This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/8H8YfO4JdXnSw0HuSXWzJgxZXwk.roa File: 8H8YfO4JdXnSw0HuSXWzJgxZXwk.roa (raw, json) Hash identifier: gN43EGY/rRCHwPUl1nynP7n+Hz0mIShB9EUghrm5zz0= Subject key identifier: F0:7F:18:7C:EE:09:75:79:D2:C3:41:EE:49:75:B3:26:0C:59:5F:09 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 019B20A911E811D06CE38F36D04577FA2397 Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/8H8YfO4JdXnSw0HuSXWzJgxZXwk.roa Signing time: Mon 15 Dec 2025 06:18:29 +0000 ROA not before: Mon 15 Dec 2025 06:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209854 IP address blocks: 92.249.36.0/24 maxlen: 24 92.249.37.0/24 maxlen: 24 92.249.38.0/24 maxlen: 24 92.249.39.0/24 maxlen: 24 172.216.0.0/24 maxlen: 24 172.216.1.0/24 maxlen: 24 172.216.2.0/24 maxlen: 24 172.216.3.0/24 maxlen: 24 172.216.4.0/24 maxlen: 24 172.216.5.0/24 maxlen: 24 172.216.6.0/24 maxlen: 24 172.216.7.0/24 maxlen: 24 172.216.8.0/24 maxlen: 24 172.216.9.0/24 maxlen: 24 172.216.10.0/24 maxlen: 24 172.216.11.0/24 maxlen: 24 203.21.66.0/24 maxlen: 24 2a09:a700::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:a9:11:e8:11:d0:6c:e3:8f:36:d0:45:77:fa:23:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Dec 15 06:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f07f187cee097579d2c341ee4975b3260c595f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c0:e9:b1:3a:69:55:bc:b1:0c:e6:96:98:fa: 00:54:77:ba:81:ad:a4:38:37:49:3b:21:ac:91:cd: 1b:e3:8b:68:80:45:48:c4:14:c5:27:5a:38:49:e5: 8d:f2:ca:0b:60:ff:01:6e:b9:04:88:11:bd:9e:88: 2e:d8:e6:eb:c4:97:e3:06:5c:1b:ee:bc:41:41:c3: 9c:35:aa:68:e0:c2:a5:e1:b1:39:10:83:12:c6:33: db:a5:0a:34:1e:5c:7e:94:3e:e7:5b:09:77:d5:2e: 84:0b:de:aa:3f:c5:af:31:31:3b:3f:0e:47:7e:50: bd:02:69:82:63:f7:f6:51:d9:fe:6f:a4:2a:db:04: 3e:e3:80:cd:ca:14:b5:c2:98:ca:47:3b:f3:51:d5: 87:cf:0a:c3:48:ad:3e:0b:83:65:fb:d8:42:5d:47: 9a:c8:63:20:0a:12:21:d0:0e:73:23:d6:27:30:43: 7b:53:18:7c:07:7e:05:94:66:27:a8:84:16:48:3c: 73:93:fc:4f:1c:50:44:9b:87:84:71:58:e4:59:05: 7f:c1:68:96:a3:2e:4a:5d:8a:1d:75:5d:b6:f3:d8: be:23:bd:50:4a:53:f0:6a:36:12:f5:37:48:8a:75: 47:68:5c:50:ad:08:5a:95:48:bc:7c:db:30:b4:31: b1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7F:18:7C:EE:09:75:79:D2:C3:41:EE:49:75:B3:26:0C:59:5F:09 X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/8H8YfO4JdXnSw0HuSXWzJgxZXwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.36.0/22 172.216.0.0-172.216.11.255 203.21.66.0/24 IPv6: 2a09:a700::/29 Signature Algorithm: sha256WithRSAEncryption 66:e6:0a:1d:83:8e:3b:92:2f:02:c3:c9:ba:8d:50:29:34:cd: 26:96:ac:00:e2:df:9b:b2:f3:b6:fe:91:01:56:cb:17:2c:d5: f7:27:44:24:e6:de:95:8d:92:6e:c6:e1:d8:63:b0:25:de:25: 7e:df:11:cb:fd:bb:5b:c9:95:81:7e:e5:a4:f3:33:22:39:36: 87:6a:02:d4:32:ef:f0:c7:e0:ef:f9:5e:a0:32:a5:0c:5c:cb: be:45:89:a9:40:69:e6:4d:66:39:c5:85:39:1e:9a:be:fb:e8: 4b:e4:9e:8a:a1:3c:29:a6:72:d5:80:b6:b6:d1:5c:b2:67:69: 91:3a:01:a7:59:77:1c:65:7f:6a:23:24:b0:59:dc:65:ab:e9: 80:de:cb:d0:ae:4c:89:1d:60:64:b7:37:00:6e:ed:e6:15:ae: f8:fd:c4:53:04:5b:ec:67:ac:19:d3:da:27:7e:a7:ff:40:bc: db:e7:14:26:17:b6:0d:ce:b0:e1:34:bb:09:19:2b:3f:71:bd: 8f:10:77:19:40:9f:83:73:ea:72:fd:0d:1b:2a:45:4e:bb:29: 1b:20:f2:0c:91:0f:65:7a:35:35:b1:2b:e8:e2:24:69:5a:0c: b5:92:7a:9d:3c:33:87:91:5b:3c:c9:35:04:b5:36:5e:dc:a8: 43:d3:01:0f -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZsgqRHoEdBs44820EV3+iOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjUxMjE1MDYxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDdmMTg3Y2VlMDk3NTc5ZDJjMzQxZWU0OTc1YjMyNjBjNTk1ZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8DpsTppVbyxDOaWmPoAVHe6ga2k ODdJOyGskc0b44togEVIxBTFJ1o4SeWN8soLYP8BbrkEiBG9nogu2ObrxJfjBlwb 7rxBQcOcNapo4MKl4bE5EIMSxjPbpQo0Hlx+lD7nWwl31S6EC96qP8WvMTE7Pw5H flC9AmmCY/f2Udn+b6Qq2wQ+44DNyhS1wpjKRzvzUdWHzwrDSK0+C4Nl+9hCXUea yGMgChIh0A5zI9YnMEN7Uxh8B34FlGYnqIQWSDxzk/xPHFBEm4eEcVjkWQV/wWiW oy5KXYoddV2289i+I71QSlPwajYS9TdIinVHaFxQrQhalUi8fNswtDGx6wIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFPB/GHzuCXV50sNB7kl1syYMWV8JMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvOEg4WWZPNEpkWG5TdzBIdVNYV3pKZ3haWHdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAfBAIAATAZAwQCXPkkMAsD AwOs2AMEAqzYCAMEAMsVQjANBAIAAjAHAwUDKgmnADANBgkqhkiG9w0BAQsFAAOC AQEAZuYKHYOOO5IvAsPJuo1QKTTNJpasAOLfm7Lztv6RAVbLFyzV9ydEJObelY2S bsbh2GOwJd4lft8Ry/27W8mVgX7lpPMzIjk2h2oC1DLv8Mfg7/leoDKlDFzLvkWJ qUBp5k1mOcWFOR6avvvoS+SeiqE8KaZy1YC2ttFcsmdpkToBp1l3HGV/aiMksFnc ZavpgN7L0K5MiR1gZLc3AG7t5hWu+P3EUwRb7GesGdPaJ36n/0C82+cUJhe2Dc6w 4TS7CRkrP3G9jxB3GUCfg3Pqcv0NGypFTrspGyDyDJEPZXo1NbEr6OIkaVoMtZJ6 nTwzh5FbPMk1BLU2XtyoQ9MBDw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:34:21 2025 by rpki-client