This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iypBVJOW0VSJ5HEkvrubPRV0ogE.roa File: iypBVJOW0VSJ5HEkvrubPRV0ogE.roa (raw, json) Hash identifier: s7H/3kSIlnoBvzxJV4dTwwp3gEbNJdLTYp7ikV3oMYI= Subject key identifier: 8B:2A:41:54:93:96:D1:54:89:E4:71:24:BE:BB:9B:3D:15:74:A2:01 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2427586A793794321465133980EE8 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iypBVJOW0VSJ5HEkvrubPRV0ogE.roa Signing time: Thu 01 Jan 2026 08:17:38 +0000 ROA not before: Thu 01 Jan 2026 08:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 212.134.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:42:75:86:a7:93:79:43:21:46:51:33:98:0e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b2a41549396d15489e47124bebb9b3d1574a201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:e8:31:2b:36:c3:c9:b2:0c:a0:24:98:17: 26:ed:92:1d:ef:1e:90:05:87:da:40:c9:5f:91:d3: cc:a8:ff:da:6c:e7:f8:d8:39:6c:f5:a0:89:f2:72: be:16:3b:e0:07:df:93:8a:fa:b6:c5:74:f4:c7:97: 1d:61:11:13:2c:4e:32:c3:1e:e1:87:54:4a:98:d7: 7a:d5:4e:00:5f:1b:a3:03:e6:1c:d8:57:31:7d:69: 69:5d:11:8f:cd:a6:a6:83:39:8c:18:45:31:6c:fc: bf:1f:4d:94:32:6d:17:cc:31:cf:8d:b1:d0:15:60: d4:56:6b:b0:97:26:c1:dc:15:0d:f3:66:1b:8b:ac: c5:b2:1b:8c:42:c5:b6:4b:ed:a2:2d:71:14:57:28: f0:cd:96:86:6b:c1:b5:1c:dc:71:98:d7:e7:77:9d: 6d:d2:c6:ad:39:f0:ee:57:8e:26:32:4a:70:a8:b9: 44:97:5c:ac:4d:d8:c2:c8:99:41:c9:9c:18:b1:8a: a9:8c:8f:3a:b0:fd:c2:6d:10:1f:cf:ee:57:e1:f3: 66:6a:b8:78:4d:23:33:47:1e:90:10:34:3c:f4:05: e3:a2:86:a2:41:b9:c2:e3:15:33:c5:a9:d5:a8:00: 37:0c:5a:b7:be:84:cc:1e:96:5b:3e:01:29:08:bd: be:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2A:41:54:93:96:D1:54:89:E4:71:24:BE:BB:9B:3D:15:74:A2:01 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iypBVJOW0VSJ5HEkvrubPRV0ogE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.144.0/22 Signature Algorithm: sha256WithRSAEncryption 71:5f:64:c6:3c:4e:a1:0b:13:18:26:25:79:30:5c:ab:5c:20: 85:fb:23:97:26:36:f0:15:a3:64:04:8d:ff:75:02:5e:43:6a: 6f:43:1f:15:58:7d:30:00:1d:fe:a2:fe:ca:0a:5d:19:6b:7e: ce:e3:f7:9d:df:2b:a1:ec:74:6e:b1:82:a6:58:70:b7:05:e3: fd:c5:56:b8:77:6a:3c:a4:d4:2a:9d:1a:5d:f6:ff:cc:36:44: 54:95:e7:73:a9:42:e5:ed:a9:95:97:04:6e:4b:33:da:7f:32: cf:19:0f:e6:d8:71:f8:9f:fe:24:91:ab:43:dd:e0:38:e9:39: e8:b2:84:50:d8:57:4b:ac:a1:eb:48:01:38:0f:4d:3f:6f:07: 22:01:dc:5c:3c:ac:24:2c:b8:66:9d:ab:3d:1e:23:1b:d4:79: 40:76:19:f4:fb:40:8f:1c:f2:11:3b:92:e3:af:9f:f5:67:02: 8f:97:0f:d2:6e:77:5b:47:ab:96:8c:c1:55:24:40:74:4c:5a: 4f:1c:be:24:01:eb:c5:34:79:49:13:27:d3:fd:6d:37:ed:f2: de:03:9c:fa:b7:ec:21:e4:bf:94:6a:af:1e:82:30:ec:75:96: 0b:db:ca:58:d4:bd:ec:ae:ca:99:cf:72:b3:a6:2f:4a:dc:98: 5a:66:0b:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4okJ1hqeTeUMhRlEzmA7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjJhNDE1NDkzOTZkMTU0ODllNDcxMjRiZWJiOWIzZDE1NzRhMjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8zoMSs2w8myDKAkmBcm7ZId7x6Q BYfaQMlfkdPMqP/abOf42Dls9aCJ8nK+FjvgB9+Tivq2xXT0x5cdYRETLE4ywx7h h1RKmNd61U4AXxujA+Yc2FcxfWlpXRGPzaamgzmMGEUxbPy/H02UMm0XzDHPjbHQ FWDUVmuwlybB3BUN82Ybi6zFshuMQsW2S+2iLXEUVyjwzZaGa8G1HNxxmNfnd51t 0satOfDuV44mMkpwqLlEl1ysTdjCyJlByZwYsYqpjI86sP3CbRAfz+5X4fNmarh4 TSMzRx6QEDQ89AXjooaiQbnC4xUzxanVqAA3DFq3voTMHpZbPgEpCL2+zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsqQVSTltFUieRxJL67mz0VdKIBMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvaXlwQlZKT1cwVlNKNUhFa3ZydWJQUlYwb2dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1IaQMA0G CSqGSIb3DQEBCwUAA4IBAQBxX2TGPE6hCxMYJiV5MFyrXCCF+yOXJjbwFaNkBI3/ dQJeQ2pvQx8VWH0wAB3+ov7KCl0Za37O4/ed3yuh7HRusYKmWHC3BeP9xVa4d2o8 pNQqnRpd9v/MNkRUledzqULl7amVlwRuSzPafzLPGQ/m2HH4n/4kkatD3eA46Tno soRQ2FdLrKHrSAE4D00/bwciAdxcPKwkLLhmnas9HiMb1HlAdhn0+0CPHPIRO5Lj r5/1ZwKPlw/SbndbR6uWjMFVJEB0TFpPHL4kAevFNHlJEyfT/W037fLeA5z6t+wh 5L+Uaq8egjDsdZYL28pY1L3srsqZz3Kzpi9K3JhaZgsV -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:11 2026 by rpki-client