This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/noaygg2wPjlBosftE29kMP3PbgI.roa File: noaygg2wPjlBosftE29kMP3PbgI.roa (raw, json) Hash identifier: sytGhw1zIpSLLfcS54/9WyoLtxVq6f6n+sViXwFAkyQ= Subject key identifier: 9E:86:B2:82:0D:B0:3E:39:41:A2:C7:ED:13:6F:64:30:FD:CF:6E:02 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EAFF8F188BB19DC1B980FEC091775 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/noaygg2wPjlBosftE29kMP3PbgI.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8717 IP address blocks: 5.53.128.0/17 maxlen: 17 37.63.0.0/17 maxlen: 17 46.232.152.0/21 maxlen: 21 46.238.0.0/18 maxlen: 18 46.238.14.0/24 maxlen: 24 62.204.128.0/19 maxlen: 19 62.204.128.0/24 maxlen: 24 62.204.130.0/24 maxlen: 24 62.204.141.0/24 maxlen: 24 62.221.128.0/19 maxlen: 19 62.221.128.0/24 maxlen: 24 77.70.0.0/17 maxlen: 17 77.236.160.0/19 maxlen: 19 77.236.178.0/23 maxlen: 23 78.83.0.0/16 maxlen: 16 78.83.144.0/24 maxlen: 24 78.83.145.0/24 maxlen: 24 78.83.146.0/24 maxlen: 24 78.83.147.0/24 maxlen: 24 78.83.148.0/24 maxlen: 24 78.83.149.0/24 maxlen: 24 78.83.150.0/24 maxlen: 24 78.83.151.0/24 maxlen: 24 78.83.210.0/24 maxlen: 24 78.83.225.0/24 maxlen: 24 78.83.226.0/23 maxlen: 23 78.90.0.0/16 maxlen: 16 80.253.48.0/20 maxlen: 20 80.253.52.0/23 maxlen: 23 82.103.64.0/18 maxlen: 18 82.103.91.0/24 maxlen: 24 82.103.103.0/24 maxlen: 24 82.103.109.0/24 maxlen: 24 82.103.110.0/23 maxlen: 23 82.103.126.0/24 maxlen: 24 82.103.127.0/24 maxlen: 24 82.147.128.0/19 maxlen: 19 83.97.24.0/21 maxlen: 21 84.242.128.0/18 maxlen: 18 84.252.0.0/18 maxlen: 18 85.91.128.0/19 maxlen: 19 85.118.64.0/19 maxlen: 19 85.130.0.0/17 maxlen: 17 85.130.95.0/24 maxlen: 24 85.130.96.0/23 maxlen: 23 85.130.120.0/23 maxlen: 23 85.196.128.0/18 maxlen: 18 87.97.128.0/17 maxlen: 17 87.97.160.0/22 maxlen: 22 87.227.128.0/17 maxlen: 17 88.203.128.0/17 maxlen: 17 88.203.129.0/24 maxlen: 24 88.203.132.0/24 maxlen: 24 88.203.147.0/24 maxlen: 24 88.203.204.0/24 maxlen: 24 88.203.237.0/24 maxlen: 24 89.186.200.0/21 maxlen: 21 89.190.192.0/19 maxlen: 19 89.215.0.0/16 maxlen: 16 89.215.8.0/22 maxlen: 22 89.215.40.0/22 maxlen: 22 89.215.48.0/22 maxlen: 22 89.253.128.0/18 maxlen: 18 92.247.0.0/16 maxlen: 16 92.247.168.0/24 maxlen: 24 95.111.0.0/17 maxlen: 17 95.140.208.0/20 maxlen: 20 130.204.0.0/16 maxlen: 16 151.251.0.0/16 maxlen: 16 151.251.38.0/24 maxlen: 24 151.251.140.0/24 maxlen: 24 151.251.237.0/24 maxlen: 24 176.12.0.0/18 maxlen: 18 193.22.103.0/24 maxlen: 24 195.24.32.0/19 maxlen: 19 195.34.96.0/19 maxlen: 19 195.34.101.0/24 maxlen: 24 195.34.122.0/24 maxlen: 24 195.34.123.0/24 maxlen: 24 195.149.248.0/21 maxlen: 21 195.177.248.0/23 maxlen: 23 212.36.0.0/19 maxlen: 19 212.50.0.0/19 