This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/u4bJWuY-Tzmj-rLPmIVOXj7GSNs.roa File: u4bJWuY-Tzmj-rLPmIVOXj7GSNs.roa (raw, json) Hash identifier: +ZJsiTIQGUSoj2UbXp+SSv+HqAQ2sKbbCxkpKiFFnbw= Subject key identifier: BB:86:C9:5A:E6:3E:4F:39:A3:FA:B2:CF:98:85:4E:5E:3E:C6:48:DB Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019BE09B464FD8535C6163385B26E9E58457 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/u4bJWuY-Tzmj-rLPmIVOXj7GSNs.roa Signing time: Wed 21 Jan 2026 12:50:30 +0000 ROA not before: Wed 21 Jan 2026 12:50:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 147.90.0.0/24 maxlen: 24 147.90.3.0/24 maxlen: 24 147.90.5.0/24 maxlen: 24 147.90.6.0/24 maxlen: 24 147.90.7.0/24 maxlen: 24 147.90.8.0/24 maxlen: 24 147.90.9.0/24 maxlen: 24 147.90.10.0/24 maxlen: 24 147.90.11.0/24 maxlen: 24 147.90.12.0/24 maxlen: 24 147.90.14.0/24 maxlen: 24 147.90.16.0/24 maxlen: 24 147.90.17.0/24 maxlen: 24 147.90.18.0/24 maxlen: 24 147.90.19.0/24 maxlen: 24 147.90.20.0/24 maxlen: 24 147.90.21.0/24 maxlen: 24 147.90.22.0/24 maxlen: 24 147.90.23.0/24 maxlen: 24 147.90.24.0/24 maxlen: 24 147.90.25.0/24 maxlen: 24 147.90.26.0/24 maxlen: 24 147.90.27.0/24 maxlen: 24 147.90.28.0/24 maxlen: 24 147.90.29.0/24 maxlen: 24 147.90.32.0/24 maxlen: 24 147.90.33.0/24 maxlen: 24 147.90.34.0/24 maxlen: 24 147.90.35.0/24 maxlen: 24 147.90.36.0/24 maxlen: 24 147.90.37.0/24 maxlen: 24 147.90.38.0/24 maxlen: 24 147.90.39.0/24 maxlen: 24 147.90.40.0/24 maxlen: 24 147.90.41.0/24 maxlen: 24 147.90.42.0/24 maxlen: 24 147.90.43.0/24 maxlen: 24 147.90.44.0/24 maxlen: 24 147.90.45.0/24 maxlen: 24 147.90.46.0/24 maxlen: 24 147.90.47.0/24 maxlen: 24 147.90.48.0/24 maxlen: 24 147.90.49.0/24 maxlen: 24 147.90.50.0/24 maxlen: 24 147.90.51.0/24 maxlen: 24 147.90.52.0/24 maxlen: 24 147.90.53.0/24 maxlen: 24 147.90.54.0/24 maxlen: 24 147.90.55.0/24 maxlen: 24 147.90.56.0/24 maxlen: 24 147.90.57.0/24 maxlen: 24 147.90.58.0/24 maxlen: 24 147.90.59.0/24 maxlen: 24 147.90.60.0/22 maxlen: 22 147.90.64.0/24 maxlen: 24 147.90.65.0/24 maxlen: 24 147.90.66.0/24 maxlen: 24 147.90.67.0/24 maxlen: 24 147.90.68.0/24 maxlen: 24 147.90.69.0/24 maxlen: 24 147.90.70.0/24 maxlen: 24 147.90.71.0/24 maxlen: 24 147.90.76.0/24 maxlen: 24 147.90.77.0/24 maxlen: 24 147.90.78.0/24 maxlen: 24 147.90.79.0/24 maxlen: 24 147.90.80.0/24 maxlen: 24 147.90.81.0/24 maxlen: 24 147.90.82.0/24 maxlen: 24 147.90.83.0/24 maxlen: 24 147.90.84.0/24 maxlen: 24 147.90.85.0/24 maxlen: 24 147.90.86.0/24 maxlen: 24 147.90.87.0/24 maxlen: 24 147.90.88.0/24 maxlen: 24 147.90.89.0/24 maxlen: 24 147.90.91.0/24 maxlen: 24 147.90.92.0/24 maxlen: 24 147.90.93.0/24 maxlen: 24 147.90.94.0/24 maxlen: 24 