This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/i90B_Aw4voLYSZN4ike1cX-64ao.roa File: i90B_Aw4voLYSZN4ike1cX-64ao.roa (raw, json) Hash identifier: S2axTVSBnRViE7pSNvyWUI1Y+GA1IV83phsw1P/KVYM= Subject key identifier: 8B:DD:01:FC:0C:38:BE:82:D8:49:93:78:8A:47:B5:71:7F:BA:E1:AA Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9 Certificate serial: 019B7AC8F54787EB3968BD09AC521472DEF5 Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/i90B_Aw4voLYSZN4ike1cX-64ao.roa Signing time: Thu 01 Jan 2026 18:19:08 +0000 ROA not before: Thu 01 Jan 2026 18:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25133 IP address blocks: 37.139.160.0/19 maxlen: 19 37.139.160.0/22 maxlen: 22 37.139.164.0/22 maxlen: 22 37.139.168.0/24 maxlen: 24 37.139.169.0/24 maxlen: 24 37.139.170.0/24 maxlen: 24 37.139.171.0/24 maxlen: 24 37.139.172.0/24 maxlen: 24 37.139.173.0/24 maxlen: 24 37.139.174.0/24 maxlen: 24 37.139.175.0/24 maxlen: 24 37.139.176.0/24 maxlen: 24 37.139.177.0/24 maxlen: 24 37.139.178.0/24 maxlen: 24 37.139.179.0/24 maxlen: 24 37.139.180.0/22 maxlen: 22 37.139.184.0/22 maxlen: 22 37.139.188.0/22 maxlen: 22 45.95.164.0/22 maxlen: 22 45.143.48.0/22 maxlen: 22 45.153.208.0/22 maxlen: 22 45.158.48.0/22 maxlen: 22 46.255.32.0/22 maxlen: 22 46.255.36.0/22 maxlen: 22 78.137.0.0/18 maxlen: 18 78.137.0.0/19 maxlen: 19 78.137.32.0/24 maxlen: 24 78.137.33.0/24 maxlen: 24 78.137.34.0/24 maxlen: 24 78.137.35.0/24 maxlen: 24 78.137.36.0/22 maxlen: 22 78.137.40.0/21 maxlen: 21 78.137.48.0/20 maxlen: 20 83.142.48.0/22 maxlen: 22 89.200.232.0/21 maxlen: 21 91.105.207.0/24 maxlen: 24 91.211.136.0/22 maxlen: 22 91.217.144.0/24 maxlen: 24 91.244.0.0/18 maxlen: 18 92.43.80.0/22 maxlen: 22 92.118.220.0/22 maxlen: 22 103.35.160.0/22 maxlen: 22 103.237.44.0/22 maxlen: 22 109.227.64.0/18 maxlen: 18 109.227.64.0/19 maxlen: 19 109.227.96.0/19 maxlen: 19 152.89.20.0/22 maxlen: 22 176.67.0.0/19 maxlen: 19 178.216.16.0/21 maxlen: 21 185.3.148.0/22 maxlen: 22 185.3.148.0/24 maxlen: 24 185.3.149.0/24 maxlen: 24 185.3.150.0/24 maxlen: 24 185.3.151.0/24 maxlen: 24 185.41.192.0/22 maxlen: 22 185.41.192.0/23 maxlen: 23 185.41.194.0/23 maxlen: 23 185.62.96.0/22 maxlen: 22 185.96.28.0/22 maxlen: 22 185.103.40.0/22 maxlen: 22 185.103.40.0/23 maxlen: 23 185.103.42.0/23 maxlen: 23 185.128.92.0/22 maxlen: 22 185.176.108.0/22 maxlen: 22 185.176.112.0/22 maxlen: 22 185.203.244.0/22 maxlen: 22 185.208.112.0/22 maxlen: 22 185.220.94.0/23 maxlen: 23 185.228.100.0/22 maxlen: 22 193.106.80.0/22 maxlen: 22 194.1.220.0/23 maxlen: 23 212.55.64.0/19 maxlen: 19 212.55.64.0/22 maxlen: 22 212.55.68.0/22 maxlen: 22 212.55.72.0/23 maxlen: 23 212.55.74.0/23 maxlen: 23 212.55.76.0/22 maxlen: 22 212.55.80.0/22 maxlen: 22 212.55.84.0/23 maxlen: 23 212.55.86.0/23 maxlen: 23 212.55.88.0/22 maxlen: 22 212.55.92.0/22 maxlen: 22 213.108.52.0/22 maxlen: 22 217.115.96.0/21 maxlen: 21 217.115.