This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hxDo8yitfw-LgD7GB9-3Zbh2Jo8.roa File: hxDo8yitfw-LgD7GB9-3Zbh2Jo8.roa (raw, json) Hash identifier: 6h4TSZDYau5oWZD2FPPzMlQBYne4YDZrtcUzgN4V3tE= Subject key identifier: 87:10:E8:F3:28:AD:7F:0F:8B:80:3E:C6:07:DF:B7:65:B8:76:26:8F Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019ABF5C1AA1FA6486104056232CC13DDC35 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hxDo8yitfw-LgD7GB9-3Zbh2Jo8.roa Signing time: Wed 26 Nov 2025 08:51:15 +0000 ROA not before: Wed 26 Nov 2025 08:51:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 212.134.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:5c:1a:a1:fa:64:86:10:40:56:23:2c:c1:3d:dc:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 26 08:51:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8710e8f328ad7f0f8b803ec607dfb765b876268f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:68:7c:dd:43:93:d1:ab:f6:35:ac:0e:b7: 71:0d:35:bc:6e:7b:7d:7d:73:8f:57:09:f7:30:f6: 6f:bc:73:9e:71:6b:59:e9:f9:e9:0b:da:91:fe:81: cf:21:af:d9:55:62:53:b1:dd:27:8f:2a:88:d4:df: fe:8e:17:8b:2e:b8:8e:78:14:78:f5:d6:ab:47:44: 4b:f0:ef:57:31:73:dd:01:42:b9:e0:08:44:8e:2f: 5f:6c:f9:61:ed:5b:f8:ff:ff:d8:09:84:dc:64:b5: aa:6e:36:f1:5a:53:4e:5e:89:52:ef:eb:66:68:b5: ce:e7:fc:62:24:7b:ea:b7:85:4c:ec:a6:c5:a0:a3: e5:34:6d:cd:5b:96:4b:e1:26:f0:29:1d:dc:a8:9e: a3:eb:0b:39:96:1b:62:1a:98:89:11:b8:cd:a2:82: b8:9e:51:d2:d5:e0:af:3c:00:12:bd:08:c1:f3:6e: 2e:d2:1e:73:3c:70:f8:dd:af:54:8e:58:c9:03:68: 21:ed:f6:20:b6:d4:4a:60:e1:e4:77:4c:0c:d6:d8: df:d5:bd:73:45:51:72:8f:8b:8a:a2:87:71:d9:a4: 7d:21:0f:9f:0c:39:98:3d:a6:e4:b2:c6:ba:25:42: 1c:ca:f2:e4:cf:5f:84:9d:20:e7:71:c7:d8:04:99: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:10:E8:F3:28:AD:7F:0F:8B:80:3E:C6:07:DF:B7:65:B8:76:26:8F X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hxDo8yitfw-LgD7GB9-3Zbh2Jo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.90.0/24 Signature Algorithm: sha256WithRSAEncryption b6:82:96:b7:4a:af:96:4d:93:7e:07:e8:a5:42:c0:6a:a6:a2: b2:ce:05:98:8d:49:65:04:2e:d5:3e:d6:a7:7e:40:ec:b0:a1: b3:0d:47:89:0e:b2:50:00:f3:a0:3a:53:26:95:a5:6c:54:b7: f8:2b:54:e9:4d:2e:ed:ce:25:a7:4c:f0:e6:bd:3b:6d:78:6d: ec:01:8d:fc:97:7e:72:18:3c:67:e6:2a:37:e8:06:c7:c8:14: d6:20:29:45:e5:ba:00:c6:9e:ea:64:dd:b6:de:0f:9c:38:56: 0d:00:1d:1e:fb:a0:25:58:fb:13:7b:c7:af:13:75:ff:5c:41: 2c:56:fa:06:12:97:09:98:31:90:d8:a8:1c:35:49:77:32:f9: 3c:d5:12:d1:fa:f3:8a:68:55:f0:b3:33:f2:72:0f:24:76:85: 72:3b:28:91:fc:52:2a:f5:33:4e:eb:14:c3:18:79:33:0b:c3: 13:c8:0d:1c:ef:39:a6:19:81:76:85:c9:7d:59:f4:b8:b7:8d: ea:c0:8c:f7:98:0a:81:30:c1:42:6c:40:f0:8b:4b:62:49:61: 79:f4:fc:53:3d:b4:84:d7:8e:3f:1d:c5:ee:2a:5f:36:d9:5b: 2e:02:ac:a6:27:95:32:83:85:ca:ae:e5:16:61:8d:ce:f6:34: b5:a8:e4:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq/XBqh+mSGEEBWIyzBPdw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTI2MDg1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzEwZThmMzI4YWQ3ZjBmOGI4MDNlYzYwN2RmYjc2NWI4NzYyNjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32BofN1Dk9Gr9jWsDrdxDTW8bnt9 fXOPVwn3MPZvvHOecWtZ6fnpC9qR/oHPIa/ZVWJTsd0njyqI1N/+jheLLriOeBR4 9darR0RL8O9XMXPdAUK54AhEji9fbPlh7Vv4///YCYTcZLWqbjbxWlNOXolS7+tm aLXO5/xiJHvqt4VM7KbFoKPlNG3NW5ZL4SbwKR3cqJ6j6ws5lhtiGpiJEbjNooK4 nlHS1eCvPAASvQjB824u0h5zPHD43a9UjljJA2gh7fYgttRKYOHkd0wM1tjf1b1z RVFyj4uKoodx2aR9IQ+fDDmYPabkssa6JUIcyvLkz1+EnSDnccfYBJnhCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIcQ6PMorX8Pi4A+xgfft2W4diaPMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvaHhEbzh5aXRmdy1MZ0Q3R0I5LTNaYmgySm84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IZaMA0G CSqGSIb3DQEBCwUAA4IBAQC2gpa3Sq+WTZN+B+ilQsBqpqKyzgWYjUllBC7VPtan fkDssKGzDUeJDrJQAPOgOlMmlaVsVLf4K1TpTS7tziWnTPDmvTtteG3sAY38l35y GDxn5io36AbHyBTWIClF5boAxp7qZN223g+cOFYNAB0e+6AlWPsTe8evE3X/XEEs VvoGEpcJmDGQ2KgcNUl3Mvk81RLR+vOKaFXwszPycg8kdoVyOyiR/FIq9TNO6xTD GHkzC8MTyA0c7zmmGYF2hcl9WfS4t43qwIz3mAqBMMFCbEDwi0tiSWF59PxTPbSE 144/HcXuKl822VsuAqymJ5Uyg4XKruUWYY3O9jS1qORQ -----END CERTIFICATE-----Generated at Thu Dec 4 19:56:39 2025 by rpki-client