147.90.95.0/24 maxlen: 24 147.90.112.0/24 maxlen: 24 147.90.113.0/24 maxlen: 24 147.90.114.0/24 maxlen: 24 147.90.115.0/24 maxlen: 24 147.90.116.0/24 maxlen: 24 147.90.117.0/24 maxlen: 24 147.90.118.0/24 maxlen: 24 147.90.119.0/24 maxlen: 24 147.90.122.0/24 maxlen: 24 147.90.123.0/24 maxlen: 24 147.90.124.0/24 maxlen: 24 147.90.125.0/24 maxlen: 24 147.90.126.0/24 maxlen: 24 147.90.127.0/24 maxlen: 24 147.90.220.0/22 maxlen: 24 147.90.224.0/22 maxlen: 24 147.90.228.0/22 maxlen: 24 147.90.232.0/22 maxlen: 24 147.90.236.0/22 maxlen: 24 147.90.240.0/22 maxlen: 24 147.90.244.0/22 maxlen: 24 147.90.248.0/22 maxlen: 24 147.90.252.0/22 maxlen: 24 158.173.192.0/24 maxlen: 24 158.173.200.0/24 maxlen: 24 158.173.205.0/24 maxlen: 24 158.173.206.0/24 maxlen: 24 158.173.207.0/24 maxlen: 24 158.173.208.0/24 maxlen: 24 158.173.211.0/24 maxlen: 24 158.173.213.0/24 maxlen: 24 158.173.214.0/24 maxlen: 24 158.173.215.0/24 maxlen: 24 158.173.216.0/24 maxlen: 24 158.173.217.0/24 maxlen: 24 158.173.218.0/24 maxlen: 24 158.173.220.0/24 maxlen: 24 158.173.221.0/24 maxlen: 24 158.173.222.0/24 maxlen: 24 158.173.223.0/24 maxlen: 24 158.173.229.0/24 maxlen: 24 158.173.237.0/24 maxlen: 24 158.173.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:9b:46:4f:d8:53:5c:61:63:38:5b:26:e9:e5:84:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 21 12:50:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb86c95ae63e4f39a3fab2cf98854e5e3ec648db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:50:75:e0:e3:26:03:36:c5:ad:55:e8:f7:6f: 2c:86:eb:f0:0f:35:76:dc:d4:84:c5:ec:ab:0f:89: 41:0e:8e:7c:51:d2:d4:62:39:7d:4d:44:3f:88:66: d4:a8:39:6c:ea:1a:52:1a:d4:a0:d0:4e:1f:16:82: 47:3e:ab:f3:97:e2:e9:3e:56:66:da:64:61:f6:8e: 94:9c:26:db:43:23:a6:ee:36:e5:21:16:df:7e:ce: 43:f6:e7:ca:cd:cf:de:d1:ac:ae:0f:65:66:59:6e: f6:3c:e1:4a:ee:20:f7:b1:2d:f5:85:1f:c2:7d:99: e4:ed:75:a1:0c:b5:c3:30:be:12:44:49:61:21:20: 1e:90:c1:04:b2:af:56:9c:e7:4f:54:aa:52:e7:e9: 95:41:c8:0f:a3:c3:ac:5e:15:b4:3e:45:6e:35:45: 4e:87:ec:13:f7:94:b6:49:a2:cb:24:ac:2d:0f:c6: f7:1e:f9:73:78:8e:a4:fb:ef:0f:b8:fe:a4:a2:bf: 9a:f1:c2:a4:e2:8e:b0:44:13:e0:5a:d9:41:5c:85: 84:d6:93:8d:68:c6:07:e0:b7:98:2f:93:fe:c8:98: 58:15:00:65:9e:5d:59:b7:70:41:7e:51:f1:48:dc: 75:50:54:74:e4:c2:5e:7c:74:40:b9:56:6d:86:0e: 12:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:86:C9:5A:E6:3E:4F:39:A3:FA:B2:CF:98:85:4E:5E:3E:C6:48:DB X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/u4bJWuY-Tzmj-rLPmIVOXj7GSNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.0.0/24 147.90.3.0/24 147.90.5.0-147.90.12.255 147.90.14.0/24 147.90.16.0-147.90.29.255 147.90.32.0-147.90.71.255 147.90.76.0-147.90.89.255 147.90.91.0-147.90.95.255 