This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1FButvZKJyO1c5w1piH7wkdGXTM.roa File: 1FButvZKJyO1c5w1piH7wkdGXTM.roa (raw, json) Hash identifier: Egda8wdV9T0tiqvAHwRzj4EEUK3uCNNRoKcpnzjem6U= Subject key identifier: D4:50:6E:B6:F6:4A:27:23:B5:73:9C:35:A6:21:FB:C2:47:46:5D:33 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019BC6AAC758AAD785D53EB96E466044476B Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1FButvZKJyO1c5w1piH7wkdGXTM.roa Signing time: Fri 16 Jan 2026 11:57:19 +0000 ROA not before: Fri 16 Jan 2026 11:57:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 212.135.27.0/24 maxlen: 24 212.135.28.0/24 maxlen: 24 212.135.29.0/24 maxlen: 24 212.135.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:aa:c7:58:aa:d7:85:d5:3e:b9:6e:46:60:44:47:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 16 11:57:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4506eb6f64a2723b5739c35a621fbc247465d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:45:03:3a:c8:99:26:7e:56:d5:ed:2f:0f: 61:2a:15:48:64:45:a4:7c:14:4d:2b:cc:df:28:1f: a4:54:32:7c:75:94:e5:71:16:a3:7e:70:b3:de:9d: ef:d4:24:11:d5:05:1f:da:f2:7c:79:41:f2:8a:9f: f8:fd:b5:b5:7c:f9:27:12:27:6c:4e:3b:25:a6:a1: a5:2a:4b:df:37:c2:e5:91:41:12:51:50:8a:47:f8: 8e:37:c8:43:97:ef:36:20:23:64:85:01:4b:4e:03: 3a:93:2d:8c:97:a2:72:1b:a5:12:01:4a:1d:41:a3: 2c:a2:f3:d5:83:0b:6e:64:56:89:1f:a6:dd:79:7a: 3d:93:f1:15:ea:c8:4a:54:3f:8e:34:f4:0b:6a:77: d1:c9:08:8b:28:ab:2a:ec:89:e6:3b:96:c4:60:e3: fe:ee:1a:66:3d:df:d4:d4:f3:fd:d2:6c:1d:66:58: 3a:fb:5f:d0:cd:df:9c:69:ac:b9:a2:a3:3b:93:2a: e6:8e:3b:14:97:0d:16:c4:05:c6:28:c5:8c:fc:71: 77:96:10:71:d8:e6:4d:e5:b1:89:e9:a0:ca:10:c2: 7c:90:1d:c5:c7:e1:bb:b3:96:cd:6e:0b:62:42:50: a9:f5:ec:54:06:bf:a3:5f:4b:d1:f0:38:5c:59:39: b9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:50:6E:B6:F6:4A:27:23:B5:73:9C:35:A6:21:FB:C2:47:46:5D:33 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1FButvZKJyO1c5w1piH7wkdGXTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.27.0-212.135.29.255 212.135.80.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:1a:01:06:fa:03:87:a8:8d:55:58:b9:77:b0:fe:fa:37:62: bc:d9:43:3f:e6:66:30:21:05:00:78:f2:27:15:87:70:5c:bd: c6:df:e4:08:af:bf:71:56:2b:80:4e:09:09:c3:b9:c1:92:a9: 3a:ec:27:de:d7:3d:e1:11:16:4c:d2:bf:93:25:0c:97:52:ac: 9b:ae:3b:70:12:a9:8d:2e:7c:cd:3e:31:de:e7:63:3f:e9:93: 28:52:b3:6a:de:24:11:06:2a:8b:9e:c0:30:c2:fd:f2:81:b4: dd:76:b2:c8:f4:2f:9d:83:74:12:cc:1b:14:1c:8c:44:c5:47: 5c:f3:1f:7c:10:8d:f0:d2:7d:ae:63:09:04:75:a1:99:08:48: 25:24:7d:59:21:2c:93:15:86:33:37:e0:08:58:8e:8c:46:75: d8:49:9f:a0:99:bd:46:bd:0c:23:dc:31:ef:06:b7:7c:46:c3: 7c:67:86:63:5d:97:ca:9d:30:98:fa:09:fa:a4:57:01:58:f0: 8c:1e:42:d7:f5:82:56:25:9a:96:cd:bb:0e:b6:b7:09:a5:aa: b3:23:2c:50:d0:56:c0:bc:a4:af:75:7c:cb:cb:80:51:a2:de: d9:b9:a2:86:95:5b:3f:d3:cd:0a:05:b3:f9:da:3e:8e:f6:36: d2:f5:0a:fe -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZvGqsdYqteF1T65bkZgREdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTE2MTE1NzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDUwNmViNmY2NGEyNzIzYjU3MzljMzVhNjIxZmJjMjQ3NDY1ZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArndFAzrImSZ+VtXtLw9hKhVIZEWk fBRNK8zfKB+kVDJ8dZTlcRajfnCz3p3v1CQR1QUf2vJ8eUHyip/4/bW1fPknEids TjslpqGlKkvfN8LlkUESUVCKR/iON8hDl+82ICNkhQFLTgM6ky2Ml6JyG6USAUod QaMsovPVgwtuZFaJH6bdeXo9k/EV6shKVD+ONPQLanfRyQiLKKsq7InmO5bEYOP+ 7hpmPd/U1PP90mwdZlg6+1/Qzd+caay5oqM7kyrmjjsUlw0WxAXGKMWM/HF3lhBx 2OZN5bGJ6aDKEMJ8kB3Fx+G7s5bNbgtiQlCp9exUBr+jX0vR8DhcWTm5EwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNRQbrb2SicjtXOcNaYh+8JHRl0zMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvMUZCdXR2WktKeU8xYzV3MXBpSDd3a2RHWFRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADUhxsD BAHUhxwDBATUh1AwDQYJKoZIhvcNAQELBQADggEBAH0aAQb6A4eojVVYuXew/vo3 YrzZQz/mZjAhBQB48icVh3Bcvcbf5Aivv3FWK4BOCQnDucGSqTrsJ97XPeERFkzS v5MlDJdSrJuuO3ASqY0ufM0+Md7nYz/pkyhSs2reJBEGKouewDDC/fKBtN12ssj0 L52DdBLMGxQcjETFR1zzH3wQjfDSfa5jCQR1oZkISCUkfVkhLJMVhjM34AhYjoxG ddhJn6CZvUa9DCPcMe8Gt3xGw3xnhmNdl8qdMJj6CfqkVwFY8IweQtf1glYlmpbN uw62twmlqrMjLFDQVsC8pK91fMvLgFGi3tm5ooaVWz/TzQoFs/naPo72NtL1Cv4= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:55 2026 by rpki-client