This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/nMPTAs5xTPzaigESDSn0xkt8iVs.roa File: nMPTAs5xTPzaigESDSn0xkt8iVs.roa (raw, json) Hash identifier: 8O1aTwpd0sgnwDGnx2ZKtPazmYV80Blqc480oPelgoQ= Subject key identifier: 9C:C3:D3:02:CE:71:4C:FC:DA:8A:01:12:0D:29:F4:C6:4B:7C:89:5B Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155 Certificate serial: 019B7F156BE3D863F1BB95DCC96BF5437078 Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/nMPTAs5xTPzaigESDSn0xkt8iVs.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 5.39.0.0/17 maxlen: 17 5.135.0.0/16 maxlen: 16 5.196.0.0/16 maxlen: 16 37.59.0.0/16 maxlen: 16 37.187.0.0/16 maxlen: 16 46.105.0.0/16 maxlen: 16 46.105.198.0/24 maxlen: 24 46.105.199.0/24 maxlen: 24 46.105.200.0/24 maxlen: 24 46.105.201.0/24 maxlen: 24 46.105.202.0/24 maxlen: 24 46.105.203.0/24 maxlen: 24 46.105.204.0/24 maxlen: 24 46.105.206.0/24 maxlen: 24 46.105.207.0/24 maxlen: 24 51.38.0.0/16 maxlen: 16 51.68.0.0/16 maxlen: 16 51.75.0.0/16 maxlen: 16 51.77.0.0/16 maxlen: 16 51.83.0.0/16 maxlen: 16 51.89.0.0/16 maxlen: 16 51.91.0.0/16 maxlen: 16 51.178.0.0/16 maxlen: 16 51.195.0.0/16 maxlen: 16 51.210.0.0/16 maxlen: 16 51.254.0.0/15 maxlen: 15 54.36.0.0/16 maxlen: 16 54.37.0.0/16 maxlen: 16 54.38.0.0/16 maxlen: 16 57.128.0.0/17 maxlen: 17 57.128.128.0/18 maxlen: 18 57.128.192.0/18 maxlen: 18 57.129.0.0/17 maxlen: 17 57.129.128.0/17 maxlen: 17 57.130.0.0/16 maxlen: 16 57.131.0.0/17 maxlen: 17 79.137.0.0/17 maxlen: 17 87.98.128.0/17 maxlen: 17 91.121.0.0/16 maxlen: 16 91.134.0.0/16 maxlen: 16 92.222.0.0/16 maxlen: 16 94.23.0.0/16 maxlen: 16 135.125.0.0/17 maxlen: 17 135.125.128.0/17 maxlen: 17 137.74.0.0/16 maxlen: 16 141.94.0.0/16 maxlen: 16 141.95.0.0/17 maxlen: 17 141.95.128.0/17 maxlen: 17 141.227.128.0/20 maxlen: 24 141.227.152.0/21 maxlen: 24 141.227.160.0/19 maxlen: 24 145.239.0.0/16 maxlen: 16 146.59.0.0/16 maxlen: 16 146.59.0.0/17 maxlen: 17 147.135.128.0/17 maxlen: 17 149.202.0.0/16 maxlen: 16 151.80.0.0/16 maxlen: 16 152.228.128.0/17 maxlen: 17 162.19.0.0/17 maxlen: 17 162.19.128.0/17 maxlen: 17 164.132.0.0/16 maxlen: 16 176.31.0.0/16 maxlen: 16 178.32.0.0/15 maxlen: 15 188.165.0.0/16 maxlen: 16 193.70.0.0/17 maxlen: 17 198.244.128.0/17 maxlen: 17 213.32.0.0/17 maxlen: 17 213.186.32.0/19 maxlen: 19 213.251.128.0/18 maxlen: 18 217.182.0.0/16 maxlen: 16 2001:41d0::/32 maxlen: 32 