This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6F4O4SxMY_g2gsUSEGlDSogZbfE.roa File: 6F4O4SxMY_g2gsUSEGlDSogZbfE.roa (raw, json) Hash identifier: egVBJ7Jv2AjDubrNBGHgIrmJ+Fw402mKzC3PafkcZ1c= Subject key identifier: E8:5E:0E:E1:2C:4C:63:F8:36:82:C5:12:10:69:43:4A:88:19:6D:F1 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AECF8F6DB030BBDFDE33B26859CBE3A29 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6F4O4SxMY_g2gsUSEGlDSogZbfE.roa Signing time: Fri 05 Dec 2025 05:25:30 +0000 ROA not before: Fri 05 Dec 2025 05:25:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 212.134.19.0/24 maxlen: 24 212.134.83.0/24 maxlen: 24 212.134.89.0/24 maxlen: 24 212.134.109.0/24 maxlen: 24 212.134.156.0/24 maxlen: 24 212.134.232.0/24 maxlen: 24 212.135.20.0/24 maxlen: 24 212.135.21.0/24 maxlen: 24 212.135.27.0/24 maxlen: 24 212.135.31.0/24 maxlen: 24 212.135.155.0/24 maxlen: 24 212.135.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ec:f8:f6:db:03:0b:bd:fd:e3:3b:26:85:9c:be:3a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 5 05:25:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e85e0ee12c4c63f83682c5121069434a88196df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:aa:87:33:1f:4f:4a:44:29:f9:29:51:13:ee: cf:ce:41:14:e3:55:fc:5b:8a:bf:d2:88:6f:51:bd: 8a:8c:e8:e3:e7:96:61:d5:75:e9:4a:02:ba:f6:2c: 8f:34:80:2c:0f:41:dc:de:91:02:69:04:42:fa:cf: 7f:e6:a3:48:cb:68:df:8b:56:ad:f6:99:cf:97:5c: 09:ec:03:f5:79:c1:dc:1b:96:9d:87:42:3d:bf:4f: 6f:11:d5:73:ab:95:74:b5:9e:22:d2:c0:ac:a8:1c: f4:f6:5d:a0:b7:35:5a:cb:15:10:78:a9:df:fa:ca: 3e:da:87:00:2b:aa:5b:4a:00:a3:e3:12:8a:df:4a: e5:d2:26:0a:c9:c2:a5:a6:b2:0b:65:b1:8e:76:a5: af:ba:a3:76:e0:10:1c:c2:df:c3:ca:b7:5b:07:82: 0f:86:2e:13:50:3f:07:13:6c:2c:40:cb:6e:a3:71: eb:3a:38:78:ea:9e:36:8a:19:5e:38:bd:6c:54:bb: 38:64:c2:72:98:4c:f4:67:03:ce:b2:97:75:84:39: 96:cb:25:48:4e:e9:d5:cc:32:90:24:27:8b:d9:23: 4c:b7:09:50:03:82:d4:cc:a3:6b:f5:4a:a1:fc:61: 98:59:2a:08:74:6f:95:5e:84:33:91:4f:6a:dd:76: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5E:0E:E1:2C:4C:63:F8:36:82:C5:12:10:69:43:4A:88:19:6D:F1 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6F4O4SxMY_g2gsUSEGlDSogZbfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.19.0/24 212.134.83.0/24 212.134.89.0/24 212.134.109.0/24 212.134.156.0/24 212.134.232.0/24 212.135.20.0/23 212.135.27.0/24 212.135.31.0/24 212.135.155.0/24 212.135.158.0/24 Signature Algorithm: sha256WithRSAEncryption 40:7c:f9:0e:02:cc:31:b7:92:13:9c:01:f3:b4:a0:1d:d4:30: 3a:df:c7:1f:b5:5f:95:2a:5c:de:cb:19:3a:3b:00:ab:c3:34: 59:46:6d:ec:82:2b:6f:f1:91:86:56:04:2c:cf:07:df:aa:bf: 76:38:da:04:fd:0b:e2:f7:fb:99:63:61:2a:f8:86:1b:bb:14: c4:a5:68:a7:37:49:f1:88:44:23:86:43:8e:55:07:fb:3e:2e: 79:21:e0:15:90:e2:92:48:5f:c6:78:05:88:ad:9c:9f:a2:d8: b7:3f:f0:62:ed:88:14:d2:ee:41:0a:a7:68:68:a5:78:85:d6: 8b:0e:d3:99:2e:b3:f1:b4:92:ba:d4:08:de:08:12:e9:09:cd: 2f:16:ff:11:ee:f5:c2:79:2f:54:93:21:23:ee:f2:26:72:ea: ab:7f:e9:95:b5:9a:5f:01:7a:ac:80:de:6a:79:18:d0:ea:4c: b5:94:83:d3:fe:3b:4d:b6:35:b0:92:22:17:36:06:1c:a3:5b: cb:9f:c2:87:97:b6:00:eb:ac:3b:3c:06:52:83:4f:f1:bd:6f: 15:f8:83:2f:6a:ff:a6:41:48:9d:24:d3:5d:13:b1:b1:ff:9f: 67:40:5a:14:3c:d7:7b:27:cb:29:ca:f5:a1:35:05:aa:59:e3: ad:57:13:b9 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZrs+PbbAwu9/eM7JoWcvjopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjA1MDUyNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODVlMGVlMTJjNGM2M2Y4MzY4MmM1MTIxMDY5NDM0YTg4MTk2ZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqqHMx9PSkQp+SlRE+7PzkEU41X8 W4q/0ohvUb2KjOjj55Zh1XXpSgK69iyPNIAsD0Hc3pECaQRC+s9/5qNIy2jfi1at 9pnPl1wJ7AP1ecHcG5adh0I9v09vEdVzq5V0tZ4i0sCsqBz09l2gtzVayxUQeKnf +so+2ocAK6pbSgCj4xKK30rl0iYKycKlprILZbGOdqWvuqN24BAcwt/DyrdbB4IP hi4TUD8HE2wsQMtuo3HrOjh46p42ihleOL1sVLs4ZMJymEz0ZwPOspd1hDmWyyVI TunVzDKQJCeL2SNMtwlQA4LUzKNr9Uqh/GGYWSoIdG+VXoQzkU9q3XYs6wIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFOheDuEsTGP4NoLFEhBpQ0qIGW3xMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvNkY0TzRTeE1ZX2cyZ3NVU0VHbERTb2daYmZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQA1IYTAwQA 1IZTAwQA1IZZAwQA1IZtAwQA1IacAwQA1IboAwQB1IcUAwQA1IcbAwQA1IcfAwQA 1IebAwQA1IeeMA0GCSqGSIb3DQEBCwUAA4IBAQBAfPkOAswxt5ITnAHztKAd1DA6 38cftV+VKlzeyxk6OwCrwzRZRm3sgitv8ZGGVgQszwffqr92ONoE/Qvi9/uZY2Eq +IYbuxTEpWinN0nxiEQjhkOOVQf7Pi55IeAVkOKSSF/GeAWIrZyfoti3P/Bi7YgU 0u5BCqdoaKV4hdaLDtOZLrPxtJK61AjeCBLpCc0vFv8R7vXCeS9UkyEj7vImcuqr f+mVtZpfAXqsgN5qeRjQ6ky1lIPT/jtNtjWwkiIXNgYco1vLn8KHl7YA66w7PAZS g0/xvW8V+IMvav+mQUidJNNdE7Gx/59nQFoUPNd7J8spyvWhNQWqWeOtVxO5 -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:20 2025 by rpki-client