This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dMuXt4KPQ0lfr8PEh1RNldFM6bw.roa File: dMuXt4KPQ0lfr8PEh1RNldFM6bw.roa (raw, json) Hash identifier: sPvceL2+k6V+1UQx63fm6QDyDcHT/5Sf8IHP56zt8sM= Subject key identifier: 74:CB:97:B7:82:8F:43:49:5F:AF:C3:C4:87:54:4D:95:D1:4C:E9:BC Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019A58B7E3CC8E9FE594285396EB1D3B2885 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dMuXt4KPQ0lfr8PEh1RNldFM6bw.roa Signing time: Thu 06 Nov 2025 10:30:37 +0000 ROA not before: Thu 06 Nov 2025 10:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397423 IP address blocks: 212.134.98.0/23 maxlen: 24 212.134.104.0/23 maxlen: 24 212.134.110.0/23 maxlen: 24 212.135.24.0/23 maxlen: 24 212.135.28.0/23 maxlen: 24 212.135.148.0/23 maxlen: 24 212.135.150.0/23 maxlen: 24 212.135.152.0/23 maxlen: 24 212.135.156.0/23 maxlen: 24 212.135.200.0/22 maxlen: 24 212.135.240.0/23 maxlen: 24 212.135.244.0/23 maxlen: 24 212.135.248.0/23 maxlen: 24 212.135.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:b7:e3:cc:8e:9f:e5:94:28:53:96:eb:1d:3b:28:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 6 10:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=74cb97b7828f43495fafc3c487544d95d14ce9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:52:4a:c4:34:1d:fd:af:20:2f:91:ce:08: b6:6d:c0:ae:85:67:87:da:d0:b5:b3:ab:1e:ae:a2: e5:78:f3:64:f4:4c:97:e4:10:c2:ba:07:0c:5e:87: d9:cd:28:9c:4e:07:ed:22:5e:54:ab:7d:48:c9:1b: 5a:3f:1c:ce:3f:05:49:db:6c:c5:41:9b:e7:eb:fa: b0:9e:c6:f7:1d:78:d5:f8:5f:f8:67:a5:7b:9d:03: f3:79:b5:35:7b:bf:c1:57:22:ea:27:00:74:9d:65: 11:e0:4f:ba:56:a0:d7:fc:71:42:bb:ce:3d:9a:3f: d7:a1:ab:8f:51:1d:14:5a:78:71:8e:ca:ac:ce:78: f3:b8:b8:1c:da:43:01:6c:1c:4b:cf:f1:c5:f3:b0: 83:b2:1e:36:19:0f:ec:c1:a4:20:e3:0f:48:9d:76: 24:96:a7:31:a9:89:fa:3a:63:85:39:03:b8:d5:03: db:1e:5a:6c:8f:28:84:f7:06:dd:3c:e8:60:84:34: 7c:b1:89:38:33:ea:11:17:79:5a:0c:8a:6b:16:33: 47:9f:d2:5c:bb:0f:1e:98:e1:84:a3:7c:41:ce:63: 24:b7:17:e0:c6:ae:ce:0b:1c:05:34:d8:83:86:39: d9:83:56:4f:2c:be:83:1e:79:d6:1a:bd:35:a2:d5: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CB:97:B7:82:8F:43:49:5F:AF:C3:C4:87:54:4D:95:D1:4C:E9:BC X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dMuXt4KPQ0lfr8PEh1RNldFM6bw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.98.0/23 212.134.104.0/23 212.134.110.0/23 212.135.24.0/23 212.135.28.0/23 