This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/axyqBQ48rrA_J1z5ycbZeCJx_Cc.roa File: axyqBQ48rrA_J1z5ycbZeCJx_Cc.roa (raw, json) Hash identifier: 22q6iAZfHHtYuEjMCMpLAY7a5Lmv2Y859n6zpVXqo14= Subject key identifier: 6B:1C:AA:05:0E:3C:AE:B0:3F:27:5C:F9:C9:C6:D9:78:22:71:FC:27 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019C2F86DC55DFDD4E1D05BFCB5F37DFFA65 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/axyqBQ48rrA_J1z5ycbZeCJx_Cc.roa Signing time: Thu 05 Feb 2026 20:38:13 +0000 ROA not before: Thu 05 Feb 2026 20:38:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64445 IP address blocks: 31.193.188.0/24 maxlen: 24 37.156.174.0/24 maxlen: 24 45.83.56.0/22 maxlen: 22 45.83.57.0/24 maxlen: 24 45.83.58.0/24 maxlen: 24 45.83.59.0/24 maxlen: 24 45.86.144.0/22 maxlen: 22 45.86.144.0/24 maxlen: 24 45.86.146.0/24 maxlen: 24 45.86.147.0/24 maxlen: 24 77.81.103.0/24 maxlen: 24 85.204.255.0/24 maxlen: 24 86.104.67.0/24 maxlen: 24 86.107.110.0/24 maxlen: 24 89.34.236.0/23 maxlen: 23 89.34.236.0/24 maxlen: 24 89.34.237.0/24 maxlen: 24 89.34.239.0/24 maxlen: 24 89.39.201.0/24 maxlen: 24 89.39.254.0/24 maxlen: 24 89.40.142.0/23 maxlen: 23 89.40.142.0/24 maxlen: 24 89.40.143.0/24 maxlen: 24 89.40.227.0/24 maxlen: 24 89.42.134.0/24 maxlen: 24 89.43.34.0/24 maxlen: 24 89.43.35.0/24 maxlen: 24 89.43.52.0/24 maxlen: 24 89.44.237.0/24 maxlen: 24 91.212.52.0/24 maxlen: 24 91.229.186.0/24 maxlen: 24 92.114.86.0/24 maxlen: 24 92.114.87.0/24 maxlen: 24 93.113.144.0/24 maxlen: 24 93.113.145.0/24 maxlen: 24 93.113.146.0/24 maxlen: 24 93.113.147.0/24 maxlen: 24 93.113.148.0/22 maxlen: 22 93.113.148.0/24 maxlen: 24 93.113.149.0/24 maxlen: 24 93.113.150.0/24 maxlen: 24 93.113.151.0/24 maxlen: 24 93.115.56.0/24 maxlen: 24 93.115.57.0/24 maxlen: 24 94.176.108.0/24 maxlen: 24 94.176.212.0/24 maxlen: 24 94.177.10.0/24 maxlen: 24 94.177.11.0/24 maxlen: 24 94.177.21.0/24 maxlen: 24 94.177.48.0/23 maxlen: 23 94.177.48.0/24 maxlen: 24 94.177.49.0/24 maxlen: 24 94.177.96.0/24 maxlen: 24 94.177.97.0/24 maxlen: 24 94.177.98.0/24 maxlen: 24 94.177.99.0/24 maxlen: 24 176.223.64.0/24 maxlen: 24 185.184.240.0/22 maxlen: 22 185.184.240.0/24 maxlen: 24 185.184.241.0/24 maxlen: 24 185.184.242.0/24 maxlen: 24 185.184.243.0/24 maxlen: 24 185.198.244.0/24 maxlen: 24 185.198.245.0/24 maxlen: 24 185.198.246.0/24 maxlen: 24 185.198.247.0/24 maxlen: 24 188.208.16.0/23 maxlen: 23 188.208.16.0/24 maxlen: 24 188.208.17.0/24 maxlen: 24 188.211.248.0/24 maxlen: 24 188.214.199.0/24 maxlen: 24 188.215.6.0/23 maxlen: 23 188.215.6.0/24 