This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/orffpOuO_jX_WtUh2KMEtztj9-I.roa File: orffpOuO_jX_WtUh2KMEtztj9-I.roa (raw, json) Hash identifier: UZ8df/Kl2t9w2hO2zSNoEL0W2oHlORI4eoDSMqd89Ag= Subject key identifier: A2:B7:DF:A4:EB:8E:FE:35:FF:5A:D5:21:D8:A3:04:B7:3B:63:F7:E2 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019BD745006860F4E9CDD459C225F71B9858 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/orffpOuO_jX_WtUh2KMEtztj9-I.roa Signing time: Mon 19 Jan 2026 17:19:41 +0000 ROA not before: Mon 19 Jan 2026 17:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64445 IP address blocks: 31.193.188.0/24 maxlen: 24 37.156.174.0/24 maxlen: 24 45.83.56.0/22 maxlen: 22 45.83.57.0/24 maxlen: 24 45.83.58.0/24 maxlen: 24 45.83.59.0/24 maxlen: 24 45.86.144.0/22 maxlen: 22 45.86.144.0/24 maxlen: 24 45.86.146.0/24 maxlen: 24 45.86.147.0/24 maxlen: 24 77.81.103.0/24 maxlen: 24 85.204.255.0/24 maxlen: 24 86.104.67.0/24 maxlen: 24 86.107.110.0/24 maxlen: 24 89.34.236.0/23 maxlen: 23 89.34.236.0/24 maxlen: 24 89.34.237.0/24 maxlen: 24 89.34.239.0/24 maxlen: 24 89.39.201.0/24 maxlen: 24 89.39.254.0/24 maxlen: 24 89.40.142.0/23 maxlen: 23 89.40.142.0/24 maxlen: 24 89.40.143.0/24 maxlen: 24 89.40.227.0/24 maxlen: 24 89.42.134.0/24 maxlen: 24 89.43.34.0/24 maxlen: 24 89.43.35.0/24 maxlen: 24 89.43.52.0/24 maxlen: 24 89.44.237.0/24 maxlen: 24 91.212.52.0/24 maxlen: 24 91.229.186.0/24 maxlen: 24 92.114.86.0/24 maxlen: 24 92.114.87.0/24 maxlen: 24 93.113.144.0/24 maxlen: 24 93.113.145.0/24 maxlen: 24 93.113.146.0/24 maxlen: 24 93.113.147.0/24 maxlen: 24 93.113.148.0/22 maxlen: 22 93.113.148.0/24 maxlen: 24 93.113.149.0/24 maxlen: 24 93.113.150.0/24 maxlen: 24 93.113.151.0/24 maxlen: 24 93.115.56.0/24 maxlen: 24 93.115.57.0/24 maxlen: 24 94.176.108.0/24 maxlen: 24 94.176.212.0/24 maxlen: 24 94.177.10.0/24 maxlen: 24 94.177.11.0/24 maxlen: 24 94.177.21.0/24 maxlen: 24 94.177.48.0/23 maxlen: 23 94.177.48.0/24 maxlen: 24 94.177.49.0/24 maxlen: 24 94.177.96.0/24 maxlen: 24 94.177.97.0/24 maxlen: 24 94.177.98.0/24 maxlen: 24 94.177.99.0/24 maxlen: 24 176.223.64.0/24 maxlen: 24 185.184.240.0/22 maxlen: 22 185.184.240.0/24 maxlen: 24 185.184.241.0/24 maxlen: 24 185.184.242.0/24 maxlen: 24 185.184.243.0/24 maxlen: 24 185.198.244.0/24 maxlen: 24 185.198.245.0/24 maxlen: 24 185.198.246.0/24 maxlen: 24 185.198.247.0/24 maxlen: 24 188.208.16.0/23 maxlen: 23 188.208.16.0/24 maxlen: 24 188.208.17.0/24 maxlen: 24 188.211.248.0/24 maxlen: 24 188.214.199.0/24 maxlen: 24 188.215.6.0/23 