This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qf7y-fr752XTJcL-Ip8u1mkvoCk.roa File: qf7y-fr752XTJcL-Ip8u1mkvoCk.roa (raw, json) Hash identifier: ukdQsfnNspAfJDtDKlt25dzbXXqGB3qIPG4DKGAGXPA= Subject key identifier: A9:FE:F2:F9:FA:FB:E7:65:D3:25:C2:FE:22:9F:2E:D6:69:2F:A0:29 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019C5154BACB90B2D55C78328429B47615E6 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qf7y-fr752XTJcL-Ip8u1mkvoCk.roa Signing time: Thu 12 Feb 2026 10:10:33 +0000 ROA not before: Thu 12 Feb 2026 10:10:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 212.134.18.0/24 maxlen: 24 212.134.19.0/24 maxlen: 24 212.134.22.0/24 maxlen: 24 212.134.23.0/24 maxlen: 24 212.134.24.0/24 maxlen: 24 212.134.25.0/24 maxlen: 24 212.134.36.0/24 maxlen: 24 212.134.39.0/24 maxlen: 24 212.134.40.0/22 maxlen: 24 212.134.47.0/24 maxlen: 24 212.134.48.0/22 maxlen: 24 212.134.56.0/23 maxlen: 24 212.134.58.0/24 maxlen: 24 212.134.80.0/24 maxlen: 24 212.134.81.0/24 maxlen: 24 212.134.82.0/24 maxlen: 24 212.134.83.0/24 maxlen: 24 212.134.89.0/24 maxlen: 24 212.134.98.0/23 maxlen: 24 212.134.104.0/23 maxlen: 24 212.134.106.0/23 maxlen: 24 212.134.109.0/24 maxlen: 24 212.134.110.0/23 maxlen: 24 212.134.128.0/24 maxlen: 24 212.134.131.0/24 maxlen: 24 212.134.140.0/22 maxlen: 24 212.134.148.0/24 maxlen: 24 212.134.156.0/24 maxlen: 24 212.134.157.0/24 maxlen: 24 212.134.160.0/22 maxlen: 24 212.134.171.0/24 maxlen: 24 212.134.175.0/24 maxlen: 24 212.134.179.0/24 maxlen: 24 212.134.188.0/22 maxlen: 24 212.134.196.0/22 maxlen: 24 212.134.199.0/24 maxlen: 24 212.134.212.0/22 maxlen: 24 212.134.216.0/22 maxlen: 24 212.134.228.0/22 maxlen: 24 212.134.232.0/22 maxlen: 24 212.134.232.0/24 maxlen: 24 212.134.248.0/24 maxlen: 24 212.135.20.0/24 maxlen: 24 212.135.21.0/24 maxlen: 24 212.135.22.0/23 maxlen: 24 212.135.24.0/23 maxlen: 24 212.135.24.0/24 maxlen: 24 212.135.26.0/24 maxlen: 24 212.135.27.0/24 maxlen: 24 212.135.28.0/23 maxlen: 24 212.135.28.0/24 maxlen: 24 212.135.29.0/24 maxlen: 24 212.135.80.0/20 maxlen: 24 212.135.128.0/23 maxlen: 24 212.135.135.0/24 maxlen: 24 212.135.155.0/24 maxlen: 24 212.135.158.0/24 maxlen: 24 212.135.161.0/24 maxlen: 24 212.135.162.0/24 maxlen: 24 212.135.164.0/24 maxlen: 24 212.135.165.0/24 maxlen: 24 212.135.166.0/24 maxlen: 24 212.135.167.0/24 maxlen: 24 212.135.168.0/24 maxlen: 24 212.135.169.0/24 maxlen: 24 212.135.170.0/24 maxlen: 24 212.135.171.0/24 maxlen: 24 212.135.172.0/24 maxlen: 24 212.135.173.0/24 maxlen: 24 212.135.204.0/22 maxlen: 24 212.135.240.0/23 maxlen: 24 212.135.241.0/24 maxlen: 24 212.135.242.0/24 maxlen: 24 212.135.246.0/24 maxlen: 24 212.135.247.0/24 maxlen: 24 212.135.248.0/23 maxlen: 24 212.135.252.0/23 maxlen: 24 212.135.252.0/24 maxlen: 24 212.135.