This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/XhVmXM4K4HCBlMG1ngBraE1XDdo.roa
File: XhVmXM4K4HCBlMG1ngBraE1XDdo.roa (raw, json)
Hash identifier: Lr9nUJJLPlvbbArNTq9/86G0Uy2dThr703k1XnKZ2HU=
Subject key identifier: 5E:15:66:5C:CE:0A:E0:70:81:94:C1:B5:9E:00:6B:68:4D:57:0D:DA
Certificate issuer: /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial: 019B7A5A8E7F05D6640B3C39D9615DA3A306
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/XhVmXM4K4HCBlMG1ngBraE1XDdo.roa
Signing time: Thu 01 Jan 2026 16:18:33 +0000
ROA not before: Thu 01 Jan 2026 16:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204805
IP address blocks: 5.180.224.0/22 maxlen: 22
5.180.224.0/23 maxlen: 23
5.180.224.0/24 maxlen: 24
5.180.225.0/24 maxlen: 24
5.180.226.0/23 maxlen: 23
5.180.226.0/24 maxlen: 24
5.180.227.0/24 maxlen: 24
45.9.172.0/22 maxlen: 22
45.9.172.0/23 maxlen: 23
45.9.172.0/24 maxlen: 24
45.9.173.0/24 maxlen: 24
45.9.174.0/23 maxlen: 23
45.9.174.0/24 maxlen: 24
45.9.175.0/24 maxlen: 24
45.138.148.0/22 maxlen: 22
45.138.148.0/24 maxlen: 24
45.138.149.0/24 maxlen: 24
45.138.150.0/24 maxlen: 24
45.138.151.0/24 maxlen: 24
77.83.180.0/22 maxlen: 22
77.83.180.0/23 maxlen: 23
77.83.180.0/24 maxlen: 24
77.83.181.0/24 maxlen: 24
77.83.182.0/23 maxlen: 23
77.83.182.0/24 maxlen: 24
77.83.183.0/24 maxlen: 24
185.209.148.0/22 maxlen: 22
185.209.148.0/24 maxlen: 24
185.209.149.0/24 maxlen: 24
185.209.150.0/24 maxlen: 24
185.209.151.0/24 maxlen: 24
193.142.206.0/23 maxlen: 23
193.142.206.0/24 maxlen: 24
193.142.207.0/24 maxlen: 24
194.5.254.0/23 maxlen: 23
194.5.254.0/24 maxlen: 24
194.5.255.0/24 maxlen: 24
194.8.12.0/23 maxlen: 23
194.8.12.0/24 maxlen: 24
194.8.13.0/24 maxlen: 24
2a0b:47c0::/29 maxlen: 29
2a0b:47c0::/32 maxlen: 32
2a0b:47c0::/36 maxlen: 36
2a0b:47c0:1000::/36 maxlen: 36
2a0b:47c0:2000::/36 maxlen: 36
2a0b:47c0:3000::/36 maxlen: 36
2a0b:47c0:4000::/36 maxlen: 36
2a0b:47c0:5000::/36 maxlen: 36
2a0b:47c0:6000::/36 maxlen: 36
2a0b:47c0:7000::/36 maxlen: 36
2a0b:47c0:8000::/36 maxlen: 36
2a0b:47c0:9000::/36 maxlen: 36
2a0b:47c0:a000::/36 maxlen: 36
2a0b:47c0:b000::/36 maxlen: 36
2a0b:47c0:c000::/36 maxlen: 36
2a0b:47c0:d000::/36 maxlen: 36
2a0b:47c0:e000::/36 maxlen: 36
2a0b:47c0:f000::/36 maxlen: 36
2a0b:47c1::/32 maxlen: 32
2a0b:47c1::/36 maxlen: 36
2a0b:47c1:1000::/36 maxlen: 36
2a0b:47c1:2000::/36 maxlen: 36
2a0b:47c1:3000::/36 maxlen: 36
2a0b:47c1:4000::/36 maxlen: 36
2a0b:47c1:5000::/36 maxlen: 36
2a0b:47c1:6000::/36 maxlen: 36
2a0b:47c1:7000::/36 maxlen: 36
2a0b:47c1:8000::/36 maxlen: 36
2a0b:47c1:9000::/36 maxlen: 36
2a0b:47c1:a000::/36 maxlen: 36