147.90.112.0/21 147.90.122.0-147.90.127.255 147.90.220.0-147.90.255.255 158.173.192.0/24 158.173.200.0/24 158.173.205.0-158.173.208.255 158.173.211.0/24 158.173.213.0-158.173.218.255 158.173.220.0/22 158.173.229.0/24 158.173.237.0-158.173.238.255 Signature Algorithm: sha256WithRSAEncryption 51:34:fc:4c:1f:ef:9e:5f:f1:77:e5:1d:d2:27:9c:e8:a3:d8: 2b:67:b4:ad:2a:5d:2e:60:43:e7:48:b2:c7:80:00:a8:41:7a: 84:8d:26:4d:c7:85:9d:b4:41:e6:90:a5:bc:b7:cf:5c:79:65: 64:11:08:06:51:cb:22:62:ee:85:b1:cf:e7:5b:40:be:1b:d5: 2c:c9:09:07:ff:86:e0:a2:3d:11:64:75:5b:9a:3c:fc:f5:9d: 58:f0:68:47:fb:90:9a:1d:12:d9:6c:79:7e:ac:df:8f:34:21: 79:60:e9:20:8b:41:09:e6:49:74:8e:37:15:4d:ff:41:4c:dd: e1:ea:b6:6b:ce:95:31:c5:60:9c:9e:ce:65:d8:ac:82:77:b4: 8e:3d:a8:65:d8:6d:9b:92:02:bf:11:ec:9d:1b:85:39:64:57: e8:35:bd:5f:9b:21:45:30:29:be:47:f3:74:15:cd:10:96:00: a7:32:2c:e7:d6:43:ae:f3:fc:e8:ad:2e:66:de:53:6a:5e:59: 10:f8:09:6c:8a:fc:b3:ae:9b:d3:cf:c3:e9:0b:f3:0c:66:84: 0c:18:34:17:3f:38:aa:cb:93:48:37:a3:99:21:16:16:34:e9: 9d:24:6b:d7:46:09:59:5f:a3:6e:09:30:ec:e5:23:6d:ec:a4: aa:05:2b:00 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZvgm0ZP2FNcYWM4Wybp5YRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTIxMTI1MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjg2Yzk1YWU2M2U0ZjM5YTNmYWIyY2Y5ODg1NGU1ZTNlYzY0OGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklB14OMmAzbFrVXo928shuvwDzV2 3NSExeyrD4lBDo58UdLUYjl9TUQ/iGbUqDls6hpSGtSg0E4fFoJHPqvzl+LpPlZm 2mRh9o6UnCbbQyOm7jblIRbffs5D9ufKzc/e0ayuD2VmWW72POFK7iD3sS31hR/C fZnk7XWhDLXDML4SRElhISAekMEEsq9WnOdPVKpS5+mVQcgPo8OsXhW0PkVuNUVO h+wT95S2SaLLJKwtD8b3HvlzeI6k++8PuP6kor+a8cKk4o6wRBPgWtlBXIWE1pON aMYH4LeYL5P+yJhYFQBlnl1Zt3BBflHxSNx1UFR05MJefHRAuVZthg4SBQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFLuGyVrmPk85o/qyz5iFTl4+xkjbMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvdTRiSld1WS1Uem1qLXJMUG1JVk9YajdHU05zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzCByAQCAAEwgcEDBACT WgADBACTWgMwDAMEAJNaBQMEAJNaDAMEAJNaDjAMAwQEk1oQAwQBk1ocMAwDBAWT WiADBAOTWkAwDAMEApNaTAMEAZNaWDAMAwQAk1pbAwQFk1pAAwQDk1pwMAwDBAGT WnoDBAeTWgAwCwMEApNa3AMDAJNaAwQAnq3AAwQAnq3IMAwDBACerc0DBACerdAD BACerdMwDAMEAJ6t1QMEAJ6t2gMEAp6t3AMEAJ6t5TAMAwQAnq3tAwQAnq3uMA0G CSqGSIb3DQEBCwUAA4IBAQBRNPxMH++eX/F35R3SJ5zoo9grZ7StKl0uYEPnSLLH gACoQXqEjSZNx4WdtEHmkKW8t89ceWVkEQgGUcsiYu6Fsc/nW0C+G9UsyQkH/4bg oj0RZHVbmjz89Z1Y8GhH+5CaHRLZbHl+rN+PNCF5YOkgi0EJ5kl0jjcVTf9BTN3h 6rZrzpUxxWCcns5l2KyCd7SOPahl2G2bkgK/EeydG4U5ZFfoNb1fmyFFMCm+R/N0 Fc0QlgCnMizn1kOu8/zorS5m3lNqXlkQ+AlsivyzrpvTz8PpC/MMZoQMGDQXPziq y5NIN6OZIRYWNOmdJGvXRglZX6NuCTDs5SNt7KSqBSsA -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:10 2026 by rpki-client