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:51:54:ba:cb:90:b2:d5:5c:78:32:84:29:b4:76:15:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Feb 12 10:10:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9fef2f9fafbe765d325c2fe229f2ed6692fa029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7b:6b:c7:cd:f2:6b:3b:d8:df:5e:1c:bb:f5: 0f:b6:a5:c6:5a:ce:80:22:2f:44:14:c5:30:f1:c4: 64:cd:fc:d9:e4:6d:86:c5:79:4f:eb:cc:0b:34:7a: 35:43:e5:c1:c4:79:25:56:43:7f:f6:b6:08:fd:bf: 55:9f:01:71:f5:3e:78:49:d9:cb:7a:28:59:28:28: 2a:55:69:1f:d4:90:11:71:52:eb:dd:dc:5b:11:fd: 98:d8:c5:84:49:15:52:39:13:87:0c:b1:3f:33:fd: 4d:6b:2d:84:4b:93:bf:84:49:42:00:19:cf:b3:87: b1:e8:ef:fc:6e:76:32:db:61:63:bf:d3:9d:67:73: 86:41:00:97:b0:8d:2f:75:60:95:5f:cb:64:25:2f: ee:14:ca:be:95:70:7a:63:ba:97:ac:e7:06:52:10: d4:42:67:15:49:64:7a:1c:6d:56:e1:5e:60:94:92: a4:da:a1:e6:51:b6:90:e2:f9:68:c1:01:40:02:10: 08:79:ec:08:85:fd:52:f8:ff:ad:72:49:f5:91:a1: 21:11:d7:e1:51:ff:29:39:f6:78:97:fa:40:ca:de: 9f:5e:b1:2c:e3:54:33:bc:3e:ff:7c:56:e5:13:ef: 98:e4:af:6f:95:d2:1c:b0:14:de:69:27:14:1f:b1: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FE:F2:F9:FA:FB:E7:65:D3:25:C2:FE:22:9F:2E:D6:69:2F:A0:29 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qf7y-fr752XTJcL-Ip8u1mkvoCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.18.0/23 212.134.22.0-212.134.25.255 212.134.36.0/24 212.134.39.0-212.134.43.255 212.134.47.0-212.134.51.255 212.134.56.0-212.134.58.255 212.134.80.0/22 212.134.89.0/24 212.134.98.0/23 212.134.104.0/22 212.134.109.0-212.134.111.255 212.134.128.0/24 212.134.131.0/24 212.134.140.0/22 212.134.148.0/24 212.134.156.0/23 212.134.160.0/22 212.134.171.0/24 212.134.175.0/24 212.134.179.0/24 212.134.188.0/22 212.134.196.0/22 212.134.212.0-212.134.219.255 212.134.228.0-212.134.235.255 212.134.248.0/24 212.135.20.0-212.135.29.255 212.135.80.0/20 212.135.128.0/23 212.135.135.0/24 212.135.155.0/24 212.135.158.0/24 212.135.161.0-212.135.162.255 212.135.164.0-212.135.173.255 212.135.204.0/22 212.135.240.0-212.135.242.255 212.135.246.0-212.135.249.255 212.135.252.0/23 212.135.255.0/24 Signature Algorithm: sha256WithRSAEncryption 58:c8:e1:97:ff:f1:d1:f0:bc:eb:97:8a:bc:49:f7:46:71:60: