This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0_FIbwJbo1rlGjIx5see0W7q9Bc.roa File: 0_FIbwJbo1rlGjIx5see0W7q9Bc.roa (raw, json) Hash identifier: LrvLocpaObJSgainhIlu226HDCUdXrTSrU9kL62+okY= Subject key identifier: D3:F1:48:6F:02:5B:A3:5A:E5:1A:32:31:E6:C7:9E:D1:6E:EA:F4:17 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AEEB41453A71C1DD48EDA4F8A79159BAC Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0_FIbwJbo1rlGjIx5see0W7q9Bc.roa Signing time: Fri 05 Dec 2025 13:29:30 +0000 ROA not before: Fri 05 Dec 2025 13:29:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200590 IP address blocks: 212.134.60.0/22 maxlen: 24 212.134.60.0/24 maxlen: 24 212.134.61.0/24 maxlen: 24 212.134.62.0/24 maxlen: 24 212.134.63.0/24 maxlen: 24 212.134.240.0/24 maxlen: 24 212.134.241.0/24 maxlen: 24 212.134.242.0/24 maxlen: 24 212.134.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:b4:14:53:a7:1c:1d:d4:8e:da:4f:8a:79:15:9b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 5 13:29:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d3f1486f025ba35ae51a3231e6c79ed16eeaf417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3b:ca:d7:82:cc:5d:fa:1a:99:9b:d7:a0:88: e3:4c:71:00:5d:68:9b:d1:b1:71:58:c2:0d:2d:51: 73:1f:66:4c:c0:94:3a:a0:88:b8:a4:76:b7:56:a2: bf:a3:01:6f:14:59:3f:b5:49:12:43:a1:5d:c8:fb: b5:b9:96:f5:69:cb:f7:64:76:93:90:f7:3a:ec:1e: 59:b2:fd:7b:27:5b:89:7c:71:de:90:1b:b9:a9:18: cf:ff:98:15:f5:c7:1c:10:09:b4:9d:aa:97:44:88: b7:93:60:b7:f8:79:d3:ab:a0:68:74:c2:2c:d7:ac: cf:03:94:f5:5b:91:77:97:f9:30:7b:45:ab:7b:54: fb:8b:b2:20:2b:0d:ae:6e:a9:3f:b3:4d:8e:34:a0: 3f:ae:30:c0:ac:9e:13:29:00:a7:f4:61:83:02:93: 49:f3:63:b4:af:de:80:d0:9a:28:8e:eb:b6:cc:8c: 96:19:a1:57:7b:68:fb:85:ac:61:7b:51:5e:51:10: 54:8b:9e:42:89:dd:95:30:af:c5:6e:dd:96:d9:cc: f7:58:20:af:69:ac:1b:2f:ad:62:1c:92:6f:ca:db: 5f:ec:46:65:d3:bc:df:45:73:8b:5e:f0:19:bc:cf: a8:63:81:3c:60:0f:a3:18:32:b6:87:61:7b:4e:7b: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F1:48:6F:02:5B:A3:5A:E5:1A:32:31:E6:C7:9E:D1:6E:EA:F4:17 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0_FIbwJbo1rlGjIx5see0W7q9Bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.60.0/22 212.134.240.0/22 Signature Algorithm: sha256WithRSAEncryption b8:0a:32:c7:f8:d9:dd:ba:b2:9b:33:50:92:16:8b:2d:49:55: 81:cb:93:3d:8c:36:70:c7:cd:b6:45:4d:36:d7:c7:43:ea:85: 73:d8:9b:50:32:e3:60:15:10:8e:a8:72:74:27:36:b6:f0:e6: 64:49:e3:bd:32:b4:5d:86:40:fc:be:81:a8:51:ab:fc:db:c7: 60:6f:bc:5a:fe:81:68:b2:a7:4a:26:84:f5:f2:0a:26:78:56: a8:cb:df:a6:49:fb:55:2c:8a:dd:89:e8:42:78:6c:f1:98:3c: a9:ca:aa:aa:d2:d7:cf:26:f6:78:ed:2d:cc:d7:90:e9:42:55: 23:7f:92:e1:4c:3c:e6:af:57:98:a2:0d:c0:88:f5:59:c0:cc: 74:e2:67:2c:4a:ff:fc:91:4f:3d:9a:4a:96:9b:3e:68:2b:73: d1:e8:11:55:84:1b:9c:cd:95:e5:0c:4d:49:a7:a0:85:eb:f4: 26:b4:09:cf:eb:27:31:13:d1:99:ff:bc:48:34:11:a8:8c:e3: 22:d2:c3:7e:1a:29:73:4b:97:91:a8:67:00:a7:97:c4:75:e6: f0:af:67:dd:dc:b3:7d:f6:a8:72:8b:8b:c6:b3:79:01:bd:53: d8:2a:fc:7a:b0:88:44:c4:a2:d7:de:0f:0a:65:0c:ab:b3:e8: 83:db:65:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrutBRTpxwd1I7aT4p5FZusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjA1MTMyOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2YxNDg2ZjAyNWJhMzVhZTUxYTMyMzFlNmM3OWVkMTZlZWFmNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zvK14LMXfoamZvXoIjjTHEAXWib 0bFxWMINLVFzH2ZMwJQ6oIi4pHa3VqK/owFvFFk/tUkSQ6FdyPu1uZb1acv3ZHaT kPc67B5Zsv17J1uJfHHekBu5qRjP/5gV9cccEAm0naqXRIi3k2C3+HnTq6BodMIs 16zPA5T1W5F3l/kwe0Wre1T7i7IgKw2ubqk/s02ONKA/rjDArJ4TKQCn9GGDApNJ 82O0r96A0Joojuu2zIyWGaFXe2j7haxhe1FeURBUi55Cid2VMK/Fbt2W2cz3WCCv aawbL61iHJJvyttf7EZl07zfRXOLXvAZvM+oY4E8YA+jGDK2h2F7Tns1XQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNPxSG8CW6Na5RoyMebHntFu6vQXMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvMF9GSWJ3SmJvMXJsR2pJeDVzZWUwVzdxOUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1IY8AwQC 1IbwMA0GCSqGSIb3DQEBCwUAA4IBAQC4CjLH+NndurKbM1CSFostSVWBy5M9jDZw x822RU0218dD6oVz2JtQMuNgFRCOqHJ0Jza28OZkSeO9MrRdhkD8voGoUav828dg b7xa/oFosqdKJoT18gomeFaoy9+mSftVLIrdiehCeGzxmDypyqqq0tfPJvZ47S3M 15DpQlUjf5LhTDzmr1eYog3AiPVZwMx04mcsSv/8kU89mkqWmz5oK3PR6BFVhBuc zZXlDE1Jp6CF6/QmtAnP6ycxE9GZ/7xINBGojOMi0sN+GilzS5eRqGcAp5fEdebw r2fd3LN99qhyi4vGs3kBvVPYKvx6sIhExKLX3g8KZQyrs+iD22Um -----END CERTIFICATE-----Generated at Sat Dec 6 19:18:14 2025 by rpki-client