This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jra7nIpGD6mZEm7ILW0RE95u5Mg.roa File: jra7nIpGD6mZEm7ILW0RE95u5Mg.roa (raw, json) Hash identifier: 7Z4iz0R23dgeeZ/N+4zGWLmN8TDGZNODaNWh36ybNjM= Subject key identifier: 8E:B6:BB:9C:8A:46:0F:A9:99:12:6E:C8:2D:6D:11:13:DE:6E:E4:C8 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2462EE577390AAEB5D1C9F9607171 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jra7nIpGD6mZEm7ILW0RE95u5Mg.roa Signing time: Thu 01 Jan 2026 08:17:39 +0000 ROA not before: Thu 01 Jan 2026 08:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20712 IP address blocks: 212.134.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:46:2e:e5:77:39:0a:ae:b5:d1:c9:f9:60:71:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eb6bb9c8a460fa999126ec82d6d1113de6ee4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:ea:68:df:e0:e5:d2:7b:f8:b9:7b:86:27: 45:61:7c:3e:90:c0:81:b9:ad:8d:59:35:f9:cc:c4: b4:0e:05:e6:3b:1d:2e:05:79:bf:5f:39:b2:fb:c8: 01:1e:c8:e3:ce:a7:57:5d:d2:38:9c:8e:18:68:4c: e5:e1:61:d8:0d:b6:37:86:90:0c:0a:35:08:3c:86: c1:85:38:ba:39:35:ab:f8:a0:39:cb:ee:af:26:cd: fc:e5:0b:f3:84:7f:f8:c3:33:b1:d5:a7:54:98:91: 82:b1:2d:47:c5:f2:5d:02:37:25:10:4a:d9:58:28: 99:d3:6d:88:29:55:90:a9:3d:90:0a:ab:d1:d0:5e: d3:67:9f:48:64:24:5e:0e:c5:5a:43:bc:3f:22:0a: 01:ae:a3:3f:d6:79:a2:1e:21:00:2e:c0:ff:2d:26: a4:ef:43:a8:3d:e4:3b:39:96:da:ee:d6:0b:99:87: 51:0f:8d:05:fe:b7:d1:3c:b0:e8:ef:06:24:ff:4e: ad:79:0d:3d:7b:64:64:8c:7d:b7:26:eb:97:57:65: 73:d4:f1:e4:27:e3:5c:7b:8d:0d:fc:74:6b:2c:bd: 00:4d:99:cb:b9:e8:37:ae:01:de:7b:dc:e4:70:9a: a6:3d:75:e6:0b:e4:61:5d:72:04:08:28:51:6e:a5: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B6:BB:9C:8A:46:0F:A9:99:12:6E:C8:2D:6D:11:13:DE:6E:E4:C8 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jra7nIpGD6mZEm7ILW0RE95u5Mg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.228.0/24 Signature Algorithm: sha256WithRSAEncryption c3:3f:58:bd:10:c7:c6:47:b2:07:69:c0:6d:b9:26:d7:e7:85: 43:d3:a0:15:2d:57:27:b1:36:18:26:e6:66:9c:5b:9c:8c:29: 32:70:6b:29:46:01:d2:cc:15:25:56:09:4f:90:39:0c:3a:91: b8:22:40:a2:74:5c:79:1d:1f:43:61:cf:5a:ca:2c:eb:ec:da: 72:e7:db:33:78:f3:5f:67:b5:f8:81:a8:b2:c2:6d:67:a3:9f: 97:c9:f9:99:c9:07:b2:ce:d6:2f:13:d3:1a:bb:70:84:09:5b: a4:bd:4b:e3:57:61:f3:27:8f:9c:4b:f5:19:52:a1:42:94:42: 8d:97:b1:89:52:9a:0a:b4:cd:2e:ce:32:57:2f:b6:44:e0:63: c9:7b:d1:47:9f:93:9e:80:e2:79:73:55:ec:24:b9:0e:2e:9c: b5:aa:87:c9:72:5d:51:c7:31:5f:10:1a:41:34:bb:e2:41:ba: c7:b9:82:ca:65:8a:18:fe:08:8e:4a:c5:eb:37:68:59:dc:bc: 8f:01:89:e3:df:66:d0:2e:97:b0:79:78:30:2b:0f:c5:e1:f7: 94:28:8d:7c:fc:db:fe:95:b1:c5:e9:33:06:40:38:4a:f4:53: 0a:03:7b:9d:a4:01:cb:7b:e1:27:d6:75:0c:b3:e2:46:53:1f: c7:f8:a4:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4okYu5Xc5Cq610cn5YHFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWI2YmI5YzhhNDYwZmE5OTkxMjZlYzgyZDZkMTExM2RlNmVlNGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nTqaN/g5dJ7+Ll7hidFYXw+kMCB ua2NWTX5zMS0DgXmOx0uBXm/Xzmy+8gBHsjjzqdXXdI4nI4YaEzl4WHYDbY3hpAM CjUIPIbBhTi6OTWr+KA5y+6vJs385QvzhH/4wzOx1adUmJGCsS1HxfJdAjclEErZ WCiZ022IKVWQqT2QCqvR0F7TZ59IZCReDsVaQ7w/IgoBrqM/1nmiHiEALsD/LSak 70OoPeQ7OZba7tYLmYdRD40F/rfRPLDo7wYk/06teQ09e2RkjH23JuuXV2Vz1PHk J+Nce40N/HRrLL0ATZnLueg3rgHee9zkcJqmPXXmC+RhXXIECChRbqX8xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI62u5yKRg+pmRJuyC1tERPebuTIMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvanJhN25JcEdENm1aRW03SUxXMFJFOTV1NU1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IbkMA0G CSqGSIb3DQEBCwUAA4IBAQDDP1i9EMfGR7IHacBtuSbX54VD06AVLVcnsTYYJuZm nFucjCkycGspRgHSzBUlVglPkDkMOpG4IkCidFx5HR9DYc9ayizr7Npy59szePNf Z7X4gaiywm1no5+XyfmZyQeyztYvE9Mau3CECVukvUvjV2HzJ4+cS/UZUqFClEKN l7GJUpoKtM0uzjJXL7ZE4GPJe9FHn5OegOJ5c1XsJLkOLpy1qofJcl1RxzFfEBpB NLviQbrHuYLKZYoY/giOSsXrN2hZ3LyPAYnj32bQLpeweXgwKw/F4feUKI18/Nv+ lbHF6TMGQDhK9FMKA3udpAHLe+En1nUMs+JGUx/H+KSt -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:14 2026 by rpki-client