This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bmQWfIuC4LmxyA1n6d1DEsJd2SE.roa File: bmQWfIuC4LmxyA1n6d1DEsJd2SE.roa (raw, json) Hash identifier: ksgZLF770PUu9BA+cGqGOdQcNuywcVBbs+thSLqjf6g= Subject key identifier: 6E:64:16:7C:8B:82:E0:B9:B1:C8:0D:67:E9:DD:43:12:C2:5D:D9:21 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B30A926B8236AFCE3E5FF61E489B79E9E Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bmQWfIuC4LmxyA1n6d1DEsJd2SE.roa Signing time: Thu 18 Dec 2025 08:52:30 +0000 ROA not before: Thu 18 Dec 2025 08:52:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 212.134.171.0/24 maxlen: 24 212.134.232.0/24 maxlen: 24 212.135.20.0/24 maxlen: 24 212.135.158.0/24 maxlen: 24 212.135.164.0/24 maxlen: 24 212.135.241.0/24 maxlen: 24 212.135.246.0/24 maxlen: 24 212.135.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:a9:26:b8:23:6a:fc:e3:e5:ff:61:e4:89:b7:9e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 18 08:52:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6e64167c8b82e0b9b1c80d67e9dd4312c25dd921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:76:17:93:a3:ae:8e:13:78:de:7a:ed:b7:28: 0f:e0:d2:91:7c:e8:4f:bd:5e:24:0c:d2:58:61:07: b8:f6:ac:91:e8:87:18:6c:0b:98:f7:45:65:d2:7f: 9f:ff:73:ef:11:f7:a2:d5:84:ea:e5:1c:bd:9c:9a: 44:49:b4:71:01:1d:0d:8f:8e:60:2f:53:8a:4c:43: 27:f1:74:19:9e:23:22:09:8d:73:e7:25:93:12:e2: 66:eb:b8:4c:45:cc:ba:f0:c6:99:55:6c:bf:73:a1: d2:27:e8:4a:75:2b:2e:55:59:55:83:df:6d:7b:81: f3:f7:16:b7:93:f6:ed:f7:11:cd:37:f5:d9:10:8b: c1:99:3f:77:93:09:20:6b:ad:df:fe:45:85:17:50: e8:6e:40:46:23:09:5b:9c:ed:ff:a0:0e:6f:4f:5e: 04:be:c7:e4:2c:1b:43:46:21:50:b7:6b:6d:2c:ca: c3:60:2d:3d:98:2b:1c:0a:c3:6a:85:f0:cb:00:98: 2e:1c:2f:e8:35:61:fb:28:bc:09:c2:cb:1f:7f:6a: 35:1b:d9:b2:ab:20:aa:e7:1a:9e:6f:46:8b:04:7a: b5:06:fc:ea:16:68:e8:e1:52:fa:43:a9:0d:9d:23: 1e:fc:1c:4c:73:62:92:5c:08:04:74:72:45:91:6d: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:64:16:7C:8B:82:E0:B9:B1:C8:0D:67:E9:DD:43:12:C2:5D:D9:21 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bmQWfIuC4LmxyA1n6d1DEsJd2SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.171.0/24 212.134.232.0/24 212.135.20.0/24 212.135.158.0/24 212.135.164.0/24 212.135.241.0/24 212.135.246.0/23 Signature Algorithm: sha256WithRSAEncryption 75:60:b7:bd:f8:82:ea:cb:75:c6:f4:01:c2:2f:6c:52:35:73: 3e:d2:48:46:28:b2:50:28:71:fb:9f:56:8d:69:c2:72:29:a3: 47:50:8f:81:80:52:31:7c:31:22:4f:52:e2:68:77:d5:b9:2a: 01:8f:92:8e:ad:27:d8:bd:67:7b:9a:6a:11:fb:fe:e5:46:9f: 81:1e:0e:a8:9f:8f:73:38:b1:69:62:6d:cf:fe:31:c9:5f:4e: 47:2a:03:82:4b:09:20:2e:47:f5:84:a5:6e:78:ec:b5:e7:2c: 74:8c:a1:b6:1b:b7:33:fc:1e:e8:7b:5a:ae:70:54:42:55:19: c7:8b:61:06:73:34:d1:48:2e:b1:ff:a9:79:86:8b:75:95:5f: 26:44:c3:0f:2a:04:24:fe:4c:0f:fa:2a:f9:8b:79:6a:7c:ad: fb:5b:77:0b:d0:74:df:06:51:b6:9b:d3:1e:37:ab:50:50:2b: 73:f6:2a:77:32:6e:10:78:67:1c:f9:4f:21:cb:95:b9:df:92: 7f:15:21:fd:1c:9c:6e:ae:e5:60:e9:c3:92:13:6c:84:9a:98: 4a:04:7d:44:c9:51:b9:0e:92:a6:44:8b:2d:9c:f7:2a:80:7c: cf:26:cd:7b:6d:50:81:78:95:a1:25:04:25:ca:32:4a:1a:91: f8:11:d3:00 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZswqSa4I2r84+X/YeSJt56eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjE4MDg1MjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTY0MTY3YzhiODJlMGI5YjFjODBkNjdlOWRkNDMxMmMyNWRkOTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3YXk6OujhN43nrttygP4NKRfOhP vV4kDNJYYQe49qyR6IcYbAuY90Vl0n+f/3PvEfei1YTq5Ry9nJpESbRxAR0Nj45g L1OKTEMn8XQZniMiCY1z5yWTEuJm67hMRcy68MaZVWy/c6HSJ+hKdSsuVVlVg99t e4Hz9xa3k/bt9xHNN/XZEIvBmT93kwkga63f/kWFF1DobkBGIwlbnO3/oA5vT14E vsfkLBtDRiFQt2ttLMrDYC09mCscCsNqhfDLAJguHC/oNWH7KLwJwssff2o1G9my qyCq5xqeb0aLBHq1BvzqFmjo4VL6Q6kNnSMe/BxMc2KSXAgEdHJFkW1fmQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFG5kFnyLguC5scgNZ+ndQxLCXdkhMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvYm1RV2ZJdUM0TG14eUExbjZkMURFc0pkMlNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQA1IarAwQA 1IboAwQA1IcUAwQA1IeeAwQA1IekAwQA1IfxAwQB1If2MA0GCSqGSIb3DQEBCwUA A4IBAQB1YLe9+ILqy3XG9AHCL2xSNXM+0khGKLJQKHH7n1aNacJyKaNHUI+BgFIx fDEiT1LiaHfVuSoBj5KOrSfYvWd7mmoR+/7lRp+BHg6on49zOLFpYm3P/jHJX05H KgOCSwkgLkf1hKVueOy15yx0jKG2G7cz/B7oe1qucFRCVRnHi2EGczTRSC6x/6l5 hot1lV8mRMMPKgQk/kwP+ir5i3lqfK37W3cL0HTfBlG2m9MeN6tQUCtz9ip3Mm4Q eGcc+U8hy5W535J/FSH9HJxuruVg6cOSE2yEmphKBH1EyVG5DpKmRIstnPcqgHzP Js17bVCBeJWhJQQlyjJKGpH4EdMA -----END CERTIFICATE-----Generated at Fri Dec 19 21:21:21 2025 by rpki-client