This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/W_fZNduGhcZ0R7Lk6W3O037mBq0.roa File: W_fZNduGhcZ0R7Lk6W3O037mBq0.roa (raw, json) Hash identifier: 9oryaDs6EcGEP7ZRWac+ns+Mt1mDVfRKilvgGQVFl/E= Subject key identifier: 5B:F7:D9:35:DB:86:85:C6:74:47:B2:E4:E9:6D:CE:D3:7E:E6:06:AD Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Certificate serial: 019B79ECF648A1439F82BE59AF43F4D3D08D Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/W_fZNduGhcZ0R7Lk6W3O037mBq0.roa Signing time: Thu 01 Jan 2026 14:18:51 +0000 ROA not before: Thu 01 Jan 2026 14:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208905 IP address blocks: 147.235.25.0/24 maxlen: 24 147.235.26.0/23 maxlen: 24 147.235.36.0/24 maxlen: 24 147.235.40.0/24 maxlen: 24 147.235.45.0/24 maxlen: 24 147.235.46.0/23 maxlen: 24 147.235.49.0/24 maxlen: 24 147.235.50.0/23 maxlen: 24 147.235.60.0/22 maxlen: 22 147.235.60.0/23 maxlen: 23 147.235.60.0/24 maxlen: 24 147.235.61.0/24 maxlen: 24 147.235.62.0/23 maxlen: 23 147.235.62.0/24 maxlen: 24 147.235.63.0/24 maxlen: 24 147.235.72.0/22 maxlen: 22 147.235.72.0/23 maxlen: 23 147.235.72.0/24 maxlen: 24 147.235.73.0/24 maxlen: 24 147.235.74.0/23 maxlen: 23 147.235.74.0/24 maxlen: 24 147.235.75.0/24 maxlen: 24 147.235.76.0/22 maxlen: 22 147.235.76.0/23 maxlen: 23 147.235.76.0/24 maxlen: 24 147.235.77.0/24 maxlen: 24 147.235.78.0/23 maxlen: 23 147.235.78.0/24 maxlen: 24 147.235.79.0/24 maxlen: 24 147.235.80.0/24 maxlen: 24 147.235.93.0/24 maxlen: 24 147.235.94.0/23 maxlen: 23 147.235.94.0/24 maxlen: 24 147.235.95.0/24 maxlen: 24 147.235.152.0/23 maxlen: 24 147.235.154.0/24 maxlen: 24 147.235.180.0/23 maxlen: 24 147.235.224.0/23 maxlen: 24 147.235.232.0/23 maxlen: 24 147.235.234.0/24 maxlen: 24 147.235.240.0/23 maxlen: 24 147.235.248.0/23 maxlen: 24 147.235.254.0/23 maxlen: 24 185.130.84.0/22 maxlen: 22 2a06:c702::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f6:48:a1:43:9f:82:be:59:af:43:f4:d3:d0:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Validity Not Before: Jan 1 14:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bf7d935db8685c67447b2e4e96dced37ee606ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:bd:d3:5c:d1:cd:57:da:12:03:14:0f:d6: 6f:1e:8c:f4:e4:48:46:58:6c:0b:98:fa:d8:70:11: 73:de:00:17:76:87:96:4b:f8:42:9b:d5:5c:30:9e: 5d:83:44:85:07:30:9d:8b:b9:2f:2d:28:47:5f:67: 8b:f5:b1:2d:99:c5:cf:07:de:ed:6a:e1:ac:26:75: b1:ed:f4:1f:8e:43:d8:cf:b5:89:3c:21:0d:31:96: 5c:4b:ac:cd:44:40:0f:62:2a:22:45:a5:ec:d3:ca: ce:16:e9:4e:4c:e3:3a:8e:40:44:c2:33:de:df:e2: bf:37:46:0d:21:0e:1a:87:b8:b3:7e:ce:56:ab:6e: 54:78:9c:88:60:50:e1:96:3c:28:f6:14:b6:5b:b8: 5d:cd:1f:b0:34:6f:b0:ec:13:e0:5d:fb:c4:69:0d: 70:4d:0f:f7:e8:e2:59:0e:6c:a7:e1:7a:df:1e:2f: e0:84:d1:13:60:6c:05:e2:85:56:3a:68:d7:01:cc: b1:e9:97:7d:61:ee:f6:fe:32:21:55:0f:99:9b:e2: d4:ed:b6:07:ca:fc:fd:89:73:74:80:5a:4e:ef:e5: 41:f8:87:8b:46:d4:6c:26:09:af:2f:7a:49:dd:74: d7:d9:d9:53:01:bd:99:0a:22:f4:e7:39:cb:42:1e: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F7:D9:35:DB:86:85:C6:74:47:B2:E4:E9:6D:CE:D3:7E:E6:06:AD X509v3 Authority Key Identifier: keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/W_fZNduGhcZ0R7Lk6W3O037mBq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.235.25.0-147.235.27.255 147.235.36.0/24 147.235.40.0/24 147.235.45.0-147.235.47.255 147.235.49.0-147.235.51.255 147.235.60.0/22 147.235.72.0-147.235.80.255 147.235.93.0-147.235.95.255 147.235.152.0-147.235.154.255 147.235.180.0/23 147.235.224.0/23 147.235.232.0-147.235.234.255 147.235.240.0/23 147.235.248.0/23 147.235.254.0/23 185.130.84.0/22 IPv6: 2a06:c702::/48 Signature Algorithm: sha256WithRSAEncryption 11:64:bf:72:84:4f:25:d6:12:5a:97:55:ab:6c:40:2d:09:65: 0c:97:a9:a6:32:5d:51:df:34:2f:ab:f9:79:ae:4b:67:96:5d: c9:ff:e3:0e:74:fd:ac:19:8c:0d:3a:25:2a:0a:aa:a4:04:76: 28:64:c5:f8:c7:0c:aa:2f:48:ef:a8:d6:11:c4:cb:85:f9:7d: 88:67:d5:73:3f:6b:31:4d:5b:93:c1:d3:17:8a:9f:aa:a2:a3: 07:36:be:a7:af:2f:98:10:a7:7f:b5:4c:be:18:16:a5:ff:00: 37:8e:42:d1:86:61:45:f9:05:0c:19:3c:bf:55:a5:9a:df:6a: 31:12:4e:de:cf:e0:9d:84:93:bd:c1:95:f2:1c:67:ec:96:da: 58:11:37:ef:b2:2c:5b:e2:3a:69:07:72:85:a0:74:c5:8f:95: 4d:76:cc:96:66:3a:bc:69:7e:3f:d1:eb:19:10:30:54:9f:01: 43:85:41:28:e1:d5:6b:ae:4e:95:bc:a5:eb:3c:23:c6:bf:fe: 65:44:b3:90:a1:f3:f7:11:bd:69:cf:e0:ec:30:82:e8:db:8c: bb:94:86:8f:a0:e8:80:94:e9:ec:ef:c1:2d:f7:79:de:63:7a: b9:81:b7:3d:ac:52:c2:22:e4:bf:31:6b:37:6a:1c:2b:8f:69: 8f:8e:24:1a -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt57PZIoUOfgr5Zr0P009CNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNzQxMTU4ZjNlZDY1YmVlMWJkZTEyZjM0Zjg5NWFmYjBk ZDUwZDUwHhcNMjYwMTAxMTQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmY3ZDkzNWRiODY4NWM2NzQ0N2IyZTRlOTZkY2VkMzdlZTYwNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8S901zRzVfaEgMUD9ZvHoz05EhG WGwLmPrYcBFz3gAXdoeWS/hCm9VcMJ5dg0SFBzCdi7kvLShHX2eL9bEtmcXPB97t auGsJnWx7fQfjkPYz7WJPCENMZZcS6zNREAPYioiRaXs08rOFulOTOM6jkBEwjPe 3+K/N0YNIQ4ah7izfs5Wq25UeJyIYFDhljwo9hS2W7hdzR+wNG+w7BPgXfvEaQ1w TQ/36OJZDmyn4XrfHi/ghNETYGwF4oVWOmjXAcyx6Zd9Ye72/jIhVQ+Zm+LU7bYH yvz9iXN0gFpO7+VB+IeLRtRsJgmvL3pJ3XTX2dlTAb2ZCiL05znLQh44pwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFFv32TXbhoXGdEey5OltztN+5gatMB8GA1UdIwQY MBaAFFB0EVjz7WW+4b3hLzT4la+w3VDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQt MzU1M2I0ZWQ2Nzk0LzEvV19mWk5kdUdoY1owUjdMazZXM08wMzdtQnEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQtMzU1M2I0ZWQ2Nzk0 LzEvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHGBggrBgEFBQcBBwEB/wSBtjCBszCBnwQCAAEwgZgwDAME AJPrGQMEApPrGAMEAJPrJAMEAJPrKDAMAwQAk+stAwQEk+sgMAwDBACT6zEDBAKT 6zADBAKT6zwwDAMEA5PrSAMEAJPrUDAMAwQAk+tdAwQFk+tAMAwDBAOT65gDBACT 65oDBAGT67QDBAGT6+AwDAMEA5Pr6AMEAJPr6gMEAZPr8AMEAZPr+AMEAZPr/gME ArmCVDAPBAIAAjAJAwcAKgbHAgAAMA0GCSqGSIb3DQEBCwUAA4IBAQARZL9yhE8l 1hJal1WrbEAtCWUMl6mmMl1R3zQvq/l5rktnll3J/+MOdP2sGYwNOiUqCqqkBHYo ZMX4xwyqL0jvqNYRxMuF+X2IZ9VzP2sxTVuTwdMXip+qoqMHNr6nry+YEKd/tUy+ GBal/wA3jkLRhmFF+QUMGTy/VaWa32oxEk7ez+CdhJO9wZXyHGfsltpYETfvsixb 4jppB3KFoHTFj5VNdsyWZjq8aX4/0esZEDBUnwFDhUEo4dVrrk6VvKXrPCPGv/5l RLOQofP3Eb1pz+DsMILo24y7lIaPoOiAlOns78Et93neY3q5gbc9rFLCIuS/MWs3 ahwrj2mPjiQa -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:45 2026 by rpki-client