This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WiPMdq7cEPLM12pefAK6a5HvUKs.roa File: WiPMdq7cEPLM12pefAK6a5HvUKs.roa (raw, json) Hash identifier: hBFETfzRGKmp65gJIpxUGOKvzT6syv3vNRdNu5h8AvY= Subject key identifier: 5A:23:CC:76:AE:DC:10:F2:CC:D7:6A:5E:7C:02:BA:6B:91:EF:50:AB Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019BCC3E14DE4AB554A2586E0D08D939C935 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WiPMdq7cEPLM12pefAK6a5HvUKs.roa Signing time: Sat 17 Jan 2026 13:56:19 +0000 ROA not before: Sat 17 Jan 2026 13:56:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 147.90.0.0/24 maxlen: 24 147.90.3.0/24 maxlen: 24 147.90.5.0/24 maxlen: 24 147.90.6.0/24 maxlen: 24 147.90.7.0/24 maxlen: 24 147.90.8.0/24 maxlen: 24 147.90.9.0/24 maxlen: 24 147.90.10.0/24 maxlen: 24 147.90.11.0/24 maxlen: 24 147.90.12.0/24 maxlen: 24 147.90.14.0/24 maxlen: 24 147.90.16.0/24 maxlen: 24 147.90.17.0/24 maxlen: 24 147.90.18.0/24 maxlen: 24 147.90.19.0/24 maxlen: 24 147.90.20.0/24 maxlen: 24 147.90.21.0/24 maxlen: 24 147.90.22.0/24 maxlen: 24 147.90.23.0/24 maxlen: 24 147.90.24.0/24 maxlen: 24 147.90.25.0/24 maxlen: 24 147.90.26.0/24 maxlen: 24 147.90.27.0/24 maxlen: 24 147.90.28.0/24 maxlen: 24 147.90.29.0/24 maxlen: 24 147.90.32.0/24 maxlen: 24 147.90.33.0/24 maxlen: 24 147.90.34.0/24 maxlen: 24 147.90.35.0/24 maxlen: 24 147.90.36.0/24 maxlen: 24 147.90.37.0/24 maxlen: 24 147.90.38.0/24 maxlen: 24 147.90.39.0/24 maxlen: 24 147.90.40.0/24 maxlen: 24 147.90.41.0/24 maxlen: 24 147.90.42.0/24 maxlen: 24 147.90.43.0/24 maxlen: 24 147.90.44.0/24 maxlen: 24 147.90.45.0/24 maxlen: 24 147.90.46.0/24 maxlen: 24 147.90.47.0/24 maxlen: 24 147.90.48.0/24 maxlen: 24 147.90.49.0/24 maxlen: 24 147.90.50.0/24 maxlen: 24 147.90.51.0/24 maxlen: 24 147.90.52.0/24 maxlen: 24 147.90.53.0/24 maxlen: 24 147.90.54.0/24 maxlen: 24 147.90.55.0/24 maxlen: 24 147.90.56.0/24 maxlen: 24 147.90.57.0/24 maxlen: 24 147.90.58.0/24 maxlen: 24 147.90.59.0/24 maxlen: 24 147.90.60.0/22 maxlen: 22 147.90.64.0/24 maxlen: 24 147.90.65.0/24 maxlen: 24 147.90.66.0/24 maxlen: 24 147.90.67.0/24 maxlen: 24 147.90.68.0/24 maxlen: 24 147.90.69.0/24 maxlen: 24 147.90.70.0/24 maxlen: 24 147.90.71.0/24 maxlen: 24 147.90.76.0/24 maxlen: 24 147.90.77.0/24 maxlen: 24 147.90.78.0/24 maxlen: 24 147.90.79.0/24 maxlen: 24 147.90.80.0/24 maxlen: 24 147.90.81.0/24 maxlen: 24 147.90.82.0/24 maxlen: 24 147.90.83.0/24 maxlen: 24 147.90.84.0/24 maxlen: 24 147.90.85.0/24 maxlen: 24 147.90.86.0/24 maxlen: 24 147.90.87.0/24 maxlen: 24 147.90.88.0/24 maxlen: 24 147.90.89.0/24 maxlen: 24 147.90.91.0/24 maxlen: 24 147.90.92.0/24 maxlen: 24 147.90.93.0/24 maxlen: 24 147.90.94.0/24 maxlen: 24 147.90.95.0/24 