This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/pg08iZmXiA9f3gK9qFVPkKWX3Do.roa File: pg08iZmXiA9f3gK9qFVPkKWX3Do.roa (raw, json) Hash identifier: DtPQdtrOm/UwJd40BqGvwz8RH+fB/26Ry4OZL+v4IOg= Subject key identifier: A6:0D:3C:89:99:97:88:0F:5F:DE:02:BD:A8:55:4F:90:A5:97:DC:3A Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019AD9B54A34D2B2A1F0D3151202EB698BAE Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/pg08iZmXiA9f3gK9qFVPkKWX3Do.roa Signing time: Mon 01 Dec 2025 11:38:48 +0000 ROA not before: Mon 01 Dec 2025 11:38:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49367 IP address blocks: 31.193.188.0/24 maxlen: 24 37.156.174.0/24 maxlen: 24 45.83.56.0/22 maxlen: 22 45.86.144.0/22 maxlen: 22 77.81.103.0/24 maxlen: 24 85.204.255.0/24 maxlen: 24 86.107.110.0/24 maxlen: 24 89.34.236.0/23 maxlen: 23 89.34.239.0/24 maxlen: 24 89.39.201.0/24 maxlen: 24 89.39.254.0/24 maxlen: 24 89.40.142.0/23 maxlen: 23 89.40.227.0/24 maxlen: 24 89.42.134.0/24 maxlen: 24 89.43.34.0/24 maxlen: 24 89.43.35.0/24 maxlen: 24 89.43.52.0/24 maxlen: 24 89.44.237.0/24 maxlen: 24 91.212.52.0/24 maxlen: 24 91.229.186.0/24 maxlen: 24 92.114.86.0/24 maxlen: 24 92.114.87.0/24 maxlen: 24 93.113.144.0/21 maxlen: 21 93.113.144.0/22 maxlen: 22 93.113.144.0/24 maxlen: 24 93.113.145.0/24 maxlen: 24 93.113.146.0/24 maxlen: 24 93.113.147.0/24 maxlen: 24 93.113.148.0/22 maxlen: 22 93.113.148.0/24 maxlen: 24 93.113.149.0/24 maxlen: 24 93.113.150.0/24 maxlen: 24 93.113.151.0/24 maxlen: 24 94.176.108.0/24 maxlen: 24 94.176.212.0/24 maxlen: 24 94.177.48.0/23 maxlen: 23 94.177.98.0/24 maxlen: 24 94.177.99.0/24 maxlen: 24 185.184.240.0/22 maxlen: 22 185.184.240.0/24 maxlen: 24 185.184.241.0/24 maxlen: 24 185.184.242.0/24 maxlen: 24 185.184.243.0/24 maxlen: 24 185.198.244.0/24 maxlen: 24 185.198.245.0/24 maxlen: 24 185.198.246.0/24 maxlen: 24 185.198.247.0/24 maxlen: 24 188.208.16.0/23 maxlen: 23 188.208.16.0/24 maxlen: 24 188.208.17.0/24 maxlen: 24 188.211.248.0/24 maxlen: 24 188.214.199.0/24 maxlen: 24 188.215.6.0/23 maxlen: 23 188.215.6.0/24 maxlen: 24 188.215.7.0/24 maxlen: 24 188.240.228.0/23 maxlen: 23 188.240.228.0/24 maxlen: 24 188.240.229.0/24 maxlen: 24 188.241.126.0/24 maxlen: 24 193.239.140.0/23 maxlen: 23 217.198.177.0/24 maxlen: 24 2a04:68c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:b5:4a:34:d2:b2:a1:f0:d3:15:12:02:eb:69:8b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Dec 1 11:38:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a60d3c899997880f5fde02bda8554f90a597dc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f9:35:2b:03:26:80:d6:83:f4:4c:4d:3e:69: 63:6b:9c:87:7a:95:21:f4:37:b4:73:66:9a:8c:5e: 68:c4:c3:d7:f8:7d:0c:34:44:9f:fc:a1:b9:c9:5e: ca:f8:7b:6f:42:ed:64:d9:95:8e:06:79:d3:ef:47: 75:60:ea:4f:bf:6d:34:0a:c5:ea:8e:d6:9b:c6:e0: d3:6e:52:1f:76:6f:a8:c8:94:46:83:c5:50:5a:16: 2a:e5:03:29:8d:33:d9:fa:db:6d:8c:d1:d9:79:ac: 36:70:57:5c:39:65:56:90:bb:3c:52:25:8c:14:8f: 5f:2c:66:65:b9:20:1e:0e:24:04:01:09:52:a0:31: 0d:80:2e:13:5f:ab:50:37:cf:0a:52:b6:45:33:45: 14:28:a1:98:09:6f:67:32:2c:58:e4:50:59:28:45: 57:a5:05:57:29:00:1d:0d:99:78:a0:96:9e:f4:29: d8:57:40:7e:e5:8b:5c:77:f7:3c:e1:62:08:a9:f3: 10:50:a1:66:5d:35:9d:3c:37:f4:54:d1:bc:e1:9d: a4:90:a4:11:bf:90:c4:b4:e7:88:69:5a:c6:28:54: 70:17:ae:d4:15:9f:50:dc:3e:5f:aa:07:b5:5e:fa: 