This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GEa6szMryK3xDU-QtVNiywTP2vA.roa File: GEa6szMryK3xDU-QtVNiywTP2vA.roa (raw, json) Hash identifier: cEkjNSy03yVxOgME0BokuUtVVm1E4pmH3u27FcoitRA= Subject key identifier: 18:46:BA:B3:33:2B:C8:AD:F1:0D:4F:90:B5:53:62:CB:04:CF:DA:F0 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B12D0271B8DD5DE82869E96674788655E Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GEa6szMryK3xDU-QtVNiywTP2vA.roa Signing time: Fri 12 Dec 2025 13:46:29 +0000 ROA not before: Fri 12 Dec 2025 13:46:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 212.134.109.0/24 maxlen: 24 212.134.171.0/24 maxlen: 24 212.134.232.0/24 maxlen: 24 212.135.20.0/24 maxlen: 24 212.135.158.0/24 maxlen: 24 212.135.164.0/24 maxlen: 24 212.135.241.0/24 maxlen: 24 212.135.246.0/24 maxlen: 24 212.135.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:d0:27:1b:8d:d5:de:82:86:9e:96:67:47:88:65:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 12 13:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1846bab3332bc8adf10d4f90b55362cb04cfdaf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:76:cf:40:49:52:f4:88:71:bb:fa:12:62: ce:e8:63:1c:69:7f:9a:8e:0e:ea:b9:2a:bf:12:9f: cc:5c:5a:e9:05:58:67:77:b1:17:3a:d9:b2:df:90: 1a:12:11:59:d5:d8:7f:e6:b6:ba:9e:1a:f7:a7:eb: 1b:be:ab:1e:b8:c3:d4:5f:86:9f:39:96:75:5c:3a: bc:d1:80:a7:43:4d:a1:fa:6e:8c:49:86:8a:f1:77: ee:b7:13:fd:be:80:43:b3:54:ed:cd:5f:da:ba:11: e6:31:32:5a:f9:d6:86:42:40:ff:31:bb:3d:b8:43: 44:32:40:35:2b:13:4d:5b:66:21:ec:e7:7d:ad:67: 8c:9d:40:3c:e8:67:60:c0:c7:b2:f2:b6:65:db:f5: 71:9a:cb:08:e7:b1:c2:56:b0:74:47:e3:89:59:43: 2e:5e:23:99:9c:58:e4:e5:87:74:68:22:8d:e1:88: 63:1e:96:ea:0a:e4:2e:ec:30:bd:31:d1:cf:03:e8: 0b:63:90:01:3d:60:e2:01:42:17:0c:3c:ca:53:5e: b6:4a:81:83:72:08:4d:3e:64:fb:44:5d:7b:82:82: 56:d9:a0:65:fc:71:68:19:92:21:6f:45:0c:84:23: d3:1b:25:78:d2:bb:b7:e3:f3:0f:b7:d2:8a:37:38: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:46:BA:B3:33:2B:C8:AD:F1:0D:4F:90:B5:53:62:CB:04:CF:DA:F0 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GEa6szMryK3xDU-QtVNiywTP2vA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.109.0/24 212.134.171.0/24 212.134.232.0/24 212.135.20.0/24 212.135.158.0/24 212.135.164.0/24 212.135.241.0/24 212.135.246.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:a4:cf:be:fb:e6:ad:83:6f:a3:75:2b:90:61:47:7a:b6:ab: 91:92:6d:71:3b:d8:1f:7b:eb:05:07:20:46:e4:c9:cd:c0:5f: 8d:23:d1:38:d8:62:d3:8c:db:94:08:d5:65:6c:6d:24:e2:fe: d5:5c:80:d5:01:1a:0c:86:dd:ec:92:b8:b0:4a:d7:04:57:1a: b7:da:b9:a3:43:7d:7d:62:5a:28:a3:5d:4a:59:6b:3d:96:70: 26:a6:5b:7d:ca:0d:b2:42:58:c7:4b:c7:9e:01:8a:a6:ba:09: aa:d9:3c:35:8c:92:db:a3:a8:a3:28:36:98:50:22:a8:70:17: ce:76:07:5e:33:8a:42:cc:d2:c0:15:f7:39:8d:43:68:27:7b: 06:f9:e7:c6:87:62:97:ad:78:28:1c:c7:e5:1d:6d:14:53:8e: 88:13:4e:1c:10:2a:4d:40:42:18:fc:7f:65:21:48:39:5f:64: 54:85:76:dc:40:26:96:41:fd:7b:02:f7:8b:56:36:1a:e7:36: 62:c5:dd:9d:5d:49:64:b0:b3:3c:9f:a9:40:39:0d:a9:0b:24: d0:70:cd:51:07:d0:87:09:79:8a:03:1c:4b:54:b4:0b:ed:2b: 62:28:56:df:e8:48:f9:1f:ec:96:d0:8e:95:62:49:28:94:8e: f5:2d:a4:fa -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZsS0CcbjdXegoaelmdHiGVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjEyMTM0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODQ2YmFiMzMzMmJjOGFkZjEwZDRmOTBiNTUzNjJjYjA0Y2ZkYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0B2z0BJUvSIcbv6EmLO6GMcaX+a jg7quSq/Ep/MXFrpBVhnd7EXOtmy35AaEhFZ1dh/5ra6nhr3p+sbvqseuMPUX4af OZZ1XDq80YCnQ02h+m6MSYaK8XfutxP9voBDs1TtzV/auhHmMTJa+daGQkD/Mbs9 uENEMkA1KxNNW2Yh7Od9rWeMnUA86GdgwMey8rZl2/VxmssI57HCVrB0R+OJWUMu XiOZnFjk5Yd0aCKN4YhjHpbqCuQu7DC9MdHPA+gLY5ABPWDiAUIXDDzKU162SoGD cghNPmT7RF17goJW2aBl/HFoGZIhb0UMhCPTGyV40ru34/MPt9KKNzieowIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFBhGurMzK8it8Q1PkLVTYssEz9rwMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvR0VhNnN6TXJ5SzN4RFUtUXRWTml5d1RQMnZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQA1IZtAwQA 1IarAwQA1IboAwQA1IcUAwQA1IeeAwQA1IekAwQA1IfxAwQB1If2MA0GCSqGSIb3 DQEBCwUAA4IBAQBfpM++++atg2+jdSuQYUd6tquRkm1xO9gfe+sFByBG5MnNwF+N I9E42GLTjNuUCNVlbG0k4v7VXIDVARoMht3skriwStcEVxq32rmjQ319Ylooo11K WWs9lnAmplt9yg2yQljHS8eeAYqmugmq2Tw1jJLbo6ijKDaYUCKocBfOdgdeM4pC zNLAFfc5jUNoJ3sG+efGh2KXrXgoHMflHW0UU46IE04cECpNQEIY/H9lIUg5X2RU hXbcQCaWQf17AveLVjYa5zZixd2dXUlksLM8n6lAOQ2pCyTQcM1RB9CHCXmKAxxL VLQL7StiKFbf6Ej5H+yW0I6VYkkolI71LaT6 -----END CERTIFICATE-----Generated at Wed Dec 17 01:13:43 2025 by rpki-client