This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8I981ZpNyYVviByn55pmXids58Q.roa File: 8I981ZpNyYVviByn55pmXids58Q.roa (raw, json) Hash identifier: 0P3q32hEfmFLvnwnkEFsTveEBeaaRjG6IYKGaWLRd+4= Subject key identifier: F0:8F:7C:D5:9A:4D:C9:85:6F:88:1C:A7:E7:9A:66:5E:27:6C:E7:C4 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AE8125DDFD1422934E0D7C422A23D5A8B Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8I981ZpNyYVviByn55pmXids58Q.roa Signing time: Thu 04 Dec 2025 06:35:09 +0000 ROA not before: Thu 04 Dec 2025 06:35:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 212.134.16.0/24 maxlen: 24 212.134.36.0/24 maxlen: 24 212.134.47.0/24 maxlen: 24 212.134.56.0/23 maxlen: 24 212.134.58.0/24 maxlen: 24 212.134.60.0/24 maxlen: 24 212.134.61.0/24 maxlen: 24 212.134.62.0/24 maxlen: 24 212.134.63.0/24 maxlen: 24 212.134.80.0/24 maxlen: 24 212.134.81.0/24 maxlen: 24 212.134.82.0/24 maxlen: 24 212.134.85.0/24 maxlen: 24 212.134.88.0/24 maxlen: 24 212.134.98.0/23 maxlen: 24 212.134.104.0/23 maxlen: 24 212.134.106.0/23 maxlen: 24 212.134.110.0/23 maxlen: 24 212.134.128.0/22 maxlen: 24 212.134.132.0/22 maxlen: 24 212.134.136.0/22 maxlen: 24 212.134.140.0/22 maxlen: 24 212.134.144.0/22 maxlen: 24 212.134.148.0/22 maxlen: 24 212.134.175.0/24 maxlen: 24 212.134.179.0/24 maxlen: 24 212.134.188.0/22 maxlen: 24 212.134.196.0/22 maxlen: 24 212.134.199.0/24 maxlen: 24 212.134.212.0/22 maxlen: 24 212.134.216.0/22 maxlen: 24 212.134.228.0/22 maxlen: 24 212.134.232.0/22 maxlen: 24 212.134.248.0/22 maxlen: 24 212.135.24.0/23 maxlen: 24 212.135.28.0/23 maxlen: 24 212.135.161.0/24 maxlen: 24 212.135.162.0/24 maxlen: 24 212.135.165.0/24 maxlen: 24 212.135.166.0/24 maxlen: 24 212.135.167.0/24 maxlen: 24 212.135.168.0/24 maxlen: 24 212.135.169.0/24 maxlen: 24 212.135.170.0/24 maxlen: 24 212.135.171.0/24 maxlen: 24 212.135.172.0/24 maxlen: 24 212.135.173.0/24 maxlen: 24 212.135.204.0/22 maxlen: 24 212.135.240.0/23 maxlen: 24 212.135.244.0/23 maxlen: 24 212.135.248.0/23 maxlen: 24 212.135.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:12:5d:df:d1:42:29:34:e0:d7:c4:22:a2:3d:5a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 4 06:35:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f08f7cd59a4dc9856f881ca7e79a665e276ce7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:1d:2f:1e:06:de:8b:3f:67:2c:ce:fd:53: 24:be:49:39:21:43:1a:d7:0a:65:23:1e:4f:59:78: cc:15:cf:92:e4:10:5d:8e:a5:48:36:ca:1e:94:c4: ab:c8:76:36:b1:d1:17:5f:94:89:ea:02:f2:1a:a8: 66:6a:b8:a5:b1:62:57:a6:ed:37:73:94:30:9f:e7: 78:f2:5e:a5:3e:d9:d1:27:89:51:e4:32:30:93:ff: 75:c4:9a:0a:a3:87:a4:6a:dd:05:d8:70:a6:17:ae: a5:c5:df:68:f2:4d:86:c7:06:60:3e:8a:68:71:37: 7f:f6:04:f2:2a:d8:09:b8:b5:33:4f:d9:18:25:15: ad:86:56:c9:04:3c:67:50:56:f1:5a:16:cc:d7:cc: 8b:d8:2d:f5:31:a2:b5:1b:f4:e3:cc:e3:05:fe:6a: c9:e3:d4:17:15:f2:ae:73:ea:5c:20:71:cf:04:49: 7a:b7:57:e6:23:6c:41:06:bb:24:79:60:d6:df:59: e7:0f:db:c6:47:64:1f:09:ed:13:60:b9:b5:da:cd: 28:55:8f:ca:76:11:9f:52:47:99:4c:fc:cb:0f:e6: d4:2a:c9:f5:ca:96:91:b0:fa:11:17:83:9c:eb:6d: 16:bd:9a:fc:4a:50:e1:48:f1:2c:b0:63:99:97:a2: 2a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8F:7C:D5:9A:4D:C9:85:6F:88:1C:A7:E7:9A:66:5E:27:6C:E7:C4 