This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/orYZ36RbXGice86oZ9N_P8nZANA.roa File: orYZ36RbXGice86oZ9N_P8nZANA.roa (raw, json) Hash identifier: 3SI6kIipwV+iWTgiR0wxGYoOnvPTdBsLLZwTaxl96Ps= Subject key identifier: A2:B6:19:DF:A4:5B:5C:68:9C:7B:CE:A8:67:D3:7F:3F:C9:D9:00:D0 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B3491D09D828E0F1291E3ED8F84277868 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/orYZ36RbXGice86oZ9N_P8nZANA.roa Signing time: Fri 19 Dec 2025 03:05:29 +0000 ROA not before: Fri 19 Dec 2025 03:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20326 IP address blocks: 212.134.132.0/22 maxlen: 22 212.134.180.0/22 maxlen: 22 212.134.184.0/22 maxlen: 22 212.134.192.0/22 maxlen: 22 212.134.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:91:d0:9d:82:8e:0f:12:91:e3:ed:8f:84:27:78:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 19 03:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a2b619dfa45b5c689c7bcea867d37f3fc9d900d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:28:54:52:c2:6c:5d:e2:33:2b:d1:1e:7c:fd: cb:0d:4b:c0:a7:95:9c:93:cd:7e:27:a2:ab:e2:0b: 21:30:1d:7b:52:8c:42:2a:b7:49:f7:db:59:ec:0f: b5:3f:04:f2:ed:75:be:41:0b:b6:c4:ee:27:09:1d: 46:e2:b5:09:dd:5f:b6:23:da:a8:f9:e2:a2:53:26: cc:59:c8:e7:6b:23:7b:c6:d6:75:0d:2d:7a:bc:1d: e8:58:ce:c4:53:78:63:f5:69:d6:6b:f2:95:20:e2: 75:26:03:95:40:f4:a4:24:7d:53:d2:06:47:c4:e0: 60:e2:16:d7:bc:2a:ff:11:b2:02:a8:2f:57:20:4d: 0f:89:38:31:59:ac:93:f2:4d:28:71:35:29:86:4f: ba:26:bb:0a:35:50:3e:89:c4:ec:1a:dd:49:3f:ea: bc:db:a7:54:09:0d:15:a2:f0:5f:4e:1f:8f:50:5d: ff:be:f4:e9:f3:e6:7b:bf:c0:be:59:cb:44:17:e7: 5f:cd:e2:a0:9e:10:ad:53:7f:1e:fe:d9:c8:71:c0: b2:84:b9:8e:77:e5:05:28:57:76:b5:d4:78:10:cc: 1e:a5:c7:9e:cd:ef:a4:82:1e:40:83:06:98:d3:3d: 06:cc:5a:b9:5f:72:a8:80:a3:ac:30:67:1a:dd:61: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B6:19:DF:A4:5B:5C:68:9C:7B:CE:A8:67:D3:7F:3F:C9:D9:00:D0 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/orYZ36RbXGice86oZ9N_P8nZANA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.132.0/22 212.134.180.0-212.134.187.255 212.134.192.0/22 212.134.200.0/22 Signature Algorithm: sha256WithRSAEncryption c8:70:81:cc:f5:4c:9b:bc:7d:e3:ee:20:9d:7b:92:0d:b6:65: 8f:c8:3e:13:e5:da:f6:96:cb:71:91:16:ad:15:98:fa:7f:9c: 91:ac:d6:3c:24:79:74:e4:ba:21:b9:94:90:d8:96:67:93:84: 8a:a8:d9:4a:fa:32:08:19:da:53:53:f2:6b:73:a8:64:5e:21: 57:11:b5:39:91:5d:21:8d:3c:67:7a:5f:b4:66:5b:7e:b6:1a: 48:41:c0:bc:55:04:bc:2e:7c:91:0c:d5:d5:b0:be:2b:e2:98: 56:4f:dd:f8:f9:a8:c4:ae:33:80:fe:43:f8:d6:0c:a2:2d:56: ab:c5:03:77:3a:cd:67:5c:94:44:59:4d:e8:2b:1a:d9:bd:e4: c8:72:8d:34:7a:20:0c:ca:b9:6a:29:53:c5:26:26:98:14:41: 60:96:0b:7d:3b:e4:b6:e8:89:dd:8f:8d:94:98:72:f6:0c:9f: 37:e9:9f:2e:7f:2c:76:42:b1:0e:ab:09:07:01:a6:66:f8:c5: 05:82:ad:62:e3:1c:e4:7b:03:09:5d:9c:49:67:66:ba:bf:c0: ef:a8:9e:0d:3a:bb:c8:d8:03:5c:c0:bd:d1:ad:5a:22:2e:9d: 55:94:72:d1:f0:c1:80:5b:0e:dc:a1:fa:0b:00:79:26:bc:ea: a9:d2:4c:d6 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZs0kdCdgo4PEpHj7Y+EJ3hoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjE5MDMwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmI2MTlkZmE0NWI1YzY4OWM3YmNlYTg2N2QzN2YzZmM5ZDkwMGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+yhUUsJsXeIzK9EefP3LDUvAp5Wc k81+J6Kr4gshMB17UoxCKrdJ99tZ7A+1PwTy7XW+QQu2xO4nCR1G4rUJ3V+2I9qo +eKiUybMWcjnayN7xtZ1DS16vB3oWM7EU3hj9WnWa/KVIOJ1JgOVQPSkJH1T0gZH xOBg4hbXvCr/EbICqC9XIE0PiTgxWayT8k0ocTUphk+6JrsKNVA+icTsGt1JP+q8 26dUCQ0VovBfTh+PUF3/vvTp8+Z7v8C+WctEF+dfzeKgnhCtU38e/tnIccCyhLmO d+UFKFd2tdR4EMwepceeze+kgh5AgwaY0z0GzFq5X3KogKOsMGca3WFT3wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKK2Gd+kW1xonHvOqGfTfz/J2QDQMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvb3JZWjM2UmJYR2ljZTg2b1o5Tl9QOG5aQU5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQC1IaEMAwD BALUhrQDBALUhrgDBALUhsADBALUhsgwDQYJKoZIhvcNAQELBQADggEBAMhwgcz1 TJu8fePuIJ17kg22ZY/IPhPl2vaWy3GRFq0VmPp/nJGs1jwkeXTkuiG5lJDYlmeT hIqo2Ur6MggZ2lNT8mtzqGReIVcRtTmRXSGNPGd6X7RmW362GkhBwLxVBLwufJEM 1dWwvivimFZP3fj5qMSuM4D+Q/jWDKItVqvFA3c6zWdclERZTegrGtm95MhyjTR6 IAzKuWopU8UmJpgUQWCWC3075Lboid2PjZSYcvYMnzfpny5/LHZCsQ6rCQcBpmb4 xQWCrWLjHOR7AwldnElnZrq/wO+ong06u8jYA1zAvdGtWiIunVWUctHwwYBbDtyh +gsAeSa86qnSTNY= -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:04 2025 by rpki-client