This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hzthMj7ZBVl0NbSl-koesy6j_GQ.roa File: hzthMj7ZBVl0NbSl-koesy6j_GQ.roa (raw, json) Hash identifier: 3Lz14OWkl2vhP0ZFx9Nm0FmZYExhU4INbZh+ogo+xTA= Subject key identifier: 87:3B:61:32:3E:D9:05:59:74:35:B4:A5:FA:4A:1E:B3:2E:A3:FC:64 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019BDF74A41E7B050B83B9238E1F6C08CA30 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hzthMj7ZBVl0NbSl-koesy6j_GQ.roa Signing time: Wed 21 Jan 2026 07:28:41 +0000 ROA not before: Wed 21 Jan 2026 07:28:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 212.134.18.0/24 maxlen: 24 212.134.19.0/24 maxlen: 24 212.134.21.0/24 maxlen: 24 212.134.22.0/24 maxlen: 24 212.134.23.0/24 maxlen: 24 212.134.24.0/24 maxlen: 24 212.134.25.0/24 maxlen: 24 212.134.36.0/24 maxlen: 24 212.134.39.0/24 maxlen: 24 212.134.40.0/22 maxlen: 24 212.134.47.0/24 maxlen: 24 212.134.48.0/22 maxlen: 24 212.134.56.0/23 maxlen: 24 212.134.58.0/24 maxlen: 24 212.134.80.0/24 maxlen: 24 212.134.81.0/24 maxlen: 24 212.134.82.0/24 maxlen: 24 212.134.83.0/24 maxlen: 24 212.134.88.0/24 maxlen: 24 212.134.89.0/24 maxlen: 24 212.134.95.0/24 maxlen: 24 212.134.98.0/23 maxlen: 24 212.134.104.0/23 maxlen: 24 212.134.106.0/23 maxlen: 24 212.134.109.0/24 maxlen: 24 212.134.110.0/23 maxlen: 24 212.134.128.0/24 maxlen: 24 212.134.131.0/24 maxlen: 24 212.134.140.0/22 maxlen: 24 212.134.148.0/24 maxlen: 24 212.134.156.0/24 maxlen: 24 212.134.157.0/24 maxlen: 24 212.134.171.0/24 maxlen: 24 212.134.175.0/24 maxlen: 24 212.134.179.0/24 maxlen: 24 212.134.196.0/22 maxlen: 24 212.134.199.0/24 maxlen: 24 212.134.212.0/22 maxlen: 24 212.134.216.0/22 maxlen: 24 212.134.228.0/22 maxlen: 24 212.134.232.0/22 maxlen: 24 212.134.232.0/24 maxlen: 24 212.134.248.0/24 maxlen: 24 212.135.20.0/24 maxlen: 24 212.135.21.0/24 maxlen: 24 212.135.22.0/23 maxlen: 24 212.135.24.0/23 maxlen: 24 212.135.28.0/23 maxlen: 24 212.135.128.0/23 maxlen: 24 212.135.135.0/24 maxlen: 24 212.135.155.0/24 maxlen: 24 212.135.158.0/24 maxlen: 24 212.135.161.0/24 maxlen: 24 212.135.162.0/24 maxlen: 24 212.135.164.0/24 maxlen: 24 212.135.165.0/24 maxlen: 24 212.135.166.0/24 maxlen: 24 212.135.167.0/24 maxlen: 24 212.135.168.0/24 maxlen: 24 212.135.169.0/24 maxlen: 24 212.135.170.0/24 maxlen: 24 212.135.171.0/24 maxlen: 24 212.135.172.0/24 maxlen: 24 212.135.173.0/24 maxlen: 24 212.135.204.0/22 maxlen: 24 212.135.240.0/23 maxlen: 24 212.135.241.0/24 maxlen: 24 212.135.246.0/24 maxlen: 24 212.135.247.0/24 maxlen: 24 212.135.248.0/23 maxlen: 24 212.135.