This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_6nfQKpZJLCfypTOlE6sWmXdL4M.roa File: _6nfQKpZJLCfypTOlE6sWmXdL4M.roa (raw, json) Hash identifier: lPVnX/t+q0w4yNKZGX+/Iw5ACHuWUzsbrXwx09vyA+E= Subject key identifier: FF:A9:DF:40:AA:59:24:B0:9F:CA:94:CE:94:4E:AC:5A:65:DD:2F:83 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019BD04E1F7D045AF3686957DBE6C7C51945 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_6nfQKpZJLCfypTOlE6sWmXdL4M.roa Signing time: Sun 18 Jan 2026 08:52:19 +0000 ROA not before: Sun 18 Jan 2026 08:52:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 212.134.18.0/24 maxlen: 24 212.134.19.0/24 maxlen: 24 212.134.21.0/24 maxlen: 24 212.134.22.0/24 maxlen: 24 212.134.23.0/24 maxlen: 24 212.134.24.0/24 maxlen: 24 212.134.25.0/24 maxlen: 24 212.134.36.0/24 maxlen: 24 212.134.39.0/24 maxlen: 24 212.134.40.0/22 maxlen: 24 212.134.47.0/24 maxlen: 24 212.134.48.0/22 maxlen: 24 212.134.56.0/23 maxlen: 24 212.134.58.0/24 maxlen: 24 212.134.80.0/24 maxlen: 24 212.134.81.0/24 maxlen: 24 212.134.82.0/24 maxlen: 24 212.134.83.0/24 maxlen: 24 212.134.88.0/24 maxlen: 24 212.134.89.0/24 maxlen: 24 212.134.95.0/24 maxlen: 24 212.134.98.0/23 maxlen: 24 212.134.104.0/23 maxlen: 24 212.134.106.0/23 maxlen: 24 212.134.109.0/24 maxlen: 24 212.134.110.0/23 maxlen: 24 212.134.128.0/24 maxlen: 24 212.134.131.0/24 maxlen: 24 212.134.140.0/22 maxlen: 24 212.134.148.0/24 maxlen: 24 212.134.156.0/24 maxlen: 24 212.134.171.0/24 maxlen: 24 212.134.175.0/24 maxlen: 24 212.134.179.0/24 maxlen: 24 212.134.196.0/22 maxlen: 24 212.134.199.0/24 maxlen: 24 212.134.212.0/22 maxlen: 24 212.134.216.0/22 maxlen: 24 212.134.228.0/22 maxlen: 24 212.134.232.0/22 maxlen: 24 212.134.232.0/24 maxlen: 24 212.134.248.0/24 maxlen: 24 212.135.20.0/24 maxlen: 24 212.135.21.0/24 maxlen: 24 212.135.22.0/23 maxlen: 24 212.135.24.0/23 maxlen: 24 212.135.28.0/23 maxlen: 24 212.135.128.0/23 maxlen: 24 212.135.135.0/24 maxlen: 24 212.135.158.0/24 maxlen: 24 212.135.161.0/24 maxlen: 24 212.135.162.0/24 maxlen: 24 212.135.164.0/24 maxlen: 24 212.135.165.0/24 maxlen: 24 212.135.166.0/24 maxlen: 24 212.135.167.0/24 maxlen: 24 212.135.168.0/24 maxlen: 24 212.135.169.0/24 maxlen: 24 212.135.170.0/24 maxlen: 24 212.135.171.0/24 maxlen: 24 212.135.172.0/24 maxlen: 24 212.135.173.0/24 maxlen: 24 212.135.204.0/22 maxlen: 24 212.135.240.0/23 maxlen: 24 212.135.241.0/24 maxlen: 24 212.135.246.0/24 maxlen: 24 212.135.247.0/24 maxlen: 24 212.135.248.0/23 maxlen: 24 212.135.