This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qa0FCXgXv_5hW671I0IGh3eanJk.roa File: qa0FCXgXv_5hW671I0IGh3eanJk.roa (raw, json) Hash identifier: Sc/sSgo6gdbDvRkRDejUIKJZp+/thd0SAvpQ1F2phqo= Subject key identifier: A9:AD:05:09:78:17:BF:FE:61:5B:AE:F5:23:42:06:87:77:9A:9C:99 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B6E4B62EE6CC3319128E8680CB024C9AF Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qa0FCXgXv_5hW671I0IGh3eanJk.roa Signing time: Tue 30 Dec 2025 08:06:32 +0000 ROA not before: Tue 30 Dec 2025 08:06:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 212.134.16.0/24 maxlen: 24 212.134.17.0/24 maxlen: 24 212.134.19.0/24 maxlen: 24 212.134.22.0/24 maxlen: 24 212.134.24.0/24 maxlen: 24 212.134.36.0/24 maxlen: 24 212.134.39.0/24 maxlen: 24 212.134.40.0/22 maxlen: 24 212.134.47.0/24 maxlen: 24 212.134.48.0/22 maxlen: 24 212.134.53.0/24 maxlen: 24 212.134.56.0/23 maxlen: 24 212.134.58.0/24 maxlen: 24 212.134.80.0/24 maxlen: 24 212.134.81.0/24 maxlen: 24 212.134.82.0/24 maxlen: 24 212.134.83.0/24 maxlen: 24 212.134.84.0/24 maxlen: 24 212.134.85.0/24 maxlen: 24 212.134.87.0/24 maxlen: 24 212.134.88.0/24 maxlen: 24 212.134.95.0/24 maxlen: 24 212.134.98.0/23 maxlen: 24 212.134.104.0/23 maxlen: 24 212.134.106.0/23 maxlen: 24 212.134.109.0/24 maxlen: 24 212.134.110.0/23 maxlen: 24 212.134.128.0/22 maxlen: 24 212.134.136.0/22 maxlen: 24 212.134.140.0/22 maxlen: 24 212.134.148.0/24 maxlen: 24 212.134.156.0/24 maxlen: 24 212.134.171.0/24 maxlen: 24 212.134.175.0/24 maxlen: 24 212.134.179.0/24 maxlen: 24 212.134.196.0/22 maxlen: 24 212.134.199.0/24 maxlen: 24 212.134.204.0/22 maxlen: 24 212.134.212.0/22 maxlen: 24 212.134.216.0/22 maxlen: 24 212.134.228.0/22 maxlen: 24 212.134.232.0/22 maxlen: 24 212.134.232.0/24 maxlen: 24 212.134.233.0/24 maxlen: 24 212.134.248.0/22 maxlen: 24 212.134.248.0/24 maxlen: 24 212.135.24.0/23 maxlen: 24 212.135.27.0/24 maxlen: 24 212.135.28.0/23 maxlen: 24 212.135.29.0/24 maxlen: 24 212.135.30.0/24 maxlen: 24 212.135.128.0/23 maxlen: 24 212.135.135.0/24 maxlen: 24 212.135.161.0/24 maxlen: 24 212.135.162.0/24 maxlen: 24 212.135.164.0/24 maxlen: 24 212.135.165.0/24 maxlen: 24 212.135.166.0/24 maxlen: 24 212.135.167.0/24 maxlen: 24 212.135.168.0/24 maxlen: 24 212.135.169.0/24 maxlen: 24 212.135.170.0/24 maxlen: 24 212.135.171.0/24 maxlen: 24 212.135.172.0/24 maxlen: 24 212.135.173.0/24 maxlen: 24 212.135.204.0/22 maxlen: 24 212.135.240.0/23 maxlen: 24 212.135.244.0/23 maxlen: 24 212.135.248.0/23 maxlen: 24 212.135.