This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9KdVwteO-bY8YUztS6i2kjJ66EE.roa File: 9KdVwteO-bY8YUztS6i2kjJ66EE.roa (raw, json) Hash identifier: 3mQgIhrrqP91DefzK2/M9/jV8bfXz9Y2EuGpSGvI6wc= Subject key identifier: F4:A7:55:C2:D7:8E:F9:B6:3C:61:4C:ED:4B:A8:B6:92:32:7A:E8:41 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A25B7D3339A2E827C8D63978B79F48 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9KdVwteO-bY8YUztS6i2kjJ66EE.roa Signing time: Thu 01 Jan 2026 08:17:44 +0000 ROA not before: Thu 01 Jan 2026 08:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203963 IP address blocks: 212.134.152.0/22 maxlen: 22 212.134.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5b:7d:33:39:a2:e8:27:c8:d6:39:78:b7:9f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4a755c2d78ef9b63c614ced4ba8b692327ae841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:73:30:5b:68:ee:21:41:e1:16:0a:d1:e9: 2f:78:a6:7d:a6:29:a6:a4:ff:3e:69:52:c6:92:7d: 4c:b1:fd:f3:ab:94:7a:94:08:2a:82:1c:93:da:67: 3a:cb:95:97:4b:0f:a9:f1:f6:7f:fc:d8:0d:5b:a7: 2e:d7:e1:ac:9d:ef:1a:54:ee:f0:0b:a6:54:4e:88: 7f:1e:c3:cb:ec:4a:b4:95:9e:e3:65:f8:5e:75:00: 34:33:5e:4f:4f:85:67:8e:76:cf:c4:db:45:38:9d: 83:af:f8:a3:01:d7:76:0b:01:cc:c7:75:95:d0:2a: 63:0a:e7:8f:e5:85:04:e7:c5:aa:b1:83:7a:c4:7d: 09:0d:11:41:cf:3f:56:a6:28:ca:a6:36:4b:b0:0b: ae:6f:08:20:4e:b3:23:4b:82:87:92:9d:67:9a:c7: b6:b5:0f:48:35:92:7d:23:6b:66:c0:88:b4:3c:0e: e3:d9:a4:57:af:b8:88:ed:98:1c:d8:1a:35:b6:1c: 4f:4b:4e:ef:ab:4b:2e:2c:95:02:ca:a3:75:08:22: 27:c8:ec:64:f2:47:e7:44:59:56:89:64:9f:ea:0a: eb:4d:05:75:79:0a:d3:c6:3b:9b:8e:6a:99:f6:84: 66:40:e6:db:29:d4:77:9c:ab:ea:55:6a:71:4d:77: f6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A7:55:C2:D7:8E:F9:B6:3C:61:4C:ED:4B:A8:B6:92:32:7A:E8:41 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9KdVwteO-bY8YUztS6i2kjJ66EE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.152.0/22 212.134.160.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:a2:58:c4:37:f6:5e:21:e0:1a:19:a2:2a:f1:b2:b6:70:78: ad:f4:b6:73:55:bf:73:cc:e0:b9:8e:fe:63:e1:99:12:6e:03: cf:e8:e1:95:26:34:03:ad:02:78:d4:d1:3d:42:4b:0f:27:43: d0:f1:d0:2d:0a:dc:a8:53:0f:11:f0:28:2f:8a:e2:a4:cc:47: 9e:75:ca:bd:03:a8:cb:73:59:84:46:2d:b3:d2:9a:ec:ef:fa: 54:2e:ec:a5:c8:94:e9:34:a8:89:f9:b5:51:2d:a7:d5:40:d8: de:42:c2:ed:e2:41:f7:9d:e6:59:b7:94:65:b1:02:69:fd:e0: 9b:53:2e:ac:91:08:00:e9:93:cf:18:3f:56:5d:35:b7:ce:13: 48:f6:e3:a8:3b:e1:8e:7f:f7:99:80:50:11:dc:fd:6e:b5:9f: 34:10:db:67:66:2c:68:62:67:f1:00:68:ad:3a:fc:51:5f:bc: 8b:ec:a7:15:ae:c6:cd:88:59:ee:90:9f:06:8d:34:95:31:06: a8:b0:b4:0e:52:9b:44:1f:1c:f7:f8:86:e1:a6:89:ef:41:c0: f6:ea:1f:44:01:bd:25:20:34:2d:2d:0f:ea:2f:d9:9d:c2:60: 97:23:bc:46:13:ff:e3:c6:5c:c1:b8:5e:fb:41:62:59:2f:f7: 77:19:57:e3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4olt9Mzmi6CfI1jl4t59IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGE3NTVjMmQ3OGVmOWI2M2M2MTRjZWQ0YmE4YjY5MjMyN2FlODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb9zMFto7iFB4RYK0ekveKZ9pimm pP8+aVLGkn1Msf3zq5R6lAgqghyT2mc6y5WXSw+p8fZ//NgNW6cu1+Gsne8aVO7w C6ZUToh/HsPL7Eq0lZ7jZfhedQA0M15PT4VnjnbPxNtFOJ2Dr/ijAdd2CwHMx3WV 0CpjCueP5YUE58WqsYN6xH0JDRFBzz9WpijKpjZLsAuubwggTrMjS4KHkp1nmse2 tQ9INZJ9I2tmwIi0PA7j2aRXr7iI7Zgc2Bo1thxPS07vq0suLJUCyqN1CCInyOxk 8kfnRFlWiWSf6grrTQV1eQrTxjubjmqZ9oRmQObbKdR3nKvqVWpxTXf2twIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPSnVcLXjvm2PGFM7UuotpIyeuhBMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvOUtkVnd0ZU8tYlk4WVV6dFM2aTJrako2NkVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1IaYAwQC 1IagMA0GCSqGSIb3DQEBCwUAA4IBAQAdoljEN/ZeIeAaGaIq8bK2cHit9LZzVb9z zOC5jv5j4ZkSbgPP6OGVJjQDrQJ41NE9QksPJ0PQ8dAtCtyoUw8R8CgviuKkzEee dcq9A6jLc1mERi2z0prs7/pULuylyJTpNKiJ+bVRLafVQNjeQsLt4kH3neZZt5Rl sQJp/eCbUy6skQgA6ZPPGD9WXTW3zhNI9uOoO+GOf/eZgFAR3P1utZ80ENtnZixo YmfxAGitOvxRX7yL7KcVrsbNiFnukJ8GjTSVMQaosLQOUptEHxz3+IbhponvQcD2 6h9EAb0lIDQtLQ/qL9mdwmCXI7xGE//jxlzBuF77QWJZL/d3GVfj -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:31 2026 by rpki-client