This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ol-Y_0fg28kXv6MSMcfAQCiCt_g.roa
File: ol-Y_0fg28kXv6MSMcfAQCiCt_g.roa (raw, json)
Hash identifier: aHvInmconhYR4tqWGenbPeXLmp/lZiFzwklIQitBMss=
Subject key identifier: A2:5F:98:FF:47:E0:DB:C9:17:BF:A3:12:31:C7:C0:40:28:82:B7:F8
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019AF0215D222DCD0665F93BF275C19385D8
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ol-Y_0fg28kXv6MSMcfAQCiCt_g.roa
Signing time: Fri 05 Dec 2025 20:08:29 +0000
ROA not before: Fri 05 Dec 2025 20:08:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 135.106.0.0/24 maxlen: 24
135.106.1.0/24 maxlen: 24
135.106.2.0/24 maxlen: 24
135.106.3.0/24 maxlen: 24
135.106.4.0/24 maxlen: 24
135.106.6.0/24 maxlen: 24
135.106.7.0/24 maxlen: 24
135.106.8.0/24 maxlen: 24
135.106.9.0/24 maxlen: 24
135.106.10.0/24 maxlen: 24
135.106.11.0/24 maxlen: 24
135.106.12.0/24 maxlen: 24
135.106.13.0/24 maxlen: 24
135.106.14.0/24 maxlen: 24
135.106.15.0/24 maxlen: 24
135.106.16.0/24 maxlen: 24
135.106.17.0/24 maxlen: 24
135.106.18.0/24 maxlen: 24
135.106.19.0/24 maxlen: 24
135.106.20.0/24 maxlen: 24
135.106.21.0/24 maxlen: 24
135.106.22.0/24 maxlen: 24
135.106.23.0/24 maxlen: 24
135.106.24.0/24 maxlen: 24
135.106.25.0/24 maxlen: 24
135.106.27.0/24 maxlen: 24
135.106.28.0/24 maxlen: 24
135.106.29.0/24 maxlen: 24
135.106.30.0/24 maxlen: 24
135.106.31.0/24 maxlen: 24
135.106.32.0/24 maxlen: 24
135.106.33.0/24 maxlen: 24
135.106.34.0/24 maxlen: 24
135.106.35.0/24 maxlen: 24
135.106.36.0/24 maxlen: 24
135.106.37.0/24 maxlen: 24
135.106.38.0/24 maxlen: 24
135.106.39.0/24 maxlen: 24
135.106.40.0/24 maxlen: 24
135.106.41.0/24 maxlen: 24
135.106.42.0/24 maxlen: 24
135.106.43.0/24 maxlen: 24
135.106.44.0/24 maxlen: 24
135.106.45.0/24 maxlen: 24
135.106.46.0/24 maxlen: 24
135.106.47.0/24 maxlen: 24
135.106.48.0/24 maxlen: 24
135.106.49.0/24 maxlen: 24
135.106.50.0/24 maxlen: 24
135.106.51.0/24 maxlen: 24
135.106.52.0/24 maxlen: 24
135.106.53.0/24 maxlen: 24
135.106.54.0/24 maxlen: 24
135.106.55.0/24 maxlen: 24
135.106.56.0/24 maxlen: 24
135.106.57.0/24 maxlen: 24
135.106.58.0/24 maxlen: 24
135.106.59.0/24 maxlen: 24
135.106.60.0/24 maxlen: 24
135.106.61.0/24 maxlen: 24
135.106.62.0/24 maxlen: 24
135.106.63.0/24 maxlen: 24
135.106.64.0/24 maxlen: 24
135.106.65.0/24 maxlen: 24
135.106.67.0/24 maxlen: 24
135.106.68.0/24 maxlen: 24
