This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/NRnnUyt35nFNf7rwP8Z-65oKKQg.roa File: NRnnUyt35nFNf7rwP8Z-65oKKQg.roa (raw, json) Hash identifier: yCzok3yh2LDaKUcB9Aw6XcunYD7GCS5HLlLgJe1F4K8= Subject key identifier: 35:19:E7:53:2B:77:E6:71:4D:7F:BA:F0:3F:C6:7E:EB:9A:0A:29:08 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019B4B9625114E173EDBBA93D71E4503AE2D Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/NRnnUyt35nFNf7rwP8Z-65oKKQg.roa Signing time: Tue 23 Dec 2025 14:21:29 +0000 ROA not before: Tue 23 Dec 2025 14:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64445 IP address blocks: 31.193.188.0/24 maxlen: 24 37.156.174.0/24 maxlen: 24 45.83.56.0/22 maxlen: 22 45.83.57.0/24 maxlen: 24 45.83.58.0/24 maxlen: 24 45.83.59.0/24 maxlen: 24 45.86.144.0/22 maxlen: 22 45.86.144.0/24 maxlen: 24 45.86.146.0/24 maxlen: 24 45.86.147.0/24 maxlen: 24 77.81.103.0/24 maxlen: 24 85.204.255.0/24 maxlen: 24 86.104.67.0/24 maxlen: 24 86.107.110.0/24 maxlen: 24 89.34.236.0/23 maxlen: 23 89.34.236.0/24 maxlen: 24 89.34.237.0/24 maxlen: 24 89.34.239.0/24 maxlen: 24 89.39.201.0/24 maxlen: 24 89.39.254.0/24 maxlen: 24 89.40.142.0/23 maxlen: 23 89.40.142.0/24 maxlen: 24 89.40.143.0/24 maxlen: 24 89.40.227.0/24 maxlen: 24 89.42.134.0/24 maxlen: 24 89.43.34.0/24 maxlen: 24 89.43.35.0/24 maxlen: 24 89.43.52.0/24 maxlen: 24 89.44.237.0/24 maxlen: 24 91.212.52.0/24 maxlen: 24 91.229.186.0/24 maxlen: 24 92.114.86.0/24 maxlen: 24 92.114.87.0/24 maxlen: 24 93.113.144.0/24 maxlen: 24 93.113.145.0/24 maxlen: 24 93.113.146.0/24 maxlen: 24 93.113.147.0/24 maxlen: 24 93.113.148.0/22 maxlen: 22 93.113.148.0/24 maxlen: 24 93.113.149.0/24 maxlen: 24 93.113.150.0/24 maxlen: 24 93.113.151.0/24 maxlen: 24 93.115.56.0/24 maxlen: 24 93.115.57.0/24 maxlen: 24 94.176.108.0/24 maxlen: 24 94.176.212.0/24 maxlen: 24 94.177.10.0/24 maxlen: 24 94.177.11.0/24 maxlen: 24 94.177.21.0/24 maxlen: 24 94.177.48.0/23 maxlen: 23 94.177.48.0/24 maxlen: 24 94.177.49.0/24 maxlen: 24 94.177.96.0/24 maxlen: 24 94.177.97.0/24 maxlen: 24 94.177.98.0/24 maxlen: 24 94.177.99.0/24 maxlen: 24 185.184.240.0/22 maxlen: 22 185.184.240.0/24 maxlen: 24 185.184.241.0/24 maxlen: 24 185.184.242.0/24 maxlen: 24 185.184.243.0/24 maxlen: 24 185.198.244.0/24 maxlen: 24 185.198.245.0/24 maxlen: 24 185.198.246.0/24 maxlen: 24 185.198.247.0/24 maxlen: 24 188.208.16.0/23 maxlen: 23 188.208.16.0/24 maxlen: 24 188.208.17.0/24 maxlen: 24 188.211.248.0/24 maxlen: 24 188.214.199.0/24 maxlen: 24 188.215.6.0/23 