This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ti1ojCF0cjmhIKEjL7f36HQx6j4.roa File: ti1ojCF0cjmhIKEjL7f36HQx6j4.roa (raw, json) Hash identifier: mVY3/HPmLAUc8l8UKwcrnONEswqIPclwsXd2KXBO83U= Subject key identifier: B6:2D:68:8C:21:74:72:39:A1:20:A1:23:2F:B7:F7:E8:74:31:EA:3E Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019A932D1BBEEFA0508C1E10FEC3C0A83714 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ti1ojCF0cjmhIKEjL7f36HQx6j4.roa Signing time: Mon 17 Nov 2025 18:56:38 +0000 ROA not before: Mon 17 Nov 2025 18:56:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396356 IP address blocks: 135.196.6.0/24 maxlen: 24 135.196.9.0/24 maxlen: 24 135.196.18.0/24 maxlen: 24 135.196.21.0/24 maxlen: 24 135.196.23.0/24 maxlen: 24 135.196.27.0/24 maxlen: 24 135.196.31.0/24 maxlen: 24 135.196.35.0/24 maxlen: 24 135.196.98.0/24 maxlen: 24 135.196.105.0/24 maxlen: 24 135.196.106.0/24 maxlen: 24 135.196.116.0/24 maxlen: 24 135.196.180.0/23 maxlen: 24 135.196.186.0/23 maxlen: 24 194.231.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:93:2d:1b:be:ef:a0:50:8c:1e:10:fe:c3:c0:a8:37:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 17 18:56:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b62d688c21747239a120a1232fb7f7e87431ea3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:01:35:20:70:36:b0:5d:cc:dc:21:0b:27: 80:c3:56:64:98:7d:b8:c2:e9:ac:2b:9e:a6:2f:40: cf:20:9a:67:89:33:38:bb:32:4c:9a:20:e0:63:c0: 59:44:36:06:d5:ac:b5:49:c8:d2:18:cf:ab:18:57: 73:41:63:7a:d0:13:76:c6:1c:1f:91:fc:ac:5b:95: ac:d0:04:93:8b:fc:16:b8:76:81:46:b5:7f:70:96: 41:61:41:e9:39:bb:2d:78:7e:9b:4b:c4:d5:8f:48: c4:7a:a8:94:5d:85:b3:32:3d:e1:ee:21:e3:92:37: e6:4a:20:69:45:be:c8:33:66:91:10:b4:07:9d:a3: a9:7d:6b:70:7f:65:87:c8:fc:ef:da:39:8b:00:df: 41:72:c8:1b:ca:1b:77:8d:a4:ac:b9:98:a3:33:6d: 43:81:6a:0f:12:21:0f:a7:e9:b8:5d:79:70:36:44: 4b:64:52:7f:b7:b7:ff:b2:c8:21:3c:78:56:bc:b8: 84:96:c5:5b:c3:c3:0e:d2:7d:07:91:4a:51:c6:e7: b7:11:8e:41:60:a1:13:f4:9d:6b:e7:70:de:d7:d3: cb:56:85:e0:2f:bb:d0:03:7a:fe:cf:5b:6d:5d:e3: e2:14:3f:72:cd:52:89:bb:17:40:11:57:78:1e:d7: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2D:68:8C:21:74:72:39:A1:20:A1:23:2F:B7:F7:E8:74:31:EA:3E X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ti1ojCF0cjmhIKEjL7f36HQx6j4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.196.6.0/24 135.196.9.0/24 135.196.18.0/24 135.196.21.0/24 135.196.23.0/24 135.196.27.0/24 