212.135.148.0-212.135.153.255 212.135.156.0/23 212.135.200.0/22 212.135.240.0/23 212.135.244.0/23 212.135.248.0/23 212.135.252.0/23 Signature Algorithm: sha256WithRSAEncryption 24:25:7d:43:a2:e7:22:7e:53:31:5f:6a:7d:22:6d:74:7e:6d: 8f:a8:2b:53:e6:1e:11:71:2d:91:d8:3b:2d:69:de:cd:1c:8f: 8a:c6:06:09:0f:1c:67:bd:42:6b:03:27:0e:16:46:8f:95:f5: 4d:5a:47:b1:12:ab:35:80:ae:3f:31:63:d2:f3:e2:51:bf:51: 91:9e:eb:9d:f4:40:03:5d:90:b5:2e:db:8e:ee:db:60:95:2e: b3:60:6a:fa:51:70:3b:2e:25:75:06:1e:e2:4c:c5:12:9f:89: 31:94:82:5a:90:20:6e:ba:65:78:8b:50:d4:9f:1f:d4:96:a9: 6b:db:27:f4:3e:1d:48:72:a6:94:12:ca:50:7c:4c:df:32:c0: 3d:ba:46:9c:02:ab:fd:36:1e:e1:ea:62:35:30:22:72:1d:a8: 36:59:5a:b9:40:c6:e9:e6:47:d8:c6:da:3c:f4:65:77:a2:7a: d5:bd:2f:3b:f3:54:bb:42:f4:0d:78:30:5f:58:05:34:2b:c8: 67:d1:03:6f:55:6d:46:9e:97:16:7d:86:a3:3c:d9:af:f8:fc: 94:88:27:ee:d2:a3:7b:29:90:f9:04:f1:0a:4a:af:ee:d1:bf: 54:46:63:29:95:b4:c4:f5:f4:6b:0e:1a:0c:ff:f3:7d:17:37: 0a:da:dc:da -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZpYt+PMjp/llChTlusdOyiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTA2MTAzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGNiOTdiNzgyOGY0MzQ5NWZhZmMzYzQ4NzU0NGQ5NWQxNGNlOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspBSSsQ0Hf2vIC+Rzgi2bcCuhWeH 2tC1s6serqLlePNk9EyX5BDCugcMXofZzSicTgftIl5Uq31IyRtaPxzOPwVJ22zF QZvn6/qwnsb3HXjV+F/4Z6V7nQPzebU1e7/BVyLqJwB0nWUR4E+6VqDX/HFCu849 mj/XoauPUR0UWnhxjsqsznjzuLgc2kMBbBxLz/HF87CDsh42GQ/swaQg4w9InXYk lqcxqYn6OmOFOQO41QPbHlpsjyiE9wbdPOhghDR8sYk4M+oRF3laDIprFjNHn9Jc uw8emOGEo3xBzmMktxfgxq7OCxwFNNiDhjnZg1ZPLL6DHnnWGr01otVCPwIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFHTLl7eCj0NJX6/DxIdUTZXRTOm8MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvZE11WHQ0S1BRMGxmcjhQRWgxUk5sZEZNNmJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQB1IZiAwQB 1IZoAwQB1IZuAwQB1IcYAwQB1IccMAwDBALUh5QDBAHUh5gDBAHUh5wDBALUh8gD BAHUh/ADBAHUh/QDBAHUh/gDBAHUh/wwDQYJKoZIhvcNAQELBQADggEBACQlfUOi 5yJ+UzFfan0ibXR+bY+oK1PmHhFxLZHYOy1p3s0cj4rGBgkPHGe9QmsDJw4WRo+V 9U1aR7ESqzWArj8xY9Lz4lG/UZGe6530QANdkLUu247u22CVLrNgavpRcDsuJXUG HuJMxRKfiTGUglqQIG66ZXiLUNSfH9SWqWvbJ/Q+HUhyppQSylB8TN8ywD26RpwC q/02HuHqYjUwInIdqDZZWrlAxunmR9jG2jz0ZXeietW9LzvzVLtC9A14MF9YBTQr yGfRA29VbUaelxZ9hqM82a/4/JSIJ+7So3spkPkE8QpKr+7Rv1RGYymVtMT19GsO Ggz/830XNwra3No= -----END CERTIFICATE-----Generated at Sun Nov 23 13:05:39 2025 by rpki-client