This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/C8krEGbuofaruonxwVBJKXSlzmc.roa File: C8krEGbuofaruonxwVBJKXSlzmc.roa (raw, json) Hash identifier: RjrL07aEvpL3lbl/mLLtjpa6R2eLg8N2aMXCOBXYt+A= Subject key identifier: 0B:C9:2B:10:66:EE:A1:F6:AB:BA:89:F1:C1:50:49:29:74:A5:CE:67 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A25CE3FEC0DEAA2A007D0B11643091 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/C8krEGbuofaruonxwVBJKXSlzmc.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210473 IP address blocks: 212.134.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5c:e3:fe:c0:de:aa:2a:00:7d:0b:11:64:30:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bc92b1066eea1f6abba89f1c150492974a5ce67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0d:b6:19:99:41:46:79:b3:d8:8d:9c:2d:f8: 82:07:a8:55:30:d4:50:b1:bc:cc:c5:7d:2f:7e:26: ce:89:74:1e:3a:d9:ae:44:3c:23:0d:02:97:18:a9: d1:63:94:9b:65:91:41:86:7b:8c:fc:5a:a1:5a:35: 42:38:25:9e:78:57:70:64:50:ac:cd:64:ae:d8:1a: 8a:b0:1c:78:ef:12:e6:6b:a5:ba:91:42:18:e0:f5: 5f:df:f6:2c:75:32:53:45:f3:13:c5:5f:c0:0e:65: 44:fd:e4:8d:c6:a7:14:57:f0:3d:ca:de:42:0c:23: 2a:c8:92:78:15:45:39:6a:dd:49:9b:72:ca:1e:fa: 0f:5e:5a:a9:cb:3a:e0:aa:8d:47:73:c1:aa:b0:00: a1:53:8a:cf:38:30:9d:99:8b:7b:3d:b2:60:d8:dc: 33:04:ea:78:ac:73:95:3d:33:5a:cf:d5:ad:43:43: 92:6a:06:54:fe:97:87:dc:f0:eb:e1:0d:6e:a2:b3: 03:5d:37:2f:78:f6:5b:ed:dc:df:89:73:cb:ae:93: a0:64:39:d4:b6:37:9e:f8:15:a1:46:eb:e1:80:a8: 40:78:20:88:eb:40:fe:c1:10:37:77:da:84:9f:15: 18:db:62:c4:9f:ec:14:a7:1d:86:e5:41:6c:cc:eb: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C9:2B:10:66:EE:A1:F6:AB:BA:89:F1:C1:50:49:29:74:A5:CE:67 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/C8krEGbuofaruonxwVBJKXSlzmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.44.0/24 Signature Algorithm: sha256WithRSAEncryption cc:1d:50:cb:b9:ea:58:22:20:32:6f:81:7d:7d:a7:af:bc:43: 42:d5:c6:1f:d5:9b:33:78:13:6f:d1:58:de:7f:50:3b:1e:f4: d6:2e:15:cc:ba:1f:2e:0d:4f:16:59:04:53:21:35:4c:93:3a: 4d:af:f6:c9:36:92:bc:77:24:e4:cc:82:5e:cf:d7:d2:99:b7: 2b:5f:ef:03:70:62:1c:62:c0:da:c0:5b:79:9d:7d:f2:87:dd: b5:db:82:6e:80:8c:9f:fc:04:5f:1a:66:f7:66:6e:f1:63:3a: 6b:0f:ed:ca:0b:33:88:64:3a:76:35:01:42:6c:9b:03:20:f7: cc:5b:ea:e3:6d:cb:f9:a6:2c:5f:0c:da:32:a2:bd:05:15:c3: 89:34:f9:83:67:3c:ba:eb:1d:36:0f:6b:7b:2c:36:05:cf:0b: 27:d3:8e:96:ed:c4:37:25:79:56:e4:1b:df:e3:0b:ce:01:5f: 4c:36:b7:22:93:2a:c4:4b:e1:e5:a6:81:80:df:00:d2:c8:51: b5:f0:96:f1:ea:fe:76:12:89:48:71:34:80:be:50:eb:fe:aa: ef:6f:43:fe:c1:95:47:5c:20:70:97:0f:6e:1b:08:ee:ea:9e: 49:fc:5d:9b:95:1e:46:fa:47:45:bb:9c:f8:93:17:a1:61:29: 7a:7b:10:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4olzj/sDeqioAfQsRZDCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmM5MmIxMDY2ZWVhMWY2YWJiYTg5ZjFjMTUwNDkyOTc0YTVjZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w22GZlBRnmz2I2cLfiCB6hVMNRQ sbzMxX0vfibOiXQeOtmuRDwjDQKXGKnRY5SbZZFBhnuM/FqhWjVCOCWeeFdwZFCs zWSu2BqKsBx47xLma6W6kUIY4PVf3/YsdTJTRfMTxV/ADmVE/eSNxqcUV/A9yt5C DCMqyJJ4FUU5at1Jm3LKHvoPXlqpyzrgqo1Hc8GqsAChU4rPODCdmYt7PbJg2Nwz BOp4rHOVPTNaz9WtQ0OSagZU/peH3PDr4Q1uorMDXTcvePZb7dzfiXPLrpOgZDnU tjee+BWhRuvhgKhAeCCI60D+wRA3d9qEnxUY22LEn+wUpx2G5UFszOszdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAvJKxBm7qH2q7qJ8cFQSSl0pc5nMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvQzhrckVHYnVvZmFydW9ueHdWQkpLWFNsem1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IYsMA0G CSqGSIb3DQEBCwUAA4IBAQDMHVDLuepYIiAyb4F9faevvENC1cYf1ZszeBNv0Vje f1A7HvTWLhXMuh8uDU8WWQRTITVMkzpNr/bJNpK8dyTkzIJez9fSmbcrX+8DcGIc YsDawFt5nX3yh92124JugIyf/ARfGmb3Zm7xYzprD+3KCzOIZDp2NQFCbJsDIPfM W+rjbcv5pixfDNoyor0FFcOJNPmDZzy66x02D2t7LDYFzwsn046W7cQ3JXlW5Bvf 4wvOAV9MNrcikyrES+HlpoGA3wDSyFG18Jbx6v52EolIcTSAvlDr/qrvb0P+wZVH XCBwlw9uGwju6p5J/F2blR5G+kdFu5z4kxehYSl6exAK -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:51 2026 by rpki-client