maxlen: 23 188.215.6.0/24 maxlen: 24 188.215.7.0/24 maxlen: 24 188.215.94.0/24 maxlen: 24 188.240.80.0/24 maxlen: 24 188.240.228.0/23 maxlen: 23 188.240.228.0/24 maxlen: 24 188.240.229.0/24 maxlen: 24 188.241.66.0/24 maxlen: 24 188.241.67.0/24 maxlen: 24 188.241.126.0/24 maxlen: 24 188.241.138.0/24 maxlen: 24 188.241.139.0/24 maxlen: 24 188.241.143.0/24 maxlen: 24 188.241.213.0/24 maxlen: 24 193.239.140.0/23 maxlen: 24 193.239.141.0/24 maxlen: 24 217.198.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:45:00:68:60:f4:e9:cd:d4:59:c2:25:f7:1b:98:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Jan 19 17:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2b7dfa4eb8efe35ff5ad521d8a304b73b63f7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:27:ae:43:5e:5b:24:97:e2:3f:6f:b2:da: 02:d3:02:40:7b:a8:31:01:f3:b8:b2:db:58:0f:8a: d2:4b:78:36:15:65:10:b0:77:cb:6e:53:42:e1:05: d8:a3:3d:dd:13:dc:81:21:d5:d3:d1:9f:68:b6:50: 8e:40:39:95:64:f5:da:b5:8c:5e:de:db:62:21:ec: 22:8d:42:12:20:f4:11:e9:0c:15:98:de:76:e4:33: ea:45:f4:74:5c:19:ad:aa:a2:1d:97:b4:01:87:16: 61:47:bf:b5:cf:49:89:f8:06:5a:59:99:e5:c0:10: ad:23:79:c9:bd:4f:66:a1:59:e1:40:f3:d2:5d:72: 1b:ab:62:8e:74:93:7c:2a:71:35:45:92:10:98:4e: c8:79:a3:40:20:c1:73:95:b1:ed:06:6c:c1:b8:10: 72:bd:4f:f0:bc:b4:4a:78:52:74:1d:14:c0:d9:95: c5:d7:ca:a4:f5:45:f6:13:cc:21:41:ae:5f:b2:60: 6a:d8:95:14:8c:90:16:25:9f:07:4a:47:04:74:98: fe:27:4c:f6:6e:30:25:53:af:9f:35:df:ae:fc:5b: 6a:c7:85:f7:ce:10:40:47:00:86:df:3d:08:d4:15: 89:6e:26:21:6a:ad:a7:b3:02:d9:67:7c:0e:7e:a3: 6b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B7:DF:A4:EB:8E:FE:35:FF:5A:D5:21:D8:A3:04:B7:3B:63:F7:E2 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/orffpOuO_jX_WtUh2KMEtztj9-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.188.0/24 37.156.174.0/24 45.83.56.0/22 45.86.144.0/22 77.81.103.0/24 85.204.255.0/24 86.104.67.0/24 86.107.110.0/24 89.34.236.0/23 89.34.239.0/24 89.39.201.0/24 89.39.254.0/24 89.40.142.0/23 89.40.227.0/24 89.42.134.0/24 89.43.34.0/23 89.43.52.0/24 89.44.237.0/24 91.212.52.0/24 91.229.186.0/24 92.114.86.0/23 93.113.144.0/21 93.115.56.0/23 94.176.108.0/24 94.176.212.0/24 94.177.10.0/23 94.177.21.0/24 94.177.48.0/23 94.177.96.0/22 176.223.64.0/24 185.184.240.0/22 185.198.244.0/22 188.208.16.0/23 188.211.248.0/24 188.214.199.0/24 188.215.6.0/23 188.215.94.0/24 188.240.80.0/24 188.240.228.0/23 188.241.66.0/23 188.241.126.0/24 188.241.138.0/23 188.241.143.0/24 188.241.213.0/24 193.239.140.0/23 217.198.177.