This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9BNb_UYgWfXz1V_s_URE82VQiNE.roa File: 9BNb_UYgWfXz1V_s_URE82VQiNE.roa (raw, json) Hash identifier: 0dsacghSLo3ztuiMeAZZl+chwmoTkOntxsXMYdlcLGQ= Subject key identifier: F4:13:5B:FD:46:20:59:F5:F3:D5:5F:EC:FD:44:44:F3:65:50:88:D1 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B06FAAC31EDB8B82330D99CF91A496F7C Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9BNb_UYgWfXz1V_s_URE82VQiNE.roa Signing time: Wed 10 Dec 2025 06:37:29 +0000 ROA not before: Wed 10 Dec 2025 06:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 212.135.24.0/24 maxlen: 24 212.135.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:fa:ac:31:ed:b8:b8:23:30:d9:9c:f9:1a:49:6f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 10 06:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f4135bfd462059f5f3d55fecfd4444f3655088d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:43:4b:2f:b7:3a:d0:5b:8c:7f:b8:3f:5e:44: 6d:42:d2:91:ca:ac:a7:22:ed:ca:4e:ed:27:89:6c: 3d:d7:91:db:27:56:a8:80:13:05:c1:9f:a7:19:7f: 6c:ec:c5:4f:0c:a6:ad:b0:24:38:c6:8b:8d:ec:ae: 1b:0f:ee:59:cc:09:4f:b9:c7:65:f4:0c:09:c5:92: 6a:b5:c4:f2:7d:f3:84:fb:ab:72:ef:58:61:5f:7a: b8:f7:be:ce:56:59:0b:4d:ab:2d:0f:5a:49:cb:34: 23:e1:61:18:16:72:ec:43:0f:5e:cb:e0:95:b0:88: c3:39:14:cd:ee:e4:9b:f0:f1:b9:cf:0a:f0:ce:3a: 80:30:3a:09:99:70:24:e6:3f:b3:e8:40:42:08:8f: d8:72:71:47:6d:29:ed:38:b3:e6:29:9d:67:93:c8: 63:bd:fc:80:4c:f9:23:16:9a:2d:04:f2:6b:08:0a: f7:86:e4:8f:ba:9f:a0:60:0f:68:bb:94:1a:40:2b: 4d:04:36:2d:d0:a3:86:ec:82:13:2a:6b:92:ab:e5: db:ec:39:32:aa:92:31:31:d0:90:e5:b6:7e:49:23: 2c:25:4c:cf:5e:04:2e:47:bc:04:0d:83:ea:ba:6f: f6:49:d6:82:4b:04:bd:4e:6f:06:8c:46:2a:ec:91: f3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:13:5B:FD:46:20:59:F5:F3:D5:5F:EC:FD:44:44:F3:65:50:88:D1 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9BNb_UYgWfXz1V_s_URE82VQiNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.24.0/24 212.135.241.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:ed:a3:c6:54:2b:c2:6d:6a:0d:5d:47:f2:dd:76:8c:b5:5a: cd:81:26:c0:24:bf:59:d1:4d:dc:20:13:cb:a5:9f:c5:18:c2: e9:42:14:97:1b:b7:3e:61:20:66:f3:f0:68:b0:14:ba:00:46: ac:30:e3:de:ad:31:67:ce:4f:31:14:9f:ab:de:5f:36:a5:9d: 23:01:46:cd:ff:fc:ab:07:4d:c8:ae:71:14:b3:96:d8:34:6e: 2d:e0:67:2e:c8:09:28:1f:ae:66:fa:4b:94:d1:18:5e:34:f9: ec:7b:75:9d:e4:7b:bd:48:a4:93:b5:f0:2c:5f:35:e0:01:71: 26:9e:43:04:68:03:94:9b:1a:91:25:d6:57:5a:52:a0:8b:e1: 02:6d:b9:6b:57:51:5d:73:fd:6f:b3:18:75:01:f2:db:12:1d: 76:46:17:af:c0:bb:bb:3e:53:b3:e9:c1:f3:58:e9:0e:74:eb: cc:7f:92:19:18:97:21:e3:8f:f4:c2:78:98:1b:04:ff:00:88: 8a:3c:1f:70:d5:2b:14:cc:14:0b:29:3c:6d:09:52:5f:13:b1: b7:26:9b:f8:cd:13:94:ce:c3:4d:88:c8:ce:00:50:90:c5:4b: 23:60:7d:a3:29:05:bf:df:cf:15:37:d1:d8:dd:d8:3a:ef:49: 07:dd:24:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsG+qwx7bi4IzDZnPkaSW98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjEwMDYzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDEzNWJmZDQ2MjA1OWY1ZjNkNTVmZWNmZDQ0NDRmMzY1NTA4OGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UNLL7c60FuMf7g/XkRtQtKRyqyn Iu3KTu0niWw915HbJ1aogBMFwZ+nGX9s7MVPDKatsCQ4xouN7K4bD+5ZzAlPucdl 9AwJxZJqtcTyffOE+6ty71hhX3q4977OVlkLTastD1pJyzQj4WEYFnLsQw9ey+CV sIjDORTN7uSb8PG5zwrwzjqAMDoJmXAk5j+z6EBCCI/YcnFHbSntOLPmKZ1nk8hj vfyATPkjFpotBPJrCAr3huSPup+gYA9ou5QaQCtNBDYt0KOG7IITKmuSq+Xb7Dky qpIxMdCQ5bZ+SSMsJUzPXgQuR7wEDYPqum/2SdaCSwS9Tm8GjEYq7JHzWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPQTW/1GIFn189Vf7P1ERPNlUIjRMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvOUJOYl9VWWdXZlh6MVZfc19VUkU4MlZRaU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1IcYAwQA 1IfxMA0GCSqGSIb3DQEBCwUAA4IBAQA67aPGVCvCbWoNXUfy3XaMtVrNgSbAJL9Z 0U3cIBPLpZ/FGMLpQhSXG7c+YSBm8/BosBS6AEasMOPerTFnzk8xFJ+r3l82pZ0j AUbN//yrB03IrnEUs5bYNG4t4GcuyAkoH65m+kuU0RheNPnse3Wd5Hu9SKSTtfAs XzXgAXEmnkMEaAOUmxqRJdZXWlKgi+ECbblrV1Fdc/1vsxh1AfLbEh12RhevwLu7 PlOz6cHzWOkOdOvMf5IZGJch44/0wniYGwT/AIiKPB9w1SsUzBQLKTxtCVJfE7G3 Jpv4zROUzsNNiMjOAFCQxUsjYH2jKQW/388VN9HY3dg670kH3SQJ -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:02 2025 by rpki-client