2001:41d0:ab00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6b:e3:d8:63:f1:bb:95:dc:c9:6b:f5:43:70:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cc3d302ce714cfcda8a01120d29f4c64b7c895b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:ef:29:6a:d1:9f:ce:f9:b6:3c:40:69:af: eb:3d:21:16:f6:75:f7:e1:6c:00:59:a2:23:a7:30: 8a:a9:a6:81:3b:1b:97:dc:6f:50:30:a7:6e:5f:83: bd:04:4a:45:6f:93:98:1a:a7:29:57:77:be:48:b4: e9:5d:72:e7:e2:2c:45:85:72:28:ca:61:27:af:3e: f0:aa:b1:42:2d:9a:00:4b:07:14:ae:1a:6f:06:0c: be:8a:fc:6a:f2:b5:09:00:80:5e:f8:22:a4:d8:d9: ab:9c:4f:45:84:6e:ab:4a:80:2a:cd:ed:d4:43:4e: e6:56:77:cd:bd:0b:d3:33:ae:94:5d:11:84:b3:31: 4a:6a:38:ac:29:e9:4e:12:17:b3:45:bb:f3:85:58: df:6a:91:61:43:ff:23:99:de:79:fe:d9:7a:6a:aa: 00:b3:ae:48:50:42:8e:55:0a:21:a4:55:ff:be:95: 13:30:a2:62:b6:dd:22:29:af:71:10:b8:82:f7:0c: 77:b9:cc:b7:74:79:5a:1a:57:81:31:ef:d3:29:4b: 16:58:b4:a7:cc:57:47:76:8a:79:5a:6d:a5:6c:15: 6d:cb:98:a8:ec:e4:26:15:9a:2c:c1:62:59:a1:46: c7:81:a8:38:41:91:0f:9e:19:fc:57:99:f6:21:77: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C3:D3:02:CE:71:4C:FC:DA:8A:01:12:0D:29:F4:C6:4B:7C:89:5B X509v3 Authority Key Identifier: keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/nMPTAs5xTPzaigESDSn0xkt8iVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.0.0/17 5.135.0.0/16 5.196.0.0/16 37.59.0.0/16 37.187.0.0/16 46.105.0.0/16 51.38.0.0/16 51.68.0.0/16 51.75.0.0/16 51.77.0.0/16 51.83.0.0/16 51.89.0.0/16 51.91.0.0/16 51.178.0.0/16 51.195.0.0/16 51.210.0.0/16 51.254.0.0/15 54.36.0.0-54.38.255.255 57.128.0.0-57.131.127.255 79.137.0.0/17 87.98.128.0/17 91.121.0.0/16 91.134.0.0/16 92.222.0.0/16 94.23.0.0/16 135.125.0.0/16 137.74.0.0/16 141.94.0.0/15 141.227.128.0/20 141.227.152.0-141.227.191.255 145.239.0.0/16 146.59.0.0/16 147.135.128.0/17 149.202.0.0/16 151.80.0.0/16 152.228.128.0/17 162.19.0.0/16 164.132.0.0/16 176.31.0.0/16 178.32.0.0/15 188.165.0.0/16 193.70.0.0/17 198.244.128.0/17 213.32.0.0/17 213.186.32.0/19 213.251.128.0/18 217.182.0.0/16 IPv6: 2001:41d0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:1d:26:05:d9:57:56:97:89:df:cf:e9:b2:b2:55:ba:2c:35: b3:89:87:f3:bd:6a:10:13:7a:03:d3:e6:e6:05:a6:a0:93:68: 06:80:67:fa:a0:b2:d5:10:29:29:7f:f2:9f:34:6d:7d:5b:a8: bd:1b:43:d7:18:fa:6d:27:78:a1:e3:e6:b5:49:f6:58:3f:d7: da:66:44:bc:74:11:9b:03:f1:ff:0a:6e:bb:b6:c2:c9:5c:9e: e4:80:09:e3:62:67:73:63:61:5c:d2:a7:97:e1:77:57:7a:1f: 