maxlen: 23 188.215.6.0/24 maxlen: 24 188.215.7.0/24 maxlen: 24 188.215.94.0/24 maxlen: 24 188.240.228.0/23 maxlen: 23 188.240.228.0/24 maxlen: 24 188.240.229.0/24 maxlen: 24 188.241.66.0/24 maxlen: 24 188.241.67.0/24 maxlen: 24 188.241.126.0/24 maxlen: 24 188.241.138.0/24 maxlen: 24 188.241.139.0/24 maxlen: 24 188.241.143.0/24 maxlen: 24 188.241.213.0/24 maxlen: 24 193.239.140.0/23 maxlen: 24 193.239.141.0/24 maxlen: 24 217.198.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:96:25:11:4e:17:3e:db:ba:93:d7:1e:45:03:ae:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Dec 23 14:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3519e7532b77e6714d7fbaf03fc67eeb9a0a2908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ab:c6:51:93:cc:59:6b:95:21:40:89:e7:eb: fa:11:8d:66:fb:10:55:6d:53:27:71:16:97:f6:c5: 67:96:98:40:da:74:b5:5a:a2:3d:99:70:3f:75:50: 9c:73:ba:6a:c0:bd:83:9c:8a:c1:5f:27:bd:a5:c4: 34:33:04:d9:22:cb:fd:55:23:48:ee:a6:e6:8c:ac: 63:32:1b:a7:36:ca:2f:51:58:6f:02:a1:1b:f6:61: 90:41:f4:b3:2e:59:e3:21:ed:cf:69:04:f9:a5:ac: 26:73:1e:55:57:44:0f:ad:fc:01:bd:14:4b:5a:37: 5f:16:3a:80:b6:7e:d5:d3:9e:08:17:33:9d:58:77: 45:86:9c:54:34:a4:4e:6e:de:d6:68:20:77:ab:ee: d7:88:2d:39:04:41:c1:30:f3:1b:ee:7a:53:22:cb: bf:56:20:c8:f8:a7:41:8f:e4:1b:3d:83:3d:a9:3b: 2c:52:1f:e8:95:55:89:43:5e:95:26:c5:fd:fb:be: 58:00:5a:27:ea:39:d3:0e:e1:c8:eb:27:75:c0:39: 00:a1:8c:ee:17:55:b4:e3:a7:22:ea:fa:a0:09:0f: 2c:8a:7a:f3:85:ee:44:20:cf:d5:c3:a3:2c:54:4d: 12:4a:8c:94:7e:27:70:5b:e0:08:11:2f:26:5b:13: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:19:E7:53:2B:77:E6:71:4D:7F:BA:F0:3F:C6:7E:EB:9A:0A:29:08 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/NRnnUyt35nFNf7rwP8Z-65oKKQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.188.0/24 37.156.174.0/24 45.83.56.0/22 45.86.144.0/22 77.81.103.0/24 85.204.255.0/24 86.104.67.0/24 86.107.110.0/24 89.34.236.0/23 89.34.239.0/24 89.39.201.0/24 89.39.254.0/24 89.40.142.0/23 89.40.227.0/24 89.42.134.0/24 89.43.34.0/23 89.43.52.0/24 89.44.237.0/24 91.212.52.0/24 91.229.186.0/24 92.114.86.0/23 93.113.144.0/21 93.115.56.0/23 94.176.108.0/24 94.176.212.0/24 94.177.10.0/23 94.177.21.0/24 94.177.48.0/23 94.177.96.0/22 185.184.240.0/22 185.198.244.0/22 188.208.16.0/23 188.211.248.0/24 188.214.199.0/24 188.215.6.0/23 188.215.94.0/24 188.240.228.0/23 188.241.66.0/23 188.241.126.0/24 188.241.138.0/23 188.241.143.0/24 188.241.213.0/24 193.239.140.0/23 217.198.177.0/24 Signature Algorithm: sha256WithRSAEncryption 