This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/xmuJajCxW6CAKzBKO0HZKxX3wCE.roa File: xmuJajCxW6CAKzBKO0HZKxX3wCE.roa (raw, json) Hash identifier: ISJ5kbE0xjYL9zMLc4XnOd0MhdPOaMjlbz5SKGrN7dE= Subject key identifier: C6:6B:89:6A:30:B1:5B:A0:80:2B:30:4A:3B:41:D9:2B:15:F7:C0:21 Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c Certificate serial: 019B7F14F5120FF5A63576484863ADA9163D Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/xmuJajCxW6CAKzBKO0HZKxX3wCE.roa Signing time: Fri 02 Jan 2026 14:20:38 +0000 ROA not before: Fri 02 Jan 2026 14:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54825 IP address blocks: 45.11.244.0/23 maxlen: 23 86.109.0.0/24 maxlen: 24 86.109.1.0/24 maxlen: 24 86.109.2.0/23 maxlen: 23 86.109.2.0/24 maxlen: 24 86.109.3.0/24 maxlen: 24 86.109.4.0/23 maxlen: 23 86.109.4.0/24 maxlen: 24 86.109.5.0/24 maxlen: 24 86.109.6.0/24 maxlen: 24 86.109.7.0/24 maxlen: 24 86.109.8.0/24 maxlen: 24 86.109.9.0/24 maxlen: 24 86.109.10.0/23 maxlen: 23 86.109.12.0/24 maxlen: 24 86.109.13.0/24 maxlen: 24 86.109.14.0/23 maxlen: 23 93.187.216.0/23 maxlen: 23 93.187.218.0/23 maxlen: 23 136.144.48.0/23 maxlen: 23 136.144.50.0/23 maxlen: 23 136.144.52.0/23 maxlen: 23 136.144.54.0/23 maxlen: 23 136.144.56.0/23 maxlen: 23 136.144.58.0/23 maxlen: 23 136.144.60.0/23 maxlen: 23 136.144.62.0/23 maxlen: 23 139.178.64.0/22 maxlen: 22 139.178.68.0/22 maxlen: 22 139.178.72.0/22 maxlen: 22 139.178.72.0/23 maxlen: 23 139.178.74.0/23 maxlen: 23 139.178.76.0/22 maxlen: 22 139.178.76.0/23 maxlen: 23 139.178.78.0/23 maxlen: 23 139.178.80.0/21 maxlen: 21 139.178.88.0/22 maxlen: 22 139.178.92.0/23 maxlen: 23 139.178.94.0/23 maxlen: 23 145.40.64.0/23 maxlen: 23 145.40.66.0/24 maxlen: 24 145.40.67.0/24 maxlen: 24 145.40.68.0/24 maxlen: 24 145.40.69.0/24 maxlen: 24 145.40.70.0/23 maxlen: 23 145.40.72.0/24 maxlen: 24 145.40.73.0/24 maxlen: 24 145.40.74.0/23 maxlen: 23 145.40.75.0/24 maxlen: 24 145.40.76.0/23 maxlen: 23 145.40.78.0/24 maxlen: 24 145.40.79.0/24 maxlen: 24 145.40.79.0/26 maxlen: 26 145.40.80.0/23 maxlen: 23 145.40.82.0/23 maxlen: 23 145.40.84.0/23 maxlen: 23 145.40.86.0/23 maxlen: 23 145.40.88.0/24 maxlen: 24 145.40.89.0/24 maxlen: 24 145.40.90.0/24 maxlen: 24 145.40.91.0/24 maxlen: 24 145.40.92.0/22 maxlen: 22 145.40.96.0/23 maxlen: 23 145.40.98.0/23 maxlen: 23 145.40.100.0/24 maxlen: 24 145.40.101.0/24 maxlen: 24 145.40.102.0/23 maxlen: 23 145.40.102.0/24 maxlen: 24 145.40.103.0/24 maxlen: 24 145.40.104.0/22 maxlen: 22 145.40.108.0/22 maxlen: 22 145.40.112.0/22 maxlen: 22 145.40.116.0/22 maxlen: 22 145.40.120.0/22 maxlen: 22 145.40.124.0/22 