This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/F8GunSwPNC41R1ZXMQ8PTEnH3RE.roa File: F8GunSwPNC41R1ZXMQ8PTEnH3RE.roa (raw, json) Hash identifier: hjI7TiPMHB5m+M2D83jxywV8yFZo7hx2pX0uifuf4XI= Subject key identifier: 17:C1:AE:9D:2C:0F:34:2E:35:47:56:57:31:0F:0F:4C:49:C7:DD:11 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019B7EA481CCBA7B09489017D66FFF857439 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/F8GunSwPNC41R1ZXMQ8PTEnH3RE.roa Signing time: Fri 02 Jan 2026 12:17:48 +0000 ROA not before: Fri 02 Jan 2026 12:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64445 IP address blocks: 31.193.188.0/24 maxlen: 24 37.156.174.0/24 maxlen: 24 45.83.56.0/22 maxlen: 22 45.83.57.0/24 maxlen: 24 45.83.58.0/24 maxlen: 24 45.83.59.0/24 maxlen: 24 45.86.144.0/22 maxlen: 22 45.86.144.0/24 maxlen: 24 45.86.146.0/24 maxlen: 24 45.86.147.0/24 maxlen: 24 77.81.103.0/24 maxlen: 24 85.204.255.0/24 maxlen: 24 86.104.67.0/24 maxlen: 24 86.107.110.0/24 maxlen: 24 89.34.236.0/23 maxlen: 23 89.34.236.0/24 maxlen: 24 89.34.237.0/24 maxlen: 24 89.34.239.0/24 maxlen: 24 89.39.201.0/24 maxlen: 24 89.39.254.0/24 maxlen: 24 89.40.142.0/23 maxlen: 23 89.40.142.0/24 maxlen: 24 89.40.143.0/24 maxlen: 24 89.40.227.0/24 maxlen: 24 89.42.134.0/24 maxlen: 24 89.43.34.0/24 maxlen: 24 89.43.35.0/24 maxlen: 24 89.43.52.0/24 maxlen: 24 89.44.237.0/24 maxlen: 24 91.212.52.0/24 maxlen: 24 91.229.186.0/24 maxlen: 24 92.114.86.0/24 maxlen: 24 92.114.87.0/24 maxlen: 24 93.113.144.0/24 maxlen: 24 93.113.145.0/24 maxlen: 24 93.113.146.0/24 maxlen: 24 93.113.147.0/24 maxlen: 24 93.113.148.0/22 maxlen: 22 93.113.148.0/24 maxlen: 24 93.113.149.0/24 maxlen: 24 93.113.150.0/24 maxlen: 24 93.113.151.0/24 maxlen: 24 93.115.56.0/24 maxlen: 24 93.115.57.0/24 maxlen: 24 94.176.108.0/24 maxlen: 24 94.176.212.0/24 maxlen: 24 94.177.10.0/24 maxlen: 24 94.177.11.0/24 maxlen: 24 94.177.21.0/24 maxlen: 24 94.177.48.0/23 maxlen: 23 94.177.48.0/24 maxlen: 24 94.177.49.0/24 maxlen: 24 94.177.96.0/24 maxlen: 24 94.177.97.0/24 maxlen: 24 94.177.98.0/24 maxlen: 24 94.177.99.0/24 maxlen: 24 185.184.240.0/22 maxlen: 22 185.184.240.0/24 maxlen: 24 185.184.241.0/24 maxlen: 24 185.184.242.0/24 maxlen: 24 185.184.243.0/24 maxlen: 24 185.198.244.0/24 maxlen: 24 185.198.245.0/24 maxlen: 24 185.198.246.0/24 maxlen: 24 185.198.247.0/24 maxlen: 24 188.208.16.0/23 maxlen: 23 188.208.16.0/24 maxlen: 24 188.208.17.0/24 maxlen: 24 188.211.248.0/24 maxlen: 24 188.214.199.0/24 maxlen: 24 188.215.6.0/23 