This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8O7Su21yjiOp6NO7OWd6AbN8faE.roa File: 8O7Su21yjiOp6NO7OWd6AbN8faE.roa (raw, json) Hash identifier: aKGuzOe0LVI9jSi7tYSt5twqQYuTakaDMQLrADPch5s= Subject key identifier: F0:EE:D2:BB:6D:72:8E:23:A9:E8:D3:BB:39:67:7A:01:B3:7C:7D:A1 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A5DC1DECF573604201387EDAF7765113C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8O7Su21yjiOp6NO7OWd6AbN8faE.roa Signing time: Fri 07 Nov 2025 09:59:37 +0000 ROA not before: Fri 07 Nov 2025 09:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 80.240.88.0/21 maxlen: 24 81.168.109.0/24 maxlen: 24 82.152.8.0/24 maxlen: 24 82.152.176.0/23 maxlen: 23 82.152.250.0/24 maxlen: 24 82.152.251.0/24 maxlen: 24 82.152.254.0/24 maxlen: 24 82.153.64.0/24 maxlen: 24 82.153.91.0/24 maxlen: 24 82.153.136.0/22 maxlen: 22 82.153.203.0/24 maxlen: 24 82.153.217.0/24 maxlen: 24 82.163.18.0/24 maxlen: 24 82.163.24.0/21 maxlen: 24 89.213.0.0/22 maxlen: 24 89.213.0.0/24 maxlen: 24 89.213.1.0/24 maxlen: 24 89.213.5.0/24 maxlen: 24 89.213.6.0/24 maxlen: 24 89.213.7.0/24 maxlen: 24 89.213.42.0/24 maxlen: 24 89.213.43.0/24 maxlen: 24 89.213.44.0/23 maxlen: 24 89.213.45.0/24 maxlen: 24 89.213.49.0/24 maxlen: 24 89.213.50.0/23 maxlen: 23 89.213.50.0/24 maxlen: 24 89.213.51.0/24 maxlen: 24 89.213.52.0/24 maxlen: 24 89.213.55.0/24 maxlen: 24 89.213.56.0/22 maxlen: 22 89.213.56.0/24 maxlen: 24 89.213.59.0/24 maxlen: 24 89.213.97.0/24 maxlen: 24 89.213.99.0/24 maxlen: 24 89.213.104.0/24 maxlen: 24 89.213.105.0/24 maxlen: 24 89.213.120.0/24 maxlen: 24 89.213.123.0/24 maxlen: 24 89.213.128.0/24 maxlen: 24 89.213.130.0/24 maxlen: 24 89.213.131.0/24 maxlen: 24 89.213.133.0/24 maxlen: 24 89.213.136.0/24 maxlen: 24 89.213.140.0/24 maxlen: 24 89.213.142.0/24 maxlen: 24 89.213.143.0/24 maxlen: 24 89.213.144.0/24 maxlen: 24 89.213.145.0/24 maxlen: 24 89.213.147.0/24 maxlen: 24 89.213.148.0/24 maxlen: 24 89.213.149.0/24 maxlen: 24 89.213.150.0/24 maxlen: 24 89.213.151.0/24 maxlen: 24 89.213.154.0/24 maxlen: 24 89.213.155.0/24 maxlen: 24 89.213.156.0/22 maxlen: 24 89.213.158.0/24 maxlen: 24 89.213.162.0/24 maxlen: 24 89.213.169.0/24 maxlen: 24 89.213.171.0/24 maxlen: 24 89.213.172.0/22 maxlen: 24 89.213.172.0/24 maxlen: 24 89.213.174.0/24 maxlen: 24 89.213.175.0/24 maxlen: 24 89.213.176.0/24 maxlen: 24 89.213.178.0/24 maxlen: 24 89.213.179.0/24 maxlen: 24 