This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HyN4MEDXawYZUKgQ-B3O2Xovn-k.roa File: HyN4MEDXawYZUKgQ-B3O2Xovn-k.roa (raw, json) Hash identifier: N0A6A29FOlXqjit2Ban4YCyWjo4jYtVntW+GQqGnfMo= Subject key identifier: 1F:23:78:30:40:D7:6B:06:19:50:A8:10:F8:1D:CE:D9:7A:2F:9F:E9 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A23A003F1BF5D3132893A83EAB2997 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HyN4MEDXawYZUKgQ-B3O2Xovn-k.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 212.134.46.0/24 maxlen: 24 212.134.52.0/24 maxlen: 24 212.134.54.0/24 maxlen: 24 212.134.124.0/22 maxlen: 24 212.134.164.0/22 maxlen: 24 212.134.208.0/22 maxlen: 24 212.134.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3a:00:3f:1b:f5:d3:13:28:93:a8:3e:ab:29:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f23783040d76b061950a810f81dced97a2f9fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:49:da:50:51:b9:18:2c:6b:f9:21:88:d6: 6d:df:43:da:ed:27:a1:6b:20:c3:a3:3e:44:62:8e: bd:ad:05:1e:e2:d6:fc:0b:cc:0f:6d:ca:73:6b:3a: 41:ab:1f:6c:62:d8:22:d0:e6:c8:6a:ac:3d:c7:97: 08:70:ce:6c:3e:35:4c:dc:64:da:45:02:50:2e:b1: ea:c7:e4:6a:27:4b:97:a6:50:ac:df:f2:24:53:da: 3f:0c:ad:a7:61:9c:83:5a:6a:bd:79:cf:22:07:c6: 37:75:63:d1:59:5d:18:93:74:4b:88:8c:ba:9c:8c: 31:95:69:34:0d:75:a9:71:de:34:df:8c:d4:69:7c: 26:fd:b8:d8:b6:b1:3b:78:91:e6:6a:bc:9f:ec:bd: 13:85:50:ba:3b:ff:f8:4f:09:51:4e:f4:ec:95:eb: c4:a0:6c:4f:75:3a:f7:b4:a9:57:5d:20:c3:a0:f2: fe:e8:38:99:46:24:4c:75:c3:d2:f4:c9:42:7f:b3: 31:aa:1f:2c:1a:d2:96:97:8c:c4:7e:cc:04:3a:b7: 5f:12:a5:68:72:91:f4:e9:4e:95:dc:60:a8:89:b0: e6:55:c2:c2:ba:a7:3e:3d:ee:81:c6:ad:7d:8c:81: fb:fb:14:d4:99:d9:1b:90:63:88:20:4b:c3:9b:5c: 80:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:23:78:30:40:D7:6B:06:19:50:A8:10:F8:1D:CE:D9:7A:2F:9F:E9 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HyN4MEDXawYZUKgQ-B3O2Xovn-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.46.0/24 212.134.52.0/24 212.134.54.0/24 212.134.124.0/22 212.134.164.0/22 212.134.208.0/22 212.134.224.0/22 Signature Algorithm: sha256WithRSAEncryption 16:18:a3:d7:bd:99:3b:35:ab:19:f3:61:13:16:76:9f:1f:d3: b6:70:2f:f6:52:72:7d:24:4a:48:bd:38:f4:05:b4:bd:57:6d: 13:9b:2a:20:5b:06:d4:53:0a:42:3d:b8:e0:72:1f:01:6d:06: bc:84:01:d0:0f:8a:ce:ce:5a:97:18:51:18:84:8f:68:9f:ae: ae:85:a4:b2:4e:5f:3b:9b:ee:c2:7d:40:bd:2c:c6:e3:0d:a4: 0d:2d:32:ad:9e:ba:50:9f:fa:0b:5b:0b:7a:ee:2c:e8:68:9a: 99:ff:33:b1:98:cf:d8:c5:64:ee:7d:33:87:c8:25:2b:44:48: 6e:93:8b:45:64:01:9f:c7:c7:bf:18:4f:5a:e9:a5:74:cb:7a: 45:eb:86:d4:c4:df:d7:83:ef:43:13:22:30:50:2f:98:cc:73: 3d:b6:72:d2:ea:4f:05:33:ae:2a:9f:ac:24:26:94:7d:66:03: 8b:d7:b8:d7:08:94:59:a8:96:06:76:c4:47:73:fa:41:11:b5: e2:d3:ee:92:53:2c:57:88:a1:e9:24:d7:93:eb:cd:81:a4:a5: 7f:0f:4c:f0:f5:62:36:51:02:cf:22:b7:4a:fb:1d:22:55:7c: fb:79:e7:f0:e2:cc:0b:2c:f2:83:5b:cc:65:84:41:ad:ad:2f: d9:24:39:bd -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4ojoAPxv10xMok6g+qymXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjIzNzgzMDQwZDc2YjA2MTk1MGE4MTBmODFkY2VkOTdhMmY5ZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+ZJ2lBRuRgsa/khiNZt30Pa7Seh ayDDoz5EYo69rQUe4tb8C8wPbcpzazpBqx9sYtgi0ObIaqw9x5cIcM5sPjVM3GTa RQJQLrHqx+RqJ0uXplCs3/IkU9o/DK2nYZyDWmq9ec8iB8Y3dWPRWV0Yk3RLiIy6 nIwxlWk0DXWpcd4034zUaXwm/bjYtrE7eJHmaryf7L0ThVC6O//4TwlRTvTslevE oGxPdTr3tKlXXSDDoPL+6DiZRiRMdcPS9MlCf7Mxqh8sGtKWl4zEfswEOrdfEqVo cpH06U6V3GCoibDmVcLCuqc+Pe6Bxq19jIH7+xTUmdkbkGOIIEvDm1yAwQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFB8jeDBA12sGGVCoEPgdztl6L5/pMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvSHlONE1FRFhhd1laVUtnUS1CM08yWG92bi1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQA1IYuAwQA 1IY0AwQA1IY2AwQC1IZ8AwQC1IakAwQC1IbQAwQC1IbgMA0GCSqGSIb3DQEBCwUA A4IBAQAWGKPXvZk7NasZ82ETFnafH9O2cC/2UnJ9JEpIvTj0BbS9V20TmyogWwbU UwpCPbjgch8BbQa8hAHQD4rOzlqXGFEYhI9on66uhaSyTl87m+7CfUC9LMbjDaQN LTKtnrpQn/oLWwt67izoaJqZ/zOxmM/YxWTufTOHyCUrREhuk4tFZAGfx8e/GE9a 6aV0y3pF64bUxN/Xg+9DEyIwUC+YzHM9tnLS6k8FM64qn6wkJpR9ZgOL17jXCJRZ qJYGdsRHc/pBEbXi0+6SUyxXiKHpJNeT682BpKV/D0zw9WI2UQLPIrdK+x0iVXz7 eefw4swLLPKDW8xlhEGtrS/ZJDm9 -----END CERTIFICATE-----Generated at Thu Jan 8 17:32:22 2026 by rpki-client