This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/s8ohh6B9MPW6Ei_9Z3ptsTMa_B0.roa File: s8ohh6B9MPW6Ei_9Z3ptsTMa_B0.roa (raw, json) Hash identifier: u62iZk13BoIGBLhc8QtldmpQibWClfB9WRM3VJxu+Vs= Subject key identifier: B3:CA:21:87:A0:7D:30:F5:BA:12:2F:FD:67:7A:6D:B1:33:1A:FC:1D Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c Certificate serial: 019AEDE816A4A476896D66045A073BDB2F9A Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/s8ohh6B9MPW6Ei_9Z3ptsTMa_B0.roa Signing time: Fri 05 Dec 2025 09:46:41 +0000 ROA not before: Fri 05 Dec 2025 09:46:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25389 IP address blocks: 217.12.80.0/24 maxlen: 24 217.12.81.0/24 maxlen: 24 217.12.82.0/24 maxlen: 24 217.12.83.0/24 maxlen: 24 217.12.84.0/24 maxlen: 24 217.12.85.0/24 maxlen: 24 217.12.86.0/24 maxlen: 24 217.12.87.0/24 maxlen: 24 217.12.88.0/24 maxlen: 24 217.12.89.0/24 maxlen: 24 2a07:93c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:e8:16:a4:a4:76:89:6d:66:04:5a:07:3b:db:2f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c Validity Not Before: Dec 5 09:46:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b3ca2187a07d30f5ba122ffd677a6db1331afc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:11:0a:93:16:fd:5c:46:b0:bf:36:2c:f4:48: 4c:07:e2:1b:0f:e1:83:ff:31:a7:c1:e4:86:96:1b: 62:e3:06:22:71:ef:a3:7a:39:a0:a8:56:af:21:fe: 01:42:47:9c:fa:1f:8d:b0:cd:73:05:f6:c6:25:51: 67:2d:bd:d2:9b:7e:77:b8:61:63:fc:16:fc:15:46: 0f:83:43:88:d9:c3:35:e4:dd:f8:ea:ef:40:38:07: 12:17:d7:0a:7d:ab:ad:5c:99:c6:65:1e:a8:13:67: df:13:e0:ef:51:fb:6c:ab:98:64:9a:f4:0d:ef:ca: 7e:20:db:bb:03:a9:ea:89:bd:64:8b:72:45:dc:20: 78:54:05:2b:e2:6f:a1:63:22:f0:47:5c:65:e4:77: e2:f1:12:74:82:aa:ec:1a:27:63:80:64:11:aa:c4: 92:ec:a9:65:f2:70:1b:ff:29:a7:68:b4:34:89:95: 83:66:f2:7b:99:95:b2:f8:bf:0e:fc:90:4c:bc:e8: f9:15:22:a6:d0:78:fe:10:53:70:96:0c:36:4a:af: ba:a3:b9:a2:26:3c:4c:09:97:5c:4d:52:dd:d6:2d: 06:3e:20:d1:a0:b3:d6:ed:2f:39:ed:a0:0b:70:d4: 0e:86:8e:51:3b:d8:3d:67:7e:df:9a:80:ec:24:30: 8b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CA:21:87:A0:7D:30:F5:BA:12:2F:FD:67:7A:6D:B1:33:1A:FC:1D X509v3 Authority Key Identifier: keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/s8ohh6B9MPW6Ei_9Z3ptsTMa_B0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.12.80.0-217.12.89.255 IPv6: 2a07:93c0::/29 Signature Algorithm: sha256WithRSAEncryption 9a:fe:e7:b9:d0:91:9e:18:69:75:77:ad:b0:14:a6:c4:7e:6b: 9d:23:8a:61:11:db:88:cb:6b:da:29:ff:84:e6:34:e4:da:4f: a0:f8:c5:58:16:b4:63:d8:f6:da:65:21:58:19:ea:02:36:16: 13:ae:2c:65:94:b7:9e:39:85:3c:ac:33:29:5f:9c:bb:0f:66: a9:dd:ef:63:12:4f:63:06:7a:af:2e:4b:e9:88:b2:cd:87:95: 8e:8d:e3:96:65:c3:dd:35:d0:f4:c1:d9:5a:58:c0:23:71:99: 80:ff:0b:ca:c2:36:ae:f9:3d:ea:d6:b6:5a:a6:d1:14:04:fd: bb:10:0a:b2:06:d2:ed:5d:97:bd:c6:b7:b5:f8:1a:f7:b8:8c: ca:26:ba:05:c0:26:1b:b9:2c:2a:63:4e:76:6c:de:f8:56:a0: 79:c2:3e:01:7e:6e:aa:3a:af:f2:b0:b9:98:38:24:61:7c:d9: 63:1b:87:ba:50:ca:2a:31:d4:9d:87:7b:6b:c9:e1:cb:0e:70: 4d:2a:b2:bc:bc:63:f6:a6:d5:58:a9:7b:c2:da:d8:a5:19:96: 83:9d:01:be:fe:9b:3c:49:2e:74:47:c1:86:6d:de:a5:9f:4c: c4:35:7c:95:e5:93:cc:ea:3c:07:1f:75:32:3c:cf:e4:d4:ad: 16:ae:32:7a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZrt6BakpHaJbWYEWgc72y+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OGU5NTYyMmZkNTQ0NWQ2ZWQzNDNmODBlMDUzZWFmZmIx MThiMmMwHhcNMjUxMjA1MDk0NjQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2NhMjE4N2EwN2QzMGY1YmExMjJmZmQ2NzdhNmRiMTMzMWFmYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxEKkxb9XEawvzYs9EhMB+IbD+GD /zGnweSGlhti4wYice+jejmgqFavIf4BQkec+h+NsM1zBfbGJVFnLb3Sm353uGFj /Bb8FUYPg0OI2cM15N346u9AOAcSF9cKfautXJnGZR6oE2ffE+DvUftsq5hkmvQN 78p+INu7A6nqib1ki3JF3CB4VAUr4m+hYyLwR1xl5Hfi8RJ0gqrsGidjgGQRqsSS 7Kll8nAb/ymnaLQ0iZWDZvJ7mZWy+L8O/JBMvOj5FSKm0Hj+EFNwlgw2Sq+6o7mi JjxMCZdcTVLd1i0GPiDRoLPW7S857aALcNQOho5RO9g9Z37fmoDsJDCLswIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFLPKIYegfTD1uhIv/Wd6bbEzGvwdMB8GA1UdIwQY MBaAFIWOlWIv1URdbtND+A4FPq/7EYssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEt NWJkNGRjYzVkNmVkLzEvczhvaGg2QjlNUFc2RWlfOVozcHRzVE1hX0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEtNWJkNGRjYzVkNmVk LzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBATZDFAD BAHZDFgwDQQCAAIwBwMFAyoHk8AwDQYJKoZIhvcNAQELBQADggEBAJr+57nQkZ4Y aXV3rbAUpsR+a50jimER24jLa9op/4TmNOTaT6D4xVgWtGPY9tplIVgZ6gI2FhOu LGWUt545hTysMylfnLsPZqnd72MST2MGeq8uS+mIss2HlY6N45Zlw9010PTB2VpY wCNxmYD/C8rCNq75PerWtlqm0RQE/bsQCrIG0u1dl73Gt7X4Gve4jMomugXAJhu5 LCpjTnZs3vhWoHnCPgF+bqo6r/KwuZg4JGF82WMbh7pQyiox1J2He2vJ4csOcE0q sry8Y/am1Vipe8La2KUZloOdAb7+mzxJLnRHwYZt3qWfTMQ1fJXlk8zqPAcfdTI8 z+TUrRauMno= -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:22 2025 by rpki-client