This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/XdOhftf0xacAcE-Z-E8yIOFghCk.roa File: XdOhftf0xacAcE-Z-E8yIOFghCk.roa (raw, json) Hash identifier: 0bBmfKG88tfRy+nUDC5/lRRL74E2hq4iLWCQ9Tbiy9E= Subject key identifier: 5D:D3:A1:7E:D7:F4:C5:A7:00:70:4F:99:F8:4F:32:20:E1:60:84:29 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D3C22391BF822EA46D81D99137E46 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/XdOhftf0xacAcE-Z-E8yIOFghCk.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 5.10.194.0/24 maxlen: 24 5.10.196.0/24 maxlen: 24 5.10.198.0/24 maxlen: 24 5.181.112.0/23 maxlen: 24 5.181.115.0/24 maxlen: 24 5.183.224.0/23 maxlen: 24 5.183.227.0/24 maxlen: 24 37.46.148.0/24 maxlen: 24 37.156.66.0/24 maxlen: 24 37.156.247.0/24 maxlen: 24 45.9.93.0/24 maxlen: 24 45.9.94.0/23 maxlen: 24 45.9.185.0/24 maxlen: 24 45.9.186.0/23 maxlen: 24 45.10.184.0/23 maxlen: 24 45.10.187.0/24 maxlen: 24 45.11.8.0/23 maxlen: 24 45.11.11.0/24 maxlen: 24 45.12.180.0/24 maxlen: 24 45.12.181.0/24 maxlen: 24 45.12.182.0/23 maxlen: 24 45.13.181.0/24 maxlen: 24 45.13.182.0/23 maxlen: 24 45.91.150.0/24 maxlen: 24 45.92.76.0/24 maxlen: 24 45.134.128.0/24 maxlen: 24 45.134.130.0/24 maxlen: 24 45.134.136.0/23 maxlen: 24 45.134.139.0/24 maxlen: 24 45.143.52.0/24 maxlen: 24 45.143.55.0/24 maxlen: 24 46.102.154.0/24 maxlen: 24 46.102.172.0/24 maxlen: 24 46.102.176.0/24 maxlen: 24 46.102.181.0/24 maxlen: 24 46.229.254.0/24 maxlen: 24 62.197.130.0/23 maxlen: 24 77.81.3.0/24 maxlen: 24 81.21.236.0/22 maxlen: 24 84.247.24.0/24 maxlen: 24 84.247.27.0/24 maxlen: 24 84.247.52.0/24 maxlen: 24 84.247.53.0/24 maxlen: 24 85.204.117.0/24 maxlen: 24 86.104.134.0/24 maxlen: 24 86.105.148.0/24 maxlen: 24 86.105.149.0/24 maxlen: 24 86.105.150.0/24 maxlen: 24 86.105.168.0/24 maxlen: 24 86.105.221.0/24 maxlen: 24 86.106.92.0/24 maxlen: 24 86.107.107.0/24 maxlen: 24 86.107.196.0/24 maxlen: 24 89.31.217.0/24 maxlen: 24 89.32.188.0/24 maxlen: 24 89.32.190.0/24 maxlen: 24 89.33.0.0/24 maxlen: 24 89.33.1.0/24 maxlen: 24 89.33.2.0/24 maxlen: 24 89.33.3.0/24 maxlen: 24 89.34.77.0/24 maxlen: 24 89.34.179.0/24 maxlen: 24 89.34.216.0/24 maxlen: 24 89.34.217.0/24 maxlen: 24 89.35.114.0/24 maxlen: 24 89.36.172.0/24 maxlen: 24 89.37.105.0/24 maxlen: 24 89.37.137.0/24 maxlen: 24 89.37.138.0/24 maxlen: 24 89.38.39.0/24 maxlen: 24 89.39.162.0/24 maxlen: 24 89.39.165.0/24 maxlen: 24 89.40.180.0/24 maxlen: 24 89.44.114.0/24 maxlen: 24 89.44.126.0/24 maxlen: 24 89.44.127.0/24 maxlen: 24 89.45.8.0/24 maxlen: 24 89.45.14.0/24 maxlen: 24 89.46.115.0/24 maxlen: 24 89.47.90.0/24 maxlen: 24 89.47.95.0/24 maxlen: 24 91.190.108.0/22 maxlen: 24 91.217.239.0/24 