This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wAUH2jTpFcVw-wCH6BtXgbrNLIU.roa File: wAUH2jTpFcVw-wCH6BtXgbrNLIU.roa (raw, json) Hash identifier: atH09afo8B3OXsLf5+bnotdh/0KbUScF+tGnvtUbeC0= Subject key identifier: C0:05:07:DA:34:E9:15:C5:70:FB:00:87:E8:1B:57:81:BA:CD:2C:85 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019A7D1323C43D2B0164D9DC9ABCC1C7836D Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wAUH2jTpFcVw-wCH6BtXgbrNLIU.roa Signing time: Thu 13 Nov 2025 11:56:37 +0000 ROA not before: Thu 13 Nov 2025 11:56:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401783 IP address blocks: 212.134.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:13:23:c4:3d:2b:01:64:d9:dc:9a:bc:c1:c7:83:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 13 11:56:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c00507da34e915c570fb0087e81b5781bacd2c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:52:67:93:62:03:dd:28:64:5b:9f:39:47:46: 38:c0:49:b3:0d:29:ce:cc:a5:93:99:1f:63:4b:eb: 6c:f0:9d:4a:1e:ec:55:ce:3d:27:43:f5:6e:d9:91: e4:c6:a8:eb:44:e0:e4:40:c1:60:11:da:cb:b9:1d: 3b:94:9d:31:e6:c3:db:e3:84:b5:df:c2:ac:52:51: ce:be:3f:2d:e6:2b:64:31:a6:f3:b7:5e:65:9d:d8: 41:d1:d9:15:30:3e:af:9a:2a:c8:8b:f8:25:aa:c1: da:72:f1:79:01:26:ea:0f:29:64:3f:8d:c2:71:bb: ba:7c:f2:77:55:61:67:83:85:66:7e:24:fa:16:ae: ef:df:2e:59:0e:44:f5:b9:de:7f:70:78:37:e3:3b: ec:f7:76:b5:05:94:23:95:61:dd:39:d7:42:ea:8a: 77:7e:ba:a3:f7:4b:cc:6e:48:75:9b:84:b1:5b:6c: f4:ed:84:d4:75:e6:7a:6f:8a:ef:c6:5f:d7:45:66: ca:b2:09:cd:d8:4c:88:9f:0e:fa:82:00:28:07:b4: 06:93:9b:9b:f5:7e:29:ca:31:7d:82:25:4b:17:ea: 77:6b:8a:64:b4:0d:c4:fb:4d:73:a4:08:07:1a:60: 4d:ea:c9:a3:51:e4:83:4d:c0:25:38:2b:0b:9d:6b: a1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:05:07:DA:34:E9:15:C5:70:FB:00:87:E8:1B:57:81:BA:CD:2C:85 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wAUH2jTpFcVw-wCH6BtXgbrNLIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.20.0/24 Signature Algorithm: sha256WithRSAEncryption bf:1c:1f:76:11:69:ba:e8:45:59:3c:c1:5b:8c:f3:80:08:94: 67:d8:48:43:a0:f4:ea:99:44:e9:18:1b:34:5f:a9:77:92:b9: fa:26:a5:25:42:0a:b2:c4:c2:cc:9f:51:e5:14:f8:53:10:21: 58:a8:b7:c3:d3:3a:3f:eb:57:e3:72:e9:c0:e5:07:94:3e:83: 2e:7f:ff:95:c5:ec:e0:52:75:d5:d4:57:77:9b:66:66:d5:3c: a0:10:65:ca:cf:51:26:40:db:9c:e4:52:99:54:61:9f:cd:0b: 2a:04:71:df:95:13:ed:f6:b4:48:9f:a3:b2:8f:d7:96:c6:4b: c1:4a:b6:e9:ce:ab:53:2a:34:b5:4f:7e:98:86:1f:89:58:6e: fc:4e:c2:93:2a:ff:d6:b7:88:9d:0d:fd:48:5b:32:0a:49:93: fc:1c:83:28:94:00:2b:73:3e:90:d9:81:41:e5:e6:b0:aa:2b: f4:d3:83:47:e5:0e:f7:96:04:65:e5:d5:31:75:3d:ac:8e:b9: a9:d1:f4:8c:e1:a1:ed:2d:9f:37:5e:c4:95:0f:45:cb:d3:cd: 44:05:88:6e:4d:48:9f:e7:fc:63:52:9a:b9:31:75:6c:2d:db: 68:3c:86:78:fd:5d:c0:c8:08:b0:86:fb:28:89:84:f7:ba:29: b0:e6:57:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp9EyPEPSsBZNncmrzBx4NtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTEzMTE1NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDA1MDdkYTM0ZTkxNWM1NzBmYjAwODdlODFiNTc4MWJhY2QyYzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VJnk2ID3ShkW585R0Y4wEmzDSnO zKWTmR9jS+ts8J1KHuxVzj0nQ/Vu2ZHkxqjrRODkQMFgEdrLuR07lJ0x5sPb44S1 38KsUlHOvj8t5itkMabzt15lndhB0dkVMD6vmirIi/glqsHacvF5ASbqDylkP43C cbu6fPJ3VWFng4VmfiT6Fq7v3y5ZDkT1ud5/cHg34zvs93a1BZQjlWHdOddC6op3 frqj90vMbkh1m4SxW2z07YTUdeZ6b4rvxl/XRWbKsgnN2EyInw76ggAoB7QGk5ub 9X4pyjF9giVLF+p3a4pktA3E+01zpAgHGmBN6smjUeSDTcAlOCsLnWuhCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAFB9o06RXFcPsAh+gbV4G6zSyFMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvd0FVSDJqVHBGY1Z3LXdDSDZCdFhnYnJOTElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IYUMA0G CSqGSIb3DQEBCwUAA4IBAQC/HB92EWm66EVZPMFbjPOACJRn2EhDoPTqmUTpGBs0 X6l3krn6JqUlQgqyxMLMn1HlFPhTECFYqLfD0zo/61fjcunA5QeUPoMuf/+Vxezg UnXV1Fd3m2Zm1TygEGXKz1EmQNuc5FKZVGGfzQsqBHHflRPt9rRIn6Oyj9eWxkvB SrbpzqtTKjS1T36Yhh+JWG78TsKTKv/Wt4idDf1IWzIKSZP8HIMolAArcz6Q2YFB 5eawqiv004NH5Q73lgRl5dUxdT2sjrmp0fSM4aHtLZ83XsSVD0XL081EBYhuTUif 5/xjUpq5MXVsLdtoPIZ4/V3AyAiwhvsoiYT3uimw5le8 -----END CERTIFICATE-----Generated at Thu Dec 4 19:56:09 2025 by rpki-client