a9:f7:62:61:26:98:c3:1d:c8:f9:4d:1c:d9:23:35:23:af:f9: b8:80:6f:bb:b4:cd:06:a4:89:c9:c2:d7:79:5b:32:cc:da:c1: f8:11:50:e5:33:98:12:fd:62:6c:28:77:0e:a0:a4:3d:1e:83: aa:b0:d1:61:63:f6:c0:65:4b:8e:59:4a:71:c0:e5:2a:61:0b: 59:2d:11:e2:6e:0a:a9:fa:99:e3:6a:be:b9:70:f0:53:5c:5b: 7b:7e:b5:26:b6:38:ef:5e:a9:a0:63:57:dc:24:d4:d9:c9:2e: 38:47:f2:63:13:d5:63:22:6f:80:f0:22:fa:50:b9:e9:af:a0: 22:9a:26:60:63:10:66:2a:db:c0:dd:c1:4e:25:d8:46:ca:89: 66:10:4e:f2:d5:6b:4a:8f:06:c7:d2:c8:f3:18:80:f0:cb:f2: 55:62:58:70:9d:75:e4:ae:b4:30:0f:ba:d8:c9:a7:6c:05:f2: ff:ad:b4:b1:30:00:d1:65:ae:92:5f:d3:43:44:5b:f0:0a:33: fc:18:9e:18:50:f7:c9:f7:fb:1e:47:35:32:b9:db:30:1d:94: 7d:18:b1:c6:26:5d:57:9b:8c:cc:35:77:3d:b1:a9:18:78:e0: 98:64:b9:61 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgISAZxRVLrLkLLVXHgyhCm0dhXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMjEyMTAxMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWZlZjJmOWZhZmJlNzY1ZDMyNWMyZmUyMjlmMmVkNjY5MmZhMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHtrx83yazvY314cu/UPtqXGWs6A Ii9EFMUw8cRkzfzZ5G2GxXlP68wLNHo1Q+XBxHklVkN/9rYI/b9VnwFx9T54SdnL eihZKCgqVWkf1JARcVLr3dxbEf2Y2MWESRVSOROHDLE/M/1Nay2ES5O/hElCABnP s4ex6O/8bnYy22Fjv9OdZ3OGQQCXsI0vdWCVX8tkJS/uFMq+lXB6Y7qXrOcGUhDU QmcVSWR6HG1W4V5glJKk2qHmUbaQ4vlowQFAAhAIeewIhf1S+P+tckn1kaEhEdfh Uf8pOfZ4l/pAyt6fXrEs41QzvD7/fFblE++Y5K9vldIcsBTeaScUH7F2wwIDAQAB o4IDUTCCA00wHQYDVR0OBBYEFKn+8vn6++dl0yXC/iKfLtZpL6ApMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvcWY3eS1mcjc1MlhUSmNMLUlwOHUxbWt2b0NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBZQYIKwYBBQUHAQcBAf8EggFUMIIBUDCCAUwEAgABMIIB RAMEAdSGEjAMAwQB1IYWAwQB1IYYAwQA1IYkMAwDBADUhicDBALUhigwDAMEANSG LwMEAtSGMDAMAwQD1IY4AwQA1IY6AwQC1IZQAwQA1IZZAwQB1IZiAwQC1IZoMAwD BADUhm0DBATUhmADBADUhoADBADUhoMDBALUhowDBADUhpQDBAHUhpwDBALUhqAD BADUhqsDBADUhq8DBADUhrMDBALUhrwDBALUhsQwDAMEAtSG1AMEAtSG2DAMAwQC 1IbkAwQC1IboAwQA1Ib4MAwDBALUhxQDBAHUhxwDBATUh1ADBAHUh4ADBADUh4cD BADUh5sDBADUh54wDAMEANSHoQMEANSHojAMAwQC1IekAwQB1IesAwQC1IfMMAwD BATUh/ADBADUh/IwDAMEAdSH9gMEAdSH+AMEAdSH/AMEANSH/zANBgkqhkiG9w0B AQsFAAOCAQEAWMjhl//x0fC865eKvEn3RnFgqfdiYSaYwx3I+U0c2SM1I6/5uIBv u7TNBqSJycLXeVsyzNrB+BFQ5TOYEv1ibCh3DqCkPR6DqrDRYWP2wGVLjllKccDl KmELWS0R4m4KqfqZ42q+uXDwU1xbe361JrY4716poGNX3CTU2ckuOEfyYxPVYyJv gPAi+lC56a+gIpomYGMQZirbwN3BTiXYRsqJZhBO8tVrSo8Gx9LI8xiA8MvyVWJY cJ115K60MA+62MmnbAXy/620sTAA0WWukl/TQ0Rb8Aoz/BieGFD3yff7Hkc1Mrnb MB2UfRixxiZdV5uMzDV3PbGpGHjgmGS5YQ== -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:49 2026 by rpki-client