This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/NLaOL6Voqo5FuMfaskkz1PpxGMk.roa File: NLaOL6Voqo5FuMfaskkz1PpxGMk.roa (raw, json) Hash identifier: N5nixT8c+RLXQc6Y/I9xgEO6MbFkbb5syJHQ4CAs2oQ= Subject key identifier: 34:B6:8E:2F:A5:68:AA:8E:45:B8:C7:DA:B2:49:33:D4:FA:71:18:C9 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019AFF5709E470D5585DC4ECACB8A37B9634 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/NLaOL6Voqo5FuMfaskkz1PpxGMk.roa Signing time: Mon 08 Dec 2025 19:01:25 +0000 ROA not before: Mon 08 Dec 2025 19:01:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42375 IP address blocks: 135.106.252.0/24 maxlen: 24 135.106.253.0/24 maxlen: 24 135.106.254.0/24 maxlen: 24 135.106.255.0/24 maxlen: 24 153.80.252.0/24 maxlen: 24 153.80.253.0/24 maxlen: 24 153.80.254.0/24 maxlen: 24 153.80.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:57:09:e4:70:d5:58:5d:c4:ec:ac:b8:a3:7b:96:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Dec 8 19:01:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=34b68e2fa568aa8e45b8c7dab24933d4fa7118c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:3d:ba:88:27:b9:ab:2a:5a:67:82:66:03: 67:b5:cb:7f:b1:83:e9:8a:7e:3d:a8:cd:d1:96:77: 8d:ee:b6:0a:3c:37:a1:bc:a6:09:f5:a6:3b:00:76: 81:3a:b4:c3:79:d0:92:10:21:63:25:2f:94:14:32: 55:e7:48:5e:10:be:25:ec:e4:49:20:e9:d6:c2:19: 57:c6:7b:cc:4a:e4:83:5f:8e:c2:a2:ee:31:a7:49: a7:0c:08:03:aa:d4:51:5f:ec:fd:d2:ae:08:14:f9: 9b:07:57:7e:2a:cc:67:01:92:1a:ed:34:08:0a:ee: f1:ab:e6:08:c7:22:ce:6e:69:c0:30:2b:51:aa:78: 6a:91:a9:32:8c:75:b7:7a:a3:70:1b:28:a3:d8:72: 45:31:1f:67:3b:da:7b:fb:28:9b:14:10:b5:fc:ce: 2b:d2:a1:09:24:a2:30:37:d5:65:c1:f8:e5:65:21: b0:8f:b1:23:9b:d6:87:8d:0b:2a:d4:64:06:2e:d5: ea:92:35:f6:90:3f:81:c0:08:6e:38:3d:a1:d2:e0: 1d:91:01:5a:87:b2:b7:3f:82:0e:2f:b8:82:38:c5: 97:88:08:27:51:02:52:ba:61:09:0d:06:4d:7f:16: ef:0d:9c:59:01:87:e3:3e:be:5d:15:ca:2f:89:95: de:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B6:8E:2F:A5:68:AA:8E:45:B8:C7:DA:B2:49:33:D4:FA:71:18:C9 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/NLaOL6Voqo5FuMfaskkz1PpxGMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.106.252.0/22 153.80.252.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:e3:43:89:eb:bd:d3:01:0e:41:b2:75:b5:1b:3a:65:3b:6f: 6d:5b:3e:eb:66:c1:bf:41:66:e0:52:64:d1:74:31:8c:39:97: d7:ea:f3:4a:6d:43:3a:ea:fb:a2:65:9b:70:bd:b8:15:0d:c7: 14:bb:b9:a2:43:a4:82:8f:45:a1:85:9d:57:60:79:bf:90:5b: 58:c0:88:7b:f6:9b:17:96:ef:34:7d:a9:a2:a4:1a:dc:c8:24: 5f:98:96:96:a8:e5:51:4f:3c:38:bb:0b:0e:c8:f9:55:6a:a4: b9:e5:68:00:4d:2e:c3:42:eb:2f:70:bd:2c:97:8e:06:46:22: d1:0f:6a:06:f2:44:c5:ce:47:31:4c:ca:34:5a:aa:e6:e4:fa: ea:92:fe:6b:0a:c4:b0:d3:a3:f3:42:1c:bd:f9:71:80:18:be: a4:7e:d4:67:8a:5d:00:99:67:1c:d2:c6:ea:64:6e:f6:53:05: 8c:19:80:b3:7f:9a:db:e9:34:ae:32:ac:8d:5f:8c:9f:eb:c0: 18:30:95:7c:e7:36:89:3f:aa:95:32:23:10:1d:56:b2:6b:5f: b1:5a:c2:a1:14:56:e5:29:ee:ee:14:4b:78:ed:71:dd:60:8d: 28:19:81:27:dd:6e:07:47:12:26:f0:13:d3:4b:e0:03:45:25: a9:87:ec:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZr/VwnkcNVYXcTsrLije5Y0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMjA4MTkwMTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGI2OGUyZmE1NjhhYThlNDViOGM3ZGFiMjQ5MzNkNGZhNzExOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qQ9uognuasqWmeCZgNntct/sYPp in49qM3RlneN7rYKPDehvKYJ9aY7AHaBOrTDedCSECFjJS+UFDJV50heEL4l7ORJ IOnWwhlXxnvMSuSDX47Cou4xp0mnDAgDqtRRX+z90q4IFPmbB1d+KsxnAZIa7TQI Cu7xq+YIxyLObmnAMCtRqnhqkakyjHW3eqNwGyij2HJFMR9nO9p7+yibFBC1/M4r 0qEJJKIwN9VlwfjlZSGwj7Ejm9aHjQsq1GQGLtXqkjX2kD+BwAhuOD2h0uAdkQFa h7K3P4IOL7iCOMWXiAgnUQJSumEJDQZNfxbvDZxZAYfjPr5dFcoviZXeMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDS2ji+laKqORbjH2rJJM9T6cRjJMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvTkxhT0w2Vm9xbzVGdU1mYXNra3oxUHB4R01rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCh2r8AwQC mVD8MA0GCSqGSIb3DQEBCwUAA4IBAQAc40OJ673TAQ5BsnW1GzplO29tWz7rZsG/ QWbgUmTRdDGMOZfX6vNKbUM66vuiZZtwvbgVDccUu7miQ6SCj0WhhZ1XYHm/kFtY wIh79psXlu80famipBrcyCRfmJaWqOVRTzw4uwsOyPlVaqS55WgATS7DQusvcL0s l44GRiLRD2oG8kTFzkcxTMo0Wqrm5Prqkv5rCsSw06PzQhy9+XGAGL6kftRnil0A mWcc0sbqZG72UwWMGYCzf5rb6TSuMqyNX4yf68AYMJV85zaJP6qVMiMQHVaya1+x WsKhFFblKe7uFEt47XHdYI0oGYEn3W4HRxIm8BPTS+ADRSWph+zG -----END CERTIFICATE-----Generated at Thu Dec 18 09:35:53 2025 by rpki-client