This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/us3l9p616UG1VZ0928hIoEi8gFE.roa File: us3l9p616UG1VZ0928hIoEi8gFE.roa (raw, json) Hash identifier: edK7LM8+xLwqTqnqtX8KviD7uv89mRtt14qJuJpyicI= Subject key identifier: BA:CD:E5:F6:9E:B5:E9:41:B5:55:9D:3D:DB:C8:48:A0:48:BC:80:51 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019B35579084089BDB5A3701C96C10D1C95C Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/us3l9p616UG1VZ0928hIoEi8gFE.roa Signing time: Fri 19 Dec 2025 06:41:29 +0000 ROA not before: Fri 19 Dec 2025 06:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64445 IP address blocks: 31.193.188.0/24 maxlen: 24 37.156.174.0/24 maxlen: 24 45.83.56.0/22 maxlen: 22 45.83.57.0/24 maxlen: 24 45.83.58.0/24 maxlen: 24 45.83.59.0/24 maxlen: 24 45.86.144.0/22 maxlen: 22 45.86.144.0/24 maxlen: 24 45.86.146.0/24 maxlen: 24 45.86.147.0/24 maxlen: 24 77.81.103.0/24 maxlen: 24 85.204.255.0/24 maxlen: 24 86.107.110.0/24 maxlen: 24 89.34.236.0/23 maxlen: 23 89.34.236.0/24 maxlen: 24 89.34.237.0/24 maxlen: 24 89.34.239.0/24 maxlen: 24 89.39.201.0/24 maxlen: 24 89.39.254.0/24 maxlen: 24 89.40.142.0/23 maxlen: 23 89.40.142.0/24 maxlen: 24 89.40.143.0/24 maxlen: 24 89.40.227.0/24 maxlen: 24 89.42.134.0/24 maxlen: 24 89.43.34.0/24 maxlen: 24 89.43.35.0/24 maxlen: 24 89.43.52.0/24 maxlen: 24 89.44.237.0/24 maxlen: 24 91.212.52.0/24 maxlen: 24 91.229.186.0/24 maxlen: 24 92.114.86.0/24 maxlen: 24 92.114.87.0/24 maxlen: 24 93.113.144.0/24 maxlen: 24 93.113.145.0/24 maxlen: 24 93.113.146.0/24 maxlen: 24 93.113.147.0/24 maxlen: 24 93.113.148.0/22 maxlen: 22 93.113.148.0/24 maxlen: 24 93.113.149.0/24 maxlen: 24 93.113.150.0/24 maxlen: 24 93.113.151.0/24 maxlen: 24 93.115.56.0/24 maxlen: 24 93.115.57.0/24 maxlen: 24 94.176.108.0/24 maxlen: 24 94.176.212.0/24 maxlen: 24 94.177.10.0/24 maxlen: 24 94.177.11.0/24 maxlen: 24 94.177.21.0/24 maxlen: 24 94.177.48.0/23 maxlen: 23 94.177.48.0/24 maxlen: 24 94.177.49.0/24 maxlen: 24 94.177.96.0/24 maxlen: 24 94.177.97.0/24 maxlen: 24 94.177.98.0/24 maxlen: 24 94.177.99.0/24 maxlen: 24 185.184.240.0/22 maxlen: 22 185.184.240.0/24 maxlen: 24 185.184.241.0/24 maxlen: 24 185.184.242.0/24 maxlen: 24 185.184.243.0/24 maxlen: 24 185.198.244.0/24 maxlen: 24 185.198.245.0/24 maxlen: 24 185.198.246.0/24 maxlen: 24 185.198.247.0/24 maxlen: 24 188.208.16.0/23 maxlen: 23 188.208.16.0/24 maxlen: 24 188.208.17.0/24 maxlen: 24 188.211.248.0/24 maxlen: 24 188.214.199.0/24 maxlen: 24 188.215.6.0/23 maxlen: 