This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/nzovM9cfleymMjqRKXfqm0cQtc4.roa File: nzovM9cfleymMjqRKXfqm0cQtc4.roa (raw, json) Hash identifier: 4SkG90YHFV1kiUr2N4KopMgb6vea2SvJ/dPaSrFcs9k= Subject key identifier: 9F:3A:2F:33:D7:1F:95:EC:A6:32:3A:91:29:77:EA:9B:47:10:B5:CE Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019BBDEC501011614E97F5D5C476119AB4C8 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/nzovM9cfleymMjqRKXfqm0cQtc4.roa Signing time: Wed 14 Jan 2026 19:12:19 +0000 ROA not before: Wed 14 Jan 2026 19:12:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 147.90.128.0/20 maxlen: 20 147.90.144.0/20 maxlen: 20 147.90.160.0/20 maxlen: 20 147.90.208.0/21 maxlen: 24 147.90.216.0/22 maxlen: 24 147.90.224.0/20 maxlen: 20 147.90.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:ec:50:10:11:61:4e:97:f5:d5:c4:76:11:9a:b4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 14 19:12:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f3a2f33d71f95eca6323a912977ea9b4710b5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:3c:cd:d9:94:a2:33:63:10:40:9e:c2:e7: e2:7d:5a:69:eb:76:38:c4:3b:e1:f1:5b:17:8d:b9: 58:cb:61:40:c7:74:a6:18:65:5b:8e:79:36:a5:44: a3:68:bc:5a:dd:fe:cc:04:41:2e:e7:5c:d1:8d:49: 35:aa:54:dc:6f:11:e5:a2:78:1c:b8:d4:e2:83:17: 23:49:15:de:fb:fb:8c:19:3c:94:04:d5:d2:73:85: 14:13:0b:b6:e7:a8:78:ef:98:8e:ce:a9:7b:6d:c8: a8:af:9c:0e:ab:a5:3e:0f:e2:1b:99:1c:90:a5:f2: 55:5e:36:a7:d7:55:3e:21:ba:db:9d:9f:0a:a5:04: fd:09:b5:84:4c:80:56:73:8f:bc:7b:1d:92:8d:e4: 2c:16:aa:be:38:78:4f:03:5d:87:81:87:3f:b1:21: 1d:cc:28:84:0e:04:69:1c:5d:b6:1c:d3:97:5b:1d: 9b:c3:3f:5e:58:8d:2f:b7:5b:3c:82:34:38:1a:f6: f8:71:26:ba:b9:a2:03:63:1c:88:a2:9d:e7:33:2d: 02:c0:a2:6c:a5:54:67:2c:01:d2:50:19:dc:45:58: 33:bc:54:cd:4a:5b:f3:74:81:87:a8:16:37:30:fc: 22:e9:fc:19:a8:27:10:ac:63:ce:09:0b:f7:86:d7: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3A:2F:33:D7:1F:95:EC:A6:32:3A:91:29:77:EA:9B:47:10:B5:CE X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/nzovM9cfleymMjqRKXfqm0cQtc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.128.0-147.90.175.255 147.90.208.0-147.90.219.255 147.90.224.0/19 Signature Algorithm: sha256WithRSAEncryption 91:d7:7e:75:f6:56:ba:07:66:bf:fc:3a:fe:5b:d1:5b:d0:b9: 30:1b:b1:72:29:01:fa:4c:79:e6:8e:56:a4:bc:00:a0:f7:20: f7:05:be:f8:8d:f4:0c:67:28:41:6c:ee:24:59:78:67:84:06: 97:2e:37:7a:d5:a4:41:cc:2f:d3:0b:c5:0b:ba:f6:ac:32:24: f3:c4:76:ad:23:1e:8c:da:86:3e:97:c4:27:2b:32:8d:f4:1e: c1:9c:ad:8e:dc:93:8c:90:65:b1:25:20:ad:ea:bd:74:c3:38: d5:6f:a0:fe:15:5c:5d:58:67:3a:aa:3f:6c:66:61:2d:57:54: 44:ae:e6:55:d1:a9:81:7e:c3:7d:4f:ea:c6:48:05:40:88:76: 10:ba:1a:32:1e:4f:5b:e3:54:32:9d:00:df:a0:7f:dd:ed:94: 5b:a6:81:15:b6:e0:c1:1a:a2:e5:d3:b5:9d:a5:10:91:64:31: 3b:c0:a6:ab:28:93:ac:36:4c:c6:1c:1f:96:85:a8:c2:21:da: b5:ad:48:32:67:1c:8e:dc:f0:1e:a2:30:55:2e:f6:6d:50:54: 0d:9b:ca:51:55:c7:57:84:2b:8e:68:0e:79:63:bf:23:3f:ad: eb:d6:dc:d8:7e:bb:72:94:ec:90:aa:e6:c7:42:90:47:02:3a: b3:1d:b6:1b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZu97FAQEWFOl/XVxHYRmrTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTE0MTkxMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjNhMmYzM2Q3MWY5NWVjYTYzMjNhOTEyOTc3ZWE5YjQ3MTBiNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve88zdmUojNjEECewufifVpp63Y4 xDvh8VsXjblYy2FAx3SmGGVbjnk2pUSjaLxa3f7MBEEu51zRjUk1qlTcbxHlongc uNTigxcjSRXe+/uMGTyUBNXSc4UUEwu256h475iOzql7bcior5wOq6U+D+IbmRyQ pfJVXjan11U+IbrbnZ8KpQT9CbWETIBWc4+8ex2SjeQsFqq+OHhPA12HgYc/sSEd zCiEDgRpHF22HNOXWx2bwz9eWI0vt1s8gjQ4Gvb4cSa6uaIDYxyIop3nMy0CwKJs pVRnLAHSUBncRVgzvFTNSlvzdIGHqBY3MPwi6fwZqCcQrGPOCQv3htd/HwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJ86LzPXH5XspjI6kSl36ptHELXOMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvbnpvdk05Y2ZsZXltTWpxUktYZnFtMGNRdGM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAeTWoAD BASTWqAwDAMEBJNa0AMEApNa2AMEBZNa4DANBgkqhkiG9w0BAQsFAAOCAQEAkdd+ dfZWugdmv/w6/lvRW9C5MBuxcikB+kx55o5WpLwAoPcg9wW++I30DGcoQWzuJFl4 Z4QGly43etWkQcwv0wvFC7r2rDIk88R2rSMejNqGPpfEJysyjfQewZytjtyTjJBl sSUgreq9dMM41W+g/hVcXVhnOqo/bGZhLVdURK7mVdGpgX7DfU/qxkgFQIh2ELoa Mh5PW+NUMp0A36B/3e2UW6aBFbbgwRqi5dO1naUQkWQxO8CmqyiTrDZMxhwfloWo wiHata1IMmccjtzwHqIwVS72bVBUDZvKUVXHV4QrjmgOeWO/Iz+t69bc2H67cpTs kKrmx0KQRwI6sx22Gw== -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:26 2026 by rpki-client