maxlen: 23 188.215.6.0/24 maxlen: 24 188.215.7.0/24 maxlen: 24 188.215.94.0/24 maxlen: 24 188.240.228.0/23 maxlen: 23 188.240.228.0/24 maxlen: 24 188.240.229.0/24 maxlen: 24 188.241.66.0/24 maxlen: 24 188.241.67.0/24 maxlen: 24 188.241.126.0/24 maxlen: 24 188.241.138.0/24 maxlen: 24 188.241.139.0/24 maxlen: 24 188.241.143.0/24 maxlen: 24 188.241.213.0/24 maxlen: 24 193.239.140.0/23 maxlen: 24 193.239.141.0/24 maxlen: 24 217.198.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:81:cc:ba:7b:09:48:90:17:d6:6f:ff:85:74:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Jan 2 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17c1ae9d2c0f342e35475657310f0f4c49c7dd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:50:f6:8f:7b:fc:fc:f4:b7:22:c2:7e:85: 07:a3:8f:1e:74:04:c6:54:79:e7:21:88:29:4a:f2: cd:9c:87:43:0c:d4:ea:44:d6:df:39:16:78:40:47: 05:22:cd:09:29:56:5f:48:d8:6a:b4:4b:50:9e:05: 27:e6:c2:3c:19:ab:db:bc:6f:b4:1c:77:28:7a:1f: 51:73:b8:92:ca:fd:f4:9c:75:bd:0e:c6:c9:cc:e3: 44:29:52:34:cd:54:4f:49:24:7f:98:26:b6:4a:7f: 3c:a6:38:b7:21:65:91:17:4f:9f:9a:59:02:ae:56: c3:ff:b3:99:b8:2e:8e:1d:3e:fd:0e:a3:bd:93:2e: a9:f0:20:fc:82:80:ab:8a:20:71:2d:52:14:aa:3f: be:da:3e:d8:ae:78:81:87:57:3b:40:b8:ee:de:70: 38:93:5f:4a:64:5f:d3:73:e4:ea:28:60:9f:d6:d9: 02:9d:53:91:ad:89:c5:c1:4f:78:ab:ec:c6:ab:14: c4:dc:8d:ef:45:27:5a:78:94:17:ef:2a:05:f6:d2: ad:be:b9:74:9a:f0:42:a4:06:26:ba:5b:ad:15:3a: 9c:e0:83:14:cd:61:23:17:9e:0d:9f:d8:4e:af:cc: ac:28:82:04:17:fc:fd:40:ba:08:b0:fb:4a:15:ce: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C1:AE:9D:2C:0F:34:2E:35:47:56:57:31:0F:0F:4C:49:C7:DD:11 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/F8GunSwPNC41R1ZXMQ8PTEnH3RE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.188.0/24 37.156.174.0/24 45.83.56.0/22 45.86.144.0/22 77.81.103.0/24 85.204.255.0/24 86.104.67.0/24 86.107.110.0/24 89.34.236.0/23 89.34.239.0/24 89.39.201.0/24 89.39.254.0/24 89.40.142.0/23 89.40.227.0/24 89.42.134.0/24 89.43.34.0/23 89.43.52.0/24 89.44.237.0/24 91.212.52.0/24 91.229.186.0/24 92.114.86.0/23 93.113.144.0/21 93.115.56.0/23 94.176.108.0/24 94.176.212.0/24 94.177.10.0/23 94.177.21.0/24 94.177.48.0/23 94.177.96.0/22 185.184.240.0/22 185.198.244.0/22 188.208.16.0/23 188.211.248.0/24 188.214.199.0/24 188.215.6.0/23 188.215.94.0/24 188.240.228.0/23 188.241.66.0/23 188.241.126.0/24 188.241.138.0/23 188.241.143.0/24 188.241.213.0/24 193.239.140.0/23 217.198.177.0/24 Signature Algorithm: sha256WithRSAEncryption 