135.106.69.0/24 maxlen: 24
135.106.70.0/24 maxlen: 24
135.106.71.0/24 maxlen: 24
135.106.72.0/24 maxlen: 24
135.106.73.0/24 maxlen: 24
135.106.74.0/24 maxlen: 24
135.106.75.0/24 maxlen: 24
135.106.76.0/24 maxlen: 24
135.106.77.0/24 maxlen: 24
135.106.78.0/24 maxlen: 24
135.106.79.0/24 maxlen: 24
135.106.80.0/24 maxlen: 24
135.106.81.0/24 maxlen: 24
135.106.82.0/24 maxlen: 24
135.106.83.0/24 maxlen: 24
135.106.84.0/24 maxlen: 24
135.106.86.0/24 maxlen: 24
135.106.87.0/24 maxlen: 24
135.106.88.0/24 maxlen: 24
135.106.89.0/24 maxlen: 24
135.106.90.0/24 maxlen: 24
135.106.91.0/24 maxlen: 24
135.106.92.0/24 maxlen: 24
135.106.93.0/24 maxlen: 24
135.106.95.0/24 maxlen: 24
135.106.96.0/24 maxlen: 24
135.106.97.0/24 maxlen: 24
135.106.98.0/24 maxlen: 24
135.106.99.0/24 maxlen: 24
135.106.100.0/24 maxlen: 24
135.106.101.0/24 maxlen: 24
135.106.102.0/24 maxlen: 24
135.106.103.0/24 maxlen: 24
135.106.104.0/24 maxlen: 24
135.106.105.0/24 maxlen: 24
135.106.106.0/24 maxlen: 24
135.106.108.0/24 maxlen: 24
135.106.109.0/24 maxlen: 24
135.106.110.0/24 maxlen: 24
135.106.113.0/24 maxlen: 24
135.106.126.0/24 maxlen: 24
153.80.0.0/24 maxlen: 24
153.80.1.0/24 maxlen: 24
153.80.2.0/24 maxlen: 24
153.80.3.0/24 maxlen: 24
153.80.4.0/24 maxlen: 24
153.80.5.0/24 maxlen: 24
153.80.6.0/24 maxlen: 24
153.80.7.0/24 maxlen: 24
153.80.8.0/24 maxlen: 24
153.80.9.0/24 maxlen: 24
153.80.10.0/24 maxlen: 24
153.80.12.0/24 maxlen: 24
153.80.14.0/24 maxlen: 24
153.80.15.0/24 maxlen: 24
153.80.16.0/24 maxlen: 24
153.80.17.0/24 maxlen: 24
153.80.18.0/24 maxlen: 24
153.80.20.0/24 maxlen: 24
153.80.21.0/24 maxlen: 24
153.80.22.0/24 maxlen: 24
153.80.23.0/24 maxlen: 24
153.80.24.0/24 maxlen: 24
153.80.25.0/24 maxlen: 24
153.80.26.0/24 maxlen: 24
153.80.27.0/24 maxlen: 24
153.80.28.0/24 maxlen: 24
153.80.29.0/24 maxlen: 24
153.80.30.0/24 maxlen: 24
153.80.31.0/24 maxlen: 24
153.80.32.0/24 maxlen: 24
153.80.33.0/24 maxlen: 24
153.80.34.0/24 maxlen: 24
153.80.35.0/24 maxlen: 24
153.80.36.0/24 maxlen: 24
153.80.37.0/24 maxlen: 24
153.80.38.0/24 maxlen: 24
153.80.39.0/24 maxlen: 24
153.80.40.0/24 maxlen: 24
153.80.41.0/24 maxlen: 24
153.80.42.0/24 maxlen: 24
153.80.43.0/24 maxlen: 24
153.80.45.0/24 maxlen: 24
153.80.46.0/24 maxlen: 24
153.80.47.0/24 maxlen: 24
153.80.48.0/24 maxlen: 24
153.80.49.0/24 maxlen: 24
153.80.50.0/24 maxlen: 24
153.80.51.0/24 maxlen: 24