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:74:a4:1e:7b:05:0b:83:b9:23:8e:1f:6c:08:ca:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 21 07:28:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=873b61323ed905597435b4a5fa4a1eb32ea3fc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:09:bf:93:99:5a:f0:50:84:61:a2:c9:6b: 91:75:fe:23:2c:61:32:87:cf:06:9e:c7:59:d3:eb: 04:05:8c:4d:62:1f:86:ee:5a:ba:ac:96:2d:5f:4b: 73:f5:5d:2d:39:bc:d3:8a:d5:45:5e:89:e2:64:4d: 36:c0:5f:4f:f0:b8:4c:cc:46:6c:4e:7b:4b:0a:ed: c3:32:2f:8e:b8:84:8b:cd:37:48:38:01:b8:0f:fa: 3e:a2:40:42:71:a7:c2:07:a6:bb:cc:52:01:0b:2e: de:f2:7f:24:00:f2:a2:1c:79:94:8b:8b:c0:00:5f: 50:03:f8:fc:dd:14:24:92:59:8e:21:3a:fb:43:ad: d2:b2:a6:73:d7:29:b0:71:4b:54:34:da:fe:b8:63: 23:da:81:52:eb:fb:79:d3:22:62:8f:15:b0:32:75: fc:e7:17:47:31:de:5d:70:64:07:28:98:bd:4f:3d: 81:be:87:d4:95:44:66:d7:e1:7a:77:77:b8:8e:1b: 09:84:92:94:cf:6e:0d:f5:5d:54:f2:14:fe:8a:ec: 4c:d1:68:6f:8b:f1:f9:a7:3e:85:f3:34:cd:60:b0: b5:98:af:2f:b8:c4:74:a2:d1:8a:f1:82:82:1a:5e: ab:bc:11:ee:df:7b:46:ef:47:f6:c3:91:ac:11:e2: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3B:61:32:3E:D9:05:59:74:35:B4:A5:FA:4A:1E:B3:2E:A3:FC:64 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hzthMj7ZBVl0NbSl-koesy6j_GQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.18.0/23 212.134.21.0-212.134.25.255 212.134.36.0/24 212.134.39.0-212.134.43.255 212.134.47.0-212.134.51.255 212.134.56.0-212.134.58.255 212.134.80.0/22 212.134.88.0/23 212.134.95.0/24 212.134.98.0/23 212.134.104.0/22 212.134.109.0-212.134.111.255 212.134.128.0/24 212.134.131.0/24 212.134.140.0/22 212.134.148.0/24 212.134.156.0/23 212.134.171.0/24 212.134.175.0/24 212.134.179.0/24 212.134.196.0/22 212.134.212.0-212.134.219.255 212.134.228.0-212.134.235.255 212.134.248.0/24 212.135.20.0-212.135.25.255 212.135.28.0/23 212.135.128.0/23 212.135.135.0/24 212.135.155.0/24 212.135.158.0/24 212.135.161.0-212.135.162.255 212.135.164.0-212.135.173.255 212.135.204.0/22 212.135.240.0/23 212.135.246.0-212.135.249.255 212.135.252.0/23 Signature Algorithm: sha256WithRSAEncryption 44:aa:a9:cd:d2:2c:02:4a:19:aa:c0:19:7a:3a:95:80:a1:da: 6b:ed:de:f9:57:5d:10:e7:65:c3:4a:26:66:52:bc:44:10:6b: 64:5b:4b:13:d3:9f:e6:f9:2b:28:9a:4d:78:73:46:d5:95:ed: 