89.213.181.0/24 maxlen: 24 89.213.183.0/24 maxlen: 24 89.213.186.0/23 maxlen: 23 89.213.190.0/24 maxlen: 24 89.213.191.0/24 maxlen: 24 89.213.192.0/24 maxlen: 24 89.213.196.0/22 maxlen: 24 89.213.200.0/22 maxlen: 24 89.213.204.0/22 maxlen: 24 89.213.208.0/24 maxlen: 24 89.213.211.0/24 maxlen: 24 89.213.215.0/24 maxlen: 24 89.213.219.0/24 maxlen: 24 89.213.225.0/24 maxlen: 24 89.213.228.0/22 maxlen: 22 89.213.228.0/23 maxlen: 24 89.213.231.0/24 maxlen: 24 89.213.232.0/22 maxlen: 24 89.213.236.0/22 maxlen: 24 89.213.239.0/24 maxlen: 24 89.213.248.0/24 maxlen: 24 89.213.249.0/24 maxlen: 24 109.176.16.0/21 maxlen: 24 109.176.204.0/22 maxlen: 24 109.176.242.0/23 maxlen: 24 185.49.124.0/24 maxlen: 24 185.49.125.0/24 maxlen: 24 185.49.126.0/23 maxlen: 24 185.49.127.0/24 maxlen: 24 185.101.47.0/24 maxlen: 24 194.105.76.0/22 maxlen: 24 194.105.80.0/20 maxlen: 20 194.105.83.0/24 maxlen: 24 194.105.88.0/24 maxlen: 24 194.105.89.0/24 maxlen: 24 194.105.90.0/23 maxlen: 24 194.105.91.0/24 maxlen: 24 212.38.81.0/24 maxlen: 24 212.38.88.0/23 maxlen: 24 213.130.132.0/22 maxlen: 22 213.130.134.0/23 maxlen: 24 213.130.151.0/24 maxlen: 24 213.152.43.0/24 maxlen: 24 213.210.41.0/24 maxlen: 24 213.210.52.0/22 maxlen: 22 213.218.208.0/24 maxlen: 24 213.218.211.0/24 maxlen: 24 213.218.225.0/24 maxlen: 24 213.218.227.0/24 maxlen: 24 213.218.228.0/24 maxlen: 24 213.218.232.0/24 maxlen: 24 213.218.235.0/24 maxlen: 24 213.218.236.0/24 maxlen: 24 213.218.237.0/24 maxlen: 24 213.218.239.0/24 maxlen: 24 213.218.244.0/22 maxlen: 22 213.218.255.0/24 maxlen: 24 217.144.145.0/24 maxlen: 24 217.145.66.0/24 maxlen: 24 217.145.72.0/21 maxlen: 24 Validation: Failed, certificate revoked on Mon 10 Nov 2025 10:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5d:c1:de:cf:57:36:04:20:13:87:ed:af:77:65:11:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 7 09:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f0eed2bb6d728e23a9e8d3bb39677a01b37c7da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:08:5f:80:8c:1d:98:a7:94:35:2f:50:09: 06:82:a0:93:c6:9f:41:4a:0d:c7:d0:d5:a1:42:89: c3:18:89:e3:b3:ff:2e:7a:31:36:3a:e9:42:9c:75: 6c:60:17:bb:8c:0a:a6:d5:6f:67:f1:84:71:27:2c: 7e:c1:5a:1c:95:bb:57:61:e1:82:20:4f:72:77:c5: 10:73:fb:a1:81:95:ae:c7:9a:7f:0f:b8:6f:40:53: 60:f7:b9:05:0f:00:27:72:10:98:c9:cc:7f:61:f6: 10:e3:48:e4:d4:b1:a3:64:d5:02:fb:96:ea:8f:c0: 61:f2:71:06:0a:54:18:37:d1:91:72:1e:91:e2:19: 