This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nnWhsMp6uI4qc0FLxnJ7pYtks3o.roa File: nnWhsMp6uI4qc0FLxnJ7pYtks3o.roa (raw, json) Hash identifier: 65eAVa8MMBPQNnhWepbjKzpGOvjt1aw6Inh5H7fFuGQ= Subject key identifier: 9E:75:A1:B0:CA:7A:B8:8E:2A:73:41:4B:C6:72:7B:A5:8B:64:B3:7A Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2580EBE926EDCC32E2324CDAE4623 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nnWhsMp6uI4qc0FLxnJ7pYtks3o.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200590 IP address blocks: 212.134.60.0/22 maxlen: 24 212.134.60.0/24 maxlen: 24 212.134.61.0/24 maxlen: 24 212.134.62.0/24 maxlen: 24 212.134.63.0/24 maxlen: 24 212.134.240.0/24 maxlen: 24 212.134.241.0/24 maxlen: 24 212.134.242.0/24 maxlen: 24 212.134.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:58:0e:be:92:6e:dc:c3:2e:23:24:cd:ae:46:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e75a1b0ca7ab88e2a73414bc6727ba58b64b37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:d0:b6:f1:f4:66:1d:e3:3f:ab:dd:9c:66: 23:a5:e4:37:13:34:2c:4f:d6:b0:18:cb:38:9e:32: 5c:23:d6:47:76:95:8a:06:bc:f7:85:9a:01:ca:f8: 92:b1:17:7f:ae:e8:7a:37:06:46:a1:2f:75:5e:41: 11:2f:5e:15:52:0c:df:25:6f:21:e3:fb:cf:94:97: b4:b6:4b:e7:32:0e:e1:87:37:a5:b1:0e:d7:c5:53: 78:8b:0e:bc:df:8c:aa:15:6b:58:4c:d9:16:54:7f: 8c:a7:62:32:60:52:82:f9:c6:f9:bb:07:6b:e0:f7: c5:b5:b9:8c:e0:b2:32:6c:b8:a1:f4:2a:af:e2:d1: 6c:29:50:55:39:5e:77:96:ba:20:e0:fb:77:2d:f0: 74:55:21:f3:a1:a3:ea:2d:af:43:21:26:9a:6d:a8: f0:db:b3:b9:9c:c1:73:6f:42:f7:76:4c:84:d1:0e: 34:f0:73:6b:d5:6a:c1:09:bc:4a:5d:45:b6:15:74: 50:95:d6:af:47:e2:c5:4c:03:5a:b0:ab:e9:46:0d: cd:e3:1e:b8:b3:7e:03:92:d0:59:9d:c2:43:91:35: d9:04:7b:9d:63:f5:f8:fe:88:93:a4:da:21:89:75: 80:89:8a:1d:16:0c:ec:5f:8c:07:c7:79:0a:b8:76: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:75:A1:B0:CA:7A:B8:8E:2A:73:41:4B:C6:72:7B:A5:8B:64:B3:7A X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/nnWhsMp6uI4qc0FLxnJ7pYtks3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.60.0/22 212.134.240.0/22 Signature Algorithm: sha256WithRSAEncryption 89:2f:56:5b:15:3f:61:e7:ec:36:56:15:a5:c6:65:84:33:8d: 55:12:f3:e3:69:9d:a3:8b:79:0d:0c:18:90:fd:35:01:d5:70: 9b:3c:0b:91:23:5b:64:67:a1:88:c2:fd:9a:1b:09:da:71:4a: 64:c6:a5:35:e8:cf:ad:f1:32:9e:cf:a8:9c:77:05:b6:ac:c6: 8a:48:cd:2b:fc:4f:be:39:19:76:9a:35:78:f4:01:10:87:15: 93:ae:d5:0e:0e:f2:7d:96:cc:32:cd:00:30:4b:e1:a3:b3:21: 8f:9c:e5:64:24:0a:e1:a5:1c:55:6c:c3:cb:19:35:7a:bc:25: 99:fb:b4:01:9c:7a:6e:c4:c0:b0:c2:9b:87:31:25:0f:85:16: 59:8e:2d:f5:f8:a2:c6:8c:79:fc:9f:6a:52:2f:36:a8:b7:56: 37:e1:6c:f5:34:49:70:fc:83:40:aa:ed:d8:f3:19:68:c7:24: d7:5d:5c:79:6f:8e:1b:0d:2e:34:2b:4f:e6:53:e3:7f:77:24: ce:85:47:da:91:0e:b6:67:0d:bb:0f:d7:b9:4d:40:de:65:2b: c4:9e:59:56:7d:d1:09:85:a6:6c:51:41:6d:08:b9:89:96:26: 0e:be:b7:24:9a:a2:47:e4:46:6d:a1:31:bc:6c:52:4e:b5:aa: c3:0a:39:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4olgOvpJu3MMuIyTNrkYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTc1YTFiMGNhN2FiODhlMmE3MzQxNGJjNjcyN2JhNThiNjRiMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoDQtvH0Zh3jP6vdnGYjpeQ3EzQs T9awGMs4njJcI9ZHdpWKBrz3hZoByviSsRd/ruh6NwZGoS91XkERL14VUgzfJW8h 4/vPlJe0tkvnMg7hhzelsQ7XxVN4iw6834yqFWtYTNkWVH+Mp2IyYFKC+cb5uwdr 4PfFtbmM4LIybLih9Cqv4tFsKVBVOV53lrog4Pt3LfB0VSHzoaPqLa9DISaabajw 27O5nMFzb0L3dkyE0Q408HNr1WrBCbxKXUW2FXRQldavR+LFTANasKvpRg3N4x64 s34DktBZncJDkTXZBHudY/X4/oiTpNohiXWAiYodFgzsX4wHx3kKuHYhdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ51obDKeriOKnNBS8Zye6WLZLN6MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvbm5XaHNNcDZ1STRxYzBGTHhuSjdwWXRrczNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1IY8AwQC 1IbwMA0GCSqGSIb3DQEBCwUAA4IBAQCJL1ZbFT9h5+w2VhWlxmWEM41VEvPjaZ2j i3kNDBiQ/TUB1XCbPAuRI1tkZ6GIwv2aGwnacUpkxqU16M+t8TKez6icdwW2rMaK SM0r/E++ORl2mjV49AEQhxWTrtUODvJ9lswyzQAwS+GjsyGPnOVkJArhpRxVbMPL GTV6vCWZ+7QBnHpuxMCwwpuHMSUPhRZZji31+KLGjHn8n2pSLzaot1Y34Wz1NElw /INAqu3Y8xloxyTXXVx5b44bDS40K0/mU+N/dyTOhUfakQ62Zw27D9e5TUDeZSvE nllWfdEJhaZsUUFtCLmJliYOvrckmqJH5EZtoTG8bFJOtarDCjl3 -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:57 2026 by rpki-client