This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/e42_tssaIVLe2qU03gpJJ9WmZ-8.roa File: e42_tssaIVLe2qU03gpJJ9WmZ-8.roa (raw, json) Hash identifier: HsoX3a0PGn4DQ5Zy9q0FAnJ8le9CP1y1Mv/TnESepXg= Subject key identifier: 7B:8D:BF:B6:CB:1A:21:52:DE:DA:A5:34:DE:0A:49:27:D5:A6:67:EF Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019ABBE22B481F6A0308DF5C8EE55D6457A3 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/e42_tssaIVLe2qU03gpJJ9WmZ-8.roa Signing time: Tue 25 Nov 2025 16:39:12 +0000 ROA not before: Tue 25 Nov 2025 16:39:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204957 IP address blocks: 135.106.5.0/24 maxlen: 24 135.106.26.0/24 maxlen: 24 135.106.66.0/24 maxlen: 24 135.106.85.0/24 maxlen: 24 135.106.94.0/24 maxlen: 24 135.106.107.0/24 maxlen: 24 153.80.11.0/24 maxlen: 24 153.80.13.0/24 maxlen: 24 153.80.19.0/24 maxlen: 24 153.80.44.0/24 maxlen: 24 153.80.84.0/24 maxlen: 24 153.80.97.0/24 maxlen: 24 153.80.108.0/24 maxlen: 24 153.80.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:e2:2b:48:1f:6a:03:08:df:5c:8e:e5:5d:64:57:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Nov 25 16:39:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7b8dbfb6cb1a2152dedaa534de0a4927d5a667ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:8e:32:6d:5e:6b:b3:b8:60:47:7b:71:1b: 3a:16:71:3f:8e:6a:13:e4:39:25:aa:ca:9c:36:e3: cd:00:91:16:24:78:58:8d:3e:4d:a6:0c:14:c8:de: 18:6a:1f:4f:c7:aa:3d:69:22:96:91:53:bf:2c:0f: 9e:cb:a3:a2:ea:24:7a:d2:b2:1b:7b:00:ab:c0:94: 85:5b:05:37:1f:40:c1:c8:c5:d4:20:2f:41:8f:f8: a2:bb:c1:10:59:46:8e:d9:43:92:01:dc:f4:d0:fd: c0:4c:ae:ec:74:cd:69:0e:9c:f4:e5:0a:da:ff:99: ac:91:85:b1:02:57:95:d4:a3:aa:fc:e4:3c:a7:9f: 37:97:e9:c4:e9:05:b1:19:6c:7c:c8:2c:ba:a8:06: 95:81:7d:0a:ed:f8:99:fc:eb:35:33:2c:89:cf:41: a0:63:e3:34:bb:60:af:be:a3:79:96:d8:5d:9c:62: 53:ea:86:14:39:90:44:06:7b:41:4f:2d:51:69:af: 4a:53:c3:9a:b1:b0:5b:5e:82:49:62:a2:45:48:a2: 5b:03:e3:e7:31:25:ef:ba:f8:1a:ed:c8:cd:d8:33: e4:64:7c:63:62:76:8e:15:4a:7c:7c:d1:1b:e0:82: fa:a5:5d:db:32:99:f8:22:6e:be:af:1d:cd:33:c0: ea:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8D:BF:B6:CB:1A:21:52:DE:DA:A5:34:DE:0A:49:27:D5:A6:67:EF X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/e42_tssaIVLe2qU03gpJJ9WmZ-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.106.5.0/24 135.106.26.0/24 135.106.66.0/24 135.106.85.0/24 135.106.94.0/24 