08:04:19:46:b3:98:78:a5:c3:3c:9a:5d:bb:86:47:24:68:a8: 25:92:6d:ec:cd:b0:d8:d1:63:4a:3e:29:8f:66:a0:e9:04:d9: 9e:63:cc:2c:be:18:d1:ab:4a:fa:c6:b0:56:18:ad:6d:4d:5b: 2a:ea:86:3f:a1:b9:2b:92:62:12:7b:45:8d:03:e1:6f:50:65: b0:a2:a7:5d:34:3b:fa:9b:e6:73:e6:74:a6:0f:ca:05:6e:02: a7:3a:5e:62:1d:2d:28:a9:f0:90:63:5a:eb:8c:2d:71:40:ac: f0:e3:49:19:6f:45:4e:99:19:ae:fc:68:ab:05:65:a2:6e:05: b1:a6:c9:8c:c2:56:27:c5:ba:f4:2b:0b:87:4e:e3:f7:2a:30: be:17:62:e4:05:ff:c4:6c:43:e3:5d:f5:1c:4f:ce:d4:90:fa: db:5e:e2:7d:04:73:36:f1:d3:28:cd:bd:2e:86:d8:3e:9a:94: 3e:15:b6:67:93:fe:fa:94:f7:4b:a6:68:77:ff:96:54:3a:b2: e5:1e:3a:5a:63:a5:e3:9a:93:ab:3c:09:3a:a8:ae:07:09:2b: c3:75:ac:62:5e:3e:f9:17:0c:d0:8d:7d:4f:54:57:25:0b:ad: b7:f1:9e:02:dd:3a:23:11:80:7c:06:57:3d:b9:1e:c0:11:8b: 98:3d:df:1a -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISAZt+pIHMunsJSJAX1m//hXQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYwMTAyMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2MxYWU5ZDJjMGYzNDJlMzU0NzU2NTczMTBmMGY0YzQ5YzdkZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFJQ9o97/Pz0tyLCfoUHo48edATG VHnnIYgpSvLNnIdDDNTqRNbfORZ4QEcFIs0JKVZfSNhqtEtQngUn5sI8GavbvG+0 HHcoeh9Rc7iSyv30nHW9DsbJzONEKVI0zVRPSSR/mCa2Sn88pji3IWWRF0+fmlkC rlbD/7OZuC6OHT79DqO9ky6p8CD8goCriiBxLVIUqj++2j7YrniBh1c7QLju3nA4 k19KZF/Tc+TqKGCf1tkCnVORrYnFwU94q+zGqxTE3I3vRSdaeJQX7yoF9tKtvrl0 mvBCpAYmulutFTqc4IMUzWEjF54Nn9hOr8ysKIIEF/z9QLoIsPtKFc4vjQIDAQAB o4IDFTCCAxEwHQYDVR0OBBYEFBfBrp0sDzQuNUdWVzEPD0xJx90RMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvRjhHdW5Td1BOQzQxUjFaWE1ROFBURW5IM1JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBKQYIKwYBBQUHAQcBAf8EggEYMIIBFDCCARAEAgABMIIB CAMEAB/BvAMEACWcrgMEAi1TOAMEAi1WkAMEAE1RZwMEAFXM/wMEAFZoQwMEAFZr bgMEAVki7AMEAFki7wMEAFknyQMEAFkn/gMEAVkojgMEAFko4wMEAFkqhgMEAVkr IgMEAFkrNAMEAFks7QMEAFvUNAMEAFvlugMEAVxyVgMEA11xkAMEAV1zOAMEAF6w bAMEAF6w1AMEAV6xCgMEAF6xFQMEAV6xMAMEAl6xYAMEArm48AMEArnG9AMEAbzQ EAMEALzT+AMEALzWxwMEAbzXBgMEALzXXgMEAbzw5AMEAbzxQgMEALzxfgMEAbzx igMEALzxjwMEALzx1QMEAcHvjAMEANnGsTANBgkqhkiG9w0BAQsFAAOCAQEACAQZ RrOYeKXDPJpdu4ZHJGioJZJt7M2w2NFjSj4pj2ag6QTZnmPMLL4Y0atK+sawVhit bU1bKuqGP6G5K5JiEntFjQPhb1BlsKKnXTQ7+pvmc+Z0pg/KBW4CpzpeYh0tKKnw kGNa64wtcUCs8ONJGW9FTpkZrvxoqwVlom4FsabJjMJWJ8W69CsLh07j9yowvhdi 5AX/xGxD4131HE/O1JD6217ifQRzNvHTKM29LobYPpqUPhW2Z5P++pT3S6Zod/+W VDqy5R46WmOl45qTqzwJOqiuBwkrw3WsYl4++RcM0I19T1RXJQutt/GeAt06IxGA fAZXPbkewBGLmD3fGg== -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:14 2026 by rpki-client