34:ce:59:8f:d0:b4:cf:df:f9:ad:85:86:a5:92:9b:11:7a:30: e3:d6:97:96:6d:8a:39:5d:cc:e5:b7:29:19:77:59:68:a1:fc: a8:01:b6:d9:cf:cd:07:45:59:c3:39:3a:57:c2:7b:a6:3a:ec: 9b:77:65:43:f9:43:1a:bb:28:a4:f2:b0:49:9c:20:02:70:b0: 12:ef:c1:bb:81:b4:34:a8:67:29:b4:53:80:07:07:7f:a1:b4: 7a:18:e6:f5:e8:b8:ff:b7:fa:6b:35:1f:43:43:fd:6d:8d:bd: 57:2e:f1:b1:bd:b8:78:bd:d2:10:f8:69:f7:5e:55:8b:26:b7: fa:65:ca:7d:a8:cd:d0:a6:6c:9a:8b:0c:38:a2:22:f7:ee:a6: 3c:80:57:eb:ed:8d:73:f8:2d:a4:a9:73:2c:b1:c3:49:c9:48: 23:aa:83:a6:78:f9:1a:04:7d:60:4f:6c:ae:e0:16:63:55:af: cd:58:ac:4e:87:e9:c6:a0:c8:f1:95:c4:19:2a:8e:52:7e:61: 2a:5c:a2:72 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgISAZvfdKQeewULg7kjjh9sCMowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTIxMDcyODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzNiNjEzMjNlZDkwNTU5NzQzNWI0YTVmYTRhMWViMzJlYTNmYzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8gJv5OZWvBQhGGiyWuRdf4jLGEy h88GnsdZ0+sEBYxNYh+G7lq6rJYtX0tz9V0tObzTitVFXoniZE02wF9P8LhMzEZs TntLCu3DMi+OuISLzTdIOAG4D/o+okBCcafCB6a7zFIBCy7e8n8kAPKiHHmUi4vA AF9QA/j83RQkklmOITr7Q63SsqZz1ymwcUtUNNr+uGMj2oFS6/t50yJijxWwMnX8 5xdHMd5dcGQHKJi9Tz2BvofUlURm1+F6d3e4jhsJhJKUz24N9V1U8hT+iuxM0Whv i/H5pz6F8zTNYLC1mK8vuMR0otGK8YKCGl6rvBHu33tG70f2w5GsEeKYEQIDAQAB o4IDPTCCAzkwHQYDVR0OBBYEFIc7YTI+2QVZdDW0pfpKHrMuo/xkMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvaHp0aE1qN1pCVmwwTmJTbC1rb2VzeTZqX0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBUQYIKwYBBQUHAQcBAf8EggFAMIIBPDCCATgEAgABMIIB MAMEAdSGEjAMAwQA1IYVAwQB1IYYAwQA1IYkMAwDBADUhicDBALUhigwDAMEANSG LwMEAtSGMDAMAwQD1IY4AwQA1IY6AwQC1IZQAwQB1IZYAwQA1IZfAwQB1IZiAwQC 1IZoMAwDBADUhm0DBATUhmADBADUhoADBADUhoMDBALUhowDBADUhpQDBAHUhpwD BADUhqsDBADUhq8DBADUhrMDBALUhsQwDAMEAtSG1AMEAtSG2DAMAwQC1IbkAwQC 1IboAwQA1Ib4MAwDBALUhxQDBAHUhxgDBAHUhxwDBAHUh4ADBADUh4cDBADUh5sD BADUh54wDAMEANSHoQMEANSHojAMAwQC1IekAwQB1IesAwQC1IfMAwQB1IfwMAwD BAHUh/YDBAHUh/gDBAHUh/wwDQYJKoZIhvcNAQELBQADggEBAESqqc3SLAJKGarA GXo6lYCh2mvt3vlXXRDnZcNKJmZSvEQQa2RbSxPTn+b5KyiaTXhzRtWV7TTOWY/Q tM/f+a2FhqWSmxF6MOPWl5ZtijldzOW3KRl3WWih/KgBttnPzQdFWcM5OlfCe6Y6 7Jt3ZUP5Qxq7KKTysEmcIAJwsBLvwbuBtDSoZym0U4AHB3+htHoY5vXouP+3+ms1 H0ND/W2NvVcu8bG9uHi90hD4afdeVYsmt/plyn2ozdCmbJqLDDiiIvfupjyAV+vt jXP4LaSpcyyxw0nJSCOqg6Z4+RoEfWBPbK7gFmNVr81YrE6H6cagyPGVxBkqjlJ+ YSpconI= -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:23 2026 by rpki-client