23 188.215.6.0/24 maxlen: 24 188.215.7.0/24 maxlen: 24 188.215.94.0/24 maxlen: 24 188.240.228.0/23 maxlen: 23 188.240.228.0/24 maxlen: 24 188.240.229.0/24 maxlen: 24 188.241.66.0/24 maxlen: 24 188.241.67.0/24 maxlen: 24 188.241.126.0/24 maxlen: 24 188.241.138.0/24 maxlen: 24 188.241.139.0/24 maxlen: 24 188.241.143.0/24 maxlen: 24 188.241.213.0/24 maxlen: 24 193.239.140.0/23 maxlen: 24 193.239.141.0/24 maxlen: 24 217.198.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:57:90:84:08:9b:db:5a:37:01:c9:6c:10:d1:c9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Dec 19 06:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bacde5f69eb5e941b5559d3ddbc848a048bc8051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:07:68:2b:e0:54:a6:9f:9d:40:e9:48:8c:be: 89:ab:a4:2d:49:c6:bc:d6:23:61:5e:1f:be:7a:2a: 20:47:59:d3:24:4a:76:ba:0e:32:2a:db:b0:04:2b: 40:96:7b:07:5e:1f:66:68:d8:ae:1b:4f:7e:2a:82: 33:ad:c5:94:c1:cb:73:15:61:17:fa:56:48:22:92: a9:25:f6:16:37:65:18:d2:cf:6a:b2:0f:cd:02:b2: 5e:84:fd:ee:25:80:83:92:d1:e4:32:46:c5:80:ce: c6:c1:e2:0f:0f:11:c5:ca:e1:42:66:34:4f:ec:e8: 83:03:24:1c:31:2c:ea:33:8a:3b:c8:10:bf:0e:72: 80:25:9b:26:76:0f:28:15:77:c5:8a:01:69:18:02: 03:af:e3:4e:80:6a:f6:0e:7c:b2:7a:68:6a:82:ad: 5c:ff:6c:50:f5:5e:e9:68:93:60:1c:71:95:91:1e: 29:04:0e:8a:d8:2a:d9:7d:95:79:df:83:b1:75:7e: 0d:b2:e1:24:85:36:b7:0d:be:7a:f3:b8:88:9d:e9: e5:6d:1d:1c:59:28:b8:73:5d:8a:c4:5f:e4:82:55: 8c:3f:bf:e0:cf:52:75:57:da:a9:98:33:db:67:88: c3:85:db:b1:ec:4a:ea:65:12:f9:af:19:3d:92:9c: 9a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CD:E5:F6:9E:B5:E9:41:B5:55:9D:3D:DB:C8:48:A0:48:BC:80:51 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/us3l9p616UG1VZ0928hIoEi8gFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.188.0/24 37.156.174.0/24 45.83.56.0/22 45.86.144.0/22 77.81.103.0/24 85.204.255.0/24 86.107.110.0/24 89.34.236.0/23 89.34.239.0/24 89.39.201.0/24 89.39.254.0/24 89.40.142.0/23 89.40.227.0/24 89.42.134.0/24 89.43.34.0/23 89.43.52.0/24 89.44.237.0/24 91.212.52.0/24 91.229.186.0/24 92.114.86.0/23 93.113.144.0/21 93.115.56.0/23 94.176.108.0/24 94.176.212.0/24 94.177.10.0/23 94.177.21.0/24 94.177.48.0/23 94.177.96.0/22 185.184.240.0/22 185.198.244.0/22 188.208.16.0/23 188.211.248.0/24 188.214.199.0/24 188.215.6.0/23 188.215.94.0/24 188.240.228.0/23 188.241.66.0/23 188.241.126.0/24 188.241.138.0/23 188.241.143.0/24 188.241.213.0/24 193.239.140.0/23 217.198.177.0/24 Signature Algorithm: sha256WithRSAEncryption