2a0b:47c1:b000::/36 maxlen: 36
2a0b:47c1:c000::/36 maxlen: 36
2a0b:47c1:d000::/36 maxlen: 36
2a0b:47c1:e000::/36 maxlen: 36
2a0b:47c1:f000::/36 maxlen: 36
2a0b:47c2::/32 maxlen: 32
2a0b:47c2::/36 maxlen: 36
2a0b:47c2:1000::/36 maxlen: 36
2a0b:47c2:2000::/36 maxlen: 36
2a0b:47c2:3000::/36 maxlen: 36
2a0b:47c2:4000::/36 maxlen: 36
2a0b:47c2:5000::/36 maxlen: 36
2a0b:47c2:6000::/36 maxlen: 36
2a0b:47c2:7000::/36 maxlen: 36
2a0b:47c2:8000::/36 maxlen: 36
2a0b:47c2:9000::/36 maxlen: 36
2a0b:47c2:a000::/36 maxlen: 36
2a0b:47c2:b000::/36 maxlen: 36
2a0b:47c2:c000::/36 maxlen: 36
2a0b:47c2:d000::/36 maxlen: 36
2a0b:47c2:e000::/36 maxlen: 36
2a0b:47c2:f000::/36 maxlen: 36
2a0b:47c3::/32 maxlen: 32
2a0b:47c3::/36 maxlen: 36
2a0b:47c3:1000::/36 maxlen: 36
2a0b:47c3:2000::/36 maxlen: 36
2a0b:47c3:3000::/36 maxlen: 36
2a0b:47c3:4000::/36 maxlen: 36
2a0b:47c3:5000::/36 maxlen: 36
2a0b:47c3:6000::/36 maxlen: 36
2a0b:47c3:7000::/36 maxlen: 36
2a0b:47c3:8000::/36 maxlen: 36
2a0b:47c3:9000::/36 maxlen: 36
2a0b:47c3:a000::/36 maxlen: 36
2a0b:47c3:b000::/36 maxlen: 36
2a0b:47c3:c000::/36 maxlen: 36
2a0b:47c3:d000::/36 maxlen: 36
2a0b:47c3:e000::/36 maxlen: 36
2a0b:47c3:f000::/36 maxlen: 36
2a0b:47c4::/32 maxlen: 32
2a0b:47c4::/36 maxlen: 36
2a0b:47c4:1000::/36 maxlen: 36
2a0b:47c4:2000::/36 maxlen: 36
2a0b:47c4:3000::/36 maxlen: 36
2a0b:47c4:4000::/36 maxlen: 36
2a0b:47c4:5000::/36 maxlen: 36
2a0b:47c4:6000::/36 maxlen: 36
2a0b:47c4:7000::/36 maxlen: 36
2a0b:47c4:8000::/36 maxlen: 36
2a0b:47c4:9000::/36 maxlen: 36
2a0b:47c4:a000::/36 maxlen: 36
2a0b:47c4:b000::/36 maxlen: 36
2a0b:47c4:c000::/36 maxlen: 36
2a0b:47c4:d000::/36 maxlen: 36
2a0b:47c4:e000::/36 maxlen: 36
2a0b:47c4:f000::/36 maxlen: 36
2a0b:47c5::/32 maxlen: 32
2a0b:47c5::/36 maxlen: 36
2a0b:47c5:1000::/36 maxlen: 36
2a0b:47c5:2000::/36 maxlen: 36
2a0b:47c5:3000::/36 maxlen: 36
2a0b:47c5:4000::/36 maxlen: 36
2a0b:47c5:5000::/36 maxlen: 36
2a0b:47c5:6000::/36 maxlen: 36
2a0b:47c5:7000::/36 maxlen: 36
2a0b:47c5:8000::/36 maxlen: 36
2a0b:47c5:9000::/36 maxlen: 36
2a0b:47c5:a000::/36 maxlen: 36
2a0b:47c5:b000::/36 maxlen: 36
2a0b:47c5:c000::/36 maxlen: 36
2a0b:47c5:d000::/36 maxlen: 36
2a0b:47c5:e000::/36 maxlen: 36
2a0b:47c5:f000::/36 maxlen: 36
2a0b:47c6::/32 maxlen: 32
2a0b:47c6::/36 maxlen: 36
2a0b:47c6:1000::/36 maxlen: 36
2a0b:47c6:2000::/36 maxlen: 36
2a0b:47c6:3000::/36 maxlen: 36
2a0b:47c6:4000::/36 maxlen: 36
2a0b:47c6:5000::/36 maxlen: 36
2a0b:47c6:6000::/36 maxlen: 36
2a0b:47c6:7000::/36 maxlen: 36
2a0b:47c6:8000::/36 maxlen: 36
2a0b:47c6:9000::/36 maxlen: 36
2a0b:47c6:a000::/36 maxlen: 36