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:4b:62:ee:6c:c3:31:91:28:e8:68:0c:b0:24:c9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 30 08:06:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a9ad05097817bffe615baef523420687779a9c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4a:dc:74:ba:60:1c:db:21:a6:21:9c:df:c5: 27:91:35:3b:b2:29:c5:c7:db:67:0c:1e:01:b2:b5: 52:0d:41:0c:3e:c8:3f:4f:25:50:46:55:69:3c:24: 5f:02:1e:0f:93:88:86:37:8c:b7:ef:67:10:4b:80: b9:44:66:42:0f:ae:e9:f4:89:6b:e1:a7:36:7d:21: 49:fd:a1:d5:e1:9c:a7:f1:63:2c:18:c5:d8:3f:0b: 87:b9:3d:40:ea:8b:ce:c9:29:1b:7d:7e:b7:0e:ff: 2e:b1:d1:15:21:d8:0c:49:9f:8a:91:48:f2:f0:bf: c0:85:5d:1e:84:aa:e4:eb:d0:5c:3e:4a:5c:ee:70: 5e:03:2a:ec:41:71:ef:30:18:10:ff:74:3a:60:72: a1:72:06:12:b4:68:dc:48:62:89:a3:8c:c1:d1:24: 9a:b2:27:25:54:af:f3:56:90:b3:c5:8d:4a:ce:50: 75:5b:25:0d:c4:6d:17:f0:9b:3b:2f:a8:eb:ca:e3: a6:3e:88:f5:7c:74:7c:27:7b:db:a7:93:4b:be:3d: 66:a0:13:47:a1:91:a2:ca:ad:e3:de:62:36:20:a0: 79:bd:a8:7a:87:2a:3c:cf:11:95:6f:7b:8b:97:40: 17:ff:75:77:24:59:70:c5:0d:be:af:58:e1:b3:6a: 63:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AD:05:09:78:17:BF:FE:61:5B:AE:F5:23:42:06:87:77:9A:9C:99 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qa0FCXgXv_5hW671I0IGh3eanJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.16.0/23 212.134.19.0/24 212.134.22.0/24 212.134.24.0/24 212.134.36.0/24 212.134.39.0-212.134.43.255 212.134.47.0-212.134.51.255 212.134.53.0/24 212.134.56.0-212.134.58.255 212.134.80.0-212.134.85.255 212.134.87.0-212.134.88.255 212.134.95.0/24 212.134.98.0/23 212.134.104.0/22 212.134.109.0-212.134.111.255 212.134.128.0/22 212.134.136.0/21 212.134.148.0/24 212.134.156.0/24 212.134.171.0/24 212.134.175.0/24 212.134.179.0/24 212.134.196.0/22 212.134.204.0/22 212.134.212.0-212.134.219.255 212.134.228.0-212.134.235.255 212.134.248.0/22 212.135.24.0/23 212.135.27.0-212.135.30.255 212.135.128.0/23 212.135.135.0/24 212.135.161.0-212.135.162.255 212.135.164.0-212.135.173.255 212.135.204.0/22 212.135.240.0/23 212.135.244.0/23 212.135.248.0/23 212.135.252.0/23 Signature Algorithm: sha256WithRSAEncryption 98:e1:91:de:30:89:dc:bf:56:bb:b9:45:e0:7f:4b:37:5d:49: c6:49:59:3c:73:46:94:bc:91:b9:74:b9:c4:02:71:bc:b6:35: 59:57:cd:85:53:6e:e5:e4:25:70:4d:83:02:c3:5d:c3:ed:a7: 