153.80.52.0/24 maxlen: 24
153.80.53.0/24 maxlen: 24
153.80.54.0/24 maxlen: 24
153.80.55.0/24 maxlen: 24
153.80.56.0/24 maxlen: 24
153.80.57.0/24 maxlen: 24
153.80.58.0/24 maxlen: 24
153.80.59.0/24 maxlen: 24
153.80.60.0/24 maxlen: 24
153.80.61.0/24 maxlen: 24
153.80.62.0/24 maxlen: 24
153.80.63.0/24 maxlen: 24
153.80.64.0/24 maxlen: 24
153.80.65.0/24 maxlen: 24
153.80.66.0/24 maxlen: 24
153.80.67.0/24 maxlen: 24
153.80.68.0/24 maxlen: 24
153.80.69.0/24 maxlen: 24
153.80.70.0/24 maxlen: 24
153.80.71.0/24 maxlen: 24
153.80.72.0/24 maxlen: 24
153.80.73.0/24 maxlen: 24
153.80.74.0/24 maxlen: 24
153.80.75.0/24 maxlen: 24
153.80.76.0/24 maxlen: 24
153.80.77.0/24 maxlen: 24
153.80.78.0/24 maxlen: 24
153.80.79.0/24 maxlen: 24
153.80.80.0/24 maxlen: 24
153.80.81.0/24 maxlen: 24
153.80.82.0/24 maxlen: 24
153.80.83.0/24 maxlen: 24
153.80.85.0/24 maxlen: 24
153.80.86.0/24 maxlen: 24
153.80.87.0/24 maxlen: 24
153.80.88.0/24 maxlen: 24
153.80.89.0/24 maxlen: 24
153.80.90.0/24 maxlen: 24
153.80.91.0/24 maxlen: 24
153.80.92.0/24 maxlen: 24
153.80.93.0/24 maxlen: 24
153.80.94.0/24 maxlen: 24
153.80.95.0/24 maxlen: 24
153.80.96.0/24 maxlen: 24
153.80.98.0/24 maxlen: 24
153.80.99.0/24 maxlen: 24
153.80.100.0/24 maxlen: 24
153.80.101.0/24 maxlen: 24
153.80.102.0/24 maxlen: 24
153.80.103.0/24 maxlen: 24
153.80.104.0/24 maxlen: 24
153.80.105.0/24 maxlen: 24
153.80.106.0/24 maxlen: 24
153.80.107.0/24 maxlen: 24
153.80.109.0/24 maxlen: 24
153.80.110.0/24 maxlen: 24
153.80.111.0/24 maxlen: 24
153.80.112.0/24 maxlen: 24
153.80.113.0/24 maxlen: 24
153.80.114.0/24 maxlen: 24
153.80.116.0/24 maxlen: 24
153.80.117.0/24 maxlen: 24
153.80.118.0/24 maxlen: 24
153.80.119.0/24 maxlen: 24
153.80.120.0/24 maxlen: 24
153.80.121.0/24 maxlen: 24
153.80.122.0/24 maxlen: 24
153.80.123.0/24 maxlen: 24
153.80.124.0/24 maxlen: 24
153.80.125.0/24 maxlen: 24
153.80.126.0/24 maxlen: 24
153.80.127.0/24 maxlen: 24
153.80.153.0/24 maxlen: 24
194.187.102.0/24 maxlen: 24
194.187.103.0/24 maxlen: 24
195.3.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:21:5d:22:2d:cd:06:65:f9:3b:f2:75:c1:93:85:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Dec 5 20:08:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a25f98ff47e0dbc917bfa31231c7c0402882b7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:69:1a:ba:a5:3c:04:bf:9c:31:a8:f2:2a:
