This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fNPcEWsJ5bX-LykXfCu2BeOlHWU.roa File: fNPcEWsJ5bX-LykXfCu2BeOlHWU.roa (raw, json) Hash identifier: YoDzX3ahtDz7MM3XAkWHtwc7JadY3IcSH77tn7YEZTc= Subject key identifier: 7C:D3:DC:11:6B:09:E5:B5:FE:2F:29:17:7C:2B:B6:05:E3:A5:1D:65 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019A7269F4A869F37FC7B4A37483CC626449 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fNPcEWsJ5bX-LykXfCu2BeOlHWU.roa Signing time: Tue 11 Nov 2025 10:15:37 +0000 ROA not before: Tue 11 Nov 2025 10:15:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 212.134.157.0/24 maxlen: 24 212.134.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:69:f4:a8:69:f3:7f:c7:b4:a3:74:83:cc:62:64:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 11 10:15:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7cd3dc116b09e5b5fe2f29177c2bb605e3a51d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:c1:20:59:21:ec:55:a7:9f:29:17:47:21:09: 0b:35:71:69:fe:f3:d0:1d:46:83:00:5e:d1:1a:50: 71:4c:8a:17:49:d7:1b:53:7f:e7:04:35:2b:83:de: e2:d7:11:eb:d2:c6:b9:59:02:14:68:1c:70:49:52: 2e:09:0d:93:65:b9:f4:9b:e6:05:27:87:7c:a9:4f: 55:45:b1:aa:ae:70:2a:c8:6f:31:ab:4b:54:c9:fd: ec:c4:b3:6b:0f:42:d5:a6:18:4b:4d:af:07:92:e4: 63:47:a0:5b:90:4b:49:e8:e6:2e:f6:3d:9b:2d:97: b1:14:6c:a9:ca:3a:9d:fe:10:67:58:d9:01:55:19: 8c:f2:c5:ff:7a:38:4a:10:cb:03:70:3b:3b:ed:2a: c8:ac:21:16:98:36:59:43:1e:3f:21:7a:83:de:ae: 1c:1e:26:82:50:17:1a:91:e7:bf:f0:bf:d3:c7:15: 04:42:9c:8c:db:16:2b:79:78:3c:93:64:83:92:26: 7c:b3:68:b8:4b:df:c7:89:f0:69:98:f5:b1:25:74: 8a:7a:fe:8c:6f:ba:b1:0b:81:19:c2:85:d3:95:fd: 22:6e:21:5d:5e:09:9c:c2:03:8a:20:dc:52:cd:8a: da:87:72:31:6b:2e:bc:19:e1:d3:6a:86:10:27:f8: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D3:DC:11:6B:09:E5:B5:FE:2F:29:17:7C:2B:B6:05:E3:A5:1D:65 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fNPcEWsJ5bX-LykXfCu2BeOlHWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.157.0/24 212.134.171.0/24 Signature Algorithm: sha256WithRSAEncryption 80:47:48:4e:3d:3c:69:55:cc:e4:0e:0e:18:b8:0c:0a:91:18: 27:48:7a:d1:00:be:d2:b0:ee:5c:ea:ab:ca:8e:1f:7f:9d:d9: ad:85:2b:55:77:84:81:8a:85:c6:cd:ab:07:cf:d0:b5:82:d8: ec:e8:b1:a1:e0:ca:3c:92:d4:ca:50:de:53:ea:c2:3d:6c:23: c5:ec:fa:25:35:70:e3:13:ff:a2:69:e3:05:a0:f0:92:a6:c3: 5d:22:6f:09:e0:ae:3d:be:d1:f3:56:3a:51:03:08:a4:23:46: eb:81:32:7a:0e:96:32:11:1a:09:f6:c8:25:77:a1:1b:9b:54: 7e:c2:d4:bb:17:0b:6c:40:4e:05:55:2f:75:f8:d2:e6:d7:aa: 57:d6:0a:6c:3b:c6:b5:61:23:58:a0:3e:5a:ed:4a:52:2b:bb: 90:3e:7c:9e:6e:8f:c3:5c:09:41:ee:50:eb:b5:14:01:14:c7: 18:0d:e5:45:11:29:f1:e3:40:ab:d7:a0:e7:0c:e8:99:c7:72: a9:5c:7b:72:5d:0c:9f:dc:32:62:ff:3f:1b:92:39:ab:d1:5b: 5b:fc:d7:52:3d:2a:60:14:95:a0:58:8e:5f:44:a7:df:b1:88: 3b:83:53:e3:49:66:05:ae:38:8c:ea:95:d2:f4:17:4d:74:85: af:8d:d5:cc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpyafSoafN/x7SjdIPMYmRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTExMTAxNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2QzZGMxMTZiMDllNWI1ZmUyZjI5MTc3YzJiYjYwNWUzYTUxZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/cEgWSHsVaefKRdHIQkLNXFp/vPQ HUaDAF7RGlBxTIoXSdcbU3/nBDUrg97i1xHr0sa5WQIUaBxwSVIuCQ2TZbn0m+YF J4d8qU9VRbGqrnAqyG8xq0tUyf3sxLNrD0LVphhLTa8HkuRjR6BbkEtJ6OYu9j2b LZexFGypyjqd/hBnWNkBVRmM8sX/ejhKEMsDcDs77SrIrCEWmDZZQx4/IXqD3q4c HiaCUBcakee/8L/TxxUEQpyM2xYreXg8k2SDkiZ8s2i4S9/HifBpmPWxJXSKev6M b7qxC4EZwoXTlf0ibiFdXgmcwgOKINxSzYrah3Ixay68GeHTaoYQJ/jpFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHzT3BFrCeW1/i8pF3wrtgXjpR1lMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvZk5QY0VXc0o1YlgtTHlrWGZDdTJCZU9sSFdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1IadAwQA 1IarMA0GCSqGSIb3DQEBCwUAA4IBAQCAR0hOPTxpVczkDg4YuAwKkRgnSHrRAL7S sO5c6qvKjh9/ndmthStVd4SBioXGzasHz9C1gtjs6LGh4Mo8ktTKUN5T6sI9bCPF 7PolNXDjE/+iaeMFoPCSpsNdIm8J4K49vtHzVjpRAwikI0brgTJ6DpYyERoJ9sgl d6Ebm1R+wtS7FwtsQE4FVS91+NLm16pX1gpsO8a1YSNYoD5a7UpSK7uQPnyebo/D XAlB7lDrtRQBFMcYDeVFESnx40Cr16DnDOiZx3KpXHtyXQyf3DJi/z8bkjmr0Vtb /NdSPSpgFJWgWI5fRKffsYg7g1PjSWYFrjiM6pXS9BdNdIWvjdXM -----END CERTIFICATE-----Generated at Thu Dec 4 19:54:40 2025 by rpki-client