This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rm_Eo2QsyHS9NmCpo7jTPR8u6AI.roa File: rm_Eo2QsyHS9NmCpo7jTPR8u6AI.roa (raw, json) Hash identifier: MN6wfR2QZeh3nFQ5JLgz1oJtQy6xGIBcyPf3FV/O6is= Subject key identifier: AE:6F:C4:A3:64:2C:C8:74:BD:36:60:A9:A3:B8:D3:3D:1F:2E:E8:02 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A25C8FB1309AC80C9469F3EC31006F Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rm_Eo2QsyHS9NmCpo7jTPR8u6AI.roa Signing time: Thu 01 Jan 2026 08:17:44 +0000 ROA not before: Thu 01 Jan 2026 08:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206300 IP address blocks: 212.134.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5c:8f:b1:30:9a:c8:0c:94:69:f3:ec:31:00:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae6fc4a3642cc874bd3660a9a3b8d33d1f2ee802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:6c:30:03:6e:fe:f6:b6:ec:15:f0:1e:5e: a4:06:03:7d:38:b7:ba:5a:b5:cb:5c:be:bf:4a:17: 1c:c2:f1:a4:ea:0f:65:5b:c8:1b:76:0e:a1:0e:c8: e5:4d:6f:3a:52:66:95:4d:cd:80:6a:f8:be:2d:65: 2a:78:47:e8:e0:a4:a5:11:55:ee:18:dd:3f:df:f0: 46:75:84:0e:a4:41:8f:f5:af:f9:83:b9:83:00:cf: 1d:58:5c:14:47:28:c7:c9:6b:42:d1:af:20:55:1f: cf:d9:55:4f:50:ab:9f:67:48:67:01:f6:79:2f:a8: 75:a5:d4:75:81:22:d9:ef:ef:bd:0f:12:7a:98:e7: cf:73:b9:e5:eb:36:29:1f:5c:c0:a9:96:5a:b2:e4: c0:c7:80:3c:1b:4a:ab:de:0c:e3:1a:51:a5:3e:a2: c9:fb:7b:7b:1c:24:cd:75:00:b3:67:f4:f4:3c:8c: 94:c3:35:90:df:9b:41:dd:53:a0:c1:6e:df:49:e3: 61:d1:c3:18:fa:bb:a4:4f:96:74:ca:35:8a:db:b5: 1f:81:77:08:4d:26:04:3b:96:2b:f6:44:d9:46:13: e1:fa:a5:ad:4b:33:c0:f6:20:80:8b:4c:ad:41:c2: 96:83:d7:55:87:d6:aa:ec:21:d4:87:03:2a:3b:50: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6F:C4:A3:64:2C:C8:74:BD:36:60:A9:A3:B8:D3:3D:1F:2E:E8:02 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rm_Eo2QsyHS9NmCpo7jTPR8u6AI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.174.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:14:2b:df:3a:0e:e9:c6:b5:bc:56:1f:1e:d1:c8:c6:b0:c8: ca:2f:2b:19:1c:51:d6:7d:3e:33:42:35:f3:17:f2:0b:09:e3: 9a:c7:ee:0f:ce:67:31:95:68:66:2e:a2:5d:88:25:d0:8e:8b: 6e:ef:7e:1d:29:b8:35:ce:2c:f9:32:9c:d3:f1:ab:a4:55:e8: 35:13:7c:ff:b3:56:63:c1:57:c0:a8:5c:ab:fc:3f:10:06:20: 10:fd:68:ea:bb:db:e7:c3:da:a9:a3:b4:36:0e:1c:10:aa:f6: de:ec:2a:b8:95:ac:95:3a:52:62:42:ff:67:e5:94:dc:5f:9d: 50:2e:70:28:38:80:d6:35:43:79:56:f1:90:a7:21:08:57:c2: d7:8e:c1:e8:9d:84:47:06:1a:a1:0e:40:a7:31:e6:f6:54:05: 80:11:44:96:04:66:dc:a3:58:64:c8:d5:09:e7:ff:e9:8d:62: 11:87:c2:7c:42:93:2b:84:bc:91:d0:07:2d:6d:ad:c8:ce:b1: a4:2e:f8:15:6e:66:87:3f:12:a6:14:e3:4c:d2:a6:7b:5b:37: b4:56:6c:86:40:27:ad:99:ed:89:78:08:c5:63:25:9d:06:b2: 84:16:94:40:d4:db:7e:c3:9e:98:75:2f:39:84:68:e5:fd:8a: f6:9d:d2:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4olyPsTCayAyUafPsMQBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTZmYzRhMzY0MmNjODc0YmQzNjYwYTlhM2I4ZDMzZDFmMmVlODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0ZsMANu/va27BXwHl6kBgN9OLe6 WrXLXL6/ShccwvGk6g9lW8gbdg6hDsjlTW86UmaVTc2Aavi+LWUqeEfo4KSlEVXu GN0/3/BGdYQOpEGP9a/5g7mDAM8dWFwURyjHyWtC0a8gVR/P2VVPUKufZ0hnAfZ5 L6h1pdR1gSLZ7++9DxJ6mOfPc7nl6zYpH1zAqZZasuTAx4A8G0qr3gzjGlGlPqLJ +3t7HCTNdQCzZ/T0PIyUwzWQ35tB3VOgwW7fSeNh0cMY+rukT5Z0yjWK27UfgXcI TSYEO5Yr9kTZRhPh+qWtSzPA9iCAi0ytQcKWg9dVh9aq7CHUhwMqO1BcvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK5vxKNkLMh0vTZgqaO40z0fLugCMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvcm1fRW8yUXN5SFM5Tm1DcG83alRQUjh1NkFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IauMA0G CSqGSIb3DQEBCwUAA4IBAQCaFCvfOg7pxrW8Vh8e0cjGsMjKLysZHFHWfT4zQjXz F/ILCeOax+4PzmcxlWhmLqJdiCXQjotu734dKbg1ziz5MpzT8aukVeg1E3z/s1Zj wVfAqFyr/D8QBiAQ/Wjqu9vnw9qpo7Q2DhwQqvbe7Cq4layVOlJiQv9n5ZTcX51Q LnAoOIDWNUN5VvGQpyEIV8LXjsHonYRHBhqhDkCnMeb2VAWAEUSWBGbco1hkyNUJ 5//pjWIRh8J8QpMrhLyR0Actba3IzrGkLvgVbmaHPxKmFONM0qZ7Wze0VmyGQCet me2JeAjFYyWdBrKEFpRA1Nt+w56YdS85hGjl/Yr2ndLv -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:05 2026 by rpki-client