b8:46:22:2a:0c:1f:cc:0e:89:da:4b:b0:a0:73:b4:
7c:91:48:b9:53:85:6b:5b:da:27:0b:e4:d8:45:7f:
07:98:51:9a:41:42:c4:b4:92:13:b3:86:69:80:1e:
b9:37:13:d9:83:ea:64:78:d2:03:e3:99:22:1e:61:
05:ab:29:9e:a7:67:2b:f2:f8:3f:ca:f9:d0:b0:52:
d9:41:50:92:0f:83:5e:6c:37:7b:49:7a:d3:0a:94:
28:5d:e9:4a:0e:d8:22:66:6f:5b:72:1d:39:45:48:
95:fe:b6:ea:8e:b6:9e:94:94:d4:e2:39:27:73:d7:
f8:b3:f1:19:f6:98:ed:b5:80:8d:cc:91:88:94:be:
e9:7c:5e:a3:7b:d1:f6:f0:84:e8:eb:6e:96:a4:d1:
60:c5:f0:d5:f8:46:b9:8d:e7:6c:e9:d9:12:31:8a:
9c:37:1e:45:b8:36:08:23:0f:21:1b:8f:9d:5c:32:
60:d8:57:75:c5:62:92:86:08:8c:29:73:75:96:e5:
06:88:b6:6a:85:e2:fc:c4:a5:c2:1b:5f:bd:2a:7a:
c2:11:4a:d8:b7:f0:e2:e5:0a:11:ca:58:f4:b2:da:
ac:dd:d4:63:8e:41:42:d3:48:cc:67:7c:f9:2b:aa:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5F:98:FF:47:E0:DB:C9:17:BF:A3:12:31:C7:C0:40:28:82:B7:F8
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ol-Y_0fg28kXv6MSMcfAQCiCt_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.106.0.0-135.106.4.255
135.106.6.0-135.106.25.255
135.106.27.0-135.106.65.255
135.106.67.0-135.106.84.255
135.106.86.0-135.106.93.255
135.106.95.0-135.106.106.255
135.106.108.0-135.106.110.255
135.106.113.0/24
135.106.126.0/24
153.80.0.0-153.80.10.255
153.80.12.0/24
153.80.14.0-153.80.18.255
153.80.20.0-153.80.43.255
153.80.45.0-153.80.83.255
153.80.85.0-153.80.96.255
153.80.98.0-153.80.107.255
153.80.109.0-153.80.114.255
153.80.116.0-153.80.127.255
153.80.153.0/24
194.187.102.0/23
195.3.181.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e2:00:68:73:44:6a:38:aa:87:1c:a6:1d:61:cc:f7:a8:da:
9f:62:14:12:19:c7:47:61:12:c2:3f:fa:15:2c:d7:21:54:71:
31:77:91:be:32:d5:93:cc:c7:14:43:cf:bd:8a:b2:78:5a:65:
df:b1:02:a8:07:a8:b7:a7:df:56:2f:a9:2c:3f:0f:25:cd:fa:
cb:c8:a6:29:dc:c6:37:1b:2f:c7:86:bf:e9:3f:6c:04:e4:a9:
60:0e:17:09:91:39:73:f5:b5:c2:04:5d:72:1d:94:ea:f0:bd:
7b:33:eb:72:71:dd:9b:f7:3e:f7:a4:e6:9b:81:00:d4:0e:d1:
a1:48:10:4f:6a:f2:c7:3b:e3:db:23:8e:50:33:24:0d:3f:9c:
8b:60:e2:0d:34:09:00:cf:93:bb:69:87:72:a1:a4:be:c8:d3:
35:87:ec:83:ea:23:08:8b:5f:17:3e:25:07:fb:bb:19:63:f8:
61:a8:16:c9:53:9e:bb:69:92:49:ac:a8:e2:b7:e9:19:28:b7:
95:4c:3b:e9:0e:de:d2:07:a3:84:28:14:64:1c:b6:6e:aa:85:
63:9f:2f:d3:59:6b:14:8d:f8:de:23:a1:b6:f3:a4:9f:11:87:
aa:80:25:aa:a7:3d:b0:5d:23:8b:85:ac:b1:35:f9:11:1a:d8:
e0:ac:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:54:22 2025 by rpki-client