34:41:8a:11:16:bf:63:e2:13:1b:8e:73:54:c2:2f: 90:7c:19:9b:ea:52:6d:6a:98:74:97:20:05:23:d7: c0:78:c3:98:87:71:0d:39:f9:0a:7f:f6:23:03:1a: a8:13:33:fa:ec:20:2e:12:60:49:63:40:7c:d9:f1: 79:85:e9:f0:37:eb:3a:a4:ed:7f:ca:69:29:63:1d: 52:e9:e8:1e:fa:b6:0f:96:6d:8a:c5:bd:91:06:06: 5c:3e:22:31:53:a1:88:d6:6f:2f:4b:c7:4c:d2:de: 30:dd:44:d7:a6:4d:14:40:ae:f5:63:dc:85:38:86: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EE:D2:BB:6D:72:8E:23:A9:E8:D3:BB:39:67:7A:01:B3:7C:7D:A1 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8O7Su21yjiOp6NO7OWd6AbN8faE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.240.88.0/21 81.168.109.0/24 82.152.8.0/24 82.152.176.0/23 82.152.250.0/23 82.152.254.0/24 82.153.64.0/24 82.153.91.0/24 82.153.136.0/22 82.153.203.0/24 82.153.217.0/24 82.163.18.0/24 82.163.24.0/21 89.213.0.0/22 89.213.5.0-89.213.7.255 89.213.42.0-89.213.45.255 89.213.49.0-89.213.52.255 89.213.55.0-89.213.59.255 89.213.97.0/24 89.213.99.0/24 89.213.104.0/23 89.213.120.0/24 89.213.123.0/24 89.213.128.0/24 89.213.130.0/23 89.213.133.0/24 89.213.136.0/24 89.213.140.0/24 89.213.142.0-89.213.145.255 89.213.147.0-89.213.151.255 89.213.154.0-89.213.159.255 89.213.162.0/24 89.213.169.0/24 89.213.171.0-89.213.176.255 89.213.178.0/23 89.213.181.0/24 89.213.183.0/24 89.213.186.0/23 89.213.190.0-89.213.192.255 89.213.196.0-89.213.208.255 89.213.211.0/24 89.213.215.0/24 89.213.219.0/24 89.213.225.0/24 89.213.228.0-89.213.239.255 89.213.248.0/23 109.176.16.0/21 109.176.204.0/22 109.176.242.0/23 185.49.124.0/22 185.101.47.0/24 194.105.76.0-194.105.95.255 212.38.81.0/24 212.38.88.0/23 213.130.132.0/22 213.130.151.0/24 213.152.43.0/24 213.210.41.0/24 213.210.52.0/22 213.218.208.0/24 213.218.211.0/24 213.218.225.0/24 213.218.227.0-213.218.228.255 213.218.232.0/24 213.218.235.0-213.218.237.255 213.218.239.0/24 213.218.244.0/22 213.218.255.0/24 217.144.145.0/24 217.145.66.0/24 217.145.72.0/21 Signature Algorithm: sha256WithRSAEncryption 60:26:b9:67:7b:0a:3c:d1:3b:6d:27:cf:33:a0:df:b8:a4:90: bf:04:d0:84:74:e1:ca:57:6c:8a:d7:45:30:32:05:4e:ab:1b: 28:e5:ba:c3:75:bb:80:30:b2:5d:78:5c:15:a7:0f:f8:24:df: b6:16:c6:7c:21:d3:fa:9f:b3:a9:9a:9e:55:3a:40:0e:50:6f: 84:2b:82:e9:6c:e8:af:c4:a1:a4:2f:c6:9e:d2:fd:d3:7c:8d: 1b:3a:22:35:c7:91:e5:39:25:8e:f3:6e:42:ca:28:68:d8:76: 58:7a:a6:ae:09:26:03:93:f1:ce:8f:d3:ca:42:c7:ac:d2:14: 24:5e:5a:76:ae:65:e3:4f:9a:3c:d9:7b:38:9f:e9:9f:94:8c: 