This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/acIScyG85gIZQ7eNsDNYsPrc0G0.roa File: acIScyG85gIZQ7eNsDNYsPrc0G0.roa (raw, json) Hash identifier: QDlutDIwm6M1L5R4MGda95rXOsnFx5y124/WuUWj/lA= Subject key identifier: 69:C2:12:73:21:BC:E6:02:19:43:B7:8D:B0:33:58:B0:FA:DC:D0:6D Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019C206A1BD0A67B6EAEA9580862370B19C0 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/acIScyG85gIZQ7eNsDNYsPrc0G0.roa Signing time: Mon 02 Feb 2026 22:12:30 +0000 ROA not before: Mon 02 Feb 2026 22:12:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203109 IP address blocks: 212.134.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:20:6a:1b:d0:a6:7b:6e:ae:a9:58:08:62:37:0b:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Feb 2 22:12:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69c2127321bce6021943b78db03358b0fadcd06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:27:09:78:b3:de:61:46:3f:0b:80:ee:18:8d: ce:3d:c4:95:0e:70:cc:11:3f:48:63:f9:85:e1:3d: 60:f5:9f:7f:8e:d4:38:1e:bb:ff:01:92:05:cf:82: 5d:c2:7f:eb:0b:50:17:cf:a1:0f:95:66:b8:fc:46: 1c:3f:91:37:38:d4:2b:57:81:de:a8:4e:e8:ee:7e: bb:a8:58:d3:23:61:cb:38:66:96:e9:f9:bd:43:98: 4e:cc:8b:11:bd:17:58:6b:dd:0d:9a:b1:e9:48:5c: 9c:f8:7a:5a:0c:ab:aa:09:b8:24:c3:5c:33:3f:eb: a5:90:5a:0c:22:3c:f8:f0:b8:97:39:f4:50:2b:78: 38:49:13:2f:fe:bd:ba:ef:54:9a:90:f7:a3:1c:cc: 78:6c:37:37:8e:59:d0:4e:47:1c:ad:8f:34:50:a1: da:5d:74:c8:d2:8b:ba:32:f9:bf:41:41:5d:a5:6f: 6c:23:b2:0e:0e:64:51:e7:37:e9:d5:b6:0d:fb:0e: 15:20:a9:8e:04:be:10:bd:88:bc:bb:a4:7c:a9:c2: d9:6c:48:6b:da:b8:ab:54:02:86:02:f6:a8:2f:c0: 95:3b:53:69:1f:34:25:1d:22:50:91:e6:88:1a:61: be:16:bc:9f:ee:58:96:91:b2:d2:bb:6a:6d:37:9a: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C2:12:73:21:BC:E6:02:19:43:B7:8D:B0:33:58:B0:FA:DC:D0:6D X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/acIScyG85gIZQ7eNsDNYsPrc0G0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.21.0/24 Signature Algorithm: sha256WithRSAEncryption 75:db:85:05:e3:d7:af:0c:14:87:cc:64:b5:fa:a9:26:b6:28: ce:81:0f:cc:3b:44:12:70:e3:ef:c3:a8:a3:06:e4:cd:16:94: a9:2f:3c:d1:af:f6:83:55:1e:b9:ab:23:11:06:0b:0c:ff:f9: 60:0b:de:c2:73:03:5a:bf:5d:4a:95:82:10:81:d4:21:e8:74: 36:2c:28:d1:05:0d:1f:07:79:e2:e3:ed:db:e3:5f:5a:35:49: d8:14:5a:95:4b:68:43:88:4c:78:5f:92:af:d9:f4:6c:3d:fb: 88:0f:a8:ce:ad:94:41:eb:b2:8a:bc:62:de:94:9d:d1:42:e0: 51:98:1d:7b:05:ff:6c:5d:58:c6:3f:42:5f:60:e0:46:e0:40: 6f:0d:6c:ca:f1:0f:0f:dc:4a:6e:ae:14:4e:56:c5:f4:31:31: 32:f1:bc:ad:3c:c5:14:5f:e4:e2:3f:79:75:8b:ee:ba:1e:1e: 0f:e2:46:a5:5d:50:87:cd:2a:0a:55:a8:e2:1c:df:1a:87:65: 2e:be:26:87:b7:c4:75:c5:d3:05:2d:09:c1:8b:d2:9d:11:1e: 0c:3c:3b:80:d5:3b:a6:8a:b2:41:8a:46:13:50:86:df:c0:31: 59:7a:04:7a:4b:e0:20:80:d6:3e:2c:2f:be:50:53:e4:f0:47: 2e:c9:73:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwgahvQpnturqlYCGI3CxnAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMjAyMjIxMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWMyMTI3MzIxYmNlNjAyMTk0M2I3OGRiMDMzNThiMGZhZGNkMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoScJeLPeYUY/C4DuGI3OPcSVDnDM ET9IY/mF4T1g9Z9/jtQ4Hrv/AZIFz4Jdwn/rC1AXz6EPlWa4/EYcP5E3ONQrV4He qE7o7n67qFjTI2HLOGaW6fm9Q5hOzIsRvRdYa90NmrHpSFyc+HpaDKuqCbgkw1wz P+ulkFoMIjz48LiXOfRQK3g4SRMv/r2671SakPejHMx4bDc3jlnQTkccrY80UKHa XXTI0ou6Mvm/QUFdpW9sI7IODmRR5zfp1bYN+w4VIKmOBL4QvYi8u6R8qcLZbEhr 2rirVAKGAvaoL8CVO1NpHzQlHSJQkeaIGmG+Fryf7liWkbLSu2ptN5pGMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGnCEnMhvOYCGUO3jbAzWLD63NBtMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvYWNJU2N5Rzg1Z0laUTdlTnNETllzUHJjMEcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IYVMA0G CSqGSIb3DQEBCwUAA4IBAQB124UF49evDBSHzGS1+qkmtijOgQ/MO0QScOPvw6ij BuTNFpSpLzzRr/aDVR65qyMRBgsM//lgC97CcwNav11KlYIQgdQh6HQ2LCjRBQ0f B3ni4+3b419aNUnYFFqVS2hDiEx4X5Kv2fRsPfuID6jOrZRB67KKvGLelJ3RQuBR mB17Bf9sXVjGP0JfYOBG4EBvDWzK8Q8P3EpurhROVsX0MTEy8bytPMUUX+TiP3l1 i+66Hh4P4kalXVCHzSoKVajiHN8ah2UuviaHt8R1xdMFLQnBi9KdER4MPDuA1Tum irJBikYTUIbfwDFZegR6S+AggNY+LC++UFPk8EcuyXP7 -----END CERTIFICATE-----Generated at Tue Feb 10 07:51:57 2026 by rpki-client