This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Rx2qam96tdWQuIPOh8PxfSeSrOs.roa File: Rx2qam96tdWQuIPOh8PxfSeSrOs.roa (raw, json) Hash identifier: nUYqLAvMUY3TpR2a40yr/DHytpKtxm5YC5VQPXvtdc8= Subject key identifier: 47:1D:AA:6A:6F:7A:B5:D5:90:B8:83:CE:87:C3:F1:7D:27:92:AC:EB Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A25116361DEBA52A968D220BB40544 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Rx2qam96tdWQuIPOh8PxfSeSrOs.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 212.134.55.0/24 maxlen: 24 212.134.180.0/22 maxlen: 22 212.134.184.0/22 maxlen: 22 212.134.192.0/22 maxlen: 22 212.134.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:51:16:36:1d:eb:a5:2a:96:8d:22:0b:b4:05:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=471daa6a6f7ab5d590b883ce87c3f17d2792aceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:60:ec:ab:ab:8e:89:30:52:b4:ef:52:c5:13: a5:31:a9:42:82:1d:b9:a4:88:c8:9f:09:cd:e3:41: 6c:bd:1c:6d:c7:ec:5e:8c:df:47:04:e1:b1:ab:25: d5:17:f6:ac:8b:33:78:bc:81:8e:57:db:d7:c6:22: da:bc:cc:7c:db:54:0e:30:1c:2a:44:9c:f2:c5:5a: 4a:89:c5:d8:f8:60:0c:31:7b:ef:29:ac:5e:2a:41: 4e:d2:d1:30:79:13:a3:42:28:84:44:88:09:a3:b2: 87:fc:3c:4f:00:ad:3f:5e:d8:c3:a3:db:c2:dd:74: 81:f5:aa:b3:c7:4a:18:4b:ef:ba:ba:6a:01:4f:ce: 98:6f:8f:23:2c:33:cd:66:22:1c:70:bc:6d:bb:af: 32:c4:e5:53:89:7a:0f:ef:a7:e3:e4:6d:87:93:db: b8:3a:62:74:52:23:c6:10:d4:b7:0e:20:84:6f:fa: d9:00:c4:92:a4:bd:d4:15:8e:c0:57:97:10:a7:e8: 03:db:6f:6e:c5:03:77:5a:9a:10:bc:c9:8f:c1:bf: 86:b2:f4:09:21:fe:b4:91:16:72:40:64:19:f8:de: 31:a1:41:95:8c:9a:23:3d:d0:de:8b:00:21:de:87: 08:f9:56:f4:a2:0b:bf:56:05:fe:b5:eb:82:93:08: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1D:AA:6A:6F:7A:B5:D5:90:B8:83:CE:87:C3:F1:7D:27:92:AC:EB X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Rx2qam96tdWQuIPOh8PxfSeSrOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.55.0/24 212.134.180.0-212.134.187.255 212.134.192.0/22 212.134.200.0/22 Signature Algorithm: sha256WithRSAEncryption d9:32:2e:b3:e4:84:3e:37:23:3c:7f:6f:fa:6f:ad:78:e2:d0: 56:69:82:18:7b:0a:22:58:02:7d:d1:83:76:e7:fd:27:57:c0: d0:1b:dd:fc:7a:c0:9d:73:2e:58:8c:ed:c9:ce:e5:eb:f4:05: 2f:ef:53:3f:0a:36:7d:37:e7:cb:2c:7a:5e:39:39:31:f6:c3: c2:a5:07:64:01:e5:4f:50:31:92:da:87:aa:9b:0a:37:95:92: 65:a4:f4:0d:a0:2d:9e:bb:85:8b:ea:07:45:17:e9:dd:e5:7d: 11:9c:fb:8f:d5:f0:85:04:d7:8c:9d:6a:81:cb:9d:f3:34:e1: 5a:b1:d2:d2:c1:4f:39:10:98:02:c5:10:65:06:d6:b3:90:aa: 0a:11:2a:aa:2b:09:ec:1a:b2:55:13:15:2c:62:09:ea:07:6d: 32:0c:f6:17:0a:90:d6:39:15:6b:4f:0e:f1:0e:2a:86:5e:1f: a2:7c:6b:6c:f0:ea:e4:43:10:0c:44:a2:32:a6:ce:68:b3:6c: ef:47:22:95:a0:52:7c:1c:fa:28:f4:dd:cd:fa:b4:48:91:aa: 3b:d1:6c:65:67:b3:a5:ef:e0:ce:9a:9f:74:b2:d0:48:12:20: f4:97:89:5d:d1:2f:d8:e5:fc:2d:c4:e8:e8:22:b6:a9:06:46: 94:11:a5:30 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt4olEWNh3rpSqWjSILtAVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzFkYWE2YTZmN2FiNWQ1OTBiODgzY2U4N2MzZjE3ZDI3OTJhY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62Dsq6uOiTBStO9SxROlMalCgh25 pIjInwnN40FsvRxtx+xejN9HBOGxqyXVF/asizN4vIGOV9vXxiLavMx821QOMBwq RJzyxVpKicXY+GAMMXvvKaxeKkFO0tEweROjQiiERIgJo7KH/DxPAK0/XtjDo9vC 3XSB9aqzx0oYS++6umoBT86Yb48jLDPNZiIccLxtu68yxOVTiXoP76fj5G2Hk9u4 OmJ0UiPGENS3DiCEb/rZAMSSpL3UFY7AV5cQp+gD229uxQN3WpoQvMmPwb+GsvQJ If60kRZyQGQZ+N4xoUGVjJojPdDeiwAh3ocI+Vb0ogu/VgX+teuCkwhUkQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFEcdqmpverXVkLiDzofD8X0nkqzrMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvUngycWFtOTZ0ZFdRdUlQT2g4UHhmU2VTck9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQA1IY3MAwD BALUhrQDBALUhrgDBALUhsADBALUhsgwDQYJKoZIhvcNAQELBQADggEBANkyLrPk hD43Izx/b/pvrXji0FZpghh7CiJYAn3Rg3bn/SdXwNAb3fx6wJ1zLliM7cnO5ev0 BS/vUz8KNn0358ssel45OTH2w8KlB2QB5U9QMZLah6qbCjeVkmWk9A2gLZ67hYvq B0UX6d3lfRGc+4/V8IUE14ydaoHLnfM04Vqx0tLBTzkQmALFEGUG1rOQqgoRKqor CewaslUTFSxiCeoHbTIM9hcKkNY5FWtPDvEOKoZeH6J8a2zw6uRDEAxEojKmzmiz bO9HIpWgUnwc+ij03c36tEiRqjvRbGVns6Xv4M6an3Sy0EgSIPSXiV3RL9jl/C3E 6OgitqkGRpQRpTA= -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:14 2026 by rpki-client