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:35:84:89:d5:56:2b:14:db:15:87:5c:ea:54:3b:24:22:3e: 0f:ba:30:1a:e0:d7:98:06:64:62:e4:25:aa:4d:82:b9:42:0a: 7f:4b:1f:19:7b:80:95:9a:59:ca:93:51:e2:89:14:cb:cd:15: 43:fe:3d:d0:4b:33:e6:0f:4a:4e:9e:5e:53:4b:0c:76:61:db: 5d:be:d6:f7:5c:55:16:18:c5:92:a4:b7:fb:53:61:31:0a:ad: c5:2e:a9:7e:56:8e:4b:76:c4:f1:2d:01:f9:f4:e9:76:12:72: 93:3b:20:d1:3f:c8:b9:25:a9:fa:0a:c7:35:e6:30:8c:47:9f: 58:b5:4a:ce:c7:a6:29:6a:86:34:99:ef:b2:bb:76:e1:6a:62: f5:15:ea:27:30:39:2b:df:c4:10:0b:c4:14:b7:ef:63:31:8a: 45:92:63:07:95:1e:b6:9a:cf:4c:a7:ac:af:b6:5a:98:f3:b3: 2f:b8:e8:95:c5:78:b4:1b:11:1a:4e:06:e3:84:e0:f5:e7:64: dd:c8:8b:f3:13:b9:7a:3b:c6:10:08:80:d8:fa:74:9c:59:87: d8:d2:1f:a4:98:69:fd:e5:65:f8:9e:a8:4e:28:5a:0d:b9:c6: 9c:57:89:15:7e:16:e6:be:1b:9c:81:b8:45:fd:c1:4e:ea:9b: 8d:e0:87:b7 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgISAZvXRQBoYPTpzdRZwiX3G5hYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYwMTE5MTcxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmI3ZGZhNGViOGVmZTM1ZmY1YWQ1MjFkOGEzMDRiNzNiNjNmN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppYnrkNeWySX4j9vstoC0wJAe6gx AfO4sttYD4rSS3g2FWUQsHfLblNC4QXYoz3dE9yBIdXT0Z9otlCOQDmVZPXatYxe 3ttiIewijUISIPQR6QwVmN525DPqRfR0XBmtqqIdl7QBhxZhR7+1z0mJ+AZaWZnl wBCtI3nJvU9moVnhQPPSXXIbq2KOdJN8KnE1RZIQmE7IeaNAIMFzlbHtBmzBuBBy vU/wvLRKeFJ0HRTA2ZXF18qk9UX2E8whQa5fsmBq2JUUjJAWJZ8HSkcEdJj+J0z2 bjAlU6+fNd+u/Ftqx4X3zhBARwCG3z0I1BWJbiYhaq2nswLZZ3wOfqNrdwIDAQAB o4IDITCCAx0wHQYDVR0OBBYEFKK336Trjv41/1rVIdijBLc7Y/fiMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvb3JmZnBPdU9falhfV3RVaDJLTUV0enRqOS1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUHAQcBAf8EggEkMIIBIDCCARwEAgABMIIB FAMEAB/BvAMEACWcrgMEAi1TOAMEAi1WkAMEAE1RZwMEAFXM/wMEAFZoQwMEAFZr bgMEAVki7AMEAFki7wMEAFknyQMEAFkn/gMEAVkojgMEAFko4wMEAFkqhgMEAVkr IgMEAFkrNAMEAFks7QMEAFvUNAMEAFvlugMEAVxyVgMEA11xkAMEAV1zOAMEAF6w bAMEAF6w1AMEAV6xCgMEAF6xFQMEAV6xMAMEAl6xYAMEALDfQAMEArm48AMEArnG 9AMEAbzQEAMEALzT+AMEALzWxwMEAbzXBgMEALzXXgMEALzwUAMEAbzw5AMEAbzx QgMEALzxfgMEAbzxigMEALzxjwMEALzx1QMEAcHvjAMEANnGsTANBgkqhkiG9w0B AQsFAAOCAQEALDWEidVWKxTbFYdc6lQ7JCI+D7owGuDXmAZkYuQlqk2CuUIKf0sf GXuAlZpZypNR4okUy80VQ/490Esz5g9KTp5eU0sMdmHbXb7W91xVFhjFkqS3+1Nh MQqtxS6pflaOS3bE8S0B+fTpdhJykzsg0T/IuSWp+grHNeYwjEefWLVKzsemKWqG NJnvsrt24Wpi9RXqJzA5K9/EEAvEFLfvYzGKRZJjB5UetprPTKesr7ZamPOzL7jo lcV4tBsRGk4G44Tg9edk3ciL8xO5ejvGEAiA2Pp0nFmH2NIfpJhp/eVl+J6oTiha DbnGnFeJFX4W5r4bnIG4Rf3BTuqbjeCHtw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:51:04 2026 by rpki-client