This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CeC3MthovVFk8pxX6l7SB7pQH-Y.roa File: CeC3MthovVFk8pxX6l7SB7pQH-Y.roa (raw, json) Hash identifier: Q1k8eGmGMM6fChJ8y0gu0bibe0sC2ivtv+DgMIFQUrs= Subject key identifier: 09:E0:B7:32:D8:68:BD:51:64:F2:9C:57:EA:5E:D2:07:BA:50:1F:E6 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A25EC58CBA1BA5BEF7B1A2CF7FABA6 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CeC3MthovVFk8pxX6l7SB7pQH-Y.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213784 IP address blocks: 212.134.98.0/23 maxlen: 24 212.134.104.0/23 maxlen: 24 212.134.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5e:c5:8c:ba:1b:a5:be:f7:b1:a2:cf:7f:ab:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09e0b732d868bd5164f29c57ea5ed207ba501fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:72:6e:ed:19:15:47:9e:4d:03:df:37:f5: d9:63:c7:b8:8c:4f:4e:36:b2:c7:fd:48:2c:28:75: d1:f4:ba:49:4b:b5:99:36:e1:d0:43:20:b0:fd:3a: e8:88:fa:e6:15:86:07:18:24:96:3a:7a:0f:f8:f5: 13:b8:d0:a5:68:cb:82:92:c5:4f:fa:a7:52:96:11: 33:37:31:c0:10:65:20:c2:72:f1:35:ab:dc:4c:61: 3a:59:14:3a:37:58:fb:8d:bb:13:50:4f:1c:0f:0b: f9:fc:df:a8:5c:78:bf:2f:26:a9:67:64:16:e1:76: c7:56:c8:03:09:13:fb:c8:9c:3a:f4:b9:05:9f:e2: 0e:48:b3:4a:3b:e3:db:4f:85:e4:6b:07:10:67:fe: 61:7f:ca:1a:63:bf:20:77:e0:d6:c2:b4:2d:4e:29: 97:4a:1e:34:34:0e:67:d9:da:0e:29:64:ef:ad:c9: e7:98:a0:3f:0e:f3:c2:0d:66:ad:d2:1f:a8:72:51: f2:76:47:15:85:ab:40:61:b8:9f:8d:3a:d7:cd:a1: 00:27:05:ca:13:9e:97:90:b8:90:4a:15:56:da:0e: 0f:86:21:a6:36:76:31:ba:59:e8:7a:ab:c7:36:d6: 28:30:8a:f5:58:d4:65:29:b1:ae:1f:7a:da:01:bf: 9b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E0:B7:32:D8:68:BD:51:64:F2:9C:57:EA:5E:D2:07:BA:50:1F:E6 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CeC3MthovVFk8pxX6l7SB7pQH-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.98.0/23 212.134.104.0/23 212.134.110.0/23 Signature Algorithm: sha256WithRSAEncryption b7:0e:fc:39:43:64:2d:6d:9c:92:d9:37:e0:a8:f4:90:af:b2: bd:d2:88:90:32:27:7b:7b:c1:8a:df:41:46:51:12:d7:b7:8a: 0c:42:48:76:a3:85:4a:aa:37:53:2b:70:a4:14:68:82:c8:51: 45:2f:7d:68:ef:f0:4f:97:70:ec:5f:5e:09:de:2f:c3:c2:b3: 56:dd:42:4c:7c:42:5e:6f:ca:48:d0:f2:45:61:5a:62:ba:4b: 96:56:3c:e7:19:45:4e:38:64:dc:22:39:e5:78:9b:e7:61:ff: db:e2:86:3d:b4:bb:d6:22:cb:7f:a2:a1:08:a7:12:06:0c:97: 01:b5:15:b7:ee:ed:e6:65:90:36:62:3f:10:ad:c7:93:26:28: 78:6f:0b:c7:64:b7:66:7a:78:e1:4f:0d:77:d8:4b:d6:71:5e: ea:d3:d9:de:97:53:c4:e5:77:2c:23:75:3b:88:30:a0:74:f9: 8f:b9:f5:77:27:4c:cd:fa:34:7d:c4:67:2d:a9:67:bf:fd:50: 98:fd:66:4b:87:5c:90:9b:27:72:1a:8e:34:3a:96:a4:36:7f: 86:65:3c:6f:e2:d6:b5:a9:ad:52:a5:31:f2:c8:26:ab:3a:1c: e3:b4:b9:bd:c7:14:62:53:61:5d:d8:16:78:ce:60:dd:03:3b: e8:b2:0c:b6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4ol7FjLobpb73saLPf6umMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWUwYjczMmQ4NjhiZDUxNjRmMjljNTdlYTVlZDIwN2JhNTAxZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA9ybu0ZFUeeTQPfN/XZY8e4jE9O NrLH/UgsKHXR9LpJS7WZNuHQQyCw/TroiPrmFYYHGCSWOnoP+PUTuNClaMuCksVP +qdSlhEzNzHAEGUgwnLxNavcTGE6WRQ6N1j7jbsTUE8cDwv5/N+oXHi/LyapZ2QW 4XbHVsgDCRP7yJw69LkFn+IOSLNKO+PbT4XkawcQZ/5hf8oaY78gd+DWwrQtTimX Sh40NA5n2doOKWTvrcnnmKA/DvPCDWat0h+oclHydkcVhatAYbifjTrXzaEAJwXK E56XkLiQShVW2g4PhiGmNnYxulnoeqvHNtYoMIr1WNRlKbGuH3raAb+bwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAngtzLYaL1RZPKcV+pe0ge6UB/mMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvQ2VDM010aG92VkZrOHB4WDZsN1NCN3BRSC1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQB1IZiAwQB 1IZoAwQB1IZuMA0GCSqGSIb3DQEBCwUAA4IBAQC3Dvw5Q2QtbZyS2TfgqPSQr7K9 0oiQMid7e8GK30FGURLXt4oMQkh2o4VKqjdTK3CkFGiCyFFFL31o7/BPl3DsX14J 3i/DwrNW3UJMfEJeb8pI0PJFYVpiukuWVjznGUVOOGTcIjnleJvnYf/b4oY9tLvW Ist/oqEIpxIGDJcBtRW37u3mZZA2Yj8QrceTJih4bwvHZLdmenjhTw132EvWcV7q 09nel1PE5XcsI3U7iDCgdPmPufV3J0zN+jR9xGctqWe//VCY/WZLh1yQmydyGo40 OpakNn+GZTxv4ta1qa1SpTHyyCarOhzjtLm9xxRiU2Fd2BZ4zmDdAzvosgy2 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:54 2026 by rpki-client