This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/afeKLGpHC5vUm-_A66ttMXwCGJA.roa File: afeKLGpHC5vUm-_A66ttMXwCGJA.roa (raw, json) Hash identifier: PSpumxWC5fpoFEUeQ29yWaBHutTKd95KU+2j6zli8iA= Subject key identifier: 69:F7:8A:2C:6A:47:0B:9B:D4:9B:EF:C0:EB:AB:6D:31:7C:02:18:90 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A244DA4F26934625D8B418604AF91A Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/afeKLGpHC5vUm-_A66ttMXwCGJA.roa Signing time: Thu 01 Jan 2026 08:17:38 +0000 ROA not before: Thu 01 Jan 2026 08:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20326 IP address blocks: 212.134.132.0/22 maxlen: 22 212.134.180.0/22 maxlen: 22 212.134.184.0/22 maxlen: 22 212.134.188.0/22 maxlen: 24 212.134.192.0/22 maxlen: 22 212.134.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:44:da:4f:26:93:46:25:d8:b4:18:60:4a:f9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f78a2c6a470b9bd49befc0ebab6d317c021890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7a:9b:bb:77:c8:e1:11:23:c6:ea:ef:00:d8: 0d:a1:68:2d:d7:8b:bb:fb:6c:dd:0f:ac:29:53:42: 2e:8c:91:f6:12:1e:2c:99:7e:9c:be:46:39:3f:da: a2:c7:8a:71:d1:cb:af:57:cd:65:15:05:49:5a:f5: 9b:9c:ea:86:ef:ec:d5:27:71:45:62:19:fd:76:64: b0:52:bd:14:9f:0d:36:64:00:e7:84:95:10:fd:21: a8:d5:93:47:96:81:33:26:74:16:ba:9d:77:8e:f0: 87:df:96:2c:9c:7d:f0:1c:9f:72:2c:58:97:a4:0b: f1:ed:6e:cd:ed:37:17:85:2c:74:75:45:9f:96:1f: 5c:34:a0:5a:ef:68:5b:1f:a8:d8:6d:16:ba:6e:b4: cb:3e:ae:9c:69:cf:a3:4d:3d:d1:61:7c:1a:92:64: 9a:94:b1:df:8f:81:52:81:1c:9f:f8:ae:f3:a1:4f: 1f:b8:5e:3b:d2:c8:16:0f:54:b2:ed:e3:b6:d6:d4: a9:93:e5:80:37:57:76:f7:ad:9d:71:db:ad:ed:24: af:57:1e:72:27:fe:35:4e:ac:b0:1b:f2:35:8c:2c: 25:28:0a:03:e1:9a:f9:0f:76:1d:76:41:c6:9c:e6: 0c:aa:d4:51:1c:8d:09:05:c9:5e:0c:f9:bf:76:8d: 1e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F7:8A:2C:6A:47:0B:9B:D4:9B:EF:C0:EB:AB:6D:31:7C:02:18:90 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/afeKLGpHC5vUm-_A66ttMXwCGJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.132.0/22 212.134.180.0-212.134.195.255 212.134.200.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:0e:6d:5d:e9:68:e0:5d:23:50:3f:7f:b9:6c:74:bf:c8:e5: 6c:94:fa:84:1e:c9:97:40:44:2b:93:df:18:ea:d9:0d:29:b3: 34:21:a4:a0:4e:b2:67:56:11:55:f6:88:47:89:a2:25:7f:49: 09:9e:c7:45:c0:2b:0c:92:e2:a8:02:ae:b5:cc:ee:ec:bc:c6: 9c:b4:d6:d0:7f:ef:d1:79:ae:d9:51:40:90:92:53:f8:9d:c3: 74:72:63:a9:75:eb:b3:26:79:17:1f:94:ec:3c:97:0e:f8:29: 49:37:af:da:9d:9d:c8:90:37:26:eb:68:64:83:9a:3a:ce:f5: bc:40:41:ed:02:a0:75:62:f9:1f:88:4a:2a:81:62:ce:31:32: a4:e7:b0:2b:40:be:87:70:18:08:4e:1b:79:1d:b5:62:bd:35: 7a:50:cd:aa:29:06:eb:2a:92:0e:fe:13:5f:ee:67:db:41:10: f9:09:ee:db:f4:81:91:e9:5b:23:41:b8:c9:c2:ac:36:9a:61: 3b:48:e8:b2:16:88:85:85:19:dd:13:bb:91:c2:78:2e:d3:72: 98:3d:c3:3a:e5:8c:8e:df:2a:a7:9a:6a:5a:18:08:97:f4:bd: 99:6b:42:43:28:8f:08:ce:59:2c:d0:8e:43:33:3c:c7:30:6c: 33:ad:aa:1f -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4okTaTyaTRiXYtBhgSvkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWY3OGEyYzZhNDcwYjliZDQ5YmVmYzBlYmFiNmQzMTdjMDIxODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nqbu3fI4REjxurvANgNoWgt14u7 +2zdD6wpU0IujJH2Eh4smX6cvkY5P9qix4px0cuvV81lFQVJWvWbnOqG7+zVJ3FF Yhn9dmSwUr0Unw02ZADnhJUQ/SGo1ZNHloEzJnQWup13jvCH35YsnH3wHJ9yLFiX pAvx7W7N7TcXhSx0dUWflh9cNKBa72hbH6jYbRa6brTLPq6cac+jTT3RYXwakmSa lLHfj4FSgRyf+K7zoU8fuF470sgWD1Sy7eO21tSpk+WAN1d2962dcdut7SSvVx5y J/41TqywG/I1jCwlKAoD4Zr5D3YddkHGnOYMqtRRHI0JBcleDPm/do0ewQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFGn3iixqRwub1JvvwOurbTF8AhiQMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvYWZlS0xHcEhDNXZVbS1fQTY2dHRNWHdDR0pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQC1IaEMAwD BALUhrQDBALUhsADBALUhsgwDQYJKoZIhvcNAQELBQADggEBAF4ObV3paOBdI1A/ f7lsdL/I5WyU+oQeyZdARCuT3xjq2Q0pszQhpKBOsmdWEVX2iEeJoiV/SQmex0XA KwyS4qgCrrXM7uy8xpy01tB/79F5rtlRQJCSU/idw3RyY6l167MmeRcflOw8lw74 KUk3r9qdnciQNybraGSDmjrO9bxAQe0CoHVi+R+ISiqBYs4xMqTnsCtAvodwGAhO G3kdtWK9NXpQzaopBusqkg7+E1/uZ9tBEPkJ7tv0gZHpWyNBuMnCrDaaYTtI6LIW iIWFGd0Tu5HCeC7Tcpg9wzrljI7fKqeaaloYCJf0vZlrQkMojwjOWSzQjkMzPMcw bDOtqh8= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:30 2026 by rpki-client