This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WnIaG4nXj3KsVMm4i2cLybvjOKE.roa File: WnIaG4nXj3KsVMm4i2cLybvjOKE.roa (raw, json) Hash identifier: OdVQq+VduNI0hfS6IrklMiRQ1L1cN4hbDm5QnElpQrs= Subject key identifier: 5A:72:1A:1B:89:D7:8F:72:AC:54:C9:B8:8B:67:0B:C9:BB:E3:38:A1 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019A6E0DECBF667A31A314769010376BE3DF Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WnIaG4nXj3KsVMm4i2cLybvjOKE.roa Signing time: Mon 10 Nov 2025 13:56:37 +0000 ROA not before: Mon 10 Nov 2025 13:56:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39855 IP address blocks: 212.134.212.0/24 maxlen: 24 212.134.213.0/24 maxlen: 24 212.134.214.0/24 maxlen: 24 212.134.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:0d:ec:bf:66:7a:31:a3:14:76:90:10:37:6b:e3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 10 13:56:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5a721a1b89d78f72ac54c9b88b670bc9bbe338a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:fd:70:2c:3b:26:ec:e6:43:10:cb:6b:ea: c1:4b:40:7c:a8:8b:a6:fa:f5:32:ba:cc:c2:0f:c4: 28:06:bd:52:50:c6:12:33:3c:3d:dc:e0:da:5c:9e: 34:2f:6d:33:58:4e:3d:c2:63:43:56:51:0c:b3:25: a9:91:71:2d:cf:bd:c0:87:e3:f2:b7:25:56:eb:9d: cd:04:5d:74:27:5d:76:bd:65:31:31:db:fb:3f:ba: 82:2d:65:66:35:78:ea:df:00:72:92:49:25:e9:f2: 0c:ad:49:d8:8d:2f:a6:02:44:11:d0:b4:24:42:7c: ae:2f:9d:4e:1d:a4:66:69:8a:db:d0:d5:7d:e2:60: 38:fc:96:62:ac:29:e0:8d:3e:02:12:a6:fe:e3:f5: 04:67:26:bc:bf:1f:2b:6c:c8:57:34:bc:ab:45:37: e9:90:89:22:48:7a:b6:25:4b:e3:9f:c8:c1:44:41: 3d:75:72:23:3a:c1:b1:b9:0e:76:d2:05:2e:39:7e: a3:93:c2:c2:80:3a:0b:02:60:c7:38:e0:83:07:b1: 96:55:e3:ee:86:74:ed:d3:e2:b5:e8:df:f5:b9:2f: 92:c5:53:67:8d:9d:79:53:e3:8e:68:35:8d:07:38: fa:95:a7:be:82:9f:15:cc:dc:7c:ef:81:e0:91:9a: 4d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:72:1A:1B:89:D7:8F:72:AC:54:C9:B8:8B:67:0B:C9:BB:E3:38:A1 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/WnIaG4nXj3KsVMm4i2cLybvjOKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.212.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:83:16:c0:21:ce:4c:c3:80:b6:d1:8f:44:bb:ff:65:fa:16: 81:30:4d:e8:ec:3d:28:cb:78:2f:9b:4c:2c:30:6f:19:76:da: 25:81:28:b6:96:26:a4:c7:fc:b2:61:d0:a2:dc:c9:1c:76:bb: e8:0d:9f:dd:88:dd:f7:67:63:12:e3:4b:9b:e6:05:65:42:60: 2d:91:0c:4a:41:3e:19:66:36:fc:86:91:44:d4:f6:80:9e:e9: 67:82:d6:8c:dc:75:7c:81:79:db:75:85:99:c2:2f:94:44:1a: cf:03:8b:a1:bb:76:4a:63:8e:d7:a6:a4:0f:bc:c1:9e:f7:86: 96:8d:8c:ed:57:04:c9:0f:72:b3:de:40:ac:1f:d7:ad:ce:1b: 42:f2:0b:a3:1e:8b:07:63:f0:c5:76:b9:36:70:aa:a6:82:75: 1c:66:4c:64:af:c0:84:c5:4b:16:d6:57:ea:f3:c9:82:55:53: 75:09:af:cb:c6:d3:a5:66:39:b0:44:e6:ef:a1:67:d5:7f:f2: f6:7c:61:5d:e2:09:a9:fc:0e:f7:7b:ce:67:c6:e6:4f:09:79: ae:80:36:cb:71:fc:4f:52:f4:0a:6d:04:10:ca:26:29:93:65: 82:84:10:3b:79:78:d5:07:81:d7:52:5a:6e:b6:36:f7:35:0d: 83:c1:87:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpuDey/ZnoxoxR2kBA3a+PfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTEwMTM1NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTcyMWExYjg5ZDc4ZjcyYWM1NGM5Yjg4YjY3MGJjOWJiZTMzOGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufX9cCw7JuzmQxDLa+rBS0B8qIum +vUyuszCD8QoBr1SUMYSMzw93ODaXJ40L20zWE49wmNDVlEMsyWpkXEtz73Ah+Py tyVW653NBF10J112vWUxMdv7P7qCLWVmNXjq3wBykkkl6fIMrUnYjS+mAkQR0LQk QnyuL51OHaRmaYrb0NV94mA4/JZirCngjT4CEqb+4/UEZya8vx8rbMhXNLyrRTfp kIkiSHq2JUvjn8jBREE9dXIjOsGxuQ520gUuOX6jk8LCgDoLAmDHOOCDB7GWVePu hnTt0+K16N/1uS+SxVNnjZ15U+OOaDWNBzj6lae+gp8VzNx874HgkZpNDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFpyGhuJ149yrFTJuItnC8m74zihMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvV25JYUc0blhqM0tzVk1tNGkyY0x5YnZqT0tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1IbUMA0G CSqGSIb3DQEBCwUAA4IBAQAqgxbAIc5Mw4C20Y9Eu/9l+haBME3o7D0oy3gvm0ws MG8ZdtolgSi2liakx/yyYdCi3MkcdrvoDZ/diN33Z2MS40ub5gVlQmAtkQxKQT4Z Zjb8hpFE1PaAnulngtaM3HV8gXnbdYWZwi+URBrPA4uhu3ZKY47XpqQPvMGe94aW jYztVwTJD3Kz3kCsH9etzhtC8gujHosHY/DFdrk2cKqmgnUcZkxkr8CExUsW1lfq 88mCVVN1Ca/LxtOlZjmwRObvoWfVf/L2fGFd4gmp/A73e85nxuZPCXmugDbLcfxP UvQKbQQQyiYpk2WChBA7eXjVB4HXUlputjb3NQ2DwYfF -----END CERTIFICATE-----Generated at Thu Dec 4 19:55:07 2025 by rpki-client