maxlen: 24 147.90.112.0/24 maxlen: 24 147.90.113.0/24 maxlen: 24 147.90.114.0/24 maxlen: 24 147.90.115.0/24 maxlen: 24 147.90.116.0/24 maxlen: 24 147.90.117.0/24 maxlen: 24 147.90.118.0/24 maxlen: 24 147.90.119.0/24 maxlen: 24 147.90.122.0/24 maxlen: 24 147.90.123.0/24 maxlen: 24 147.90.124.0/24 maxlen: 24 147.90.125.0/24 maxlen: 24 147.90.126.0/24 maxlen: 24 147.90.127.0/24 maxlen: 24 147.90.220.0/22 maxlen: 24 147.90.224.0/22 maxlen: 24 147.90.228.0/22 maxlen: 24 147.90.232.0/22 maxlen: 24 147.90.236.0/22 maxlen: 24 147.90.240.0/22 maxlen: 24 147.90.244.0/22 maxlen: 24 147.90.248.0/22 maxlen: 24 147.90.252.0/22 maxlen: 24 158.173.192.0/24 maxlen: 24 158.173.200.0/24 maxlen: 24 158.173.205.0/24 maxlen: 24 158.173.206.0/24 maxlen: 24 158.173.207.0/24 maxlen: 24 158.173.208.0/24 maxlen: 24 158.173.211.0/24 maxlen: 24 158.173.213.0/24 maxlen: 24 158.173.214.0/24 maxlen: 24 158.173.215.0/24 maxlen: 24 158.173.217.0/24 maxlen: 24 158.173.218.0/24 maxlen: 24 158.173.220.0/24 maxlen: 24 158.173.222.0/24 maxlen: 24 158.173.223.0/24 maxlen: 24 158.173.229.0/24 maxlen: 24 158.173.237.0/24 maxlen: 24 158.173.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cc:3e:14:de:4a:b5:54:a2:58:6e:0d:08:d9:39:c9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 17 13:56:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a23cc76aedc10f2ccd76a5e7c02ba6b91ef50ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:5a:75:98:13:da:a6:e4:fd:61:ca:38:0f: f1:78:36:8d:44:6d:5d:aa:89:82:91:aa:ec:39:3c: 4a:3f:38:61:85:2d:ba:43:e0:d2:96:54:91:ac:6c: 63:ab:2c:48:3c:64:4a:9a:90:1b:3c:cb:66:21:ca: b9:c8:95:fa:4c:48:c0:d5:c5:72:11:49:87:59:7c: d0:44:b6:40:a6:f4:8b:8a:2e:f3:b4:51:10:7a:ea: 5e:82:df:2a:f9:b6:4f:eb:17:e4:72:ab:72:5f:f7: 3f:5b:e6:0e:e5:28:3d:ba:82:12:b0:21:a7:c1:eb: 92:f7:a7:7e:ac:29:fa:a7:f4:d2:bd:f1:e6:cc:f9: 1f:ea:d0:51:f2:f2:4f:5d:0f:a0:f0:e1:42:c7:7a: d8:db:ed:51:4e:db:d0:21:3f:ed:69:a3:76:50:dd: 10:4e:b5:f3:2d:7f:36:07:0e:b0:b1:03:c2:ee:22: 22:46:ff:04:92:a6:3b:45:1e:c8:ae:04:7f:1e:24: 22:1f:bd:49:73:5f:58:2d:f3:5a:de:ba:dd:3c:2c: 2a:ed:01:c5:01:b1:91:96:cc:18:87:c0:dd:a1:2e: b2:4b:88:82:77:06:4b:54:e1:18:8d:0b:d0:df:e2: 67:9e:d6:30:99:1e:3a:34:7e:30:22:b4:7b:8a:e4: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:23:CC:76:AE:DC:10:F2:CC:D7:6A:5E:7C:02:BA:6B:91:EF:50:AB X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WiPMdq7cEPLM12pefAK6a5HvUKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.0.0/24 147.90.3.0/24 147.90.5.0-147.90.12.255 147.90.14.0/24 147.90.16.0-147.90.29.255 147.90.32.0-147.90.71.255 147.90.76.0-147.90.89.255 147.90.91.0-147.90.95.255 147.90.112.0/21 147.90.122.0-147.90.127.255 147.90.220.0-147.90.255.255 158.173.192.0/24 