This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/STvfEyIHcBHfMfUbZTnNRiV_tZY.roa File: STvfEyIHcBHfMfUbZTnNRiV_tZY.roa (raw, json) Hash identifier: hCQIC3umtwLyG0POpHUlqPshLWbhW5EIOnyipnQR6BI= Subject key identifier: 49:3B:DF:13:22:07:70:11:DF:31:F5:1B:65:39:CD:46:25:7F:B5:96 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019ADFEE502EADB4B9797786BA04AE2DE3AF Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/STvfEyIHcBHfMfUbZTnNRiV_tZY.roa Signing time: Tue 02 Dec 2025 16:38:48 +0000 ROA not before: Tue 02 Dec 2025 16:38:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200590 IP address blocks: 212.134.60.0/22 maxlen: 24 212.134.240.0/24 maxlen: 24 212.134.241.0/24 maxlen: 24 212.134.242.0/24 maxlen: 24 212.134.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:ee:50:2e:ad:b4:b9:79:77:86:ba:04:ae:2d:e3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 2 16:38:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=493bdf1322077011df31f51b6539cd46257fb596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:4f:93:94:81:93:58:3d:0d:7c:6b:4f:0a: a4:67:58:38:0f:9c:f3:c1:70:cf:58:06:a9:d6:73: 72:f5:9f:c8:fb:28:55:89:d4:9e:27:e2:bd:c1:fb: d4:0d:52:0b:8e:11:28:04:c8:3e:70:f8:02:45:97: 24:09:92:86:4a:92:22:27:41:fa:da:7a:da:94:71: 54:bb:cc:ee:fc:3a:e0:56:01:08:02:62:d8:17:33: b2:c4:d6:57:b8:80:ab:54:f0:d3:f1:c2:cd:6d:9f: 96:70:f0:07:e0:67:09:fd:77:07:30:1d:ff:ec:bd: cd:70:70:88:4f:e7:de:14:0e:d1:0d:6e:51:1c:6e: 59:da:20:11:c0:fe:9e:f4:2d:e5:54:36:5e:67:ab: 8a:9b:50:e0:91:de:14:00:e3:f6:13:39:6e:a3:0a: c4:6a:12:ce:1c:f0:9f:03:7b:55:cf:8f:b3:be:81: 22:6a:c8:7a:cf:68:49:2d:b9:df:cb:60:6b:d3:79: 30:f8:fb:01:62:0c:e9:75:a1:28:8d:12:ea:a0:55: 38:8d:67:6b:0f:73:08:36:03:82:1c:bf:ef:38:c9: 4a:7a:bb:c0:08:ba:42:1c:6d:10:b8:c0:1a:b1:43: a2:db:6c:77:42:17:e0:44:40:27:e0:44:12:3d:e7: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3B:DF:13:22:07:70:11:DF:31:F5:1B:65:39:CD:46:25:7F:B5:96 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/STvfEyIHcBHfMfUbZTnNRiV_tZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.60.0/22 212.134.240.0/22 Signature Algorithm: sha256WithRSAEncryption 38:e2:14:e8:38:59:f2:09:f9:50:16:53:97:83:f7:97:3f:d3: 02:28:ce:34:52:3d:2d:a1:d8:8d:d9:80:73:ce:4a:32:33:cc: c2:5d:a6:61:df:db:11:5a:53:64:d9:26:ae:3d:ef:4b:21:ff: 25:00:00:e0:2a:dd:0a:af:98:42:53:6f:73:88:94:4e:48:c5: e4:95:ab:3f:d2:30:14:34:cb:80:39:84:f2:07:4b:a4:82:53: bc:95:e3:40:a8:ad:72:02:5d:3c:06:0b:66:ad:9c:42:44:3f: 0b:25:e5:b8:2c:ab:3e:0c:1b:f1:51:01:fb:4e:92:c6:c8:f0: 17:a4:4f:9e:ff:86:04:ed:b8:84:09:23:ec:1d:59:e0:d3:17: 69:a3:9f:27:c2:45:7d:32:8c:95:d6:14:ca:72:ec:0c:ee:fd: 71:5a:e7:b6:c4:0e:da:4d:77:27:19:a4:79:b0:59:48:53:ee: d1:9c:e4:69:a1:55:f9:10:75:8b:f2:8b:08:26:00:a7:d9:ea: dd:cf:53:b8:87:55:8f:92:89:1c:9c:a0:f2:a6:b5:58:d5:69: 39:fe:9c:a5:7d:1d:1a:f9:2d:df:44:b9:ae:25:12:be:89:f4: a7:ec:9b:cc:39:6b:26:c8:7b:0d:1d:05:ca:6f:7c:ae:ae:77: 32:14:dd:ce -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrf7lAurbS5eXeGugSuLeOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjAyMTYzODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTNiZGYxMzIyMDc3MDExZGYzMWY1MWI2NTM5Y2Q0NjI1N2ZiNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh9Pk5SBk1g9DXxrTwqkZ1g4D5zz wXDPWAap1nNy9Z/I+yhVidSeJ+K9wfvUDVILjhEoBMg+cPgCRZckCZKGSpIiJ0H6 2nralHFUu8zu/DrgVgEIAmLYFzOyxNZXuICrVPDT8cLNbZ+WcPAH4GcJ/XcHMB3/ 7L3NcHCIT+feFA7RDW5RHG5Z2iARwP6e9C3lVDZeZ6uKm1Dgkd4UAOP2EzluowrE ahLOHPCfA3tVz4+zvoEiash6z2hJLbnfy2Br03kw+PsBYgzpdaEojRLqoFU4jWdr D3MINgOCHL/vOMlKervACLpCHG0QuMAasUOi22x3QhfgREAn4EQSPefB7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEk73xMiB3AR3zH1G2U5zUYlf7WWMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvU1R2ZkV5SUhjQkhmTWZVYlpUbk5SaVZfdFpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1IY8AwQC 1IbwMA0GCSqGSIb3DQEBCwUAA4IBAQA44hToOFnyCflQFlOXg/eXP9MCKM40Uj0t odiN2YBzzkoyM8zCXaZh39sRWlNk2SauPe9LIf8lAADgKt0Kr5hCU29ziJROSMXk las/0jAUNMuAOYTyB0ukglO8leNAqK1yAl08BgtmrZxCRD8LJeW4LKs+DBvxUQH7 TpLGyPAXpE+e/4YE7biECSPsHVng0xdpo58nwkV9MoyV1hTKcuwM7v1xWue2xA7a TXcnGaR5sFlIU+7RnORpoVX5EHWL8osIJgCn2erdz1O4h1WPkokcnKDyprVY1Wk5 /pylfR0a+S3fRLmuJRK+ifSn7JvMOWsmyHsNHQXKb3yurncyFN3O -----END CERTIFICATE-----Generated at Thu Dec 4 19:56:36 2025 by rpki-client