This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/o8ur8bICOCskSCQVRziI4PphO24.roa File: o8ur8bICOCskSCQVRziI4PphO24.roa (raw, json) Hash identifier: 1QpCkKiBv91ZmEUUVCntUNawglbqR3fMtczfR+BvEcc= Subject key identifier: A3:CB:AB:F1:B2:02:38:2B:24:48:24:15:47:38:88:E0:FA:61:3B:6E Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019AEA71ACF18F1E1497A54A04D50923636B Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/o8ur8bICOCskSCQVRziI4PphO24.roa Signing time: Thu 04 Dec 2025 17:38:29 +0000 ROA not before: Thu 04 Dec 2025 17:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10753 IP address blocks: 83.143.168.0/24 maxlen: 24 83.143.169.0/24 maxlen: 24 83.143.170.0/24 maxlen: 24 83.143.172.0/24 maxlen: 24 128.0.40.0/24 maxlen: 24 212.86.96.0/24 maxlen: 24 212.86.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:71:ac:f1:8f:1e:14:97:a5:4a:04:d5:09:23:63:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Dec 4 17:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a3cbabf1b202382b24482415473888e0fa613b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:12:76:ca:0b:e8:2e:e5:7e:09:34:5b:cc: a9:b1:0b:34:50:6c:fe:fa:23:b4:52:94:7f:39:f7: 2a:da:54:e8:15:4b:44:8b:bc:e9:df:e3:82:38:49: 31:c3:a9:f7:55:10:cb:bd:e1:78:ff:a4:92:13:61: 8b:82:92:85:a5:9e:c8:55:c1:e9:82:c4:59:03:37: d9:bf:b1:64:55:9d:e9:29:79:e9:09:29:a2:80:54: 41:e4:e1:37:ba:14:c0:37:eb:70:d1:6b:3d:cc:25: 9b:ee:92:3d:c4:99:32:26:d5:35:3e:b8:bc:c3:d7: fd:50:4d:2b:e5:24:e3:d1:ce:34:75:ed:1f:d4:06: ec:ae:6e:94:46:8c:13:f9:91:52:28:dd:96:85:db: 14:a4:9f:a8:27:28:78:dc:cd:08:0a:31:fc:26:d7: 7f:48:b3:78:03:92:d2:a5:00:53:1b:b8:34:0d:39: be:a7:23:8b:83:99:f2:3b:b8:89:1c:95:60:0a:eb: b3:c0:6e:1d:79:d1:7b:91:9e:03:b8:75:07:7a:7a: 1c:e9:82:24:92:53:a6:7a:72:a5:30:34:ba:d1:43: 1d:1d:d4:53:5d:e9:47:5f:69:0d:7e:12:88:93:dd: 7f:8f:56:32:1d:5c:3b:76:1a:cf:35:1f:42:d2:7c: 96:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CB:AB:F1:B2:02:38:2B:24:48:24:15:47:38:88:E0:FA:61:3B:6E X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/o8ur8bICOCskSCQVRziI4PphO24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.168.0-83.143.170.255 83.143.172.0/24 128.0.40.0/24 212.86.96.0/24 212.86.106.0/24 Signature Algorithm: sha256WithRSAEncryption b0:66:41:55:29:c6:72:0c:23:cb:17:3f:ac:d7:f5:69:8b:7b: cc:af:79:70:38:f9:93:07:3d:11:fc:8f:48:ed:bb:5e:0d:f6: 23:13:af:62:25:9a:2f:da:17:47:02:c9:22:93:a7:27:c0:aa: c6:e1:be:9c:1d:66:f8:91:91:41:ab:34:24:80:e7:38:e3:4a: 2b:04:12:2a:7f:85:84:94:7a:d7:5f:ec:fe:38:18:96:0b:b4: 84:b5:cd:7f:c9:66:a7:0f:22:fb:55:2f:49:78:ce:ab:50:12: c3:a0:00:cf:17:f8:5e:de:21:39:05:82:8a:eb:38:dc:05:7a: 47:88:cf:0f:68:6d:eb:03:5d:a5:c8:40:ad:db:86:a6:1d:02: 90:f2:f3:38:34:25:d0:1d:d8:53:f4:c6:bd:cf:9b:b7:0d:54: 6e:8b:e1:52:79:58:70:7c:91:f1:8a:92:86:1b:fd:35:2f:a8: 42:e7:c0:2c:eb:ca:cf:76:0b:97:76:bf:01:f0:fd:5a:00:0b: 8e:42:81:cb:ab:64:93:a8:bb:d3:1e:5c:8c:28:03:d6:f5:05: a9:73:3b:91:73:71:41:84:7e:14:ef:67:a1:9b:7a:a8:8b:3a: c0:b4:fe:aa:64:af:c0:86:c6:b1:c8:61:0f:a7:65:d3:a0:f5: 8e:6f:b8:1a -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZrqcazxjx4Ul6VKBNUJI2NrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMjA0MTczODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2NiYWJmMWIyMDIzODJiMjQ0ODI0MTU0NzM4ODhlMGZhNjEzYjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYcSdsoL6C7lfgk0W8ypsQs0UGz+ +iO0UpR/Ofcq2lToFUtEi7zp3+OCOEkxw6n3VRDLveF4/6SSE2GLgpKFpZ7IVcHp gsRZAzfZv7FkVZ3pKXnpCSmigFRB5OE3uhTAN+tw0Ws9zCWb7pI9xJkyJtU1Pri8 w9f9UE0r5STj0c40de0f1Absrm6URowT+ZFSKN2WhdsUpJ+oJyh43M0ICjH8Jtd/ SLN4A5LSpQBTG7g0DTm+pyOLg5nyO7iJHJVgCuuzwG4dedF7kZ4DuHUHenoc6YIk klOmenKlMDS60UMdHdRTXelHX2kNfhKIk91/j1YyHVw7dhrPNR9C0nyWkQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKPLq/GyAjgrJEgkFUc4iOD6YTtuMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvbzh1cjhiSUNPQ3NrU0NRVlJ6aUk0UHBoTzI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBANTj6gD BABTj6oDBABTj6wDBACAACgDBADUVmADBADUVmowDQYJKoZIhvcNAQELBQADggEB ALBmQVUpxnIMI8sXP6zX9WmLe8yveXA4+ZMHPRH8j0jtu14N9iMTr2Ilmi/aF0cC ySKTpyfAqsbhvpwdZviRkUGrNCSA5zjjSisEEip/hYSUetdf7P44GJYLtIS1zX/J ZqcPIvtVL0l4zqtQEsOgAM8X+F7eITkFgorrONwFekeIzw9obesDXaXIQK3bhqYd ApDy8zg0JdAd2FP0xr3Pm7cNVG6L4VJ5WHB8kfGKkoYb/TUvqELnwCzrys92C5d2 vwHw/VoAC45CgcurZJOou9MeXIwoA9b1BalzO5FzcUGEfhTvZ6GbeqiLOsC0/qpk r8CGxrHIYQ+nZdOg9Y5vuBo= -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:53 2025 by rpki-client