This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kemD6LlS82eKn94htgtyirPtFrw.roa File: kemD6LlS82eKn94htgtyirPtFrw.roa (raw, json) Hash identifier: 32w3M60cWBUqlRGRxWdwNoQJ0hIHAOf7cAcVWOhBuWc= Subject key identifier: 91:E9:83:E8:B9:52:F3:67:8A:9F:DE:21:B6:0B:72:8A:B3:ED:16:BC Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AE8125E9185A3F11605A1CBE52C55510C Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kemD6LlS82eKn94htgtyirPtFrw.roa Signing time: Thu 04 Dec 2025 06:35:09 +0000 ROA not before: Thu 04 Dec 2025 06:35:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 212.134.18.0/24 maxlen: 24 212.134.19.0/24 maxlen: 24 212.134.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:12:5e:91:85:a3:f1:16:05:a1:cb:e5:2c:55:51:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 4 06:35:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=91e983e8b952f3678a9fde21b60b728ab3ed16bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:55:b6:1a:8a:ff:e2:06:ab:06:41:2c:95: 41:76:3b:1d:1d:52:4f:1d:85:6d:89:9a:34:65:89: 5b:00:dc:63:11:79:a7:3e:e3:6b:f7:c9:3e:35:a3: a4:bb:59:98:91:c6:e1:9a:d2:93:d1:b2:da:d9:6a: 67:be:b4:5c:3e:fa:53:7e:4b:5a:5d:64:b2:64:47: 69:63:90:46:cb:cb:e9:ae:45:42:dd:93:83:d3:41: 2d:32:72:a3:35:00:b9:8b:e9:be:37:5b:34:f8:64: 0d:33:34:38:30:ca:86:8f:f2:09:c8:09:1f:30:cb: 99:b7:51:bd:a3:96:cc:8b:cf:9b:f0:48:55:8f:be: 7d:3a:fa:a5:58:cf:ea:a1:e6:23:c2:6a:86:88:50: bd:f7:9b:c2:28:c8:c5:b5:f4:4d:62:32:7a:24:95: 2c:f2:45:18:44:e4:9a:31:cd:2e:bf:5f:0d:a1:fa: 1e:ca:24:9f:bc:f6:f5:df:38:00:aa:83:26:3e:00: 2b:f9:47:8e:39:0b:49:3d:e0:e2:11:cf:06:b9:fc: 92:dc:a8:ed:4c:fb:35:b5:1f:7e:89:b3:0e:c8:38: 47:5e:2f:76:e1:d4:56:31:ab:97:61:07:60:fd:28: 38:f8:d2:a4:02:d4:a7:43:68:b8:ad:b5:6c:b7:7f: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E9:83:E8:B9:52:F3:67:8A:9F:DE:21:B6:0B:72:8A:B3:ED:16:BC X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kemD6LlS82eKn94htgtyirPtFrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.18.0/23 212.134.233.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:93:0f:a7:fc:70:5c:ca:5d:0b:89:b8:d8:b1:80:b3:94:07: 3e:02:77:ae:ce:dc:1f:84:94:c9:17:fe:ab:d8:24:53:c3:21: fd:01:b6:13:53:cc:b1:21:8d:84:f9:89:8c:34:1a:95:3d:58: a5:90:d0:3c:ce:d0:cc:88:3c:f6:5f:47:c7:3b:fe:01:66:fb: b7:08:59:5b:e4:57:60:b0:9d:2c:b3:ec:60:09:23:2e:d3:bb: f8:ff:de:2a:f0:f7:a9:3c:9d:e6:fc:28:b2:c2:de:01:a6:2a: 91:7c:fa:0a:23:de:1d:3f:ff:8f:02:13:f3:41:d6:30:1f:78: 22:3f:e0:59:f0:cf:72:fc:81:f6:99:8f:60:bf:6f:3d:4b:91: 76:92:e0:ba:1e:b1:e1:28:1b:86:fc:6d:6b:2b:c3:f4:24:e0: a3:19:2c:96:f3:fa:e8:00:20:3f:bb:71:fa:3f:7a:34:ee:cf: 64:e5:9d:aa:f6:b8:bc:f0:a8:5d:ec:05:31:f7:c1:62:44:d2: dd:6e:f3:eb:33:6c:9f:a7:81:96:04:6a:be:4c:3f:d9:27:3c: 6e:9b:6a:fc:3d:7c:f0:86:5d:bc:13:80:86:d9:18:c5:10:6f: 57:ba:ea:d4:8f:13:1b:ca:34:ed:60:04:f7:a7:21:d8:7c:31: e8:95:f5:78 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZroEl6RhaPxFgWhy+UsVVEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjA0MDYzNTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWU5ODNlOGI5NTJmMzY3OGE5ZmRlMjFiNjBiNzI4YWIzZWQxNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3hVthqK/+IGqwZBLJVBdjsdHVJP HYVtiZo0ZYlbANxjEXmnPuNr98k+NaOku1mYkcbhmtKT0bLa2WpnvrRcPvpTfkta XWSyZEdpY5BGy8vprkVC3ZOD00EtMnKjNQC5i+m+N1s0+GQNMzQ4MMqGj/IJyAkf MMuZt1G9o5bMi8+b8EhVj759OvqlWM/qoeYjwmqGiFC995vCKMjFtfRNYjJ6JJUs 8kUYROSaMc0uv18NofoeyiSfvPb13zgAqoMmPgAr+UeOOQtJPeDiEc8GufyS3Kjt TPs1tR9+ibMOyDhHXi924dRWMauXYQdg/Sg4+NKkAtSnQ2i4rbVst3+WeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJHpg+i5UvNnip/eIbYLcoqz7Ra8MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEva2VtRDZMbFM4MmVLbjk0aHRndHlpclB0RnJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1IYSAwQA 1IbpMA0GCSqGSIb3DQEBCwUAA4IBAQAakw+n/HBcyl0LibjYsYCzlAc+Aneuztwf hJTJF/6r2CRTwyH9AbYTU8yxIY2E+YmMNBqVPVilkNA8ztDMiDz2X0fHO/4BZvu3 CFlb5FdgsJ0ss+xgCSMu07v4/94q8PepPJ3m/Ciywt4BpiqRfPoKI94dP/+PAhPz QdYwH3giP+BZ8M9y/IH2mY9gv289S5F2kuC6HrHhKBuG/G1rK8P0JOCjGSyW8/ro ACA/u3H6P3o07s9k5Z2q9ri88Khd7AUx98FiRNLdbvPrM2yfp4GWBGq+TD/ZJzxu m2r8PXzwhl28E4CG2RjFEG9XuurUjxMbyjTtYAT3pyHYfDHolfV4 -----END CERTIFICATE-----Generated at Thu Dec 4 19:54:07 2025 by rpki-client