This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/XiklanRbiidoE85zKpbvsUmN5qA.roa
File: XiklanRbiidoE85zKpbvsUmN5qA.roa (raw, json)
Hash identifier: 8135ww+Xdljchx0NgMI539w6J7mtMHiGCI+yUaoZKJc=
Subject key identifier: 5E:29:25:6A:74:5B:8A:27:68:13:CE:73:2A:96:EF:B1:49:8D:E6:A0
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 019B7758B37F9F706B17E52AB78844CCB049
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/XiklanRbiidoE85zKpbvsUmN5qA.roa
Signing time: Thu 01 Jan 2026 02:17:40 +0000
ROA not before: Thu 01 Jan 2026 02:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12392
IP address blocks: 62.197.64.0/18 maxlen: 18
62.197.64.0/20 maxlen: 20
62.197.80.0/20 maxlen: 20
62.197.96.0/20 maxlen: 20
62.197.112.0/20 maxlen: 20
78.129.0.0/17 maxlen: 17
78.129.0.0/20 maxlen: 20
78.129.16.0/20 maxlen: 20
78.129.32.0/20 maxlen: 20
78.129.48.0/20 maxlen: 20
78.129.64.0/20 maxlen: 20
78.129.80.0/20 maxlen: 20
78.129.96.0/20 maxlen: 20
78.129.112.0/20 maxlen: 20
82.212.128.0/18 maxlen: 18
82.212.128.0/20 maxlen: 20
82.212.144.0/20 maxlen: 20
82.212.160.0/20 maxlen: 20
82.212.176.0/20 maxlen: 20
85.26.0.0/17 maxlen: 17
85.26.0.0/20 maxlen: 20
85.26.16.0/20 maxlen: 20
85.26.32.0/20 maxlen: 20
85.26.48.0/20 maxlen: 20
85.26.64.0/20 maxlen: 20
85.26.80.0/20 maxlen: 20
85.26.96.0/20 maxlen: 20
85.26.112.0/20 maxlen: 20
85.27.0.0/17 maxlen: 17
85.27.32.0/20 maxlen: 20
85.27.48.0/20 maxlen: 20
85.201.0.0/16 maxlen: 16
85.201.0.0/20 maxlen: 20
85.201.16.0/20 maxlen: 20
85.201.32.0/20 maxlen: 20
85.201.48.0/20 maxlen: 20
85.201.64.0/20 maxlen: 20
85.201.80.0/20 maxlen: 20
85.201.96.0/20 maxlen: 20
85.201.112.0/20 maxlen: 20
85.201.128.0/20 maxlen: 20
85.201.144.0/20 maxlen: 20
85.201.160.0/20 maxlen: 20
85.201.176.0/20 maxlen: 20
85.201.192.0/20 maxlen: 20
85.201.208.0/20 maxlen: 20
85.201.224.0/20 maxlen: 20
85.201.240.0/20 maxlen: 20
95.182.128.0/17 maxlen: 17
95.182.128.0/20 maxlen: 20
95.182.144.0/20 maxlen: 20
95.182.192.0/20 maxlen: 20
95.182.208.0/20 maxlen: 20
95.182.224.0/20 maxlen: 20
95.182.240.0/20 maxlen: 20
109.88.0.0/15 maxlen: 15
109.88.0.0/20 maxlen: 20
109.88.16.0/20 maxlen: 20
109.88.32.0/20 maxlen: 20
109.88.48.0/20 maxlen: 20
109.88.64.0/20 maxlen: 20
109.88.80.0/20 maxlen: 20
109.88.96.0/19 maxlen: 19
109.88.128.0/19 maxlen: 19
109.88.160.0/20 maxlen: 20
109.88.176.0/20 maxlen: 20
109.88.192.0/20 maxlen: 20
109.88.208.0/20 maxlen: 20
109.88.224.0/20 maxlen: 20
109.88.240.0/20 maxlen: 20
109.89.0.0/20 maxlen: 20
109.89.16.0/20 maxlen: 20
109.89.32.0/20 maxlen: 20
109.89.48.0/20 maxlen: 20
109.89.64.0/20 maxlen: 20
109.89.80.0/20 maxlen: 20
109.89.96.0/20 maxlen: 20
109.89.112.0/20 maxlen: 20
109.89.128.0/20 maxlen: 20
109.89.144.0/20 maxlen: 20
109.89.160.0/20 maxlen: 20
109.89.176.0/20 maxlen: 20
109.89.192.0/20 maxlen: 20
109.89.208.0/20 maxlen: 20
109.89.224.0/20 maxlen: 20
109.89.240.0/20 maxlen: 20
149.154.192.0/18 maxlen: 18
185.3.160.0/22 maxlen: 22
212.68.192.0/18 maxlen: 18
212.68.192.0/20 maxlen: 20
212.68.208.0/20 maxlen: 20
212.68.224.0/20 maxlen: 20
212.68.240.0/20 maxlen: 20
213.189.160.0/19 maxlen: 19
213.189.160.0/20 maxlen: 20
