This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xC3fjfTuVBPBOOHxAHtCUl5zM84.roa File: xC3fjfTuVBPBOOHxAHtCUl5zM84.roa (raw, json) Hash identifier: xNLg3ApfJTIXKp1hpIVLvPdpOcsKaDYniT4CAWWli6g= Subject key identifier: C4:2D:DF:8D:F4:EE:54:13:C1:38:E1:F1:00:7B:42:52:5E:73:33:CE Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A24B18B9BC4671B9D97185F2DE7315 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xC3fjfTuVBPBOOHxAHtCUl5zM84.roa Signing time: Thu 01 Jan 2026 08:17:40 +0000 ROA not before: Thu 01 Jan 2026 08:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 212.134.212.0/24 maxlen: 24 212.134.213.0/24 maxlen: 24 212.134.214.0/24 maxlen: 24 212.134.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4b:18:b9:bc:46:71:b9:d9:71:85:f2:de:73:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c42ddf8df4ee5413c138e1f1007b42525e7333ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:04:7c:51:d9:ca:63:41:be:f3:9b:6d:50: 0c:55:4d:09:99:2e:83:06:5a:bd:02:da:a2:d9:53: 06:09:1a:10:f3:2a:29:12:a2:8a:b9:ab:09:0c:2f: 94:93:70:49:58:0a:f9:8b:ed:8e:17:0d:9d:6c:9e: ee:2f:70:07:c8:69:36:0a:a4:66:6b:65:29:30:67: 1f:68:18:4c:dc:8a:83:02:1a:b7:e4:dc:64:b7:b1: 97:3c:12:13:9f:b1:73:8a:39:5b:c9:63:0a:b8:c1: 95:ca:f6:0c:11:5f:66:f0:95:fd:97:59:75:4e:1c: 65:15:f3:58:54:92:aa:91:75:95:0e:0f:18:93:64: 57:3a:a6:b3:68:8f:f0:45:c1:d0:22:48:5f:a9:a1: f4:bb:5d:7f:33:8b:d1:fe:29:7c:dc:d6:92:96:0c: 1f:a9:ce:49:5b:fe:22:f4:e3:26:c6:8a:0f:94:07: 09:7b:f9:49:a6:ee:e0:69:d5:72:52:ce:86:92:a4: 4c:6c:f0:39:47:ee:8d:3f:f7:3c:18:0f:54:61:e1: e0:3b:45:29:b5:6f:f7:54:02:76:9a:8c:8f:78:1f: e4:ef:32:d0:29:2e:b7:b2:37:56:96:d4:40:6d:aa: a6:fb:2c:91:64:a2:8a:88:db:4d:87:d2:e9:88:2b: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2D:DF:8D:F4:EE:54:13:C1:38:E1:F1:00:7B:42:52:5E:73:33:CE X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xC3fjfTuVBPBOOHxAHtCUl5zM84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.212.0/22 Signature Algorithm: sha256WithRSAEncryption b9:e7:f0:6b:ea:64:9d:15:20:44:7b:e0:89:b8:d9:59:c0:ee: fd:07:77:67:da:12:e9:e4:23:cb:02:27:1a:eb:e8:70:87:f3: d3:ff:4c:d9:1e:46:a3:78:f8:d9:66:37:05:86:d5:b8:aa:e5: c4:c6:e7:e0:91:f4:03:64:ef:23:c0:b8:76:90:b6:de:46:24: a5:5d:52:3a:01:02:31:9a:d0:89:07:ad:cf:37:60:c4:ee:96: 34:15:b2:f9:f0:78:92:9d:d8:86:6c:84:a9:e9:d3:6d:14:6c: 0d:69:76:6d:9e:1c:c8:1a:a7:80:e8:29:22:a5:e4:81:e8:ea: db:45:c4:dc:58:9c:1e:a8:db:88:23:21:3c:a8:91:95:9c:c3: 65:f0:37:46:bb:4a:10:69:2c:e2:6f:4a:a7:af:83:a1:f3:b7: 9c:32:54:2f:ae:46:8e:13:04:65:03:dc:98:71:e6:87:ed:0f: d4:6a:87:6e:b9:23:27:97:df:86:22:7a:9f:0c:01:ee:94:59: 9f:95:73:49:7f:d6:6b:3a:20:80:04:67:8c:cb:70:b5:36:2f: 08:12:6e:4d:57:c5:cf:76:0c:66:34:0a:3d:f5:89:57:33:18: 06:d4:1c:46:4d:b0:d9:d0:8b:7d:87:ff:b1:f9:b9:7f:63:07: 42:f5:bd:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oksYubxGcbnZcYXy3nMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDJkZGY4ZGY0ZWU1NDEzYzEzOGUxZjEwMDdiNDI1MjVlNzMzM2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZsEfFHZymNBvvObbVAMVU0JmS6D Blq9Atqi2VMGCRoQ8yopEqKKuasJDC+Uk3BJWAr5i+2OFw2dbJ7uL3AHyGk2CqRm a2UpMGcfaBhM3IqDAhq35Nxkt7GXPBITn7FzijlbyWMKuMGVyvYMEV9m8JX9l1l1 ThxlFfNYVJKqkXWVDg8Yk2RXOqazaI/wRcHQIkhfqaH0u11/M4vR/il83NaSlgwf qc5JW/4i9OMmxooPlAcJe/lJpu7gadVyUs6GkqRMbPA5R+6NP/c8GA9UYeHgO0Up tW/3VAJ2moyPeB/k7zLQKS63sjdWltRAbaqm+yyRZKKKiNtNh9LpiCtfJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMQt34307lQTwTjh8QB7QlJeczPOMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEveEMzZmpmVHVWQlBCT09IeEFIdENVbDV6TTg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1IbUMA0G CSqGSIb3DQEBCwUAA4IBAQC55/Br6mSdFSBEe+CJuNlZwO79B3dn2hLp5CPLAica 6+hwh/PT/0zZHkajePjZZjcFhtW4quXExufgkfQDZO8jwLh2kLbeRiSlXVI6AQIx mtCJB63PN2DE7pY0FbL58HiSndiGbISp6dNtFGwNaXZtnhzIGqeA6CkipeSB6Orb RcTcWJweqNuIIyE8qJGVnMNl8DdGu0oQaSzib0qnr4Oh87ecMlQvrkaOEwRlA9yY ceaH7Q/UaoduuSMnl9+GInqfDAHulFmflXNJf9ZrOiCABGeMy3C1Ni8IEm5NV8XP dgxmNAo99YlXMxgG1BxGTbDZ0It9h/+x+bl/YwdC9b1o -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:15 2026 by rpki-client