89:22:5c:36:75:32:e7:3c:43:52:91:7a:2b:59:5b: d3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0D:3C:89:99:97:88:0F:5F:DE:02:BD:A8:55:4F:90:A5:97:DC:3A X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/pg08iZmXiA9f3gK9qFVPkKWX3Do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.188.0/24 37.156.174.0/24 45.83.56.0/22 45.86.144.0/22 77.81.103.0/24 85.204.255.0/24 86.107.110.0/24 89.34.236.0/23 89.34.239.0/24 89.39.201.0/24 89.39.254.0/24 89.40.142.0/23 89.40.227.0/24 89.42.134.0/24 89.43.34.0/23 89.43.52.0/24 89.44.237.0/24 91.212.52.0/24 91.229.186.0/24 92.114.86.0/23 93.113.144.0/21 94.176.108.0/24 94.176.212.0/24 94.177.48.0/23 94.177.98.0/23 185.184.240.0/22 185.198.244.0/22 188.208.16.0/23 188.211.248.0/24 188.214.199.0/24 188.215.6.0/23 188.240.228.0/23 188.241.126.0/24 193.239.140.0/23 217.198.177.0/24 IPv6: 2a04:68c0::/32 Signature Algorithm: sha256WithRSAEncryption c8:87:d4:36:73:14:aa:60:7f:95:da:c5:91:7a:54:b0:f0:33: 51:b4:95:fc:b9:41:10:51:37:de:dd:04:21:11:1a:9a:36:5a: 43:64:ed:24:41:6e:23:66:75:8b:7d:70:2a:06:de:84:8f:81: ba:88:bf:66:98:5e:a7:94:5a:e1:87:62:1b:d6:ba:51:f8:44: 89:f8:55:28:0e:32:5e:25:12:e6:b9:d9:53:8d:d6:1a:a4:98: 0d:06:71:4a:1d:76:c6:97:47:05:a1:93:94:59:6a:7c:c3:0f: 9f:b5:ab:b7:0b:b1:7e:15:6a:9b:17:0f:59:4f:1c:61:f7:42: a4:ae:c0:fd:cc:f4:f2:ff:4f:e0:43:23:33:68:eb:68:72:55: 80:9a:f8:17:01:d2:74:64:b4:a2:dc:74:b8:0f:b6:3a:35:e1: bd:76:23:e9:b7:21:cd:26:8c:30:78:b6:92:be:fb:cb:84:f1: b0:14:96:ae:cc:4b:0d:c7:bc:68:ac:61:5c:32:5b:71:fc:46: 10:80:69:22:b5:58:36:f6:7d:eb:7f:f7:26:34:1c:9c:4e:2c: 86:97:10:ba:99:33:fb:50:a3:b2:30:64:32:d4:69:a7:c4:5e: 7d:14:f8:53:b2:df:73:76:41:b1:83:1d:4d:52:2c:c3:9e:ed: 3d:bb:79:93 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgISAZrZtUo00rKh8NMVEgLraYuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjUxMjAxMTEzODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjBkM2M4OTk5OTc4ODBmNWZkZTAyYmRhODU1NGY5MGE1OTdkYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvk1KwMmgNaD9ExNPmlja5yHepUh 9De0c2aajF5oxMPX+H0MNESf/KG5yV7K+HtvQu1k2ZWOBnnT70d1YOpPv200CsXq jtabxuDTblIfdm+oyJRGg8VQWhYq5QMpjTPZ+tttjNHZeaw2cFdcOWVWkLs8UiWM FI9fLGZluSAeDiQEAQlSoDENgC4TX6tQN88KUrZFM0UUKKGYCW9nMixY5FBZKEVX pQVXKQAdDZl4oJae9CnYV0B+5Ytcd/c84WIIqfMQUKFmXTWdPDf0VNG84Z2kkKQR v5DEtOeIaVrGKFRwF67UFZ9Q3D5fqge1XvqJIlw2dTLnPENSkXorWVvT/QIDAQAB o4IC6TCCAuUwHQYDVR0OBBYEFKYNPImZl4gPX94CvahVT5Cll9w6MB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvcGcwOGlabVhpQTlmM2dLOXFGVlBrS1dYM0RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH+BggrBgEFBQcBBwEB/wSB7jCB6zCB2QQCAAEwgdIDBAAf wbwDBAAlnK4DBAItUzgDBAItVpADBABNUWcDBABVzP8DBABWa24DBAFZIuwDBABZ Iu8DBABZJ8kDBABZJ/4DBAFZKI4DBABZKOMDBABZKoYDBAFZKyIDBABZKzQDBABZ LO0DBABb1DQDBABb5boDBAFcclYDBANdcZADBABesGwDBABesNQDBAFesTADBAFe sWIDBAK5uPADBAK5xvQDBAG80BADBAC80/gDBAC81scDBAG81wYDBAG88OQDBAC8 8X4DBAHB74wDBADZxrEwDQQCAAIwBwMFACoEaMAwDQYJKoZIhvcNAQELBQADggEB AMiH1DZzFKpgf5XaxZF6VLDwM1G0lfy5QRBRN97dBCERGpo2WkNk7SRBbiNmdYt9 cCoG3oSPgbqIv2aYXqeUWuGHYhvWulH4RIn4VSgOMl4lEua52VON1hqkmA0GcUod dsaXRwWhk5RZanzDD5+1q7cLsX4VapsXD1lPHGH3QqSuwP3M9PL/T+BDIzNo62hy VYCa+BcB0nRktKLcdLgPtjo14b12I+m3Ic0mjDB4tpK++8uE8bAUlq7MSw3HvGis YVwyW3H8RhCAaSK1WDb2fet/9yY0HJxOLIaXELqZM/tQo7IwZDLUaafEXn0U+FOy 33N2QbGDHU1SLMOe7T27eZM= -----END CERTIFICATE-----Generated at Thu Dec 4 22:30:29 2025 by rpki-client