maxlen: 19 212.50.7.0/24 maxlen: 24 212.91.160.0/19 maxlen: 19 212.91.184.0/24 maxlen: 24 212.91.185.0/24 maxlen: 24 212.91.186.0/24 maxlen: 24 212.91.187.0/24 maxlen: 24 212.95.160.0/19 maxlen: 19 212.95.161.0/24 maxlen: 24 212.104.96.0/19 maxlen: 19 213.169.32.0/19 maxlen: 19 213.191.160.0/19 maxlen: 19 213.222.32.0/19 maxlen: 19 213.226.0.0/18 maxlen: 18 213.226.5.0/24 maxlen: 24 213.226.6.0/24 maxlen: 24 213.226.9.0/24 maxlen: 24 213.226.31.0/24 maxlen: 24 213.226.35.0/24 maxlen: 24 213.226.47.0/24 maxlen: 24 213.226.48.0/24 maxlen: 24 213.240.192.0/18 maxlen: 18 217.9.224.0/20 maxlen: 20 217.10.240.0/20 maxlen: 20 217.18.240.0/20 maxlen: 20 217.79.32.0/20 maxlen: 20 2a00:4800::/29 maxlen: 29 2a01:288::/32 maxlen: 32 2a01:288:400b::/48 maxlen: 48 2a01:288:400c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:af:f8:f1:88:bb:19:dc:1b:98:0f:ec:09:17:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e86b2820db03e3941a2c7ed136f6430fdcf6e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b6:53:76:8f:47:c6:98:1e:67:be:bb:e5:50: a0:76:da:f7:24:5a:76:e1:c5:6b:26:1f:53:df:7b: c0:16:20:1e:d9:97:8a:b0:c2:e1:63:b2:9e:fe:0a: 0e:0e:b3:d0:da:9e:6f:0e:85:32:d9:8f:6c:f5:c6: 01:86:05:51:7a:62:cb:22:61:fe:97:86:7c:d5:fc: f5:f1:3f:85:04:fa:e9:f1:13:ba:25:65:96:20:63: e6:d0:61:cb:30:79:c8:e7:55:12:a2:7e:1f:b1:8d: ed:21:db:c0:32:ca:b1:5a:0a:31:63:55:34:61:78: 97:6b:e9:bd:98:c1:fa:d4:6a:15:0a:f3:39:0f:5f: 8f:eb:7b:5c:d3:2d:26:bf:3b:f7:7d:33:82:63:d1: a5:31:f7:20:fb:e6:8a:5f:f5:e6:e6:15:ed:6a:f4: a9:85:30:89:2e:5a:a8:e3:38:d5:cf:e5:8b:63:50: b0:de:e6:cc:c4:a1:14:04:22:d5:fc:93:2f:c3:37: 85:37:e4:a1:35:d0:82:2d:d6:c1:44:52:d2:70:2b: 6c:69:6b:79:35:a1:76:26:07:a2:13:d7:77:31:ce: 22:cb:1d:5d:17:28:f8:12:70:7d:f1:51:13:e4:b5: 4a:a3:75:8b:8c:4d:16:2b:47:f5:8e:40:88:50:1b: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:86:B2:82:0D:B0:3E:39:41:A2:C7:ED:13:6F:64:30:FD:CF:6E:02 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/noaygg2wPjlBosftE29kMP3PbgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.53.128.0/17 37.63.0.0/17 46.232.152.0/21 46.238.0.0/18 62.204.128.0/19 62.221.128.0/19 77.70.0.0/17 77.236.160.0/19 78.83.0.0/16 78.90.0.0/16 80.253.48.0/20 82.103.64.0/18 82.147.128.0/19 83.97.24.0/21 84.242.128.0/18 84.252.0.0/18 85.91.128.0/19 85.118.64.0/19 85.130.0.0/17 85.196.128.0/18 87.97.128.0/17 87.227.128.0/17 88.203.128.0/17 89.186.200.0/21 89.190.192.0/19 89.215.0.0/16 89.253.128.0/18 92.247.0.0/16 95.111.0.0/17 95.140.208.0/20 130.204.0.0/16 151.251.0.0/16 176.12.0.0/18 193.22.103.0/24 195.24.32.0/19 195.34.96.0/19 195.149.248.0/21 195.177.248.0/23 212.36.0.0/19 212.50.0.0/19 212.91.160.0/19 212.95.160.0/19 212.104.96.0/19 213.169.32.0/19 213.191.160.0/19 