This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wH7g83250btdVBRlZcVTZOSb-L8.roa File: wH7g83250btdVBRlZcVTZOSb-L8.roa (raw, json) Hash identifier: bWJ+9okWHtWvMjfSBcmigJrImxfL3lKx3qq4m3BVyMg= Subject key identifier: C0:7E:E0:F3:7D:B9:D1:BB:5D:54:14:65:65:C5:53:64:E4:9B:F8:BF Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AD3CB041A0275D7FECA0F33A690E1920C Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wH7g83250btdVBRlZcVTZOSb-L8.roa Signing time: Sun 30 Nov 2025 08:04:48 +0000 ROA not before: Sun 30 Nov 2025 08:04:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 212.134.19.0/24 maxlen: 24 212.134.109.0/24 maxlen: 24 212.134.171.0/24 maxlen: 24 212.134.232.0/24 maxlen: 24 212.135.20.0/24 maxlen: 24 212.135.158.0/24 maxlen: 24 212.135.164.0/24 maxlen: 24 212.135.246.0/24 maxlen: 24 212.135.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d3:cb:04:1a:02:75:d7:fe:ca:0f:33:a6:90:e1:92:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 30 08:04:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c07ee0f37db9d1bb5d54146565c55364e49bf8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:65:1c:43:e8:43:c8:ee:a0:f8:7f:12:73: c1:08:ab:af:45:62:2c:a6:69:9e:69:80:cc:95:e5: 26:5d:1b:67:88:bb:7a:60:9b:92:5a:b0:40:d2:5f: 44:41:42:f8:ca:59:9f:78:37:15:06:7e:72:3d:c5: 57:5d:7c:1a:fd:ea:88:67:04:46:0a:41:f3:3b:25: ef:7e:67:13:22:df:a7:ca:04:13:9b:0f:9f:79:69: 4e:9d:47:50:69:d3:e7:e0:c1:c5:48:92:f6:ee:3d: e9:1d:0b:87:97:45:6b:3a:3e:dd:9d:65:fc:07:cc: 20:44:ba:ca:90:4e:da:80:37:40:64:3b:f9:c9:b1: 98:b2:6d:23:00:15:9c:3c:0e:e3:d2:55:b7:0c:56: 8a:a8:df:15:2e:c9:69:b4:74:ee:c2:bc:c9:84:8e: 06:71:b1:75:e2:0a:d4:09:74:f7:86:37:8e:87:df: 4e:d1:3a:0e:68:b8:8f:ba:91:55:e7:45:06:be:a1: a3:ce:2f:75:8b:25:ae:66:ff:e8:b9:8b:b4:6a:5c: 0b:16:b2:98:26:14:92:c9:71:46:ed:f5:95:aa:87: 8c:08:1b:a3:8d:ef:e6:ee:aa:30:33:84:cf:e9:0d: 41:4c:fe:d6:98:80:3e:d0:27:b2:72:ee:16:68:b7: 16:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7E:E0:F3:7D:B9:D1:BB:5D:54:14:65:65:C5:53:64:E4:9B:F8:BF X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wH7g83250btdVBRlZcVTZOSb-L8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.19.0/24 212.134.109.0/24 212.134.171.0/24 212.134.232.0/24 212.135.20.0/24 212.135.158.0/24 212.135.164.0/24 212.135.246.0/23 Signature Algorithm: sha256WithRSAEncryption 96:56:1c:01:89:ab:3f:37:31:3d:f0:bf:da:16:a2:6f:b4:88: 70:24:c5:f8:fb:72:b4:33:66:50:7c:72:0f:55:af:f3:d8:e1: 63:84:3a:5d:fa:79:72:a3:83:9f:7d:36:bd:f1:b5:a3:6d:f7: 83:5a:21:5c:91:9d:e6:0e:01:b4:39:67:66:ba:36:23:c8:e4: b1:ec:89:2f:78:e9:f9:31:ed:c6:e1:2a:06:49:8f:6c:9f:64: c3:90:ad:67:21:68:95:64:fc:94:98:bb:f7:4b:00:13:9c:20: a8:09:74:ea:c8:02:81:2f:d6:93:a9:2c:9a:fe:58:54:b9:0d: 61:d7:6b:e4:1b:94:ed:2c:42:6b:7a:71:da:87:8b:7e:08:f9: c2:85:80:8a:af:3a:61:9f:78:11:75:47:48:74:2f:1e:bf:1c: 80:d5:2b:47:bf:0c:23:61:84:77:18:29:83:42:cc:4c:ac:c9: fb:84:16:be:55:3c:f2:77:62:3d:79:c8:07:13:5e:33:43:01: 8a:5f:8c:06:dd:d7:8f:53:6e:c9:ad:32:5b:27:e0:3d:b9:99: c1:c6:e2:aa:0d:41:10:54:ca:df:a9:36:3c:07:2b:52:21:72: 5a:fa:63:6f:77:24:6d:7e:e9:0e:b5:7e:a9:43:f4:1c:8f:57: 7b:46:69:11 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZrTywQaAnXX/soPM6aQ4ZIMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTMwMDgwNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDdlZTBmMzdkYjlkMWJiNWQ1NDE0NjU2NWM1NTM2NGU0OWJmOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbhlHEPoQ8juoPh/EnPBCKuvRWIs pmmeaYDMleUmXRtniLt6YJuSWrBA0l9EQUL4ylmfeDcVBn5yPcVXXXwa/eqIZwRG CkHzOyXvfmcTIt+nygQTmw+feWlOnUdQadPn4MHFSJL27j3pHQuHl0VrOj7dnWX8 B8wgRLrKkE7agDdAZDv5ybGYsm0jABWcPA7j0lW3DFaKqN8VLslptHTuwrzJhI4G cbF14grUCXT3hjeOh99O0ToOaLiPupFV50UGvqGjzi91iyWuZv/ouYu0alwLFrKY JhSSyXFG7fWVqoeMCBujje/m7qowM4TP6Q1BTP7WmIA+0Ceycu4WaLcWtQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFMB+4PN9udG7XVQUZWXFU2Tkm/i/MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvd0g3ZzgzMjUwYnRkVkJSbFpjVlRaT1NiLUw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQA1IYTAwQA 1IZtAwQA1IarAwQA1IboAwQA1IcUAwQA1IeeAwQA1IekAwQB1If2MA0GCSqGSIb3 DQEBCwUAA4IBAQCWVhwBias/NzE98L/aFqJvtIhwJMX4+3K0M2ZQfHIPVa/z2OFj hDpd+nlyo4OffTa98bWjbfeDWiFckZ3mDgG0OWdmujYjyOSx7IkveOn5Me3G4SoG SY9sn2TDkK1nIWiVZPyUmLv3SwATnCCoCXTqyAKBL9aTqSya/lhUuQ1h12vkG5Tt LEJrenHah4t+CPnChYCKrzphn3gRdUdIdC8evxyA1StHvwwjYYR3GCmDQsxMrMn7 hBa+VTzyd2I9ecgHE14zQwGKX4wG3dePU27JrTJbJ+A9uZnBxuKqDUEQVMrfqTY8 BytSIXJa+mNvdyRtfukOtX6pQ/Qcj1d7RmkR -----END CERTIFICATE-----Generated at Thu Dec 4 19:56:36 2025 by rpki-client