This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RSOVOic0mBIXH5iJUzkDWzQ79oA.roa File: RSOVOic0mBIXH5iJUzkDWzQ79oA.roa (raw, json) Hash identifier: tLGNSciasEfVRFRMIpW4rQ3XFdXK3R5/VRChTsly5zs= Subject key identifier: 45:23:95:3A:27:34:98:12:17:1F:98:89:53:39:03:5B:34:3B:F6:80 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AC7C6D95FDCD43F6A63E059C86AAE3AD8 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RSOVOic0mBIXH5iJUzkDWzQ79oA.roa Signing time: Fri 28 Nov 2025 00:04:48 +0000 ROA not before: Fri 28 Nov 2025 00:04:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134135 IP address blocks: 212.134.32.0/22 maxlen: 22 212.134.40.0/22 maxlen: 22 212.134.48.0/22 maxlen: 22 212.134.100.0/22 maxlen: 22 212.134.112.0/22 maxlen: 22 212.134.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c7:c6:d9:5f:dc:d4:3f:6a:63:e0:59:c8:6a:ae:3a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 28 00:04:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4523953a27349812171f98895339035b343bf680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:ad:e1:61:38:54:2d:71:dc:09:d7:1d:1e: 30:46:80:b6:ed:c8:ac:38:4f:9c:1c:e0:bd:98:bf: 06:2f:d9:cc:ad:64:3d:ef:06:98:37:fc:34:92:66: ee:4d:a9:cf:74:52:35:da:57:32:01:ec:3a:10:0b: 22:4a:9d:25:81:45:d1:33:56:ab:8c:4e:3f:f0:96: fe:28:cb:50:a3:72:aa:56:36:29:2e:eb:9d:d8:c5: 74:15:3c:bf:cc:b8:03:2d:b0:fb:d3:49:00:6e:28: 65:38:4c:1a:03:36:63:b0:b2:53:78:ce:66:fe:47: c5:4e:c1:4f:cf:56:af:ba:80:da:6b:d3:9b:b5:c3: 21:de:cc:04:1f:c1:81:a5:6b:e9:d7:54:4a:2b:03: 06:87:db:05:00:74:0e:13:dd:41:fe:2b:0c:60:41: 5e:07:71:e8:d6:a2:1d:a6:8f:e0:50:ef:2e:5e:50: b8:c4:f8:ae:8b:7a:30:ed:74:2f:54:b6:9d:2d:1c: ce:45:65:c5:7c:74:3c:40:85:f7:69:a9:09:76:0f: a0:4d:10:6c:38:65:dd:61:a6:c1:20:ff:a4:35:9e: 6f:c2:f3:b0:e9:f0:8f:81:c5:48:6f:bf:a6:a6:ff: 9b:c2:83:11:c8:34:84:82:c3:0e:7e:44:17:0d:f4: 58:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:23:95:3A:27:34:98:12:17:1F:98:89:53:39:03:5B:34:3B:F6:80 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RSOVOic0mBIXH5iJUzkDWzQ79oA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.32.0/22 212.134.40.0/22 212.134.48.0/22 212.134.100.0/22 212.134.112.0/22 212.134.120.0/22 Signature Algorithm: sha256WithRSAEncryption ce:53:43:cc:c8:1b:c5:9e:5e:5d:0c:5a:98:c5:9a:0b:6b:bf: d3:39:12:30:7a:f3:f9:9c:e1:c1:79:85:f6:c7:c5:cc:91:89: 9c:7c:5f:9c:34:fa:02:70:78:62:06:1b:eb:60:0c:51:f4:47: e2:2b:4e:ca:c7:4f:51:c1:df:31:ba:75:5a:ed:45:cc:17:16: c6:85:c5:53:e0:a1:89:3d:07:2c:73:de:eb:41:18:3b:31:5f: d8:46:df:97:f5:17:b9:5c:04:cc:9b:7c:26:95:e4:a3:71:96: 70:e0:f2:96:6c:b2:9e:57:e9:5d:85:59:d0:af:82:fd:de:af: 48:29:92:bc:5f:a7:54:c2:99:5c:62:e5:05:bd:f9:fb:05:9d: ab:95:bb:12:97:fa:4a:06:a6:ea:ae:88:43:86:0f:3b:37:fb: 9b:d7:e0:57:e3:3c:fe:84:5f:65:cf:bf:8d:80:9e:15:8d:5c: ba:b5:99:ac:50:e6:6e:2c:85:f7:f3:13:0f:9a:c6:48:43:61: 37:2b:cb:7a:0c:1d:87:db:38:52:ba:9c:b8:01:5b:9a:9a:c7: c9:4d:26:b5:0c:8f:09:5e:bc:ff:b0:ee:69:8d:c2:62:20:31: b6:8f:60:2c:78:d5:a9:78:08:30:b9:65:11:26:bd:35:95:4a: c3:3e:4d:29 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrHxtlf3NQ/amPgWchqrjrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTI4MDAwNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTIzOTUzYTI3MzQ5ODEyMTcxZjk4ODk1MzM5MDM1YjM0M2JmNjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpmt4WE4VC1x3AnXHR4wRoC27cis OE+cHOC9mL8GL9nMrWQ97waYN/w0kmbuTanPdFI12lcyAew6EAsiSp0lgUXRM1ar jE4/8Jb+KMtQo3KqVjYpLuud2MV0FTy/zLgDLbD700kAbihlOEwaAzZjsLJTeM5m /kfFTsFPz1avuoDaa9ObtcMh3swEH8GBpWvp11RKKwMGh9sFAHQOE91B/isMYEFe B3Ho1qIdpo/gUO8uXlC4xPiui3ow7XQvVLadLRzORWXFfHQ8QIX3aakJdg+gTRBs OGXdYabBIP+kNZ5vwvOw6fCPgcVIb7+mpv+bwoMRyDSEgsMOfkQXDfRYhwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFEUjlTonNJgSFx+YiVM5A1s0O/aAMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvUlNPVk9pYzBtQklYSDVpSlV6a0RXelE3OW9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQC1IYgAwQC 1IYoAwQC1IYwAwQC1IZkAwQC1IZwAwQC1IZ4MA0GCSqGSIb3DQEBCwUAA4IBAQDO U0PMyBvFnl5dDFqYxZoLa7/TORIwevP5nOHBeYX2x8XMkYmcfF+cNPoCcHhiBhvr YAxR9EfiK07Kx09Rwd8xunVa7UXMFxbGhcVT4KGJPQcsc97rQRg7MV/YRt+X9Re5 XATMm3wmleSjcZZw4PKWbLKeV+ldhVnQr4L93q9IKZK8X6dUwplcYuUFvfn7BZ2r lbsSl/pKBqbqrohDhg87N/ub1+BX4zz+hF9lz7+NgJ4VjVy6tZmsUOZuLIX38xMP msZIQ2E3K8t6DB2H2zhSupy4AVuamsfJTSa1DI8JXrz/sO5pjcJiIDG2j2AseNWp eAgwuWURJr01lUrDPk0p -----END CERTIFICATE-----Generated at Thu Dec 4 19:56:35 2025 by rpki-client