maxlen: 24 188.215.7.0/24 maxlen: 24 188.215.94.0/24 maxlen: 24 188.240.80.0/24 maxlen: 24 188.240.228.0/23 maxlen: 23 188.240.228.0/24 maxlen: 24 188.240.229.0/24 maxlen: 24 188.241.66.0/24 maxlen: 24 188.241.67.0/24 maxlen: 24 188.241.126.0/24 maxlen: 24 188.241.138.0/24 maxlen: 24 188.241.139.0/24 maxlen: 24 188.241.143.0/24 maxlen: 24 188.241.213.0/24 maxlen: 24 193.239.140.0/23 maxlen: 24 193.239.141.0/24 maxlen: 24 217.198.177.0/24 maxlen: 24 2a04:68c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2f:86:dc:55:df:dd:4e:1d:05:bf:cb:5f:37:df:fa:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Feb 5 20:38:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b1caa050e3caeb03f275cf9c9c6d9782271fc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:3f:12:5a:2d:ff:db:fc:6e:f8:e9:ab:37: 84:2f:10:d9:29:8f:c5:08:5e:da:e5:da:df:5d:08: a6:0b:8a:c1:32:21:e0:ae:bb:ca:1a:3b:62:2d:13: 75:63:69:6f:11:5c:0d:66:6f:c7:c2:5f:7b:96:c9: c9:26:ea:9b:6e:f6:e9:9a:95:79:1e:d4:e6:12:09: 42:78:d5:68:fe:7e:de:cc:2b:6d:fc:ab:ad:ea:99: 67:c9:ee:02:7b:ed:c1:ea:63:18:a6:09:e8:b4:21: 79:93:54:51:e1:e5:d4:0c:28:6b:ba:9f:85:32:7f: 59:11:4b:26:63:11:b2:ba:23:6c:e2:ed:e0:f4:4b: ee:b6:06:34:4f:9a:69:25:47:a6:22:95:81:72:36: 72:fd:34:2c:37:83:48:4f:5e:1d:9a:20:78:b7:76: 1f:2d:b9:7b:0f:ed:37:04:2a:d5:55:f5:f9:01:82: 75:ce:42:2c:c7:41:2e:56:67:1b:36:19:b8:99:17: ae:bd:a0:df:cc:dd:df:3c:ee:4d:9b:f5:29:b2:27: 30:0e:ff:72:4c:cc:42:ca:70:8c:5f:67:ff:0b:8b: 26:4d:6e:4a:5c:9a:43:7b:49:89:3b:ca:77:ae:b8: ac:9c:d2:ce:74:3d:86:4f:b2:f9:0d:6a:2c:7b:33: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1C:AA:05:0E:3C:AE:B0:3F:27:5C:F9:C9:C6:D9:78:22:71:FC:27 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/axyqBQ48rrA_J1z5ycbZeCJx_Cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.188.0/24 37.156.174.0/24 45.83.56.0/22 45.86.144.0/22 77.81.103.0/24 85.204.255.0/24 86.104.67.0/24 86.107.110.0/24 89.34.236.0/23 89.34.239.0/24 89.39.201.0/24 89.39.254.0/24 89.40.142.0/23 89.40.227.0/24 89.42.134.0/24 89.43.34.0/23 89.43.52.0/24 89.44.237.0/24 91.212.52.0/24 91.229.186.0/24 92.114.86.0/23 93.113.144.0/21 93.115.56.0/23 94.176.108.0/24 94.176.212.0/24 94.177.10.0/23 94.177.21.0/24 94.177.48.0/23 94.177.96.0/22 176.223.64.0/24 185.184.240.0/22 185.198.244.0/22 188.208.16.0/23 188.211.248.0/24 188.214.199.0/24 188.215.6.0/23 188.215.94.0/24 188.240.80.0/24 188.240.228.0/23 188.241.66.0/23 188.241.126.0/24 188.241.138.0/23 188.241.143.0/24 188.241.213.0/24 193.239.140.0/23 217.198.177.0/24 IPv6: 2a04:68c0::/32 Signature Algorithm: sha256WithRSAEncryption af:7e:8a:2d:ed:ce:16:d0:b6:bf:93:c7:b3:0f:95:2f:6f:3e: 14:22:a1:a3:ed:67:c8:a6:85:47:95:b1:dd:ca:ce:09:04:84: ec:35:bf:64:48:86:f4:72:b0:5c:e1:20:20:58:c4:d4:91:9e: 2c:0b:05:ed:e5:3c:56:95:af:b2:d9:47:7c:64:70:c9:41:fe: aa:71:cc:28:47:4a:f2:f1:e4:65:4a:3d:7b:77:fe:87:05:37: ec:e1:33:9e:67:1e:e1:9d:e4:76:73:2f:ef:0c:8f:d1:3a:0e: 0d:37:58:97:fa:b1:48:6e:c2:5d:27:aa:f5:20:b7:d1:7f:c1: 8f:c4:1e:f7:18:73:80:15:4b:3b:9e:f0:ee:ab:b8:21:eb:3a: b7:5d:69:9f:cb:cc:6a:71:16:e9:c5:39:f8:8f:06:96:a9:16: d5:f6:1c:e6:57:01:f1:20:f2:fc:11:2b:bd:73:73:d8:e8:94: c4:24:61:a2:32:1a:25:46:49:33:08:17:52:3a:5c:cd:97:71: 4e:e5:ee:2a:98:ef:7b:43:ec:3a:19:fc:11:fb:65:f9:66:36: c4:86:76:dd:e5:22:ca:d1:52:2c:ee:9c:48:f1:95:6d:3c:15: 18:5c:7c:3b:ca:8a:fe:47:7c:93:f3:ae:08:fd:8a:23:8d:1d: 02:0d:2d:d7 -----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgISAZwvhtxV391OHQW/y1833/plMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYwMjA1MjAzODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjFjYWEwNTBlM2NhZWIwM2YyNzVjZjljOWM2ZDk3ODIyNzFmYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r4/Elot/9v8bvjpqzeELxDZKY/F CF7a5drfXQimC4rBMiHgrrvKGjtiLRN1Y2lvEVwNZm/Hwl97lsnJJuqbbvbpmpV5 HtTmEglCeNVo/n7ezCtt/Kut6plnye4Ce+3B6mMYpgnotCF5k1RR4eXUDChrup+F Mn9ZEUsmYxGyuiNs4u3g9EvutgY0T5ppJUemIpWBcjZy/TQsN4NIT14dmiB4t3Yf Lbl7D+03BCrVVfX5AYJ1zkIsx0EuVmcbNhm4mReuvaDfzN3fPO5Nm/UpsicwDv9y TMxCynCMX2f/C4smTW5KXJpDe0mJO8p3rrisnNLOdD2GT7L5DWosezMnSQIDAQAB o4IDMDCCAywwHQYDVR0OBBYEFGscqgUOPK6wPydc+cnG2XgicfwnMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvYXh5cUJRNDhyckFfSjF6NXljYlplQ0p4X0NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBRAYIKwYBBQUHAQcBAf8EggEzMIIBLzCCARwEAgABMIIB FAMEAB/BvAMEACWcrgMEAi1TOAMEAi1WkAMEAE1RZwMEAFXM/wMEAFZoQwMEAFZr bgMEAVki7AMEAFki7wMEAFknyQMEAFkn/gMEAVkojgMEAFko4wMEAFkqhgMEAVkr IgMEAFkrNAMEAFks7QMEAFvUNAMEAFvlugMEAVxyVgMEA11xkAMEAV1zOAMEAF6w bAMEAF6w1AMEAV6xCgMEAF6xFQMEAV6xMAMEAl6xYAMEALDfQAMEArm48AMEArnG 9AMEAbzQEAMEALzT+AMEALzWxwMEAbzXBgMEALzXXgMEALzwUAMEAbzw5AMEAbzx QgMEALzxfgMEAbzxigMEALzxjwMEALzx1QMEAcHvjAMEANnGsTANBAIAAjAHAwUA KgRowDANBgkqhkiG9w0BAQsFAAOCAQEAr36KLe3OFtC2v5PHsw+VL28+FCKho+1n yKaFR5Wx3crOCQSE7DW/ZEiG9HKwXOEgIFjE1JGeLAsF7eU8VpWvstlHfGRwyUH+ qnHMKEdK8vHkZUo9e3f+hwU37OEznmce4Z3kdnMv7wyP0ToODTdYl/qxSG7CXSeq 9SC30X/Bj8Qe9xhzgBVLO57w7qu4Ies6t11pn8vManEW6cU5+I8GlqkW1fYc5lcB 8SDy/BErvXNz2OiUxCRhojIaJUZJMwgXUjpczZdxTuXuKpjve0PsOhn8Eftl+WY2 xIZ23eUiytFSLO6cSPGVbTwVGFx8O8qK/kd8k/OuCP2KI40dAg0t1w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:22 2026 by rpki-client