTErdrYzN3paCzfqzZrxtbu5hqY2z0b3QV0dWPh95eeo/slk7ziW+d9 +ygPVdOkNi3vi69fHIzhbtyMUrHpt2QatD+2gWb9iiULjS36J4ULz8GRgSjQD08k CSBTaRK7zCqMfnelFWJ4aLz4qLU5Q+Oh4VD8C/EiY88= -----END CERTIFICATE-----Generated at Sun Jan 25 10:19:56 2026 by rpki-client