ba:f8:6c:ea:1f:51:eb:a1:70:2a:3f:2d:b7:a5:44:b2:3f:85: 72:44:da:a7:6e:e5:9c:04:c8:8d:be:85:a1:e2:b1:f6:46:74: 9c:b8:da:93:41:fb:c6:b6:79:15:77:93:46:80:9c:e3:7a:20: 9b:6f:23:af:2a:a1:3b:84:d5:29:42:cc:85:45:1f:53:0e:80: 8c:59:f1:38:7c:6e:7e:8f:09:e6:d8:67:21:0b:05:17:b5:77: 7c:ab:ad:f0:eb:eb:b0:c5:85:c2:61:a7:d2:f9:39:fb:c9:dd: 52:04:2a:61:50:c0:ca:d3:dd:ae:75:2c:f7:a1:50:0e:d1:94: 79:ee:6e:aa:87:7f:65:2d:e4:4f:64:c4:20:f5:b2:8b:03:46: b1:5e:27:c7:85:2c:8c:69:49:a6:66:8b:83:af:ba:d3:4b:e7: 77:86:d4:95:28:25:6b:ae:73:12:2a:98:7e:29:db:85:13:a9: 9d:20:78:a9:cf:0d:75:1a:f9:cb:c7:53:d5:09:b6:45:ec:42: ee:f5:3c:44:8f:60:f8:41:88:9e:df:1f:60:ba:59:d2:60:15: 32:df:f3:54:13:36:d1:99:76:83:e8:9f:a6:3e:d8:e3:ef:ca: 4c:db:19:42:24:a4:31:45:b2:4b:d8:02:20:86:f2:60:16:94: 0a:21:48:0b -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZs1V5CECJvbWjcByWwQ0clcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjUxMjE5MDY0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWNkZTVmNjllYjVlOTQxYjU1NTlkM2RkYmM4NDhhMDQ4YmM4MDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQdoK+BUpp+dQOlIjL6Jq6QtSca8 1iNhXh++eiogR1nTJEp2ug4yKtuwBCtAlnsHXh9maNiuG09+KoIzrcWUwctzFWEX +lZIIpKpJfYWN2UY0s9qsg/NArJehP3uJYCDktHkMkbFgM7GweIPDxHFyuFCZjRP 7OiDAyQcMSzqM4o7yBC/DnKAJZsmdg8oFXfFigFpGAIDr+NOgGr2Dnyyemhqgq1c /2xQ9V7paJNgHHGVkR4pBA6K2CrZfZV534OxdX4NsuEkhTa3Db5687iInenlbR0c WSi4c12KxF/kglWMP7/gz1J1V9qpmDPbZ4jDhdux7ErqZRL5rxk9kpya3wIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFLrN5faetelBtVWdPdvISKBIvIBRMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvdXMzbDlwNjE2VUcxVlowOTI4aElvRWk4Z0ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCCAQoEAgABMIIB AgMEAB/BvAMEACWcrgMEAi1TOAMEAi1WkAMEAE1RZwMEAFXM/wMEAFZrbgMEAVki 7AMEAFki7wMEAFknyQMEAFkn/gMEAVkojgMEAFko4wMEAFkqhgMEAVkrIgMEAFkr NAMEAFks7QMEAFvUNAMEAFvlugMEAVxyVgMEA11xkAMEAV1zOAMEAF6wbAMEAF6w 1AMEAV6xCgMEAF6xFQMEAV6xMAMEAl6xYAMEArm48AMEArnG9AMEAbzQEAMEALzT +AMEALzWxwMEAbzXBgMEALzXXgMEAbzw5AMEAbzxQgMEALzxfgMEAbzxigMEALzx jwMEALzx1QMEAcHvjAMEANnGsTANBgkqhkiG9w0BAQsFAAOCAQEAuvhs6h9R66Fw Kj8tt6VEsj+FckTap27lnATIjb6FoeKx9kZ0nLjak0H7xrZ5FXeTRoCc43ogm28j ryqhO4TVKULMhUUfUw6AjFnxOHxufo8J5thnIQsFF7V3fKut8OvrsMWFwmGn0vk5 +8ndUgQqYVDAytPdrnUs96FQDtGUee5uqod/ZS3kT2TEIPWyiwNGsV4nx4UsjGlJ pmaLg6+600vnd4bUlSgla65zEiqYfinbhROpnSB4qc8NdRr5y8dT1Qm2RexC7vU8 RI9g+EGInt8fYLpZ0mAVMt/zVBM20Zl2g+ifpj7Y4+/KTNsZQiSkMUWyS9gCIIby YBaUCiFICw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:18:27 2025 by rpki-client