This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pSdWOPTUNSgMt83NfJtKaoRNKrA.roa File: pSdWOPTUNSgMt83NfJtKaoRNKrA.roa (raw, json) Hash identifier: JqNoUgXRBB/HS+3awo8e+mVmcMkyJsMd3g8+x9wPycg= Subject key identifier: A5:27:56:38:F4:D4:35:28:0C:B7:CD:CD:7C:9B:4A:6A:84:4D:2A:B0 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019ABC375B9EC184350D81D02931B7B38816 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pSdWOPTUNSgMt83NfJtKaoRNKrA.roa Signing time: Tue 25 Nov 2025 18:12:15 +0000 ROA not before: Tue 25 Nov 2025 18:12:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20326 IP address blocks: 212.134.180.0/22 maxlen: 22 212.134.184.0/22 maxlen: 22 212.134.192.0/22 maxlen: 22 212.134.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:37:5b:9e:c1:84:35:0d:81:d0:29:31:b7:b3:88:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 25 18:12:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a5275638f4d435280cb7cdcd7c9b4a6a844d2ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e7:a9:33:9b:f6:87:78:49:c9:ae:c5:4e:b4: 3a:7e:61:9c:ec:4a:91:37:5f:30:a7:03:ff:f3:43: 1f:b1:1c:f6:61:be:33:41:ba:0e:a0:0c:6a:dc:d1: 63:73:e8:83:7c:fa:85:42:00:42:0d:f5:ed:02:01: e4:41:af:d3:d1:4d:05:bc:48:27:d3:89:fb:b8:53: a5:82:c9:2a:10:9f:0e:9b:23:96:76:21:f4:cc:4e: 6c:37:71:3b:74:1d:89:04:03:88:6b:cd:30:9b:63: 51:d8:bc:f2:ae:80:5e:e3:9d:5a:5c:9d:e8:12:ab: db:13:4a:56:2d:6a:10:9b:f4:88:a6:bd:39:88:b2: ef:7f:e2:fc:2c:e5:92:4d:21:61:af:99:05:58:6d: 5d:00:ed:f2:f8:cc:2b:be:2a:56:b6:b0:46:7a:79: f7:c3:0a:d2:60:a4:69:50:1c:1f:1f:86:55:7c:52: 11:ec:06:25:c3:35:d7:3d:36:25:2b:cd:b7:fa:3f: 5b:15:59:c8:ef:d1:77:4b:53:98:96:2d:15:0b:a1: de:bd:e6:f5:3b:2a:40:d5:fe:25:8d:84:14:0b:1e: 1d:c9:a1:2c:8b:01:a6:43:48:29:00:af:fa:1a:91: 17:ba:e4:90:ba:be:a3:e8:91:68:12:ae:d9:c8:42: bb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:27:56:38:F4:D4:35:28:0C:B7:CD:CD:7C:9B:4A:6A:84:4D:2A:B0 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pSdWOPTUNSgMt83NfJtKaoRNKrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.180.0-212.134.187.255 212.134.192.0/22 212.134.200.0/22 Signature Algorithm: sha256WithRSAEncryption da:9c:ab:92:72:38:a0:90:85:f3:05:ef:9c:67:ac:d2:f0:bc: cd:f8:52:ba:d5:8e:8c:ee:f6:bc:ed:91:ec:f2:89:e0:9e:69: 38:99:dc:6f:40:5c:63:e9:b0:13:dd:02:c0:54:a9:9a:2f:05: 68:54:7b:7e:9e:ec:11:c6:02:77:f3:e8:35:99:2e:1c:ff:0b: ae:c4:58:ab:5e:f4:83:10:56:a1:33:ff:12:5f:fd:ab:28:17: 24:6e:e1:19:04:2c:22:b0:bf:df:7d:4b:1e:55:73:78:17:d8: 7e:0c:5f:de:00:fe:73:fe:76:0f:50:05:85:77:34:14:a4:5a: 72:d5:c2:cd:b7:f3:70:50:0b:7c:c2:82:99:e9:fc:79:6f:2d: f1:5a:e2:ec:27:a2:e6:02:dd:c2:3d:b3:5e:4e:1a:8c:c1:72: 26:e2:f7:65:18:f1:41:0e:08:21:07:d0:8a:33:7d:89:84:9e: a1:2e:2b:ef:c0:ec:3a:e9:17:2a:d0:3b:c4:1a:31:a8:95:8a: 72:4d:84:93:e7:d2:6b:b7:44:8d:6d:71:11:4f:23:fe:4b:74: f6:5c:ba:50:31:ed:b2:3e:12:d3:7e:20:b6:15:0d:e8:49:4d: ef:13:d9:e9:65:b6:fa:6c:1f:80:bd:9f:0c:51:10:cc:60:32: 10:8a:f5:00 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZq8N1uewYQ1DYHQKTG3s4gWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTI1MTgxMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTI3NTYzOGY0ZDQzNTI4MGNiN2NkY2Q3YzliNGE2YTg0NGQyYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uepM5v2h3hJya7FTrQ6fmGc7EqR N18wpwP/80MfsRz2Yb4zQboOoAxq3NFjc+iDfPqFQgBCDfXtAgHkQa/T0U0FvEgn 04n7uFOlgskqEJ8OmyOWdiH0zE5sN3E7dB2JBAOIa80wm2NR2LzyroBe451aXJ3o EqvbE0pWLWoQm/SIpr05iLLvf+L8LOWSTSFhr5kFWG1dAO3y+MwrvipWtrBGenn3 wwrSYKRpUBwfH4ZVfFIR7AYlwzXXPTYlK823+j9bFVnI79F3S1OYli0VC6Heveb1 OypA1f4ljYQUCx4dyaEsiwGmQ0gpAK/6GpEXuuSQur6j6JFoEq7ZyEK7JQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFKUnVjj01DUoDLfNzXybSmqETSqwMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvcFNkV09QVFVOU2dNdDgzTmZKdEthb1JOS3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBALUhrQD BALUhrgDBALUhsADBALUhsgwDQYJKoZIhvcNAQELBQADggEBANqcq5JyOKCQhfMF 75xnrNLwvM34UrrVjozu9rztkezyieCeaTiZ3G9AXGPpsBPdAsBUqZovBWhUe36e 7BHGAnfz6DWZLhz/C67EWKte9IMQVqEz/xJf/asoFyRu4RkELCKwv999Sx5Vc3gX 2H4MX94A/nP+dg9QBYV3NBSkWnLVws2383BQC3zCgpnp/HlvLfFa4uwnouYC3cI9 s15OGozBcibi92UY8UEOCCEH0IozfYmEnqEuK+/A7DrpFyrQO8QaMaiVinJNhJPn 0mu3RI1tcRFPI/5LdPZculAx7bI+EtN+ILYVDehJTe8T2elltvpsH4C9nwxREMxg MhCK9QA= -----END CERTIFICATE-----Generated at Thu Dec 4 07:38:19 2025 by rpki-client