maxlen: 22 147.28.128.0/23 maxlen: 23 147.28.131.0/24 maxlen: 24 147.28.132.0/22 maxlen: 22 147.28.136.0/23 maxlen: 23 147.28.138.0/23 maxlen: 23 147.28.140.0/22 maxlen: 22 147.28.140.0/24 maxlen: 24 147.28.141.0/24 maxlen: 24 147.28.142.0/23 maxlen: 23 147.28.144.0/23 maxlen: 23 147.28.146.0/23 maxlen: 23 147.28.148.0/23 maxlen: 23 147.28.150.0/23 maxlen: 23 147.28.152.0/24 maxlen: 24 147.28.153.0/24 maxlen: 24 147.28.154.0/23 maxlen: 23 147.28.156.0/23 maxlen: 23 147.28.158.0/23 maxlen: 23 147.28.160.0/23 maxlen: 23 147.28.162.0/23 maxlen: 23 147.28.164.0/23 maxlen: 23 147.28.166.0/23 maxlen: 23 147.28.168.0/23 maxlen: 23 147.28.170.0/23 maxlen: 23 147.28.172.0/23 maxlen: 23 147.28.174.0/23 maxlen: 23 147.28.176.0/23 maxlen: 23 147.28.178.0/23 maxlen: 23 147.28.180.0/23 maxlen: 23 147.28.182.0/23 maxlen: 23 147.28.184.0/23 maxlen: 23 147.28.186.0/23 maxlen: 23 147.28.188.0/24 maxlen: 24 147.28.189.0/24 maxlen: 24 147.28.190.0/23 maxlen: 23 147.28.192.0/22 maxlen: 22 147.28.192.0/24 maxlen: 24 147.28.193.0/24 maxlen: 24 147.28.194.0/24 maxlen: 24 147.28.195.0/24 maxlen: 24 147.28.196.0/23 maxlen: 23 147.28.198.0/24 maxlen: 24 147.28.199.0/24 maxlen: 24 147.28.200.0/24 maxlen: 24 147.28.201.0/24 maxlen: 24 147.28.202.0/24 maxlen: 24 147.28.203.0/24 maxlen: 24 147.28.204.0/23 maxlen: 23 147.28.206.0/23 maxlen: 23 147.28.208.0/23 maxlen: 23 147.28.210.0/23 maxlen: 23 147.28.212.0/24 maxlen: 24 147.28.214.0/23 maxlen: 23 147.28.216.0/23 maxlen: 23 147.28.218.0/24 maxlen: 24 147.28.219.0/24 maxlen: 24 147.28.220.0/23 maxlen: 23 147.28.222.0/23 maxlen: 23 147.28.224.0/24 maxlen: 24 147.28.225.0/24 maxlen: 24 147.28.226.0/23 maxlen: 23 147.28.228.0/24 maxlen: 24 147.28.229.0/24 maxlen: 24 147.28.230.0/24 maxlen: 24 147.28.231.0/24 maxlen: 24 147.28.232.0/24 maxlen: 24 147.28.233.0/24 maxlen: 24 147.28.234.0/24 maxlen: 24 147.28.235.0/24 maxlen: 24 147.28.240.0/24 maxlen: 24 147.28.241.0/24 maxlen: 24 147.28.242.0/24 maxlen: 24 147.28.244.0/24 maxlen: 24 147.75.32.0/23 maxlen: 23 147.75.34.0/24 maxlen: 24 147.75.35.0/24 maxlen: 24 147.75.36.0/22 maxlen: 22 147.75.38.0/23 maxlen: 23 147.75.40.0/23 maxlen: 23 147.75.42.0/24 maxlen: 24 147.75.43.0/24 maxlen: 24 147.75.44.0/24 maxlen: 24 147.75.45.0/24 maxlen: 24 147.75.46.0/24 maxlen: 24 147.75.47.0/24 maxlen: 24 147.75.48.0/24 maxlen: 24 147.75.49.0/24 maxlen: 24 147.75.50.0/23 maxlen: 23 147.75.50.0/24 maxlen: 24 147.75.51.0/24 maxlen: 24 147.75.52.0/24 maxlen: 24 147.75.53.0/24 maxlen: 24 147.75.54.0/23 maxlen: 23 147.75.54.0/24 maxlen: 24 147.75.55.0/24 maxlen: 24 147.75.56.0/23 maxlen: 23 147.75.56.0/24 