This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S1lyv38NPWAz219JJxOxuNT0BhY.roa File: S1lyv38NPWAz219JJxOxuNT0BhY.roa (raw, json) Hash identifier: ANQL35iK94A1tLM1Jb9vVBMcJ5DRaFYiZX1Q943Rgys= Subject key identifier: 4B:59:72:BF:7F:0D:3D:60:33:DB:5F:49:27:13:B1:B8:D4:F4:06:16 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A25481CCF1B875E00DB5EE4A317AF9 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S1lyv38NPWAz219JJxOxuNT0BhY.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134135 IP address blocks: 212.134.32.0/22 maxlen: 22 212.134.100.0/22 maxlen: 22 212.134.112.0/22 maxlen: 22 212.134.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:54:81:cc:f1:b8:75:e0:0d:b5:ee:4a:31:7a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b5972bf7f0d3d6033db5f492713b1b8d4f40616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:5d:05:43:7d:22:af:6a:0f:50:42:e8:a0: 26:9c:26:ec:f4:40:55:70:c6:4d:44:46:a7:83:b6: 10:5d:e5:c5:1a:a7:76:dd:bd:7f:07:50:f1:91:54: e0:df:18:ae:80:87:04:38:bb:ff:bf:f5:ae:af:cd: d1:64:70:86:41:6c:96:4c:3a:45:ba:1a:2b:6f:03: 42:a3:a5:37:f6:78:c7:a4:76:d2:eb:f8:f7:2b:8f: 42:74:cd:02:f8:17:d3:68:31:88:d6:61:ae:4a:14: 84:34:67:c7:98:31:23:5a:1f:4b:93:e3:07:ac:8e: 91:bb:92:7e:78:1d:a5:6c:de:48:d1:2a:94:33:f8: cc:36:d5:f8:d7:a8:92:19:d5:1f:d0:45:a1:f2:38: ca:b3:55:d0:ec:0d:d4:4d:fc:72:a0:c0:f0:18:4e: e8:23:15:18:5a:3b:40:0d:e3:6c:ec:ae:d6:5e:84: 33:f5:c0:23:cd:06:2b:31:b3:03:a7:0f:9e:99:d7: 8d:12:95:38:77:be:64:ae:a5:3d:fe:3f:c4:d1:eb: ce:b8:8d:0c:c2:01:ea:94:fc:c2:cd:a0:59:f2:4d: a3:50:a5:16:2e:4e:b0:1f:5b:3e:ce:0e:f9:95:28: 09:f5:69:02:60:7d:71:4b:99:49:98:b2:92:d4:58: 63:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:59:72:BF:7F:0D:3D:60:33:DB:5F:49:27:13:B1:B8:D4:F4:06:16 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/S1lyv38NPWAz219JJxOxuNT0BhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.32.0/22 212.134.100.0/22 212.134.112.0/22 212.134.120.0/22 Signature Algorithm: sha256WithRSAEncryption 41:ed:16:56:15:b8:04:90:77:29:30:70:e0:43:8d:b1:0d:12: ac:98:ec:f0:9e:6c:95:1d:43:c7:c9:e5:c1:ad:c1:65:26:fd: 23:f7:a6:75:d4:8e:c7:13:0c:7d:ab:22:49:60:11:c8:00:2c: 8f:a9:d9:6c:f9:f6:d7:c6:8f:c9:dc:42:47:04:93:82:dc:43: 50:1a:fa:38:71:14:9c:0b:6d:be:54:e3:1d:2b:63:ef:ca:a7: d2:39:f7:36:fc:21:c8:d4:12:e0:28:4a:75:48:c3:b9:a4:ea: 1a:ea:76:63:62:a2:d7:3a:49:c7:35:43:df:9b:2d:ec:15:9a: 1c:4b:a8:c7:d0:c1:13:0f:fa:86:68:c4:d7:3c:3d:e7:d0:34: 73:ee:9d:c2:a5:8b:0f:eb:09:bd:e9:5e:a8:81:61:cc:cc:da: 2c:86:43:d2:47:46:25:84:61:27:9c:1e:6a:35:48:1b:be:9d: e4:3d:66:69:75:bc:e1:e0:45:c8:8c:ee:e6:95:8f:03:af:02: 4c:00:8f:9c:06:71:9c:54:2f:ce:1f:88:ef:c7:be:3a:c3:3c: b2:bd:46:c0:07:d7:a6:4c:25:b9:db:4a:1b:b9:bc:ff:8a:6e: 06:66:90:30:2d:42:43:65:89:38:92:46:cf:20:ba:5a:df:f4: d9:3e:e0:d7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4olSBzPG4deANte5KMXr5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjU5NzJiZjdmMGQzZDYwMzNkYjVmNDkyNzEzYjFiOGQ0ZjQwNjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYVdBUN9Iq9qD1BC6KAmnCbs9EBV cMZNREang7YQXeXFGqd23b1/B1DxkVTg3xiugIcEOLv/v/Wur83RZHCGQWyWTDpF uhorbwNCo6U39njHpHbS6/j3K49CdM0C+BfTaDGI1mGuShSENGfHmDEjWh9Lk+MH rI6Ru5J+eB2lbN5I0SqUM/jMNtX416iSGdUf0EWh8jjKs1XQ7A3UTfxyoMDwGE7o IxUYWjtADeNs7K7WXoQz9cAjzQYrMbMDpw+emdeNEpU4d75krqU9/j/E0evOuI0M wgHqlPzCzaBZ8k2jUKUWLk6wH1s+zg75lSgJ9WkCYH1xS5lJmLKS1Fhj9QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEtZcr9/DT1gM9tfSScTsbjU9AYWMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvUzFseXYzOE5QV0F6MjE5Skp4T3h1TlQwQmhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQC1IYgAwQC 1IZkAwQC1IZwAwQC1IZ4MA0GCSqGSIb3DQEBCwUAA4IBAQBB7RZWFbgEkHcpMHDg Q42xDRKsmOzwnmyVHUPHyeXBrcFlJv0j96Z11I7HEwx9qyJJYBHIACyPqdls+fbX xo/J3EJHBJOC3ENQGvo4cRScC22+VOMdK2PvyqfSOfc2/CHI1BLgKEp1SMO5pOoa 6nZjYqLXOknHNUPfmy3sFZocS6jH0METD/qGaMTXPD3n0DRz7p3CpYsP6wm96V6o gWHMzNoshkPSR0YlhGEnnB5qNUgbvp3kPWZpdbzh4EXIjO7mlY8DrwJMAI+cBnGc VC/OH4jvx746wzyyvUbAB9emTCW520obubz/im4GZpAwLUJDZYk4kkbPILpa3/TZ PuDX -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:37 2026 by rpki-client