This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T3Kw0OwH9v9f8kHT-9lFZPjyx5M.roa File: T3Kw0OwH9v9f8kHT-9lFZPjyx5M.roa (raw, json) Hash identifier: 7i1ib0owx2xcfXZaJJgE6QSx2Uu5v3Zhg/Rx64rFcpU= Subject key identifier: 4F:72:B0:D0:EC:07:F6:FF:5F:F2:41:D3:FB:D9:45:64:F8:F2:C7:93 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AFD66E48DA11F771C618E7989A67BF378 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T3Kw0OwH9v9f8kHT-9lFZPjyx5M.roa Signing time: Mon 08 Dec 2025 09:59:30 +0000 ROA not before: Mon 08 Dec 2025 09:59:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35545 IP address blocks: 212.134.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:66:e4:8d:a1:1f:77:1c:61:8e:79:89:a6:7b:f3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 8 09:59:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4f72b0d0ec07f6ff5ff241d3fbd94564f8f2c793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:08:90:5a:da:70:dd:8e:2f:4a:b6:82:04:0e: 2a:9b:5e:08:7a:26:45:0e:41:ef:b1:35:64:b3:bd: 5a:42:c5:c4:a1:63:a8:34:bc:97:89:a3:99:4e:ef: 6d:01:6d:c4:27:63:2d:63:28:16:2d:82:28:fa:d0: 95:10:fb:3c:0e:2b:62:3c:8c:8a:f2:c2:cf:2d:7c: 18:b0:79:f0:b4:8f:b7:dd:9d:be:ad:7e:0f:26:9f: b4:6a:b3:87:79:0e:a9:1f:9a:b8:aa:69:4e:6b:fa: 1a:f3:2c:a6:5b:5f:09:f1:54:22:39:a0:1c:0c:68: d9:3f:6e:8c:bc:48:48:04:21:01:3c:e3:70:33:88: 65:06:af:5f:df:81:9b:84:1a:66:f3:c3:20:0e:81: af:28:af:1a:e4:f1:81:e6:e1:f5:cf:8a:eb:85:4d: 2c:da:da:d2:01:25:87:9f:7b:bb:98:bd:82:c3:dc: 2d:43:a1:f5:1f:3d:fd:ce:a7:bc:12:0b:fe:4e:c3: 69:27:fb:19:dc:f8:78:08:5a:f0:64:e9:7d:e2:6c: e0:9b:b7:e9:1d:36:18:ec:02:1a:42:b5:92:de:17: 16:5a:74:ee:0d:5a:93:14:63:a5:75:94:8b:a8:8f: 72:23:10:66:55:d6:29:4c:78:46:fb:ee:bc:22:ef: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:72:B0:D0:EC:07:F6:FF:5F:F2:41:D3:FB:D9:45:64:F8:F2:C7:93 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T3Kw0OwH9v9f8kHT-9lFZPjyx5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.128.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:2b:00:1f:25:6d:25:a8:f0:3f:1f:37:d0:41:71:b4:4f:3e: 34:35:16:ce:5c:4a:05:89:7c:af:d4:9c:10:c1:33:be:1a:3b: e1:9b:1d:50:a0:df:8b:84:c2:03:c4:74:8f:30:ce:7b:ac:88: fa:06:e6:32:17:0c:5d:42:17:76:9b:1d:4f:ff:38:6f:91:9c: bb:d1:6c:6f:f6:dc:00:6f:b4:00:91:14:ba:ad:37:44:60:f5: 4e:81:54:34:47:b7:04:64:b0:26:00:3b:8b:80:92:b2:9b:06: 9e:5e:22:c6:c7:43:73:0a:d7:f1:22:2c:0e:52:a4:25:43:8a: 58:97:4b:40:92:15:2a:04:2b:97:04:19:e9:77:94:26:90:4d: 83:fa:d2:9e:be:68:7c:1f:db:e8:b5:71:ed:6b:dc:2f:77:13: a2:5d:53:cd:99:d7:20:b3:c0:51:0c:53:2d:9c:08:2d:36:38: 05:85:44:30:7e:f2:5e:d3:a9:fe:43:74:0c:e9:de:a0:65:48: f1:df:07:4a:02:57:ce:71:12:f6:16:9c:e6:a9:17:68:d3:4a: b2:30:97:5e:06:31:7f:7b:48:96:5f:00:89:f9:bd:4a:24:62: fd:5a:81:93:4a:ec:0e:15:d5:70:0e:c8:94:e1:93:43:6d:2e: c9:8a:bf:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr9ZuSNoR93HGGOeYmme/N4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjA4MDk1OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjcyYjBkMGVjMDdmNmZmNWZmMjQxZDNmYmQ5NDU2NGY4ZjJjNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAiQWtpw3Y4vSraCBA4qm14IeiZF DkHvsTVks71aQsXEoWOoNLyXiaOZTu9tAW3EJ2MtYygWLYIo+tCVEPs8DitiPIyK 8sLPLXwYsHnwtI+33Z2+rX4PJp+0arOHeQ6pH5q4qmlOa/oa8yymW18J8VQiOaAc DGjZP26MvEhIBCEBPONwM4hlBq9f34GbhBpm88MgDoGvKK8a5PGB5uH1z4rrhU0s 2trSASWHn3u7mL2Cw9wtQ6H1Hz39zqe8Egv+TsNpJ/sZ3Ph4CFrwZOl94mzgm7fp HTYY7AIaQrWS3hcWWnTuDVqTFGOldZSLqI9yIxBmVdYpTHhG++68Iu+EEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9ysNDsB/b/X/JB0/vZRWT48seTMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvVDNLdzBPd0g5djlmOGtIVC05bEZaUGp5eDVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IaAMA0G CSqGSIb3DQEBCwUAA4IBAQBPKwAfJW0lqPA/HzfQQXG0Tz40NRbOXEoFiXyv1JwQ wTO+Gjvhmx1QoN+LhMIDxHSPMM57rIj6BuYyFwxdQhd2mx1P/zhvkZy70Wxv9twA b7QAkRS6rTdEYPVOgVQ0R7cEZLAmADuLgJKymwaeXiLGx0NzCtfxIiwOUqQlQ4pY l0tAkhUqBCuXBBnpd5QmkE2D+tKevmh8H9votXHta9wvdxOiXVPNmdcgs8BRDFMt nAgtNjgFhUQwfvJe06n+Q3QM6d6gZUjx3wdKAlfOcRL2FpzmqRdo00qyMJdeBjF/ e0iWXwCJ+b1KJGL9WoGTSuwOFdVwDsiU4ZNDbS7Jir8I -----END CERTIFICATE-----Generated at Fri Dec 12 00:34:52 2025 by rpki-client