02:f9:ed:80:e4:34:21:c3:03:0a:d5:cf:0d:c5:73:8b:a1:39: 96:3a:a9:ed:cd:ec:ea:60:08:b0:29:bf:e7:9a:4c:81:99:d2: 96:1a:d2:42:4a:22:0e:a8:39:c9:98:e8:8c:24:6b:cf:10:61: d9:7f:f2:91:ea:58:2e:6c:15:63:6c:d1:97:f0:c9:71:c0:b9: 47:e8:fc:6f:ce:51:27:3a:0e:1d:2e:0a:11:3d:bc:94:82:64: 65:c8:73:28:2d:f6:96:fa:31:a9:cb:25:9b:5c:19:89:e2:0c: 5d:68:3d:b9:82:8f:29:43:4c:8a:e9:34:bb:33:31:c4:07:2f: 78:2f:c3:4c:df:0e:97:ff:8f:aa:1c:7b:f3:8c:f2:ae:26:75: f5:4f:f6:b0:08:60:78:80:d2:0e:88:8c:c7:b1:11:06:18:d6: b2:a4:ef:88:7b:5b:c2:dc:1f:7e:44:49:96:16:fe:5d:66:1b: dc:15:bc:58:82:1c:03:37:33:7c:ac:9b:21:bb:bb:37:97:a7: 0a:f3:97:b4:cb:b1:62:9f:ca:00:02:b1:5c:80:76:63:35:74: 40:a7:32:03:0f:26:b7:4f:c8:c6:d5:d6:67:ed:17:f3:4e:86: ac:23:60:9e:41:df:0c:67:1d:3e:3c:61:ce:43:7d:36:d4:06: a6:fe:58:94 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISAZtLliURThc+27qT1x5FA64tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjUxMjIzMTQyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTE5ZTc1MzJiNzdlNjcxNGQ3ZmJhZjAzZmM2N2VlYjlhMGEyOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KvGUZPMWWuVIUCJ5+v6EY1m+xBV bVMncRaX9sVnlphA2nS1WqI9mXA/dVCcc7pqwL2DnIrBXye9pcQ0MwTZIsv9VSNI 7qbmjKxjMhunNsovUVhvAqEb9mGQQfSzLlnjIe3PaQT5pawmcx5VV0QPrfwBvRRL WjdfFjqAtn7V054IFzOdWHdFhpxUNKRObt7WaCB3q+7XiC05BEHBMPMb7npTIsu/ ViDI+KdBj+QbPYM9qTssUh/olVWJQ16VJsX9+75YAFon6jnTDuHI6yd1wDkAoYzu F1W046ci6vqgCQ8sinrzhe5EIM/Vw6MsVE0SSoyUfidwW+AIES8mWxPSHwIDAQAB o4IDFTCCAxEwHQYDVR0OBBYEFDUZ51Mrd+ZxTX+68D/GfuuaCikIMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvTlJublV5dDM1bkZOZjdyd1A4Wi02NW9LS1FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBKQYIKwYBBQUHAQcBAf8EggEYMIIBFDCCARAEAgABMIIB CAMEAB/BvAMEACWcrgMEAi1TOAMEAi1WkAMEAE1RZwMEAFXM/wMEAFZoQwMEAFZr bgMEAVki7AMEAFki7wMEAFknyQMEAFkn/gMEAVkojgMEAFko4wMEAFkqhgMEAVkr IgMEAFkrNAMEAFks7QMEAFvUNAMEAFvlugMEAVxyVgMEA11xkAMEAV1zOAMEAF6w bAMEAF6w1AMEAV6xCgMEAF6xFQMEAV6xMAMEAl6xYAMEArm48AMEArnG9AMEAbzQ EAMEALzT+AMEALzWxwMEAbzXBgMEALzXXgMEAbzw5AMEAbzxQgMEALzxfgMEAbzx igMEALzxjwMEALzx1QMEAcHvjAMEANnGsTANBgkqhkiG9w0BAQsFAAOCAQEAAvnt gOQ0IcMDCtXPDcVzi6E5ljqp7c3s6mAIsCm/55pMgZnSlhrSQkoiDqg5yZjojCRr zxBh2X/ykepYLmwVY2zRl/DJccC5R+j8b85RJzoOHS4KET28lIJkZchzKC32lvox qcslm1wZieIMXWg9uYKPKUNMiuk0uzMxxAcveC/DTN8Ol/+Pqhx784zyriZ19U/2 sAhgeIDSDoiMx7ERBhjWsqTviHtbwtwffkRJlhb+XWYb3BW8WIIcAzczfKybIbu7 N5enCvOXtMuxYp/KAAKxXIB2YzV0QKcyAw8mt0/IxtXWZ+0X806GrCNgnkHfDGcd PjxhzkN9NtQGpv5YlA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:41:38 2025 by rpki-client