maxlen: 24 147.75.57.0/24 maxlen: 24 147.75.58.0/24 maxlen: 24 147.75.59.0/24 maxlen: 24 147.75.60.0/24 maxlen: 24 147.75.61.0/24 maxlen: 24 147.75.62.0/23 maxlen: 23 147.75.62.0/24 maxlen: 24 147.75.63.0/24 maxlen: 24 147.75.64.0/22 maxlen: 22 147.75.68.0/22 maxlen: 22 147.75.72.0/21 maxlen: 21 147.75.72.0/24 maxlen: 24 147.75.73.0/24 maxlen: 24 147.75.74.0/24 maxlen: 24 147.75.75.0/24 maxlen: 24 147.75.76.0/24 maxlen: 24 147.75.77.0/24 maxlen: 24 147.75.78.0/24 maxlen: 24 147.75.79.0/24 maxlen: 24 147.75.80.0/22 maxlen: 22 147.75.84.0/23 maxlen: 23 147.75.86.0/23 maxlen: 23 147.75.88.0/22 maxlen: 22 147.75.92.0/22 maxlen: 22 147.75.96.0/22 maxlen: 22 147.75.96.0/23 maxlen: 23 147.75.96.0/24 maxlen: 24 147.75.97.0/24 maxlen: 24 147.75.98.0/24 maxlen: 24 147.75.99.0/24 maxlen: 24 147.75.100.0/22 maxlen: 22 147.75.104.0/22 maxlen: 22 147.75.108.0/23 maxlen: 23 147.75.110.0/23 maxlen: 23 147.75.192.0/21 maxlen: 21 147.75.192.0/24 maxlen: 24 147.75.193.0/24 maxlen: 24 147.75.194.0/23 maxlen: 23 147.75.196.0/22 maxlen: 22 147.75.196.0/24 maxlen: 24 147.75.197.0/24 maxlen: 24 147.75.198.0/24 maxlen: 24 147.75.199.0/24 maxlen: 24 147.75.200.0/22 maxlen: 22 147.75.204.0/23 maxlen: 23 147.75.206.0/24 maxlen: 24 147.75.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f5:12:0f:f5:a6:35:76:48:48:63:ad:a9:16:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c Validity Not Before: Jan 2 14:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c66b896a30b15ba0802b304a3b41d92b15f7c021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:4a:88:3d:6d:c5:6e:9a:d1:b8:17:2e:a3: bf:e1:8f:7f:c9:12:93:68:e0:eb:f0:10:ce:da:5f: c9:11:66:d2:c6:c8:f4:e1:2d:15:02:ac:bb:34:b6: dd:06:fa:02:01:4c:e0:5b:73:d8:77:1f:6b:34:9b: b3:dd:5d:85:6c:88:94:97:3b:ef:02:ec:30:b6:e2: 6b:2b:4a:5a:bb:99:d0:de:24:74:b4:2f:f1:1d:58: a4:64:e6:39:a2:f1:9c:46:9a:9d:65:5a:33:6f:0a: a1:37:df:f7:da:62:c5:ec:79:6e:58:c7:df:de:5c: 2c:16:83:e6:82:94:a2:a4:42:74:fb:fe:68:e1:e0: 4b:d3:76:d9:0f:69:55:f3:b0:33:74:2c:e6:9f:b3: 54:f3:c9:76:2c:a3:82:9f:2b:b2:e5:b2:ab:13:92: 67:29:0f:51:a1:4d:a1:fa:9d:87:30:8a:f3:3e:cc: f4:18:82:57:40:cf:8c:76:38:f8:1e:33:84:89:9a: 45:8a:f4:1b:87:fe:af:2a:06:35:fc:a8:4d:ec:32: b1:91:c0:d4:1e:59:57:6d:1b:b7:be:66:c6:bd:03: f8:3d:8a:18:62:91:56:96:b8:54:a4:89:9f:9b:a9: a8:51:b2:36:8d:ef:8a:e1:77:52:02:54:93:6c:42: 4e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6B:89:6A:30:B1:5B:A0:80:2B:30:4A:3B:41:D9:2B:15:F7:C0:21 X509v3 Authority Key Identifier: keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/xmuJajCxW6CAKzBKO0HZKxX3wCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.244.0/23 