213.222.32.0/19 213.226.0.0/18 213.240.192.0/18 217.9.224.0/20 217.10.240.0/20 217.18.240.0/20 217.79.32.0/20 IPv6: 2a00:4800::/29 2a01:288::/32 Signature Algorithm: sha256WithRSAEncryption 36:bd:d9:b1:2f:90:5e:a1:45:e4:61:d6:ff:60:40:80:32:4c: 61:79:68:a4:e0:b8:a3:bc:40:72:2d:0e:e2:02:0d:8a:9e:fe: a4:90:b4:0c:17:32:03:f4:f1:45:68:b9:20:54:b2:8a:ce:e3: 46:73:f8:82:54:09:58:a6:e5:47:02:42:bf:6e:1d:d2:bb:bf: 5c:45:41:b9:2d:15:6b:61:ac:84:4a:ad:4c:73:31:67:ec:9b: de:83:d2:af:37:a1:54:89:93:83:99:96:63:b5:b2:d7:aa:5f: 97:50:95:53:c6:3f:54:a8:39:7e:1e:84:e5:2a:d7:18:00:7a: e1:de:8b:ae:e3:2a:b8:27:35:45:7b:4e:b1:9b:15:0d:4c:79: 2c:36:d8:77:c7:db:62:6f:ae:55:d7:5a:de:32:c8:b3:32:36: 84:38:47:f2:f2:5d:dc:b3:83:f1:89:bc:65:23:43:b4:c8:10: e2:9a:70:0a:74:31:20:33:f8:18:43:04:3b:cf:82:7a:e5:d3: 4a:07:88:cb:b0:0b:a7:4b:df:75:33:9d:9a:a0:05:d5:f1:cb: e0:68:29:ad:64:fc:fb:6d:99:02:ac:dc:7d:3f:fe:8a:65:a7: f7:82:2b:a5:c4:66:0c:7b:cf:83:17:0f:32:9c:ac:9a:33:99: f8:ac:e4:c5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISAZt5fq/48Yi7GdwbmA/sCRd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTg2YjI4MjBkYjAzZTM5NDFhMmM3ZWQxMzZmNjQzMGZkY2Y2ZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97ZTdo9HxpgeZ7675VCgdtr3JFp2 4cVrJh9T33vAFiAe2ZeKsMLhY7Ke/goODrPQ2p5vDoUy2Y9s9cYBhgVRemLLImH+ l4Z81fz18T+FBPrp8RO6JWWWIGPm0GHLMHnI51USon4fsY3tIdvAMsqxWgoxY1U0 YXiXa+m9mMH61GoVCvM5D1+P63tc0y0mvzv3fTOCY9GlMfcg++aKX/Xm5hXtavSp hTCJLlqo4zjVz+WLY1Cw3ubMxKEUBCLV/JMvwzeFN+ShNdCCLdbBRFLScCtsaWt5 NaF2JgeiE9d3Mc4iyx1dFyj4EnB98VET5LVKo3WLjE0WK0f1jkCIUBtb2wIDAQAB o4IDVTCCA1EwHQYDVR0OBBYEFJ6GsoINsD45QaLH7RNvZDD9z24CMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvbm9heWdnMndQamxCb3NmdEUyOWtNUDNQYmdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBaQYIKwYBBQUHAQcBAf8EggFYMIIBVDCCAToEAgABMIIB MgMEBwU1gAMEByU/AAMEAy7omAMEBi7uAAMEBT7MgAMEBT7dgAMEB01GAAMEBU3s oAMDAE5TAwMATloDBARQ/TADBAZSZ0ADBAVSk4ADBANTYRgDBAZU8oADBAZU/AAD BAVVW4ADBAVVdkADBAdVggADBAZVxIADBAdXYYADBAdX44ADBAdYy4ADBANZusgD BAVZvsADAwBZ1wMEBln9gAMDAFz3AwQHX28AAwQEX4zQAwMAgswDAwCX+wMEBrAM AAMEAMEWZwMEBcMYIAMEBcMiYAMEA8OV+AMEAcOx+AMEBdQkAAMEBdQyAAMEBdRb oAMEBdRfoAMEBdRoYAMEBdWpIAMEBdW/oAMEBdXeIAMEBtXiAAMEBtXwwAMEBNkJ 4AMEBNkK8AMEBNkS8AMEBNlPIDAUBAIAAjAOAwUDKgBIAAMFACoBAogwDQYJKoZI hvcNAQELBQADggEBADa92bEvkF6hReRh1v9gQIAyTGF5aKTguKO8QHItDuICDYqe /qSQtAwXMgP08UVouSBUsorO40Zz+IJUCVim5UcCQr9uHdK7v1xFQbktFWthrIRK rUxzMWfsm96D0q83oVSJk4OZlmO1steqX5dQlVPGP1SoOX4ehOUq1xgAeuHei67j KrgnNUV7TrGbFQ1MeSw22HfH22JvrlXXWt4yyLMyNoQ4R/LyXdyzg/GJvGUjQ7TI EOKacAp0MSAz+BhDBDvPgnrl00oHiMuwC6dL33UznZqgBdXxy+BoKa1k/PttmQKs 3H0//oplp/eCK6XEZgx7z4MXDzKcrJozmfis5MU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:25 2026 by rpki-client