This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_B5GdBAgM3ew4_wxP-DaSve6nrg.roa File: _B5GdBAgM3ew4_wxP-DaSve6nrg.roa (raw, json) Hash identifier: Vn8m7m6xzHfAPxkkJmUWpcu87KPeSLcGMOAgKrPFIuw= Subject key identifier: FC:1E:46:74:10:20:33:77:B0:E3:FC:31:3F:E0:DA:4A:F7:BA:9E:B8 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A242BA1156F99ED18DD7F2E832E2AB Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_B5GdBAgM3ew4_wxP-DaSve6nrg.roa Signing time: Thu 01 Jan 2026 08:17:38 +0000 ROA not before: Thu 01 Jan 2026 08:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 212.134.90.0/24 maxlen: 24 212.134.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:42:ba:11:56:f9:9e:d1:8d:d7:f2:e8:32:e2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc1e467410203377b0e3fc313fe0da4af7ba9eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:8a:b1:29:29:2a:61:bc:71:89:c8:07:8b: 7a:3b:ec:04:2a:3c:bb:97:e8:b9:9d:ce:8c:12:49: db:44:76:a8:45:cb:aa:d6:65:1e:bb:d5:5d:4c:7e: f3:fa:02:c1:99:e3:b4:53:91:1a:94:11:17:0e:39: 8f:c0:f7:b0:17:c4:f5:a0:73:7a:b8:a5:16:ed:4c: 3b:8c:1c:ae:bf:2f:53:31:8f:8e:5b:87:3b:96:c0: 79:a1:d4:2d:2e:34:ef:74:41:af:79:4c:9c:22:2b: b3:55:77:97:32:68:63:9b:0f:44:84:72:d7:ca:7d: 3a:77:19:66:20:4e:56:32:46:78:9a:14:81:77:4b: 32:f3:45:32:10:06:f1:50:e3:39:02:72:38:21:49: 08:21:1c:09:7e:36:90:8e:e9:bc:38:ce:01:f4:d0: dd:67:93:c4:05:83:82:2d:4e:e7:f2:e7:a3:35:11: a7:82:64:b8:3e:8d:8e:a9:ea:97:92:38:59:de:93: da:6f:ce:ce:71:96:12:0b:03:56:5f:d7:cd:6d:72: 9b:19:5e:d6:88:43:08:84:e6:50:9b:62:eb:2c:a7: b0:ce:00:f6:27:d3:4b:96:1f:9d:bd:ee:10:77:13: a7:90:b3:ce:73:5d:af:0f:23:57:3d:b3:e2:a0:6d: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1E:46:74:10:20:33:77:B0:E3:FC:31:3F:E0:DA:4A:F7:BA:9E:B8 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_B5GdBAgM3ew4_wxP-DaSve6nrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.90.0/24 212.134.97.0/24 Signature Algorithm: sha256WithRSAEncryption be:45:9a:2c:78:fc:1f:0e:da:38:39:2a:85:bc:95:55:76:f2: 06:76:c3:da:29:74:82:3f:37:9c:17:1c:fd:ae:37:a7:40:02: 94:01:a0:fa:7a:72:0e:90:65:af:46:0b:4d:78:ab:14:17:ed: f5:50:4d:23:d6:e7:3b:f5:27:a4:95:55:04:b3:7f:76:01:b9: f3:cd:cd:0f:71:79:d9:df:c6:12:21:7d:1e:55:0e:09:39:1d: ef:0c:a0:61:9a:ad:91:f0:17:cc:84:e5:2e:f3:59:b8:21:c7: 8e:85:76:62:d8:14:09:ca:7d:72:3a:ad:2c:fe:74:10:bd:ae: e3:3d:29:15:95:09:fb:e2:aa:4a:e4:7d:75:27:44:e5:dc:25: e3:f7:dc:82:0a:91:f6:2b:60:d6:7c:ef:7d:b1:89:b4:a3:3e: 2e:2b:f4:e2:e1:16:49:d6:85:ee:49:97:df:bc:cb:52:f5:8e: 10:bd:c6:c7:0e:28:c7:60:32:3d:e0:25:4c:d1:e8:22:c3:e3: f4:0e:dc:99:c1:da:29:4d:50:f5:1e:a2:23:6a:bc:57:0b:6b: bb:7a:29:dc:0e:9f:ec:05:82:d5:64:33:40:ce:bc:b8:f0:c1: 50:3e:c4:42:95:da:da:13:d5:ff:c1:6d:5e:77:d2:cc:d5:2b: d2:fc:30:bc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4okK6EVb5ntGN1/LoMuKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzFlNDY3NDEwMjAzMzc3YjBlM2ZjMzEzZmUwZGE0YWY3YmE5ZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVOKsSkpKmG8cYnIB4t6O+wEKjy7 l+i5nc6MEknbRHaoRcuq1mUeu9VdTH7z+gLBmeO0U5EalBEXDjmPwPewF8T1oHN6 uKUW7Uw7jByuvy9TMY+OW4c7lsB5odQtLjTvdEGveUycIiuzVXeXMmhjmw9EhHLX yn06dxlmIE5WMkZ4mhSBd0sy80UyEAbxUOM5AnI4IUkIIRwJfjaQjum8OM4B9NDd Z5PEBYOCLU7n8uejNRGngmS4Po2OqeqXkjhZ3pPab87OcZYSCwNWX9fNbXKbGV7W iEMIhOZQm2LrLKewzgD2J9NLlh+dve4QdxOnkLPOc12vDyNXPbPioG2mzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPweRnQQIDN3sOP8MT/g2kr3up64MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvX0I1R2RCQWdNM2V3NF93eFAtRGFTdmU2bnJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1IZaAwQA 1IZhMA0GCSqGSIb3DQEBCwUAA4IBAQC+RZosePwfDto4OSqFvJVVdvIGdsPaKXSC PzecFxz9rjenQAKUAaD6enIOkGWvRgtNeKsUF+31UE0j1uc79SeklVUEs392Abnz zc0PcXnZ38YSIX0eVQ4JOR3vDKBhmq2R8BfMhOUu81m4IceOhXZi2BQJyn1yOq0s /nQQva7jPSkVlQn74qpK5H11J0Tl3CXj99yCCpH2K2DWfO99sYm0oz4uK/Ti4RZJ 1oXuSZffvMtS9Y4QvcbHDijHYDI94CVM0egiw+P0DtyZwdopTVD1HqIjarxXC2u7 eincDp/sBYLVZDNAzry48MFQPsRCldraE9X/wW1ed9LM1SvS/DC8 -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:50 2026 by rpki-client