maxlen: 24 91.221.81.0/24 maxlen: 24 91.235.113.0/24 maxlen: 24 92.114.0.0/24 maxlen: 24 93.113.38.0/24 maxlen: 24 93.113.39.0/24 maxlen: 24 93.113.220.0/24 maxlen: 24 93.113.221.0/24 maxlen: 24 93.114.67.0/24 maxlen: 24 93.114.85.0/24 maxlen: 24 93.114.132.0/24 maxlen: 24 93.117.136.0/24 maxlen: 24 94.103.248.0/24 maxlen: 24 94.103.251.0/24 maxlen: 24 94.176.4.0/24 maxlen: 24 94.176.41.0/24 maxlen: 24 94.177.60.0/24 maxlen: 24 94.177.61.0/24 maxlen: 24 94.177.62.0/24 maxlen: 24 94.177.63.0/24 maxlen: 24 95.214.156.0/22 maxlen: 24 178.212.141.0/24 maxlen: 24 185.67.136.0/24 maxlen: 24 185.67.138.0/24 maxlen: 24 185.76.149.0/24 maxlen: 24 185.160.80.0/24 maxlen: 24 185.160.81.0/24 maxlen: 24 185.160.82.0/24 maxlen: 24 185.160.83.0/24 maxlen: 24 185.161.78.0/24 maxlen: 24 185.184.132.0/23 maxlen: 24 185.192.18.0/23 maxlen: 24 185.205.188.0/24 maxlen: 24 185.211.116.0/24 maxlen: 24 185.211.117.0/24 maxlen: 24 185.211.118.0/24 maxlen: 24 185.211.119.0/24 maxlen: 24 185.214.8.0/24 maxlen: 24 185.214.9.0/24 maxlen: 24 185.214.11.0/24 maxlen: 24 185.216.0.0/24 maxlen: 24 185.216.2.0/24 maxlen: 24 185.228.224.0/24 maxlen: 24 185.239.240.0/24 maxlen: 24 185.244.136.0/24 maxlen: 24 185.245.4.0/24 maxlen: 24 185.245.6.0/24 maxlen: 24 188.212.4.0/24 maxlen: 24 188.213.241.0/24 maxlen: 24 188.215.66.0/24 maxlen: 24 188.215.67.0/24 maxlen: 24 188.215.249.0/24 maxlen: 24 188.240.15.0/24 maxlen: 24 188.240.72.0/24 maxlen: 24 193.19.107.0/24 maxlen: 24 193.84.133.0/24 maxlen: 24 193.218.33.0/24 maxlen: 24 193.223.72.0/22 maxlen: 24 203.159.84.0/24 maxlen: 24 203.159.86.0/24 maxlen: 24 203.159.88.0/24 maxlen: 24 217.74.18.0/24 maxlen: 24 217.74.21.0/24 maxlen: 24 217.74.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3c:22:39:1b:f8:22:ea:46:d8:1d:99:13:7e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dd3a17ed7f4c5a700704f99f84f3220e1608429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:af:6a:bd:61:c7:e5:f4:e1:23:0a:03:62:19: 6c:57:dc:2e:05:bb:72:8b:31:38:1e:72:e9:05:de: b3:a7:53:6c:70:0c:39:1a:18:a3:00:98:93:09:f8: d3:36:54:2c:32:62:a0:6d:1f:21:6b:65:aa:20:32: 86:41:ce:68:9b:d6:87:c1:4a:0b:43:02:9b:c3:27: 4e:d2:8f:8d:73:48:48:25:a8:b8:57:2e:d2:2e:f3: 33:44:bf:07:91:86:7b:9c:a6:19:fc:01:cc:fc:15: b6:1b:68:0a:bf:b3:29:8e:ef:6e:4a:43:6a:cd:ed: 8c:47:e6:d2:56:d6:72:a9:f0:b5:79:62:e4:82:5c: e2:bb:81:db:cc:19:07:3c:5d:a1:7f:4f:64:a2:4f: 90:2b:af:96:c6:cc:0a:23:b1:de:93:4e:9b:e5:ad: f9:06:b7:86:65:ed:f7:df:f6:11:86:7b:0b:c0:11: 89:72:9c:4f:89:4f:81:e7:d0:a8:1e:93:40:2d:e0: 69:e3:ee:32:43:d5:60:fe:be:b6:c4:45:3c:bc:20: 7b:e4:e8:99:d5:71:8f:ed:35:25:43:8f:e7:6c:bd: 98:51:71:e4:c0:d6:07:6d:d2:98:bf:ee:98:6c:75: 