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8I981ZpNyYVviByn55pmXids58Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.16.0/24 212.134.36.0/24 212.134.47.0/24 212.134.56.0-212.134.58.255 212.134.60.0/22 212.134.80.0-212.134.82.255 212.134.85.0/24 212.134.88.0/24 212.134.98.0/23 212.134.104.0/22 212.134.110.0/23 212.134.128.0-212.134.151.255 212.134.175.0/24 212.134.179.0/24 212.134.188.0/22 212.134.196.0/22 212.134.212.0-212.134.219.255 212.134.228.0-212.134.235.255 212.134.248.0/22 212.135.24.0/23 212.135.28.0/23 212.135.161.0-212.135.162.255 212.135.165.0-212.135.173.255 212.135.204.0/22 212.135.240.0/23 212.135.244.0/23 212.135.248.0/23 212.135.252.0/23 Signature Algorithm: sha256WithRSAEncryption bf:ee:57:8e:60:6e:df:be:06:3f:da:7b:1f:01:c6:77:d9:ad: 3b:b7:fb:95:ef:03:a8:e9:04:18:da:78:fd:76:a8:3d:42:34: cb:08:40:e2:35:81:bb:88:60:5d:ff:40:b0:e4:7d:cb:23:4a: d9:06:46:a2:d4:7e:52:6d:2b:e9:14:2c:77:ce:cb:52:db:6d: 8c:4c:f0:c3:fd:27:a4:a7:0a:14:0e:e7:ef:4f:8d:5d:de:f0: 1d:99:cd:1f:7a:d3:30:0a:fb:c3:92:24:25:84:7b:54:11:e4: 4c:13:e1:94:f1:a2:6b:93:b1:93:7c:b3:4f:f6:96:ca:c4:d8: e1:36:99:dc:0e:ed:69:27:7b:c5:1d:e1:a5:1c:a3:30:b5:95: 44:0f:f9:e8:72:40:8a:61:bb:72:30:81:f7:07:1d:5b:a7:a7: b7:32:2a:15:0f:dd:95:f3:b1:80:59:91:73:92:30:be:76:6b: ac:ec:92:04:f1:a8:9f:06:4b:2a:87:42:5c:66:d9:68:d5:58: 63:14:c7:ea:87:df:a0:f8:e8:a1:c4:d9:fa:46:c6:bd:2a:cb: da:e4:80:c6:11:0d:18:52:cc:31:54:db:5a:e6:e9:a7:f1:23: 77:57:cf:f5:e9:c2:09:a5:d3:b8:fb:f2:96:9c:23:30:53:6c: 9e:30:be:de -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgISAZroEl3f0UIpNODXxCKiPVqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjA0MDYzNTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDhmN2NkNTlhNGRjOTg1NmY4ODFjYTdlNzlhNjY1ZTI3NmNlN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniMdLx4G3os/ZyzO/VMkvkk5IUMa 1wplIx5PWXjMFc+S5BBdjqVINsoelMSryHY2sdEXX5SJ6gLyGqhmarilsWJXpu03 c5Qwn+d48l6lPtnRJ4lR5DIwk/91xJoKo4ekat0F2HCmF66lxd9o8k2GxwZgPopo cTd/9gTyKtgJuLUzT9kYJRWthlbJBDxnUFbxWhbM18yL2C31MaK1G/TjzOMF/mrJ 49QXFfKuc+pcIHHPBEl6t1fmI2xBBrskeWDW31nnD9vGR2QfCe0TYLm12s0oVY/K dhGfUkeZTPzLD+bUKsn1ypaRsPoRF4Oc620WvZr8SlDhSPEssGOZl6IqUQIDAQAB o4IC6DCCAuQwHQYDVR0OBBYEFPCPfNWaTcmFb4gcp+eaZl4nbOfEMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvOEk5ODFacE55WVZ2aUJ5bjU1cG1YaWRzNThRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBADU hhADBADUhiQDBADUhi8wDAMEA9SGOAMEANSGOgMEAtSGPDAMAwQE1IZQAwQA1IZS AwQA1IZVAwQA1IZYAwQB1IZiAwQC1IZoAwQB1IZuMAwDBAfUhoADBAPUhpADBADU hq8DBADUhrMDBALUhrwDBALUhsQwDAMEAtSG1AMEAtSG2DAMAwQC1IbkAwQC1Ibo AwQC1Ib4AwQB1IcYAwQB1IccMAwDBADUh6EDBADUh6IwDAMEANSHpQMEAdSHrAME AtSHzAMEAdSH8AMEAdSH9AMEAdSH+AMEAdSH/DANBgkqhkiG9w0BAQsFAAOCAQEA v+5XjmBu374GP9p7HwHGd9mtO7f7le8DqOkEGNp4/XaoPUI0ywhA4jWBu4hgXf9A sOR9yyNK2QZGotR+Um0r6RQsd87LUtttjEzww/0npKcKFA7n70+NXd7wHZnNH3rT MAr7w5IkJYR7VBHkTBPhlPGia5Oxk3yzT/aWysTY4TaZ3A7taSd7xR3hpRyjMLWV RA/56HJAimG7cjCB9wcdW6entzIqFQ/dlfOxgFmRc5IwvnZrrOySBPGonwZLKodC XGbZaNVYYxTH6offoPjoocTZ+kbGvSrL2uSAxhENGFLMMVTbWubpp/Ejd1fP9enC CaXTuPvylpwjMFNsnjC+3g== -----END CERTIFICATE-----Generated at Thu Dec 4 19:56:07 2025 by rpki-client