135.106.107.0/24 153.80.11.0/24 153.80.13.0/24 153.80.19.0/24 153.80.44.0/24 153.80.84.0/24 153.80.97.0/24 153.80.108.0/24 153.80.115.0/24 Signature Algorithm: sha256WithRSAEncryption 02:9c:c8:26:d3:11:3e:1a:1b:54:52:7d:64:4f:e8:3b:d4:dc: 73:d3:f6:c6:e0:f9:19:d7:9d:6c:d1:95:74:55:6f:b7:58:b4: 17:56:da:98:53:a1:4a:85:cc:21:c4:fb:80:34:55:43:cf:c3: 52:db:74:52:0d:6c:d1:58:7b:81:e2:c2:d4:ab:8f:56:d1:65: a6:e2:99:4b:d1:bd:f3:89:6b:f6:40:4f:ee:a0:9c:34:18:8d: 1e:42:84:33:50:6b:8f:43:a0:07:a5:69:18:6f:ab:34:2f:aa: bb:b0:7b:79:5d:d3:b8:df:70:36:26:5c:1d:e2:2e:ad:5f:76: 25:5f:be:e3:7e:aa:3c:d6:c7:27:48:88:b6:b5:6c:d5:13:46: 45:dc:21:d4:f0:99:43:1f:86:b9:26:47:68:da:06:09:a3:61: 12:ba:a3:d2:c9:84:1e:74:1e:dc:bf:9e:36:cd:ca:52:30:7d: fe:2f:fe:d9:84:f6:b9:b5:c8:58:e0:4f:1a:d3:1b:17:60:dd: af:16:5b:50:bd:8c:b4:8c:28:35:f0:fd:04:67:f6:fc:86:60: d9:01:27:11:fc:33:36:bf:0b:ff:bf:97:9a:b0:cf:3f:ad:61: c1:75:5e:ee:97:32:c1:e8:0d:f8:25:79:b8:c6:93:37:d2:68: 4b:6b:48:15 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZq74itIH2oDCN9cjuVdZFejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMTI1MTYzOTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjhkYmZiNmNiMWEyMTUyZGVkYWE1MzRkZTBhNDkyN2Q1YTY2N2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJqOMm1ea7O4YEd7cRs6FnE/jmoT 5DklqsqcNuPNAJEWJHhYjT5NpgwUyN4Yah9Px6o9aSKWkVO/LA+ey6Oi6iR60rIb ewCrwJSFWwU3H0DByMXUIC9Bj/iiu8EQWUaO2UOSAdz00P3ATK7sdM1pDpz05Qra /5mskYWxAleV1KOq/OQ8p583l+nE6QWxGWx8yCy6qAaVgX0K7fiZ/Os1MyyJz0Gg Y+M0u2CvvqN5lthdnGJT6oYUOZBEBntBTy1Raa9KU8OasbBbXoJJYqJFSKJbA+Pn MSXvuvga7cjN2DPkZHxjYnaOFUp8fNEb4IL6pV3bMpn4Im6+rx3NM8DqrQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFHuNv7bLGiFS3tqlNN4KSSfVpmfvMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvZTQyX3Rzc2FJVkxlMnFVMDNncEpKOVdtWi04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAh2oFAwQA h2oaAwQAh2pCAwQAh2pVAwQAh2peAwQAh2prAwQAmVALAwQAmVANAwQAmVATAwQA mVAsAwQAmVBUAwQAmVBhAwQAmVBsAwQAmVBzMA0GCSqGSIb3DQEBCwUAA4IBAQAC nMgm0xE+GhtUUn1kT+g71Nxz0/bG4PkZ151s0ZV0VW+3WLQXVtqYU6FKhcwhxPuA NFVDz8NS23RSDWzRWHuB4sLUq49W0WWm4plL0b3ziWv2QE/uoJw0GI0eQoQzUGuP Q6AHpWkYb6s0L6q7sHt5XdO433A2Jlwd4i6tX3YlX77jfqo81scnSIi2tWzVE0ZF 3CHU8JlDH4a5Jkdo2gYJo2ESuqPSyYQedB7cv542zcpSMH3+L/7ZhPa5tchY4E8a 0xsXYN2vFltQvYy0jCg18P0EZ/b8hmDZAScR/DM2vwv/v5easM8/rWHBdV7ulzLB 6A34JXm4xpM30mhLa0gV -----END CERTIFICATE-----Generated at Sat Dec 6 16:18:15 2025 by rpki-client