213.189.176.0/20 maxlen: 20
213.213.192.0/18 maxlen: 18
213.213.192.0/20 maxlen: 20
213.213.208.0/20 maxlen: 20
213.213.224.0/20 maxlen: 20
213.213.240.0/20 maxlen: 20
217.15.224.0/20 maxlen: 20
2a02:2788::/32 maxlen: 32
2a02:2788::/40 maxlen: 40
2a02:2788:100::/40 maxlen: 40
2a02:2788:200::/40 maxlen: 40
2a02:2788:300::/40 maxlen: 40
2a02:2788:400::/40 maxlen: 40
2a02:2788:500::/40 maxlen: 40
2a02:2788:600::/40 maxlen: 40
2a02:2788:700::/40 maxlen: 40
2a02:2788:800::/40 maxlen: 40
2a02:2788:900::/40 maxlen: 40
2a02:2788:a00::/40 maxlen: 40
2a02:2788:b00::/40 maxlen: 40
2a02:2788:c00::/40 maxlen: 40
2a02:2788:d00::/40 maxlen: 40
2a02:2788:e00::/40 maxlen: 40
2a02:2788:f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:b3:7f:9f:70:6b:17:e5:2a:b7:88:44:cc:b0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Jan 1 02:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e29256a745b8a276813ce732a96efb1498de6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:38:3c:79:68:3d:48:5d:4c:ed:25:bd:b8:
88:2d:30:9f:20:7a:40:c0:4a:a4:b1:60:5e:5a:7f:
44:12:12:f0:f7:fa:40:8f:ac:8e:96:a1:2d:5d:8c:
cf:aa:a8:d2:16:6a:f0:ec:35:f0:27:4c:de:77:4e:
50:fd:55:b3:e7:4a:e8:03:e6:99:e1:32:76:80:cb:
64:1d:0a:be:39:e8:3b:ab:b7:5e:e8:79:8c:a8:0f:
3f:ce:8a:ea:84:10:90:02:57:19:40:d7:0f:9d:57:
03:24:f3:68:c7:a4:b5:df:e1:cc:55:0d:e5:e6:d4:
38:47:61:05:2f:32:7c:dc:03:48:05:9a:39:5b:fc:
9b:96:d9:29:23:0a:83:b7:af:f1:d6:27:ba:ed:7b:
22:33:e0:9c:d1:c6:4e:c5:1f:b1:e9:f3:3d:1b:8f:
62:58:38:59:08:8c:80:cf:6d:d9:52:42:e7:d9:81:
6b:f5:7e:3c:02:9e:d4:85:64:dc:de:b4:f6:53:0d:
81:84:66:33:ba:12:d4:fb:9a:16:5d:62:5e:50:b0:
98:33:04:dc:16:0c:72:8a:0f:20:8f:7e:9c:a1:41:
a3:c0:57:d1:c6:40:40:10:9a:25:87:b4:e8:47:ec:
ca:b2:a9:8f:79:80:f0:66:54:8b:52:59:98:8f:b2:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:29:25:6A:74:5B:8A:27:68:13:CE:73:2A:96:EF:B1:49:8D:E6:A0
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/XiklanRbiidoE85zKpbvsUmN5qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.64.0/18
78.129.0.0/17
82.212.128.0/18
85.26.0.0/17
85.27.0.0/17
85.201.0.0/16
95.182.128.0/17
109.88.0.0/15
149.154.192.0/18
185.3.160.0/22
212.68.192.0/18
213.189.160.0/19
213.213.192.0/18
217.15.224.0/20
IPv6:
2a02:2788::/32
Signature Algorithm: sha256WithRSAEncryption
6b:d2:74:a1:15:c2:15:d6:5c:9e:8e:86:c4:dc:24:25:f6:e8:
6f:8c:e9:2d:14:e2:06:b7:9d:19:36:34:64:e1:0d:eb:15:3b:
51:8b:32:96:08:97:0e:da:8d:74:3a:d6:ce:3f:a2:f3:80:3f:
e3:fd:db:dd:6f:d2:2f:94:47:0f:14:ca:81:32:a3:a0:7e:8c:
52:0f:5d:c6:2c:49:59:d4:09:6e:6f:48:6c:89:49:7c:c1:1c:
aa:13:45:91:db:c7:82:29:28:2d:e1:39:47:ca:8c:6b:b3:20:
9b:a3:8e:b1:20:01:68:ee:a4:ed:18:7f:8a:97:08:d6:1b:1d:
25:f4:90:d6:9e:eb:68:fd:1a:df:6d:ff:1f:7e:37:84:37:61:
2f:c2:54:28:04:5c:57:18:dd:6f:b0:3e:34:cd:78:2b:dd:1f:
e4:ab:99:5c:a5:c9:ce:89:2a:ff:4b:f5:e4:c0:f4:d5:8b:36:
f0:ed:6e:03:be:f2:d5:c4:be:44:31:b0:d7:d2:3b:89:5d:8a:
2a:86:62:04:c6:d7:62:8f:60:5e:fe:02:30:cb:bc:c8:2c:21:
da:6c:a3:07:45:d0:54:42:8b:c2:83:06:de:ba:12:3f:f5:0e:
bb:a0:a2:0a:48:6b:01:8f:ed:10:15:02:c0:ae:af:f8:86:06:
2a:70:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:27 2026 by rpki-client