135.196.31.0/24 135.196.35.0/24 135.196.98.0/24 135.196.105.0-135.196.106.255 135.196.116.0/24 135.196.180.0/23 135.196.186.0/23 194.231.156.0/24 Signature Algorithm: sha256WithRSAEncryption af:ba:81:db:52:7f:a7:dd:3d:0e:4e:14:31:29:76:75:6d:cb: 3b:3d:08:22:ee:bb:c9:1e:44:58:d8:25:ca:97:3e:22:fb:f2: f9:76:65:70:0f:bd:a9:78:33:7a:43:bf:86:2f:24:51:6f:93: c0:ec:ec:ce:24:c3:10:7d:88:e2:c3:8e:b5:ab:50:27:92:97: e2:d3:6c:43:72:15:13:da:4d:b4:23:9a:0b:66:71:1f:48:e6: 0c:c0:38:da:51:4e:2a:8d:fd:fe:ba:e9:fd:0d:ab:c1:5a:bd: 3c:13:28:af:51:d7:2d:fd:be:c9:1e:b2:aa:1f:3b:e5:92:2c: 9e:ab:8d:c3:46:55:4b:66:fe:25:c7:eb:e2:96:b5:11:38:44: be:8d:e0:6f:c8:43:4e:56:35:35:ab:05:a4:33:36:53:9e:c0: c7:11:bf:7f:52:20:67:b8:a9:fc:5c:fa:78:5d:4e:10:c4:0f: 4d:b6:32:f4:bd:38:43:fb:52:43:ff:cc:d6:80:25:cf:ad:86: e9:e0:9c:f8:b3:a6:14:96:86:31:a9:0d:3c:69:38:01:18:15: 0f:ee:2f:c6:6d:54:04:f0:a7:fc:be:66:e4:f4:28:23:28:73: 26:7f:f1:51:fa:76:f9:bb:b7:fb:4b:ea:58:35:22:fc:d8:07: 49:f6:5f:8b -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZqTLRu+76BQjB4Q/sPAqDcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTE3MTg1NjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjJkNjg4YzIxNzQ3MjM5YTEyMGExMjMyZmI3ZjdlODc0MzFlYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGwBNSBwNrBdzNwhCyeAw1ZkmH24 wumsK56mL0DPIJpniTM4uzJMmiDgY8BZRDYG1ay1ScjSGM+rGFdzQWN60BN2xhwf kfysW5Ws0ASTi/wWuHaBRrV/cJZBYUHpObsteH6bS8TVj0jEeqiUXYWzMj3h7iHj kjfmSiBpRb7IM2aRELQHnaOpfWtwf2WHyPzv2jmLAN9Bcsgbyht3jaSsuZijM21D gWoPEiEPp+m4XXlwNkRLZFJ/t7f/ssghPHhWvLiElsVbw8MO0n0HkUpRxue3EY5B YKET9J1r53De19PLVoXgL7vQA3r+z1ttXePiFD9yzVKJuxdAEVd4HtcwXwIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFLYtaIwhdHI5oSChIy+39+h0Meo+MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvdGkxb2pDRjBjam1oSUtFakw3ZjM2SFF4Nmo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAh8QGAwQA h8QJAwQAh8QSAwQAh8QVAwQAh8QXAwQAh8QbAwQAh8QfAwQAh8QjAwQAh8RiMAwD BACHxGkDBACHxGoDBACHxHQDBAGHxLQDBAGHxLoDBADC55wwDQYJKoZIhvcNAQEL BQADggEBAK+6gdtSf6fdPQ5OFDEpdnVtyzs9CCLuu8keRFjYJcqXPiL78vl2ZXAP val4M3pDv4YvJFFvk8Ds7M4kwxB9iOLDjrWrUCeSl+LTbENyFRPaTbQjmgtmcR9I 5gzAONpRTiqN/f666f0Nq8FavTwTKK9R1y39vskesqofO+WSLJ6rjcNGVUtm/iXH 6+KWtRE4RL6N4G/IQ05WNTWrBaQzNlOewMcRv39SIGe4qfxc+nhdThDED022MvS9 OEP7UkP/zNaAJc+thungnPizphSWhjGpDTxpOAEYFQ/uL8ZtVATwp/y+ZuT0KCMo cyZ/8VH6dvm7t/tL6lg1IvzYB0n2X4s= -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:43 2025 by rpki-client