3a:ab:af:fa:22:bf:1a:fb:45:6e:28:af:60:e5:cf:f7:bc:66: bb:b3:d6:5f:8e:75:d7:d6:78:8c:13:10:12:fb:92:e6:aa:65: a6:96:6f:2d:27:1a:ac:2e:25:88:a6:4a:88:82:c0:0f:be:26: 22:4d:53:f0:d0:41:a3:84:bf:e4:df:fb:21:83:59:cc:dd:de: 6c:50:cb:fa:1f:1a:e5:39:59:b5:05:d5:da:ca:0c:e6:7b:19: 07:60:60:e4:46:4e:c4:92:9c:26:ad:36:f2:19:5a:e4:85:95: 87:99:8f:c3:4e:d0:5f:3d:ff:4f:13:68:3e:a5:23:d1:26:fd: bd:ba:51:9f:5b:a2:12:41:02:ea:03:03:ef:02:64:19:08:bd: 2e:36:6e:a1:2a:36:bb:0c:aa:7f:70:de:aa:95:a4:17:3e:14: c5:ee:87:8b:8b:c4:93:33:02:f7:d8:a0:cb:d2:4c:95:98:ba: 23:33:9e:43:12:ed:9b:d4:7a:31:dd:fd:8c:0e:f0:c7:31:af: 31:90:3a:1b -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgISAZtuS2LubMMxkSjoaAywJMmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjMwMDgwNjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWFkMDUwOTc4MTdiZmZlNjE1YmFlZjUyMzQyMDY4Nzc3OWE5Yzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40rcdLpgHNshpiGc38UnkTU7sinF x9tnDB4BsrVSDUEMPsg/TyVQRlVpPCRfAh4Pk4iGN4y372cQS4C5RGZCD67p9Ilr 4ac2fSFJ/aHV4Zyn8WMsGMXYPwuHuT1A6ovOySkbfX63Dv8usdEVIdgMSZ+KkUjy 8L/AhV0ehKrk69BcPkpc7nBeAyrsQXHvMBgQ/3Q6YHKhcgYStGjcSGKJo4zB0SSa siclVK/zVpCzxY1KzlB1WyUNxG0X8Js7L6jryuOmPoj1fHR8J3vbp5NLvj1moBNH oZGiyq3j3mI2IKB5vah6hyo8zxGVb3uLl0AX/3V3JFlwxQ2+r1jhs2pjDQIDAQAB o4IDSTCCA0UwHQYDVR0OBBYEFKmtBQl4F7/+YVuu9SNCBod3mpyZMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvcWEwRkNYZ1h2XzVoVzY3MUkwSUdoM2VhbkprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBXQYIKwYBBQUHAQcBAf8EggFMMIIBSDCCAUQEAgABMIIB PAMEAdSGEAMEANSGEwMEANSGFgMEANSGGAMEANSGJDAMAwQA1IYnAwQC1IYoMAwD BADUhi8DBALUhjADBADUhjUwDAMEA9SGOAMEANSGOjAMAwQE1IZQAwQB1IZUMAwD BADUhlcDBADUhlgDBADUhl8DBAHUhmIDBALUhmgwDAMEANSGbQMEBNSGYAMEAtSG gAMEA9SGiAMEANSGlAMEANSGnAMEANSGqwMEANSGrwMEANSGswMEAtSGxAMEAtSG zDAMAwQC1IbUAwQC1IbYMAwDBALUhuQDBALUhugDBALUhvgDBAHUhxgwDAMEANSH GwMEANSHHgMEAdSHgAMEANSHhzAMAwQA1IehAwQA1IeiMAwDBALUh6QDBAHUh6wD BALUh8wDBAHUh/ADBAHUh/QDBAHUh/gDBAHUh/wwDQYJKoZIhvcNAQELBQADggEB AJjhkd4widy/Vru5ReB/SzddScZJWTxzRpS8kbl0ucQCcby2NVlXzYVTbuXkJXBN gwLDXcPtpzqrr/oivxr7RW4or2Dlz/e8Zruz1l+OddfWeIwTEBL7kuaqZaaWby0n GqwuJYimSoiCwA++JiJNU/DQQaOEv+Tf+yGDWczd3mxQy/ofGuU5WbUF1drKDOZ7 GQdgYORGTsSSnCatNvIZWuSFlYeZj8NO0F89/08TaD6lI9Em/b26UZ9bohJBAuoD A+8CZBkIvS42bqEqNrsMqn9w3qqVpBc+FMXuh4uLxJMzAvfYoMvSTJWYuiMznkMS 7ZvUejHd/YwO8McxrzGQOhs= -----END CERTIFICATE-----Generated at Tue Dec 30 21:06:30 2025 by rpki-client