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f5:47:87:eb:39:68:bd:09:ac:52:14:72:de:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9 Validity Not Before: Jan 1 18:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bdd01fc0c38be82d84993788a47b5717fbae1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:70:5e:b0:8f:55:f2:ff:3f:c8:b9:99:5f: c6:54:16:f2:55:ae:20:dc:90:42:f1:4b:68:54:38: 7c:73:14:44:b0:38:41:80:c2:7f:52:9b:71:21:9a: 24:4f:f6:ac:a4:fb:36:ef:52:fb:70:69:9d:01:38: a2:01:27:af:2c:e3:9d:0a:5b:66:4b:eb:fe:58:60: 72:df:bf:5b:05:15:38:67:af:ac:cd:26:60:1b:b9: 2d:da:7b:d9:62:c0:71:de:62:59:5c:8c:26:85:bb: 2b:25:a2:f7:ce:ad:ed:33:c1:48:b6:87:e2:86:d6: 5f:87:72:3f:dc:08:04:ef:be:a1:d5:86:1b:52:24: 5e:0e:1e:af:07:53:4e:6e:b1:88:f2:34:91:9c:f9: 41:64:e7:02:e2:15:11:d6:bd:8f:23:ba:6c:be:26: fa:03:13:cb:4c:15:c9:7b:99:c1:58:6a:2d:c5:5d: 5f:27:1e:9f:ea:b8:5d:36:ae:7f:78:c7:c4:9c:68: cb:c9:23:96:ff:d9:14:5e:06:5d:b4:fd:c8:ca:91: cd:a7:8a:61:c7:fd:f2:8f:cb:53:29:54:aa:cf:df: 2a:a6:f0:19:c5:33:e3:a4:1b:a1:f4:5c:33:41:dd: d4:f5:0e:d5:af:35:20:98:0e:ce:52:5f:02:3a:a2: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DD:01:FC:0C:38:BE:82:D8:49:93:78:8A:47:B5:71:7F:BA:E1:AA X509v3 Authority Key Identifier: keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/i90B_Aw4voLYSZN4ike1cX-64ao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.160.0/19 45.95.164.0/22 45.143.48.0/22 45.153.208.0/22 45.158.48.0/22 46.255.32.0/21 78.137.0.0/18 83.142.48.0/22 89.200.232.0/21 91.105.207.0/24 91.211.136.0/22 91.217.144.0/24 91.244.0.0/18 92.43.80.0/22 92.118.220.0/22 103.35.160.0/22 103.237.44.0/22 109.227.64.0/18 152.89.20.0/22 176.67.0.0/19 178.216.16.0/21 185.3.148.0/22 185.41.192.0/22 185.62.96.0/22 185.96.28.0/22 185.103.40.0/22 185.128.92.0/22 185.176.108.0-185.176.115.255 185.203.244.0/22 185.208.112.0/22 185.220.94.0/23 185.228.100.0/22 193.106.80.0/22 194.1.220.0/23 212.55.64.0/19 213.108.52.0/22 217.115.96.0/20 Signature Algorithm: sha256WithRSAEncryption 5a:2c:47:31:07:31:09:63:c1:d4:fa:06:26:0e:1b:06:68:bb: 92:b1:fe:e6:69:48:7f:9a:e1:ca:ad:2a:d7:8c:c1:b8:a5:6f: 28:9a:7f:55:91:bb:4f:7b:f9:af:a8:6c:d5:6a:00:c2:7b:f7: f3:b8:04:b3:39:ed:5b:1b:a2:56:7c:b1:0e:59:ec:11:b6:df: 