This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1yTZnI_hupECtxfv36NH1zbsXag.roa File: 1yTZnI_hupECtxfv36NH1zbsXag.roa (raw, json) Hash identifier: 4vf/I6sOjXPo8DtgTBmuMnmDxc9G4lg4rYemcLMJJSU= Subject key identifier: D7:24:D9:9C:8F:E1:BA:91:02:B7:17:EF:DF:A3:47:D7:36:EC:5D:A8 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B9D44F59084612E486A8FBA9DB5BFD950 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1yTZnI_hupECtxfv36NH1zbsXag.roa Signing time: Thu 08 Jan 2026 11:01:40 +0000 ROA not before: Thu 08 Jan 2026 11:01:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47377 IP address blocks: 212.134.84.0/24 maxlen: 24 212.134.85.0/24 maxlen: 24 212.134.86.0/24 maxlen: 24 212.134.87.0/24 maxlen: 24 212.135.248.0/24 maxlen: 24 212.135.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:44:f5:90:84:61:2e:48:6a:8f:ba:9d:b5:bf:d9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 8 11:01:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d724d99c8fe1ba9102b717efdfa347d736ec5da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:a3:cb:01:d8:58:0d:70:43:fc:35:b8:00: 4f:b4:07:9e:c5:a3:58:73:f7:3f:1e:8c:48:25:cd: 8f:89:f9:6d:18:a9:20:45:54:62:06:0f:50:a3:37: 85:0c:94:05:00:c5:c2:7e:19:a5:34:8e:3b:c7:d8: c7:a0:f3:7d:c1:e3:2c:81:57:ec:c6:a8:9e:87:25: 61:27:93:fe:51:bc:4b:2c:cc:d3:09:8d:00:e9:e1: 08:49:82:19:19:aa:24:35:20:5d:66:e5:d9:ed:ec: e0:42:2a:23:17:cf:45:01:ce:8a:ca:6b:89:a1:be: 28:46:48:6b:af:ab:10:52:fb:71:ed:10:1d:fe:e6: d2:41:64:e3:59:d6:55:2e:d1:a7:5a:6f:a8:77:ad: f2:a7:61:e0:2d:98:84:1d:1f:d0:96:02:e5:69:b9: 3b:b1:b4:cb:58:ae:b4:f8:96:e9:17:53:1b:13:e9: 20:bb:8e:48:7e:55:7d:9e:f9:9f:bd:84:65:8e:7f: 83:4a:72:ea:f1:d0:1f:a9:cd:bd:12:60:0d:bb:f2: 52:ae:36:b9:ed:ea:b8:65:3c:d4:7c:97:b2:1e:94: 75:b1:f8:e9:95:9d:55:c1:24:e4:b2:14:db:3d:a7: cb:38:ae:fd:ed:6e:2a:1e:13:b9:cf:21:b8:a0:b4: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:24:D9:9C:8F:E1:BA:91:02:B7:17:EF:DF:A3:47:D7:36:EC:5D:A8 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1yTZnI_hupECtxfv36NH1zbsXag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.84.0/22 212.135.248.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:6e:62:3a:3f:e7:96:2f:02:34:8b:4b:c3:c1:03:22:da:4c: 91:ab:5c:76:6d:c1:35:fc:fd:1c:4a:16:e3:5f:98:a3:ad:a7: 4a:67:03:25:84:84:4f:ae:d8:05:f9:f7:1a:e5:2b:d0:27:44: bb:93:de:e3:c7:f0:f7:11:fe:52:69:1b:62:cd:a4:cb:13:1e: 0f:0f:58:24:d2:3f:c0:bb:fb:79:ea:8e:21:1c:d3:74:f8:57: d4:17:2b:3d:72:d1:d7:df:da:ec:47:05:24:3f:00:d7:09:a0: d2:a9:ca:3c:72:7c:89:a8:b7:cc:79:ec:70:ae:0b:0f:1b:23: ae:5a:ab:05:2d:0e:ef:76:2b:61:5e:90:11:f9:56:79:20:90: 7c:fa:ee:1a:4f:4a:74:99:59:16:d6:97:49:7f:9d:92:d0:6a: 2c:49:6f:1a:6d:90:33:b6:c9:2d:ab:f1:12:7d:dd:d4:aa:14: 87:f0:db:b9:6e:c5:18:9e:dd:ee:a7:ee:79:6e:2a:3f:8a:05: d7:2a:42:5d:18:60:01:29:87:a4:cf:14:b9:46:f0:71:0f:69: 5f:30:52:63:75:f1:ac:06:58:96:7a:a9:3b:83:76:0c:12:c3: 5a:ac:09:0c:af:78:1c:77:49:03:e1:da:05:e0:dc:40:0f:04: cd:dc:94:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZudRPWQhGEuSGqPup21v9lQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTA4MTEwMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzI0ZDk5YzhmZTFiYTkxMDJiNzE3ZWZkZmEzNDdkNzM2ZWM1ZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzSjywHYWA1wQ/w1uABPtAeexaNY c/c/HoxIJc2PifltGKkgRVRiBg9QozeFDJQFAMXCfhmlNI47x9jHoPN9weMsgVfs xqiehyVhJ5P+UbxLLMzTCY0A6eEISYIZGaokNSBdZuXZ7ezgQiojF89FAc6KymuJ ob4oRkhrr6sQUvtx7RAd/ubSQWTjWdZVLtGnWm+od63yp2HgLZiEHR/QlgLlabk7 sbTLWK60+JbpF1MbE+kgu45IflV9nvmfvYRljn+DSnLq8dAfqc29EmANu/JSrja5 7eq4ZTzUfJeyHpR1sfjplZ1VwSTkshTbPafLOK797W4qHhO5zyG4oLSm9wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNck2ZyP4bqRArcX79+jR9c27F2oMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvMXlUWm5JX2h1cEVDdHhmdjM2TkgxemJzWGFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1IZUAwQB 1If4MA0GCSqGSIb3DQEBCwUAA4IBAQA7bmI6P+eWLwI0i0vDwQMi2kyRq1x2bcE1 /P0cShbjX5ijradKZwMlhIRPrtgF+fca5SvQJ0S7k97jx/D3Ef5SaRtizaTLEx4P D1gk0j/Au/t56o4hHNN0+FfUFys9ctHX39rsRwUkPwDXCaDSqco8cnyJqLfMeexw rgsPGyOuWqsFLQ7vdithXpAR+VZ5IJB8+u4aT0p0mVkW1pdJf52S0GosSW8abZAz tsktq/ESfd3UqhSH8Nu5bsUYnt3up+55bio/igXXKkJdGGABKYekzxS5RvBxD2lf MFJjdfGsBliWeqk7g3YMEsNarAkMr3gcd0kD4doF4NxADwTN3JRp -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:32 2026 by rpki-client