This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oFY0ZYOPpDlHsRIIzF4qMDJ-4j0.roa File: oFY0ZYOPpDlHsRIIzF4qMDJ-4j0.roa (raw, json) Hash identifier: U1cFkP9AarfNnHi/UOTYjZSYfo46r3m7/bYghJrlz9Q= Subject key identifier: A0:56:34:65:83:8F:A4:39:47:B1:12:08:CC:5E:2A:30:32:7E:E2:3D Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AEC3F1AF337785D87E5F22A1AA4BB4B2F Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oFY0ZYOPpDlHsRIIzF4qMDJ-4j0.roa Signing time: Fri 05 Dec 2025 02:02:29 +0000 ROA not before: Fri 05 Dec 2025 02:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 212.134.90.0/24 maxlen: 24 212.134.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ec:3f:1a:f3:37:78:5d:87:e5:f2:2a:1a:a4:bb:4b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 5 02:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a0563465838fa43947b11208cc5e2a30327ee23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:f9:a1:fa:9c:c0:5f:21:c7:c3:12:59:11: ae:f5:90:52:97:f1:0d:9a:9e:30:23:e3:e3:17:46: 52:07:7e:85:1a:aa:ca:36:1a:79:3e:d3:80:43:9b: d0:b6:6a:df:fe:6d:08:38:fe:20:a3:4f:c4:b2:b3: 52:90:5c:d0:c3:b5:6c:ec:48:78:6b:16:ff:f0:36: 41:1c:2c:b8:7e:d0:d7:a4:b1:c9:cc:4f:23:68:4f: 4e:9d:36:c1:bf:81:e8:6d:c6:a2:b6:2d:ca:34:3a: e3:13:7f:d6:84:e0:33:1c:94:6d:e8:0c:b0:03:d7: e4:a5:5c:55:f3:5a:6e:3a:ba:6c:5c:b7:5a:a3:8f: c1:60:a6:d2:ac:d3:f5:5c:ea:c7:a4:f6:3c:ca:60: 8a:3b:6d:45:ef:c5:a4:ce:f5:69:0e:db:3b:4a:33: 3e:b1:0b:13:29:3b:8f:15:e7:f7:69:a8:9c:33:7a: 38:e7:03:c5:b5:0b:29:ab:5e:89:3c:a3:09:e6:70: 11:77:4c:f4:f6:59:01:04:51:9e:d5:9d:3e:38:26: d7:d6:aa:f3:23:e3:42:bf:4e:01:7e:bc:62:f0:97: 34:2f:25:2d:3b:40:37:55:1a:74:6b:27:f8:67:e4: 94:8d:67:8d:15:df:02:9a:f9:45:6b:1c:db:5f:79: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:56:34:65:83:8F:A4:39:47:B1:12:08:CC:5E:2A:30:32:7E:E2:3D X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oFY0ZYOPpDlHsRIIzF4qMDJ-4j0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.90.0/24 212.134.97.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:72:9f:81:11:e0:8e:a9:3f:fb:5a:5d:46:0c:a9:5e:68:34: 9d:79:3b:81:82:a1:a7:2d:1e:54:b0:8e:2f:cc:52:4b:41:b6: b9:5d:df:54:63:d7:75:0d:7f:00:34:02:c5:ff:58:e4:30:0e: 01:a8:eb:54:8c:dc:5d:f9:f7:22:0d:59:97:1c:aa:65:5b:3b: b7:8f:2f:ce:11:f7:63:64:cb:b9:3e:f4:c9:93:06:dd:50:27: 3f:25:e8:d7:5c:a0:5e:2a:4a:56:ff:4a:9f:23:9e:41:95:e1: cd:95:25:19:0e:42:39:ef:42:65:b2:32:9e:80:82:38:84:f3: e0:e5:b9:77:4e:00:7e:73:16:00:70:a8:64:72:85:b4:aa:c9: 79:65:f7:07:21:b7:03:a8:a1:42:78:b2:69:6f:1f:b3:c2:ce: 0f:c4:9c:18:eb:ed:89:da:8b:d2:71:f6:99:e1:06:1f:28:45: 03:c5:b0:68:a3:b1:47:6d:81:58:7f:25:df:56:51:0a:96:88: b0:70:be:26:60:f7:05:b1:05:60:e0:11:eb:db:8a:bb:a9:2c: bb:d8:fe:93:5e:27:d9:c0:44:8f:9c:1e:63:47:e7:5b:a2:a2: 7f:11:4e:b9:8f:79:fb:cd:78:e8:3f:28:2b:d8:0e:b4:16:b5: c9:41:1d:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrsPxrzN3hdh+XyKhqku0svMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjA1MDIwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDU2MzQ2NTgzOGZhNDM5NDdiMTEyMDhjYzVlMmEzMDMyN2VlMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxL5ofqcwF8hx8MSWRGu9ZBSl/EN mp4wI+PjF0ZSB36FGqrKNhp5PtOAQ5vQtmrf/m0IOP4go0/EsrNSkFzQw7Vs7Eh4 axb/8DZBHCy4ftDXpLHJzE8jaE9OnTbBv4Hobcaiti3KNDrjE3/WhOAzHJRt6Ayw A9fkpVxV81puOrpsXLdao4/BYKbSrNP1XOrHpPY8ymCKO21F78WkzvVpDts7SjM+ sQsTKTuPFef3aaicM3o45wPFtQspq16JPKMJ5nARd0z09lkBBFGe1Z0+OCbX1qrz I+NCv04Bfrxi8Jc0LyUtO0A3VRp0ayf4Z+SUjWeNFd8CmvlFaxzbX3kzbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKBWNGWDj6Q5R7ESCMxeKjAyfuI9MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvb0ZZMFpZT1BwRGxIc1JJSXpGNHFNREotNGowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1IZaAwQA 1IZhMA0GCSqGSIb3DQEBCwUAA4IBAQBacp+BEeCOqT/7Wl1GDKleaDSdeTuBgqGn LR5UsI4vzFJLQba5Xd9UY9d1DX8ANALF/1jkMA4BqOtUjNxd+fciDVmXHKplWzu3 jy/OEfdjZMu5PvTJkwbdUCc/JejXXKBeKkpW/0qfI55BleHNlSUZDkI570JlsjKe gII4hPPg5bl3TgB+cxYAcKhkcoW0qsl5ZfcHIbcDqKFCeLJpbx+zws4PxJwY6+2J 2ovScfaZ4QYfKEUDxbBoo7FHbYFYfyXfVlEKloiwcL4mYPcFsQVg4BHr24q7qSy7 2P6TXifZwESPnB5jR+dboqJ/EU65j3n7zXjoPygr2A60FrXJQR0y -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:45 2025 by rpki-client