This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Equ3-IcM0PNjnZtbqlR09_PbBPE.roa File: Equ3-IcM0PNjnZtbqlR09_PbBPE.roa (raw, json) Hash identifier: EEHA4M0H6r67tWipAgutR6V25f8EKJ6oZ6MO6FLs1Co= Subject key identifier: 12:AB:B7:F8:87:0C:D0:F3:63:9D:9B:5B:AA:54:74:F7:F3:DB:04:F1 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AD98B2DCE972EB0B198DF9DD0A039509B Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Equ3-IcM0PNjnZtbqlR09_PbBPE.roa Signing time: Mon 01 Dec 2025 10:52:48 +0000 ROA not before: Mon 01 Dec 2025 10:52:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 212.134.17.0/24 maxlen: 24 212.135.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:8b:2d:ce:97:2e:b0:b1:98:df:9d:d0:a0:39:50:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 1 10:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=12abb7f8870cd0f3639d9b5baa5474f7f3db04f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:7e:01:b8:9a:b3:a5:54:68:3c:91:84:16: af:63:2d:37:0c:a3:b1:e5:a9:a7:15:4f:9e:13:a8: 61:13:85:15:4e:4d:50:bd:d2:e9:f5:ac:4c:90:c0: 58:8e:15:25:2e:76:c5:a7:f2:b8:a1:eb:d0:f1:7e: 4a:a7:ba:74:cd:4a:f7:92:87:1c:e7:11:85:2d:b1: 16:91:87:50:cf:e4:8f:50:2f:3f:0b:7f:b7:92:f3: 7f:a3:99:fa:50:74:f8:a8:d3:ef:b9:13:31:2b:91: 6b:cc:c3:33:57:30:e4:bd:88:bc:34:3a:c3:45:4b: a0:4d:1e:b9:4e:97:f1:56:ce:57:2c:f3:22:8d:d7: f0:5d:bc:7e:d1:50:57:1f:d8:0f:1e:5e:0f:5a:e8: bc:e3:5c:d4:2e:2c:e8:4f:61:d8:39:ff:67:e8:6d: a8:fa:94:5e:a7:44:b4:73:08:e4:81:ed:2f:05:3c: cc:bd:73:15:99:96:a3:85:4a:11:95:4a:c0:20:3e: f6:4b:3f:99:37:e2:fd:ed:c1:77:e2:2b:24:3f:05: 19:be:ed:c9:96:46:94:46:24:eb:0e:38:1b:df:5c: 5b:c4:de:44:85:23:ff:93:25:23:af:5f:6a:7e:92: 3d:b1:64:6c:e8:04:a2:db:e2:87:e1:cb:f4:e2:77: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AB:B7:F8:87:0C:D0:F3:63:9D:9B:5B:AA:54:74:F7:F3:DB:04:F1 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Equ3-IcM0PNjnZtbqlR09_PbBPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.17.0/24 212.135.241.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:88:d1:b1:96:c3:9e:ee:a0:90:7f:dc:2f:6a:1c:70:ac:7a: ea:e5:83:22:01:4e:8d:e0:66:27:83:9d:d9:be:63:42:90:d9: 74:07:aa:ce:f7:de:7a:e0:71:b5:c2:7f:4a:58:4f:7f:76:a4: a6:30:a6:a9:f4:2b:d2:cf:4f:7e:97:66:2d:77:ec:5a:e4:0b: c2:36:71:04:07:5f:cf:be:77:aa:82:ee:a1:a5:54:76:82:e9: 36:32:a4:39:a2:b9:95:3b:cc:67:20:1f:21:1a:17:67:83:28: 27:b6:a1:52:34:f8:fb:18:d6:d9:f4:2d:02:64:bc:ac:81:8b: f7:d0:70:d4:e1:a0:65:cb:37:26:7d:7c:55:ed:fa:77:8e:be: 22:3c:0d:78:87:d1:8a:82:6d:9c:99:ae:00:6a:9b:43:03:27: b9:0b:30:c5:ee:85:c9:63:4f:d1:78:fa:8c:5a:60:cd:27:3f: 85:bc:34:6d:8e:6d:15:99:6d:2d:15:d7:4b:66:17:b2:93:cb: f5:d4:89:6d:c1:74:f6:50:b4:bf:b4:6b:a0:81:38:f5:08:e8: 2f:68:4a:55:4a:ed:fa:40:a6:67:68:c1:fc:e4:de:38:fc:0c: 71:19:c7:6b:bc:65:3b:e2:e3:86:7b:ea:0b:ef:24:12:84:c0: ec:46:4d:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrZiy3Oly6wsZjfndCgOVCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjAxMTA1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmFiYjdmODg3MGNkMGYzNjM5ZDliNWJhYTU0NzRmN2YzZGIwNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDd+Abias6VUaDyRhBavYy03DKOx 5amnFU+eE6hhE4UVTk1QvdLp9axMkMBYjhUlLnbFp/K4oevQ8X5Kp7p0zUr3kocc 5xGFLbEWkYdQz+SPUC8/C3+3kvN/o5n6UHT4qNPvuRMxK5FrzMMzVzDkvYi8NDrD RUugTR65TpfxVs5XLPMijdfwXbx+0VBXH9gPHl4PWui841zULizoT2HYOf9n6G2o +pRep0S0cwjkge0vBTzMvXMVmZajhUoRlUrAID72Sz+ZN+L97cF34iskPwUZvu3J lkaURiTrDjgb31xbxN5EhSP/kyUjr19qfpI9sWRs6ASi2+KH4cv04ne8ewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBKrt/iHDNDzY52bW6pUdPfz2wTxMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvRXF1My1JY00wUE5qblp0YnFsUjA5X1BiQlBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1IYRAwQA 1IfxMA0GCSqGSIb3DQEBCwUAA4IBAQBciNGxlsOe7qCQf9wvahxwrHrq5YMiAU6N 4GYng53ZvmNCkNl0B6rO99564HG1wn9KWE9/dqSmMKap9CvSz09+l2Ytd+xa5AvC NnEEB1/Pvneqgu6hpVR2guk2MqQ5ormVO8xnIB8hGhdngygntqFSNPj7GNbZ9C0C ZLysgYv30HDU4aBlyzcmfXxV7fp3jr4iPA14h9GKgm2cma4AaptDAye5CzDF7oXJ Y0/RePqMWmDNJz+FvDRtjm0VmW0tFddLZheyk8v11IltwXT2ULS/tGuggTj1COgv aEpVSu36QKZnaMH85N44/AxxGcdrvGU74uOGe+oL7yQShMDsRk0g -----END CERTIFICATE-----Generated at Thu Dec 4 19:55:08 2025 by rpki-client