54:c6:16:89:a3:52:0c:d9:c7:4b:8b:ac:bf:ab:9e:6f:8e:cb: 2f:c8:f9:aa:8e:64:97:af:83:23:d1:11:76:ea:a0:1f:b7:99: c0:ed:16:9a:a2:50:27:99:e4:a8:0f:4b:9e:17:9c:df:67:7e: d9:6c:d6:63:e3:fa:a9:06:a9:73:b5:dc:27:c8:f4:54:76:1f: cb:90:51:ed:62:15:8e:98:77:ab:47:5c:9f:95:19:bc:c3:61: f2:8d:67:ea:01:5c:18:d9:2d:b4:d1:d1:f1:62:9b:ac:ba:ee: e4:ce:04:73:b5:46:85:93:b5:5b:fc:3e:89:89:e8:19:c7:dc: 2d:31:a0:ff:62:77:96:4d:95:a2:d1:7f:a6:94:43:41:23:bd: d3:68:71:0d:4a:46:03:b4:3f:8a:be:6c:94:49:8d:30:fe:be: 50:0b:24:3f:e3:08:10:e8:78:6b:58:e4:dd:83:d8:1c:fd:ce: 74:39:af:82 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISAZt6yPVHh+s5aL0JrFIUct71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YTQ5ODdiZjhjNmI0Y2RkNjU3YmJjMmQwYTVlMTNlOWI2 MjZjYjkwHhcNMjYwMTAxMTgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmRkMDFmYzBjMzhiZTgyZDg0OTkzNzg4YTQ3YjU3MTdmYmFlMWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1ZwXrCPVfL/P8i5mV/GVBbyVa4g 3JBC8UtoVDh8cxREsDhBgMJ/UptxIZokT/aspPs271L7cGmdATiiASevLOOdCltm S+v+WGBy379bBRU4Z6+szSZgG7kt2nvZYsBx3mJZXIwmhbsrJaL3zq3tM8FItofi htZfh3I/3AgE776h1YYbUiReDh6vB1NObrGI8jSRnPlBZOcC4hUR1r2PI7psvib6 AxPLTBXJe5nBWGotxV1fJx6f6rhdNq5/eMfEnGjLySOW/9kUXgZdtP3IypHNp4ph x/3yj8tTKVSqz98qpvAZxTPjpBuh9FwzQd3U9Q7VrzUgmA7OUl8COqJeHQIDAQAB o4IC7zCCAuswHQYDVR0OBBYEFIvdAfwMOL6C2EmTeIpHtXF/uuGqMB8GA1UdIwQY MBaAFFakmHv4xrTN1le7wtCl4T6bYmy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnFTWWVfakd0TTNXVjd2QzBLWGhQcHRpYkxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84ODA5ZGQtNjY3YS00MDQ3LTgxMDQt ZGU1ODY5OGI2NDcwLzEvaTkwQl9BdzR2b0xZU1pONGlrZTFjWC02NGFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84ODA5ZGQtNjY3YS00MDQ3LTgxMDQtZGU1ODY5OGI2NDcw LzEvVnFTWWVfakd0TTNXVjd2QzBLWGhQcHRpYkxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAwYIKwYBBQUHAQcBAf8EgfMwgfAwge0EAgABMIHmAwQF JYugAwQCLV+kAwQCLY8wAwQCLZnQAwQCLZ4wAwQDLv8gAwQGTokAAwQCU44wAwQD WcjoAwQAW2nPAwQCW9OIAwQAW9mQAwQGW/QAAwQCXCtQAwQCXHbcAwQCZyOgAwQC Z+0sAwQGbeNAAwQCmFkUAwQFsEMAAwQDstgQAwQCuQOUAwQCuSnAAwQCuT5gAwQC uWAcAwQCuWcoAwQCuYBcMAwDBAK5sGwDBAK5sHADBAK5y/QDBAK50HADBAG53F4D BAK55GQDBALBalADBAHCAdwDBAXUN0ADBALVbDQDBATZc2AwDQYJKoZIhvcNAQEL BQADggEBAFosRzEHMQljwdT6BiYOGwZou5Kx/uZpSH+a4cqtKteMwbilbyiaf1WR u097+a+obNVqAMJ79/O4BLM57VsbolZ8sQ5Z7BG231TGFomjUgzZx0uLrL+rnm+O yy/I+aqOZJevgyPREXbqoB+3mcDtFpqiUCeZ5KgPS54XnN9nftls1mPj+qkGqXO1 3CfI9FR2H8uQUe1iFY6Yd6tHXJ+VGbzDYfKNZ+oBXBjZLbTR0fFim6y67uTOBHO1 RoWTtVv8PomJ6BnH3C0xoP9id5ZNlaLRf6aUQ0EjvdNocQ1KRgO0P4q+bJRJjTD+ vlALJD/jCBDoeGtY5N2D2Bz9znQ5r4I= -----END CERTIFICATE-----Generated at Tue Feb 10 06:24:36 2026 by rpki-client