2a0b:47c6:b000::/36 maxlen: 36
2a0b:47c6:c000::/36 maxlen: 36
2a0b:47c6:d000::/36 maxlen: 36
2a0b:47c6:e000::/36 maxlen: 36
2a0b:47c6:f000::/36 maxlen: 36
2a0b:47c7::/32 maxlen: 32
2a0f:cd80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:8e:7f:05:d6:64:0b:3c:39:d9:61:5d:a3:a3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Validity
Not Before: Jan 1 16:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e15665cce0ae0708194c1b59e006b684d570dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:4e:32:57:6b:47:e0:a5:bc:dc:9e:49:a2:
7f:8e:62:df:38:12:2f:92:a0:81:6c:b6:a5:08:86:
9b:fb:2b:72:6f:ef:12:e7:fb:ca:a8:d0:0f:48:16:
c9:89:f0:6c:1c:65:d3:f1:18:86:cd:88:b8:46:0f:
e0:39:88:22:2c:04:6c:8b:5c:86:5d:9e:d2:43:03:
a1:61:24:c0:d5:d9:f3:91:7d:69:2d:d4:1d:31:b4:
c6:aa:67:36:ae:17:16:6e:ef:5c:61:d3:4f:67:9a:
c1:5a:ed:ee:f2:17:64:84:67:b8:bc:15:41:64:2b:
bd:8e:dd:59:c4:2e:99:9e:0e:52:e0:2f:9f:8c:93:
c6:5b:19:94:83:0f:66:c8:0a:7d:8a:02:de:50:dc:
3f:cc:2e:0d:3c:d9:65:93:13:6b:3d:60:25:91:29:
66:2e:c5:f8:34:ba:5b:bb:05:f7:cd:d7:8e:cf:34:
ea:63:5d:d4:80:fa:d1:de:9b:f5:20:b5:76:12:26:
9f:77:b0:a6:7a:31:c4:71:07:60:0d:3f:73:9a:89:
87:cc:33:e3:83:a1:37:b4:de:8e:ca:3f:e3:f3:40:
e7:45:36:70:33:94:00:b1:67:21:4e:bb:83:8b:14:
8f:d2:29:e7:33:06:c6:10:a1:8d:7a:e3:f9:2b:55:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:15:66:5C:CE:0A:E0:70:81:94:C1:B5:9E:00:6B:68:4D:57:0D:DA
X509v3 Authority Key Identifier:
keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/XhVmXM4K4HCBlMG1ngBraE1XDdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.224.0/22
45.9.172.0/22
45.138.148.0/22
77.83.180.0/22
185.209.148.0/22
193.142.206.0/23
194.5.254.0/23
194.8.12.0/23
IPv6:
2a0b:47c0::/29
2a0f:cd80::/32
Signature Algorithm: sha256WithRSAEncryption
03:37:7a:d9:42:94:18:33:8b:5e:1c:76:ba:ee:cf:3b:97:60:
71:7b:b3:c0:a0:d2:3b:63:85:32:ea:b2:38:b8:4b:d9:0a:d8:
bc:9f:c6:08:16:aa:58:bc:34:e6:7d:cc:fb:85:7a:dd:42:85:
93:4f:a6:8b:59:fa:3d:73:72:0f:e0:25:42:3f:85:40:d7:5a:
60:1f:a9:a2:de:88:31:d1:63:45:71:ee:d8:38:8f:e4:89:f7:
fd:db:f6:34:dd:66:0a:a4:33:13:89:12:89:c3:46:1d:85:06:
0f:f2:f8:7a:5c:65:20:01:ea:d3:86:36:0f:9f:96:b3:37:6b:
46:60:37:da:3d:99:dc:b9:d0:4d:8f:65:2b:f7:83:6f:c8:7e:
ae:b6:97:c4:39:c6:a0:72:fc:02:c7:c4:10:64:b5:b8:d2:e5:
27:bd:2a:e7:06:7f:9c:f2:78:53:32:ba:7c:c7:03:e3:41:25:
d8:7e:11:44:e2:03:9d:ca:0e:a9:d1:19:4a:ed:77:0a:85:f3:
93:a6:f4:33:8e:34:b7:e6:ca:9a:f4:9a:70:8e:3f:f4:61:9f:
ca:e0:a5:5b:68:77:8d:24:60:82:38:cd:d7:b4:38:d3:0f:93:
4d:8c:b2:00:c7:44:51:a6:6b:da:1d:4f:bf:31:e2:d1:e3:21:
89:6c:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:07 2026 by rpki-client