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:4e:1f:7d:04:5a:f3:68:69:57:db:e6:c7:c5:19:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 18 08:52:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffa9df40aa5924b09fca94ce944eac5a65dd2f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:9b:5e:dd:a9:7a:3d:ce:92:3b:0b:af:24: fa:3f:12:19:4b:90:3c:4d:db:45:c4:a0:6f:ac:de: a0:78:80:aa:49:61:cb:da:6a:f5:50:1d:2e:48:d0: 62:27:b0:3f:ce:27:a1:87:fd:11:b9:56:94:48:d3: c3:24:8e:f2:97:e3:88:22:3a:1b:ea:6b:e7:01:19: c2:c5:d0:8a:31:08:5b:35:49:f7:0d:33:bd:32:21: f6:d9:0b:b3:6d:b7:72:34:fd:6e:ea:74:d2:f8:db: 78:3e:5c:fd:69:2c:fc:d5:3b:e0:21:da:a2:49:d5: c7:5f:56:d6:a2:2d:ac:60:06:01:76:08:9b:01:08: be:f3:2d:15:a0:34:c2:5e:44:26:81:d7:a1:b2:34: 16:9f:b4:a3:7c:1e:20:4c:ef:da:5b:b4:b5:a7:86: 54:2c:db:3d:c9:07:62:71:fc:44:13:5e:03:7b:e6: bf:98:b5:6f:f6:c3:e3:24:bf:10:6d:49:ff:02:7b: 27:d1:f0:c5:8f:fc:10:3a:cc:fc:d1:f7:8e:79:43: 76:46:99:cf:52:45:cc:2f:36:0a:7f:ae:8f:c6:dc: ff:51:98:21:5d:0e:16:56:cd:61:85:3b:1c:3a:93: 8e:27:61:ee:3a:69:7b:7b:ae:0a:62:33:ae:b5:40: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A9:DF:40:AA:59:24:B0:9F:CA:94:CE:94:4E:AC:5A:65:DD:2F:83 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_6nfQKpZJLCfypTOlE6sWmXdL4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.18.0/23 212.134.21.0-212.134.25.255 212.134.36.0/24 212.134.39.0-212.134.43.255 212.134.47.0-212.134.51.255 212.134.56.0-212.134.58.255 212.134.80.0/22 212.134.88.0/23 212.134.95.0/24 212.134.98.0/23 212.134.104.0/22 212.134.109.0-212.134.111.255 212.134.128.0/24 212.134.131.0/24 212.134.140.0/22 212.134.148.0/24 212.134.156.0/24 212.134.171.0/24 212.134.175.0/24 212.134.179.0/24 212.134.196.0/22 212.134.212.0-212.134.219.255 212.134.228.0-212.134.235.255 212.134.248.0/24 212.135.20.0-212.135.25.255 212.135.28.0/23 212.135.128.0/23 212.135.135.0/24 212.135.158.0/24 212.135.161.0-212.135.162.255 212.135.164.0-212.135.173.255 212.135.204.0/22 212.135.240.0/23 212.135.246.0-212.135.249.255 212.135.252.0/23 Signature Algorithm: sha256WithRSAEncryption c1:c7:9c:8c:b3:ff:1d:24:d0:68:96:fc:8c:1b:8a:e8:1d:5b: e8:27:f7:5d:00:1f:c6:7d:5a:8f:02:27:89:34:70:7a:e8:cb: f5:dc:16:65:e0:31:ce:bc:73:a3:14:cd:fc:b4:88:d2:19:2c: a8:ab:c7:00:05:dd:fb:68:18:41:52:33:a8:27:41:f5:9b:af: 3e:d7:2a:7a:d4:57:13:eb:27:e3:78:9b:c9:2a:7d:a8:a4:df: b3:c9:f4:bf:63:29:11:3b:a2:ce:17:5f:ed:ce:a6:e5:2c:b8: 32:11:21:6f:ed:b8:94:57:c6:0e:be:c9:f3:ff:32:7b:6c:52: ac:a9:77:c5:ba:f2:a0:f5:97:0d:4b:6e:cd:01:0b:40:a0:d7: 9f:eb:75:9b:ce:78:fc:14:ae:75:f3:44:08:48:d7:46:e3:33: 0a:a9:f9:83:18:2a:ff:6d:e3:ee:de:91:2e:8c:42:2b:1e:6a: 4e:50:2e:d9:89:58:29:af:0e:e0:2c:05:de:3d:18:1b:00:cb: c8:f4:68:e4:ad:cc:0e:a8:e6:b3:56:88:0d:21:52:d6:83:26: 87:32:78:d1:ea:ea:5e:bf:5d:d5:da:b6:82:30:77:c9:6a:8d: 22:d3:8b:bc:a2:da:13:45:73:54:1b:66:85:af:22:a5:ae:09: 5c:2c:cc:4d -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgISAZvQTh99BFrzaGlX2+bHxRlFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTE4MDg1MjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmE5ZGY0MGFhNTkyNGIwOWZjYTk0Y2U5NDRlYWM1YTY1ZGQyZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvObXt2pej3OkjsLryT6PxIZS5A8 TdtFxKBvrN6geICqSWHL2mr1UB0uSNBiJ7A/ziehh/0RuVaUSNPDJI7yl+OIIjob 6mvnARnCxdCKMQhbNUn3DTO9MiH22QuzbbdyNP1u6nTS+Nt4Plz9aSz81TvgIdqi SdXHX1bWoi2sYAYBdgibAQi+8y0VoDTCXkQmgdehsjQWn7SjfB4gTO/aW7S1p4ZU LNs9yQdicfxEE14De+a/mLVv9sPjJL8QbUn/Ansn0fDFj/wQOsz80feOeUN2RpnP UkXMLzYKf66Pxtz/UZghXQ4WVs1hhTscOpOOJ2HuOml7e64KYjOutUCKOwIDAQAB o4IDNzCCAzMwHQYDVR0OBBYEFP+p30CqWSSwn8qUzpROrFpl3S+DMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvXzZuZlFLcFpKTENmeXBUT2xFNnNXbVhkTDRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBSwYIKwYBBQUHAQcBAf8EggE6MIIBNjCCATIEAgABMIIB KgMEAdSGEjAMAwQA1IYVAwQB1IYYAwQA1IYkMAwDBADUhicDBALUhigwDAMEANSG LwMEAtSGMDAMAwQD1IY4AwQA1IY6AwQC1IZQAwQB1IZYAwQA1IZfAwQB1IZiAwQC 1IZoMAwDBADUhm0DBATUhmADBADUhoADBADUhoMDBALUhowDBADUhpQDBADUhpwD BADUhqsDBADUhq8DBADUhrMDBALUhsQwDAMEAtSG1AMEAtSG2DAMAwQC1IbkAwQC 1IboAwQA1Ib4MAwDBALUhxQDBAHUhxgDBAHUhxwDBAHUh4ADBADUh4cDBADUh54w DAMEANSHoQMEANSHojAMAwQC1IekAwQB1IesAwQC1IfMAwQB1IfwMAwDBAHUh/YD BAHUh/gDBAHUh/wwDQYJKoZIhvcNAQELBQADggEBAMHHnIyz/x0k0GiW/Iwbiugd W+gn910AH8Z9Wo8CJ4k0cHroy/XcFmXgMc68c6MUzfy0iNIZLKirxwAF3ftoGEFS M6gnQfWbrz7XKnrUVxPrJ+N4m8kqfaik37PJ9L9jKRE7os4XX+3OpuUsuDIRIW/t uJRXxg6+yfP/MntsUqypd8W68qD1lw1Lbs0BC0Cg15/rdZvOePwUrnXzRAhI10bj Mwqp+YMYKv9t4+7ekS6MQiseak5QLtmJWCmvDuAsBd49GBsAy8j0aOStzA6o5rNW iA0hUtaDJocyeNHq6l6/XdXatoIwd8lqjSLTi7yi2hNFc1QbZoWvIqWuCVwszE0= -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:51 2026 by rpki-client