8e:fd:96:e2:52:19:3e:a4:fc:55:90:32:57:6d:3d:f2:06:8f: b0:99:97:b3:42:0b:22:8a:47:fb:86:a5:06:42:bc:9f:f8:fa: 06:b9:63:6d:fe:18:02:b6:75:c6:dd:85:f3:d0:4e:47:fe:05: 0b:ef:7e:73:d0:30:29:4b:98:c2:b0:e7:a7:64:fc:6d:d1:04: f6:32:16:b3:8f:64:0a:ab:ac:9a:da:8d:c8:b9:62:2c:66:42: ca:76:77:f0:d6:c7:54:21:ff:2b:26:b9:89:1d:55:e5:6f:03: 36:31:1d:9c -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgISAZpdwd7PVzYEIBOH7a93ZRE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTA3MDk1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGVlZDJiYjZkNzI4ZTIzYTllOGQzYmIzOTY3N2EwMWIzN2M3ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS4IX4CMHZinlDUvUAkGgqCTxp9B Sg3H0NWhQonDGInjs/8uejE2OulCnHVsYBe7jAqm1W9n8YRxJyx+wVoclbtXYeGC IE9yd8UQc/uhgZWux5p/D7hvQFNg97kFDwAnchCYycx/YfYQ40jk1LGjZNUC+5bq j8Bh8nEGClQYN9GRch6R4hk0QYoRFr9j4hMbjnNUwi+QfBmb6lJtaph0lyAFI9fA eMOYh3ENOfkKf/YjAxqoEzP67CAuEmBJY0B82fF5henwN+s6pO1/ymkpYx1S6ege +rYPlm2Kxb2RBgZcPiIxU6GI1m8vS8dM0t4w3UTXpk0UQK71Y9yFOIY+PQIDAQAB o4IEJzCCBCMwHQYDVR0OBBYEFPDu0rttco4jqejTuzlnegGzfH2hMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvOE83U3UyMXlqaU9wNk5PN09XZDZBYk44ZmFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICOwYIKwYBBQUHAQcBAf8EggIqMIICJjCCAiIEAgABMIIC GgMEA1DwWAMEAFGobQMEAFKYCAMEAVKYsAMEAVKY+gMEAFKY/gMEAFKZQAMEAFKZ WwMEAlKZiAMEAFKZywMEAFKZ2QMEAFKjEgMEA1KjGAMEAlnVADAMAwQAWdUFAwQD WdUAMAwDBAFZ1SoDBAFZ1SwwDAMEAFnVMQMEAFnVNDAMAwQAWdU3AwQCWdU4AwQA WdVhAwQAWdVjAwQBWdVoAwQAWdV4AwQAWdV7AwQAWdWAAwQBWdWCAwQAWdWFAwQA WdWIAwQAWdWMMAwDBAFZ1Y4DBAFZ1ZAwDAMEAFnVkwMEA1nVkDAMAwQBWdWaAwQF WdWAAwQAWdWiAwQAWdWpMAwDBABZ1asDBABZ1bADBAFZ1bIDBABZ1bUDBABZ1bcD BAFZ1bowDAMEAVnVvgMEAFnVwDAMAwQCWdXEAwQAWdXQAwQAWdXTAwQAWdXXAwQA WdXbAwQAWdXhMAwDBAJZ1eQDBARZ1eADBAFZ1fgDBANtsBADBAJtsMwDBAFtsPID BAK5MXwDBAC5ZS8wDAMEAsJpTAMEBcJpQAMEANQmUQMEAdQmWAMEAtWChAMEANWC lwMEANWYKwMEANXSKQMEAtXSNAMEANXa0AMEANXa0wMEANXa4TAMAwQA1drjAwQA 1drkAwQA1droMAwDBADV2usDBAHV2uwDBADV2u8DBALV2vQDBADV2v8DBADZkJED BADZkUIDBAPZkUgwDQYJKoZIhvcNAQELBQADggEBAGAmuWd7CjzRO20nzzOg37ik kL8E0IR04cpXbIrXRTAyBU6rGyjlusN1u4Awsl14XBWnD/gk37YWxnwh0/qfs6ma nlU6QA5Qb4Qrguls6K/EoaQvxp7S/dN8jRs6IjXHkeU5JY7zbkLKKGjYdlh6pq4J JgOT8c6P08pCx6zSFCReWnauZeNPmjzZezif6Z+UjI79luJSGT6k/FWQMldtPfIG j7CZl7NCCyKKR/uGpQZCvJ/4+ga5Y23+GAK2dcbdhfPQTkf+BQvvfnPQMClLmMKw 56dk/G3RBPYyFrOPZAqrrJrajci5YixmQsp2d/DWx1Qh/ysmuYkdVeVvAzYxHZw= -----END CERTIFICATE-----Generated at Sun Dec 7 12:38:48 2025 by rpki-client