0b:3a:da:72:e8:0c:78:23:9f:bc:ec:32:f5:f2:c4:54:e5:77: 5f:a4:92:7b:b3:9e:6a:6a:a1:dd:1c:96:ee:f9:40:9d:f6:f3: a8:5c:5b:c8:a9:99:b9:38:38:99:61:1f:83:ae:2a:c5:05:2a: 2e:1f:da:19:16:45:50:86:38:b8:77:d4:bd:bc:c2:05:38:42: ad:8f:4c:7f:84:76:4b:f3:ff:6a:75:bc:30:87:19:7e:0e:c7: b8:96:73:ca:19:5f:d1:88:23:6c:97:ba:a8:09:87:17:13:ea: 93:11:3d:c4:6d:b1:39:d0:a2:4b:49:2f:95:4d:88:b7:ae:04: 34:e8:8d:3c:b1:e5:33:00:b9:67:35:fa:54:2e:5d:1e:20:c4: 4e:00:92:ab -----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgISAZt/FWvj2GPxu5XcyWv1Q3B4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYTlmZmY2M2EzNDc3OTU3ZmY3NWNjZGMwMDNkYWI2OGNm OWQxNTUwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2MzZDMwMmNlNzE0Y2ZjZGE4YTAxMTIwZDI5ZjRjNjRiN2M4OTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOPvKWrRn875tjxAaa/rPSEW9nX3 4WwAWaIjpzCKqaaBOxuX3G9QMKduX4O9BEpFb5OYGqcpV3e+SLTpXXLn4ixFhXIo ymEnrz7wqrFCLZoASwcUrhpvBgy+ivxq8rUJAIBe+CKk2NmrnE9FhG6rSoAqze3U Q07mVnfNvQvTM66UXRGEszFKajisKelOEhezRbvzhVjfapFhQ/8jmd55/tl6aqoA s65IUEKOVQohpFX/vpUTMKJitt0iKa9xELiC9wx3ucy3dHlaGleBMe/TKUsWWLSn zFdHdop5Wm2lbBVty5io7OQmFZoswWJZoUbHgag4QZEPnhn8V5n2IXeaHwIDAQAB o4IDKjCCAyYwHQYDVR0OBBYEFJzD0wLOcUz82ooBEg0p9MZLfIlbMB8GA1UdIwQY MBaAFICp//Y6NHeVf/dczcAD2raM+dFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTIt NDdkOThlNTg1NDVhLzEvbk1QVEFzNXhUUHphaWdFU0RTbjB4a3Q4aVZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTItNDdkOThlNTg1NDVh LzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBPgYIKwYBBQUHAQcBAf8EggEtMIIBKTCCARYEAgABMIIB DgMEBwUnAAMDAAWHAwMABcQDAwAlOwMDACW7AwMALmkDAwAzJgMDADNEAwMAM0sD AwAzTQMDADNTAwMAM1kDAwAzWwMDADOyAwMAM8MDAwAz0gMDATP+MAoDAwI2JAMD ADYmMAsDAwc5gAMEBzmDAAMEB0+JAAMEB1digAMDAFt5AwMAW4YDAwBc3gMDAF4X AwMAh30DAwCJSgMDAY1eAwQEjeOAMAwDBAON45gDBAaN44ADAwCR7wMDAJI7AwQH k4eAAwMAlcoDAwCXUAMEB5jkgAMDAKITAwMApIQDAwCwHwMDAbIgAwMAvKUDBAfB RgADBAfG9IADBAfVIAADBAXVuiADBAbV+4ADAwDZtjANBAIAAjAHAwUAIAFB0DAN BgkqhkiG9w0BAQsFAAOCAQEAfR0mBdlXVpeJ38/psrJVuiw1s4mH871qEBN6A9Pm 5gWmoJNoBoBn+qCy1RApKX/ynzRtfVuovRtD1xj6bSd4oePmtUn2WD/X2mZEvHQR mwPx/wpuu7bCyVye5IAJ42Jnc2NhXNKnl+F3V3ofCzracugMeCOfvOwy9fLEVOV3 X6SSe7Oeamqh3RyW7vlAnfbzqFxbyKmZuTg4mWEfg64qxQUqLh/aGRZFUIY4uHfU vbzCBThCrY9Mf4R2S/P/anW8MIcZfg7HuJZzyhlf0YgjbJe6qAmHFxPqkxE9xG2x OdCiS0kvlU2It64ENOiNPLHlMwC5ZzX6VC5dHiDETgCSqw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:32 2026 by rpki-client