86.109.0.0/20 93.187.216.0/22 136.144.48.0/20 139.178.64.0/19 145.40.64.0/18 147.28.128.0/23 147.28.131.0-147.28.212.255 147.28.214.0-147.28.235.255 147.28.240.0-147.28.242.255 147.28.244.0/24 147.75.32.0-147.75.111.255 147.75.192.0/20 Signature Algorithm: sha256WithRSAEncryption 77:08:2b:f3:16:d5:d1:72:d0:b9:21:50:18:c3:51:93:66:26: 7a:ec:bd:4a:f3:db:ee:b2:b5:e0:c5:2c:e3:c9:31:a7:52:cf: 1e:13:84:d0:55:1f:7a:ee:18:c6:b5:c4:89:ef:f5:8e:d0:cc: 37:90:47:e0:e3:64:f6:5f:0b:d9:18:27:8e:a6:26:98:c0:c0: 76:92:4d:f8:b4:94:2d:93:19:db:d4:91:d9:e7:cd:06:3c:6a: ff:d4:96:cb:f3:a4:dd:ef:ca:ce:33:d8:2c:67:2d:cb:a5:df: 82:88:0a:9b:5c:8a:fc:3d:f6:d8:ad:ef:38:c0:0e:21:e9:16: 26:36:22:e9:a5:39:e3:a6:8f:ab:da:48:d2:29:0e:02:36:33: b5:a1:81:4d:47:92:9d:30:ed:b1:74:36:bd:39:9b:c2:91:b1: 6a:9a:d7:eb:4b:43:c8:a0:55:32:c7:33:82:16:1e:46:1a:4a: c2:eb:5a:55:22:e4:c8:b7:cf:dc:98:92:ea:ae:a5:f1:c5:2a: 8e:08:a8:1e:a9:42:e2:0f:3e:31:f5:54:02:4c:b0:f2:c9:ca: a6:1b:5c:c5:f0:40:17:e1:b5:8f:ea:b5:e9:a7:fb:9a:d2:9e: 43:01:4f:f9:69:a2:c0:be:db:82:e6:c6:3b:bc:f7:ee:a5:02: 68:dc:fb:d2 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZt/FPUSD/WmNXZISGOtqRY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4 ZDRhNGMwHhcNMjYwMTAyMTQyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjZiODk2YTMwYjE1YmEwODAyYjMwNGEzYjQxZDkyYjE1ZjdjMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVFKiD1txW6a0bgXLqO/4Y9/yRKT aODr8BDO2l/JEWbSxsj04S0VAqy7NLbdBvoCAUzgW3PYdx9rNJuz3V2FbIiUlzvv AuwwtuJrK0pau5nQ3iR0tC/xHVikZOY5ovGcRpqdZVozbwqhN9/32mLF7HluWMff 3lwsFoPmgpSipEJ0+/5o4eBL03bZD2lV87AzdCzmn7NU88l2LKOCnyuy5bKrE5Jn KQ9RoU2h+p2HMIrzPsz0GIJXQM+Mdjj4HjOEiZpFivQbh/6vKgY1/KhN7DKxkcDU HllXbRu3vmbGvQP4PYoYYpFWlrhUpImfm6moUbI2je+K4XdSAlSTbEJO3wIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFMZriWowsVuggCswSjtB2SsV98AhMB8GA1UdIwQY MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt YWM0YTQwNjE3NDZkLzEveG11SmFqQ3hXNkNBS3pCS08wSFpLeFgzd0NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAS0L9AME BFZtAAMEAl272AMEBIiQMAMEBYuyQAMEBpEoQAMEAZMcgDAMAwQAkxyDAwQAkxzU MAwDBAGTHNYDBAKTHOgwDAMEBJMc8AMEAJMc8gMEAJMc9DAMAwQFk0sgAwQEk0tg AwQEk0vAMA0GCSqGSIb3DQEBCwUAA4IBAQB3CCvzFtXRctC5IVAYw1GTZiZ67L1K 89vusrXgxSzjyTGnUs8eE4TQVR967hjGtcSJ7/WO0Mw3kEfg42T2XwvZGCeOpiaY wMB2kk34tJQtkxnb1JHZ580GPGr/1JbL86Td78rOM9gsZy3Lpd+CiAqbXIr8PfbY re84wA4h6RYmNiLppTnjpo+r2kjSKQ4CNjO1oYFNR5KdMO2xdDa9OZvCkbFqmtfr S0PIoFUyxzOCFh5GGkrC61pVIuTIt8/cmJLqrqXxxSqOCKgeqULiDz4x9VQCTLDy ycqmG1zF8EAX4bWP6rXpp/ua0p5DAU/5aaLAvtuC5sY7vPfupQJo3PvS -----END CERTIFICATE-----Generated at Sat Jan 3 18:34:00 2026 by rpki-client