This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jSsYRDXfJnNTlGwGN7uXejNRHR8.roa File: jSsYRDXfJnNTlGwGN7uXejNRHR8.roa (raw, json) Hash identifier: FkXx/rdds/t8eRlHMPz1sX+gQ9BGFNEwnyWhZVoAcdU= Subject key identifier: 8D:2B:18:44:35:DF:26:73:53:94:6C:06:37:BB:97:7A:33:51:1D:1F Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019ACB41A74A1D61B8A48D8572E2A5C581C1 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jSsYRDXfJnNTlGwGN7uXejNRHR8.roa Signing time: Fri 28 Nov 2025 16:17:48 +0000 ROA not before: Fri 28 Nov 2025 16:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 274365 IP address blocks: 212.134.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:41:a7:4a:1d:61:b8:a4:8d:85:72:e2:a5:c5:81:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 28 16:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d2b184435df267353946c0637bb977a33511d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:75:f0:90:bd:f8:2b:41:67:dd:59:05:df: 99:de:d1:d3:13:49:dc:23:fa:0c:26:57:2d:b7:f8: 18:7b:06:07:1a:04:8f:e2:a5:d5:62:bf:23:45:6d: bd:a8:f2:3f:38:59:a0:84:6f:ba:4e:c2:52:7a:00: cc:fa:df:22:ca:11:e2:31:76:a7:3e:6a:78:34:fa: ed:24:34:85:d3:97:1b:89:0f:c0:1e:17:02:b3:97: 77:47:74:b7:61:ee:c8:15:80:1d:61:02:b6:74:f1: 0e:e7:04:c7:19:e5:52:25:6d:0b:4b:c3:c7:dc:e1: dc:96:cd:df:8c:2b:fc:ff:38:75:45:4f:da:36:e3: 8f:d0:27:67:07:46:c5:3f:ad:6c:ce:24:88:7b:35: 28:a6:42:d4:2f:f4:d9:0d:92:a7:67:61:d8:a2:7e: e2:5b:a8:aa:ba:3f:5f:9c:ac:83:12:fe:83:1a:59: 61:78:20:74:a8:b5:eb:23:56:28:41:29:a0:e7:fc: 42:99:84:eb:e9:30:d8:0c:bf:32:2d:6b:e0:77:82: 6f:9a:47:73:d7:46:25:36:2b:60:17:8a:f6:d0:1e: a2:f9:0e:c3:61:dc:ed:c1:64:e8:e1:7f:c2:64:c6: 7b:fc:09:7b:c7:f6:8c:8e:3c:78:44:e5:bc:80:07: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2B:18:44:35:DF:26:73:53:94:6C:06:37:BB:97:7A:33:51:1D:1F X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jSsYRDXfJnNTlGwGN7uXejNRHR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.92.0/24 Signature Algorithm: sha256WithRSAEncryption bc:09:d0:7a:b7:e6:eb:56:7c:f9:56:50:82:1d:2f:01:c0:8d: d3:44:ab:ef:c6:34:41:b1:f5:c7:86:ae:da:6e:54:2b:bd:df: a5:46:06:83:6e:58:2f:8a:8f:16:3a:49:f9:a0:df:de:ba:63: 90:db:22:e9:e0:42:0d:83:db:12:6b:ab:59:93:7e:d1:8b:b1: 36:7c:67:34:0c:f8:3e:03:9e:c1:9c:7f:c6:12:09:15:5a:b9: 97:1e:45:bc:a6:07:ea:8e:12:12:9e:33:d9:f1:21:34:22:67: 68:00:2d:4e:d5:c4:84:5b:22:8c:d5:fa:31:f0:c3:2e:23:5a: 20:7c:9a:0d:77:8b:7c:55:7c:7f:fa:4c:6c:04:47:d4:c0:e2: 52:db:02:65:f3:5b:4c:33:89:35:04:ab:a6:b5:3a:b5:75:0d: 28:36:d8:4c:e3:bf:63:0a:4a:6b:f0:1f:a2:c2:52:d2:d4:40: 90:7f:03:c5:fd:41:23:0d:94:b0:ef:e5:27:b2:b5:9b:96:63: d5:83:3e:08:f4:9d:58:53:cd:5a:30:50:c8:96:19:da:b6:f3: 8b:5a:c3:b0:c9:e1:ba:9c:05:fa:80:86:0c:46:c2:a0:c6:79: d6:bf:aa:89:cd:a5:bd:52:fe:71:75:ce:7b:b4:7e:01:a2:ea: 29:7b:88:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrLQadKHWG4pI2FcuKlxYHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTI4MTYxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDJiMTg0NDM1ZGYyNjczNTM5NDZjMDYzN2JiOTc3YTMzNTExZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8918JC9+CtBZ91ZBd+Z3tHTE0nc I/oMJlctt/gYewYHGgSP4qXVYr8jRW29qPI/OFmghG+6TsJSegDM+t8iyhHiMXan Pmp4NPrtJDSF05cbiQ/AHhcCs5d3R3S3Ye7IFYAdYQK2dPEO5wTHGeVSJW0LS8PH 3OHcls3fjCv8/zh1RU/aNuOP0CdnB0bFP61sziSIezUopkLUL/TZDZKnZ2HYon7i W6iquj9fnKyDEv6DGllheCB0qLXrI1YoQSmg5/xCmYTr6TDYDL8yLWvgd4Jvmkdz 10YlNitgF4r20B6i+Q7DYdztwWTo4X/CZMZ7/Al7x/aMjjx4ROW8gAfRQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI0rGEQ13yZzU5RsBje7l3ozUR0fMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvalNzWVJEWGZKbk5UbEd3R043dVhlak5SSFI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IZcMA0G CSqGSIb3DQEBCwUAA4IBAQC8CdB6t+brVnz5VlCCHS8BwI3TRKvvxjRBsfXHhq7a blQrvd+lRgaDblgvio8WOkn5oN/eumOQ2yLp4EINg9sSa6tZk37Ri7E2fGc0DPg+ A57BnH/GEgkVWrmXHkW8pgfqjhISnjPZ8SE0ImdoAC1O1cSEWyKM1fox8MMuI1og fJoNd4t8VXx/+kxsBEfUwOJS2wJl81tMM4k1BKumtTq1dQ0oNthM479jCkpr8B+i wlLS1ECQfwPF/UEjDZSw7+UnsrWblmPVgz4I9J1YU81aMFDIlhnatvOLWsOwyeG6 nAX6gIYMRsKgxnnWv6qJzaW9Uv5xdc57tH4Bouope4h9 -----END CERTIFICATE-----Generated at Thu Dec 4 19:56:40 2025 by rpki-client