158.173.200.0/24 158.173.205.0-158.173.208.255 158.173.211.0/24 158.173.213.0-158.173.215.255 158.173.217.0-158.173.218.255 158.173.220.0/24 158.173.222.0/23 158.173.229.0/24 158.173.237.0-158.173.238.255 Signature Algorithm: sha256WithRSAEncryption 28:02:f6:d2:20:cf:6b:1b:40:30:00:90:54:24:17:4e:6a:2c: 9f:07:ea:51:d3:76:35:27:7d:b9:6e:db:6c:ee:69:ec:c3:e9: 1c:26:c1:f7:9e:63:6a:b7:9f:5b:d2:69:25:c5:7b:b9:6b:59: d2:3f:a6:5e:a0:94:07:d5:a7:05:82:0a:a6:b0:84:03:b2:5b: c5:06:4e:bd:5d:99:0a:8f:13:f2:c4:5f:29:87:19:af:b4:ad: 53:80:b8:13:6d:08:08:7e:21:84:10:81:08:a4:0d:9f:a4:11: 21:b7:6a:44:8f:46:21:ba:c0:8e:48:54:67:84:fa:33:21:f6: 3d:f9:ff:37:4f:e0:d1:7e:e9:92:39:18:06:6d:0e:17:b4:f1: 48:77:d7:04:c2:25:09:69:a3:19:b1:80:d6:b6:28:56:4c:b1: 83:4b:e4:b7:db:0f:35:d4:9a:7f:af:bd:04:80:20:96:7d:48: be:26:da:1b:f6:20:33:56:ae:4f:b8:79:52:92:c6:88:71:5c: df:db:6b:eb:fe:9a:89:e2:62:a8:af:c0:1a:48:b6:3e:21:64: 00:2f:96:08:b3:96:63:a4:c1:e7:3a:ad:a0:f8:8f:44:0b:b0: 4c:a4:3e:b9:eb:57:a7:5a:05:a1:80:93:04:43:ef:fd:d5:f4: 5e:f0:17:80 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZvMPhTeSrVUolhuDQjZOck1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTE3MTM1NjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTIzY2M3NmFlZGMxMGYyY2NkNzZhNWU3YzAyYmE2YjkxZWY1MGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXhadZgT2qbk/WHKOA/xeDaNRG1d qomCkarsOTxKPzhhhS26Q+DSllSRrGxjqyxIPGRKmpAbPMtmIcq5yJX6TEjA1cVy EUmHWXzQRLZApvSLii7ztFEQeupegt8q+bZP6xfkcqtyX/c/W+YO5Sg9uoISsCGn weuS96d+rCn6p/TSvfHmzPkf6tBR8vJPXQ+g8OFCx3rY2+1RTtvQIT/taaN2UN0Q TrXzLX82Bw6wsQPC7iIiRv8EkqY7RR7IrgR/HiQiH71Jc19YLfNa3rrdPCwq7QHF AbGRlswYh8DdoS6yS4iCdwZLVOEYjQvQ3+JnntYwmR46NH4wIrR7iuTUYwIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFFojzHau3BDyzNdqXnwCumuR71CrMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvV2lQTWRxN2NFUExNMTJwZWZBSzZhNUh2VUtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHyBggrBgEFBQcBBwEB/wSB4jCB3zCB3AQCAAEwgdUDBACT WgADBACTWgMwDAMEAJNaBQMEAJNaDAMEAJNaDjAMAwQEk1oQAwQBk1ocMAwDBAWT WiADBAOTWkAwDAMEApNaTAMEAZNaWDAMAwQAk1pbAwQFk1pAAwQDk1pwMAwDBAGT WnoDBAeTWgAwCwMEApNa3AMDAJNaAwQAnq3AAwQAnq3IMAwDBACerc0DBACerdAD BACerdMwDAMEAJ6t1QMEA56t0DAMAwQAnq3ZAwQAnq3aAwQAnq3cAwQBnq3eAwQA nq3lMAwDBACere0DBACere4wDQYJKoZIhvcNAQELBQADggEBACgC9tIgz2sbQDAA kFQkF05qLJ8H6lHTdjUnfblu22zuaezD6RwmwfeeY2q3n1vSaSXFe7lrWdI/pl6g lAfVpwWCCqawhAOyW8UGTr1dmQqPE/LEXymHGa+0rVOAuBNtCAh+IYQQgQikDZ+k ESG3akSPRiG6wI5IVGeE+jMh9j35/zdP4NF+6ZI5GAZtDhe08Uh31wTCJQlpoxmx gNa2KFZMsYNL5LfbDzXUmn+vvQSAIJZ9SL4m2hv2IDNWrk+4eVKSxohxXN/ba+v+ moniYqivwBpItj4hZAAvlgizlmOkwec6raD4j0QLsEykPrnrV6daBaGAkwRD7/3V 9F7wF4A= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:53 2026 by rpki-client