1f:01:0c:a3:b3:5f:6f:c9:28:40:8f:e0:91:a8:85: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D3:A1:7E:D7:F4:C5:A7:00:70:4F:99:F8:4F:32:20:E1:60:84:29 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/XdOhftf0xacAcE-Z-E8yIOFghCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.194.0/24 5.10.196.0/24 5.10.198.0/24 5.181.112.0/23 5.181.115.0/24 5.183.224.0/23 5.183.227.0/24 37.46.148.0/24 37.156.66.0/24 37.156.247.0/24 45.9.93.0-45.9.95.255 45.9.185.0-45.9.187.255 45.10.184.0/23 45.10.187.0/24 45.11.8.0/23 45.11.11.0/24 45.12.180.0/22 45.13.181.0-45.13.183.255 45.91.150.0/24 45.92.76.0/24 45.134.128.0/24 45.134.130.0/24 45.134.136.0/23 45.134.139.0/24 45.143.52.0/24 45.143.55.0/24 46.102.154.0/24 46.102.172.0/24 46.102.176.0/24 46.102.181.0/24 46.229.254.0/24 62.197.130.0/23 77.81.3.0/24 81.21.236.0/22 84.247.24.0/24 84.247.27.0/24 84.247.52.0/23 85.204.117.0/24 86.104.134.0/24 86.105.148.0-86.105.150.255 86.105.168.0/24 86.105.221.0/24 86.106.92.0/24 86.107.107.0/24 86.107.196.0/24 89.31.217.0/24 89.32.188.0/24 89.32.190.0/24 89.33.0.0/22 89.34.77.0/24 89.34.179.0/24 89.34.216.0/23 89.35.114.0/24 89.36.172.0/24 89.37.105.0/24 89.37.137.0-89.37.138.255 89.38.39.0/24 89.39.162.0/24 89.39.165.0/24 89.40.180.0/24 89.44.114.0/24 89.44.126.0/23 89.45.8.0/24 89.45.14.0/24 89.46.115.0/24 89.47.90.0/24 89.47.95.0/24 91.190.108.0/22 91.217.239.0/24 91.221.81.0/24 91.235.113.0/24 92.114.0.0/24 93.113.38.0/23 93.113.220.0/23 93.114.67.0/24 93.114.85.0/24 93.114.132.0/24 93.117.136.0/24 94.103.248.0/24 94.103.251.0/24 94.176.4.0/24 94.176.41.0/24 94.177.60.0/22 95.214.156.0/22 178.212.141.0/24 185.67.136.0/24 185.67.138.0/24 185.76.149.0/24 185.160.80.0/22 185.161.78.0/24 185.184.132.0/23 185.192.18.0/23 185.205.188.0/24 185.211.116.0/22 185.214.8.0/23 185.214.11.0/24 185.216.0.0/24 185.216.2.0/24 185.228.224.0/24 185.239.240.0/24 185.244.136.0/24 185.245.4.0/24 185.245.6.0/24 188.212.4.0/24 188.213.241.0/24 188.215.66.0/23 188.215.249.0/24 188.240.15.0/24 188.240.72.0/24 193.19.107.0/24 193.84.133.0/24 193.218.33.0/24 193.223.72.0/22 203.159.84.0/24 203.159.86.0/24 203.159.88.0/24 217.74.18.0/24 217.74.21.0-217.74.23.255 Signature Algorithm: sha256WithRSAEncryption 39:6a:4a:34:8b:77:7c:1c:70:ab:af:bc:92:5a:0a:4b:76:71: b5:1f:d6:72:58:65:ad:0f:4d:c1:92:12:79:bc:f9:ca:3a:d8: ce:98:c6:3e:76:58:84:f7:d7:fb:d8:b9:9a:45:ad:a5:46:19: b5:f2:33:6a:b4:3d:1d:b7:f9:8d:7d:f6:f3:1d:bb:6d:90:df: 9f:bf:61:ce:64:7f:b6:70:10:c1:98:9a:05:b5:17:4c:cb:bb: 39:98:18:a4:e3:69:58:c8:d3:06:3b:92:fe:5a:fd:69:51:9f: 9d:7c:9d:9d:60:1f:05:5b:41:50:93:34:8d:5d:8d:38:f1:b1: 26:c6:5b:25:60:e3:0f:41:1e:75:b6:1f:07:b7:34:ab:94:dd: e8:88:10:08:e7:1e:2d:9e:f3:1e:20:19:51:22:a5:c0:c7:c9: 7c:e9:f8:c2:45:08:6a:39:f8:35:c3:30:75:c2:2c:cc:cf:88: 8c:81:45:95:c9:df:58:77:47:2c:8a:19:04:da:b3:0f:ab:e9: df:0e:51:6c:a9:9b:62:0a:9a:cd:a8:74:43:d9:3a:8d:2b:6c: 2d:f4:66:16:35:3e:5c:12:c5:78:44:ed:42:90:5e:be:0e:b3: a7:79:e0:bd:b8:35:e0:92:b4:16:a0:37:3f:99:d6:60:7d:4a: b7:d1:4f:89 -----BEGIN CERTIFICATE----- MIIH9TCCBt2gAwIBAgISAZt9XTwiORv4IupG2B2ZE35GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGQzYTE3ZWQ3ZjRjNWE3MDA3MDRmOTlmODRmMzIyMGUxNjA4NDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK9qvWHH5fThIwoDYhlsV9wuBbty izE4HnLpBd6zp1NscAw5GhijAJiTCfjTNlQsMmKgbR8ha2WqIDKGQc5om9aHwUoL QwKbwydO0o+Nc0hIJai4Vy7SLvMzRL8HkYZ7nKYZ/AHM/BW2G2gKv7Mpju9uSkNq ze2MR+bSVtZyqfC1eWLkglziu4HbzBkHPF2hf09kok+QK6+WxswKI7Hek06b5a35 BreGZe333/YRhnsLwBGJcpxPiU+B59CoHpNALeBp4+4yQ9Vg/r62xEU8vCB75OiZ 1XGP7TUlQ4/nbL2YUXHkwNYHbdKYv+6YbHUfAQyjs19vyShAj+CRqIUWNQIDAQAB o4IFATCCBP0wHQYDVR0OBBYEFF3ToX7X9MWnAHBPmfhPMiDhYIQpMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvWGRPaGZ0ZjB4YWNBY0UtWi1FOHlJT0ZnaENrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIDFQYIKwYBBQUHAQcBAf8EggMEMIIDADCCAvwEAgABMIIC 9AMEAAUKwgMEAAUKxAMEAAUKxgMEAQW1cAMEAAW1cwMEAQW34AMEAAW34wMEACUu lAMEACWcQgMEACWc9zAMAwQALQldAwQFLQlAMAwDBAAtCbkDBAItCbgDBAEtCrgD BAAtCrsDBAEtCwgDBAAtCwsDBAItDLQwDAMEAC0NtQMEAy0NsAMEAC1blgMEAC1c TAMEAC2GgAMEAC2GggMEAS2GiAMEAC2GiwMEAC2PNAMEAC2PNwMEAC5mmgMEAC5m rAMEAC5msAMEAC5mtQMEAC7l/gMEAT7FggMEAE1RAwMEAlEV7AMEAFT3GAMEAFT3 GwMEAVT3NAMEAFXMdQMEAFZohjAMAwQCVmmUAwQAVmmWAwQAVmmoAwQAVmndAwQA VmpcAwQAVmtrAwQAVmvEAwQAWR/ZAwQAWSC8AwQAWSC+AwQCWSEAAwQAWSJNAwQA WSKzAwQBWSLYAwQAWSNyAwQAWSSsAwQAWSVpMAwDBABZJYkDBABZJYoDBABZJicD BABZJ6IDBABZJ6UDBABZKLQDBABZLHIDBAFZLH4DBABZLQgDBABZLQ4DBABZLnMD BABZL1oDBABZL18DBAJbvmwDBABb2e8DBABb3VEDBABb63EDBABccgADBAFdcSYD BAFdcdwDBABdckMDBABdclUDBABdcoQDBABddYgDBABeZ/gDBABeZ/sDBABesAQD BABesCkDBAJesTwDBAJf1pwDBACy1I0DBAC5Q4gDBAC5Q4oDBAC5TJUDBAK5oFAD BAC5oU4DBAG5uIQDBAG5wBIDBAC5zbwDBAK503QDBAG51ggDBAC51gsDBAC52AAD BAC52AIDBAC55OADBAC57/ADBAC59IgDBAC59QQDBAC59QYDBAC81AQDBAC81fED BAG810IDBAC81/kDBAC88A8DBAC88EgDBADBE2sDBADBVIUDBADB2iEDBALB30gD BADLn1QDBADLn1YDBADLn1gDBADZShIwDAMEANlKFQMEA9lKEDANBgkqhkiG9w0B AQsFAAOCAQEAOWpKNIt3fBxwq6+8kloKS3ZxtR/WclhlrQ9NwZISebz5yjrYzpjG PnZYhPfX+9i5mkWtpUYZtfIzarQ9Hbf5jX328x27bZDfn79hzmR/tnAQwZiaBbUX TMu7OZgYpONpWMjTBjuS/lr9aVGfnXydnWAfBVtBUJM0jV2NOPGxJsZbJWDjD0Ee dbYfB7c0q5Td6IgQCOceLZ7zHiAZUSKlwMfJfOn4wkUIajn4NcMwdcIszM+IjIFF lcnfWHdHLIoZBNqzD6vp3w5RbKmbYgqazah0Q9k6jStsLfRmFjU+XBLFeETtQpBe vg6zp3ngvbg14JK0FqA3P5nWYH1Kt9FPiQ== -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:39 2026 by rpki-client