This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mdXWyzcNvlOnfKeBzDbeFCW43Dw.roa File: mdXWyzcNvlOnfKeBzDbeFCW43Dw.roa (raw, json) Hash identifier: z3fPJDVwksZzrUCOPaziGB+Q7c0jQxDpc6CPOaLgTOA= Subject key identifier: 99:D5:D6:CB:37:0D:BE:53:A7:7C:A7:81:CC:36:DE:14:25:B8:DC:3C Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D290EA21036AD3A7BA253AAE0D358 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mdXWyzcNvlOnfKeBzDbeFCW43Dw.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7393 IP address blocks: 5.180.178.0/24 maxlen: 24 37.72.136.0/24 maxlen: 24 37.140.222.0/24 maxlen: 24 45.86.37.0/24 maxlen: 24 46.253.135.0/24 maxlen: 24 62.3.5.0/24 maxlen: 24 62.3.57.0/24 maxlen: 24 62.106.74.0/24 maxlen: 24 62.106.91.0/24 maxlen: 24 62.122.191.0/24 maxlen: 24 62.197.128.0/24 maxlen: 24 62.204.60.0/24 maxlen: 24 62.233.32.0/24 maxlen: 24 62.233.38.0/24 maxlen: 24 78.142.243.0/24 maxlen: 24 79.110.228.0/24 maxlen: 24 79.110.230.0/24 maxlen: 24 89.38.136.0/24 maxlen: 24 91.209.12.0/24 maxlen: 24 91.242.233.0/24 maxlen: 24 91.242.252.0/24 maxlen: 24 91.246.32.0/24 maxlen: 24 91.246.37.0/24 maxlen: 24 91.246.63.0/24 maxlen: 24 91.247.172.0/24 maxlen: 24 94.154.126.0/24 maxlen: 24 109.205.186.0/24 maxlen: 24 146.19.30.0/24 maxlen: 24 146.19.36.0/24 maxlen: 24 146.19.40.0/24 maxlen: 24 146.19.110.0/24 maxlen: 24 146.19.132.0/24 maxlen: 24 146.19.151.0/24 maxlen: 24 146.19.182.0/24 maxlen: 24 146.19.184.0/24 maxlen: 24 146.19.221.0/24 maxlen: 24 146.19.225.0/24 maxlen: 24 146.19.232.0/24 maxlen: 24 176.97.195.0/24 maxlen: 24 176.97.198.0/24 maxlen: 24 176.97.200.0/24 maxlen: 24 176.97.211.0/24 maxlen: 24 176.118.35.0/24 maxlen: 24 176.126.119.0/24 maxlen: 24 185.151.145.0/24 maxlen: 24 185.161.123.0/24 maxlen: 24 185.184.216.0/24 maxlen: 24 185.234.15.0/24 maxlen: 24 185.235.225.0/24 maxlen: 24 185.235.228.0/24 maxlen: 24 185.252.213.0/24 maxlen: 24 188.241.159.0/24 maxlen: 24 188.241.248.0/24 maxlen: 24 188.244.126.0/24 maxlen: 24 193.3.180.0/24 maxlen: 24 193.3.181.0/24 maxlen: 24 193.3.187.0/24 maxlen: 24 193.9.25.0/24 maxlen: 24 193.38.154.0/24 maxlen: 24 193.163.192.0/24 maxlen: 24 193.163.193.0/24 maxlen: 24 193.163.195.0/24 maxlen: 24 193.201.12.0/24 maxlen: 24 193.201.14.0/24 maxlen: 24 193.221.210.0/24 maxlen: 24 194.26.200.0/24 maxlen: 24 194.150.76.0/24 maxlen: 24 212.18.102.0/24 maxlen: 24 212.18.106.0/24 maxlen: 24 212.24.123.0/24 maxlen: 24 212.52.9.0/24 maxlen: 24 212.52.10.0/24 maxlen: 24 212.52.11.0/24 maxlen: 24 213.109.149.0/24 maxlen: 24 213.109.156.0/24 maxlen: 24 213.109.159.0/24 maxlen: 24 213.173.37.0/24 maxlen: 24 217.119.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:29:0e:a2:10:36:ad:3a:7b:a2:53:aa:e0:d3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99d5d6cb370dbe53a77ca781cc36de1425b8dc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ce:e3:38:3e:18:97:5d:89:81:0f:5e:a6:9d: 3b:16:7a:f9:bd:25:7d:ee:1c:5c:18:7c:c9:c7:98: 2e:e5:f5:a9:52:d6:82:66:06:a0:c0:d4:97:ec:a2: 8e:84:4e:b7:d4:56:0f:03:c9:fe:aa:df:70:59:08: 05:4c:4a:f3:d4:5d:08:cb:fe:80:41:62:b0:c9:cd: 71:70:4a:45:bb:7e:a6:30:66:bc:95:47:f3:c1:1c: 7f:90:58:06:88:ae:e9:48:c8:e8:5b:d5:cd:58:12: 60:74:99:54:2d:ea:2d:3c:f8:b9:63:39:70:ad:a1: 7c:48:8e:3c:87:5c:c0:1e:9d:7b:a3:49:50:c1:ab: f1:8c:be:8d:c9:f8:50:b3:a9:a9:94:a8:53:ef:eb: 35:8d:ea:13:0e:d1:11:ec:66:ce:ae:5d:69:a0:b2: 6b:70:5e:64:a6:1d:10:3a:41:27:a4:22:a5:d7:e4: cf:61:db:83:ce:87:16:dc:40:d7:d7:1c:9e:9a:b1: 2b:73:a6:4d:16:82:39:da:5e:4f:ce:7b:ab:91:60: 22:4e:92:5f:ef:0b:8c:4c:0e:13:01:cb:e3:92:0d: b6:86:ad:05:29:c4:61:cc:00:c0:7c:af:34:53:11: 39:d9:29:aa:1d:e9:60:64:6d:a2:72:8f:25:81:96: 3f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D5:D6:CB:37:0D:BE:53:A7:7C:A7:81:CC:36:DE:14:25:B8:DC:3C X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mdXWyzcNvlOnfKeBzDbeFCW43Dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.178.0/24 37.72.136.0/24 37.140.222.0/24 45.86.37.0/24 46.253.135.0/24 62.3.5.0/24 62.3.57.0/24 62.106.74.0/24 62.106.91.0/24 62.122.191.0/24 62.197.128.0/24 62.204.60.0/24 62.233.32.0/24 62.233.38.0/24 78.142.243.0/24 79.110.228.0/24 79.110.230.0/24 89.38.136.0/24 91.209.12.0/24 91.242.233.0/24 91.242.252.0/24 91.246.32.0/24 91.246.37.0/24 91.246.63.0/24 91.247.172.0/24 94.154.126.0/24 109.205.186.0/24 146.19.30.0/24 146.19.36.0/24 146.19.40.0/24 146.19.110.0/24 146.19.132.0/24 146.19.151.0/24 146.19.182.0/24 146.19.184.0/24 146.19.221.0/24 146.19.225.0/24 146.19.232.0/24 176.97.195.0/24 176.97.198.0/24 176.97.200.0/24 176.97.211.0/24 176.118.35.0/24 176.126.119.0/24 185.151.145.0/24 185.161.123.0/24 185.184.216.0/24 185.234.15.0/24 185.235.225.0/24 185.235.228.0/24 185.252.213.0/24 188.241.159.0/24 188.241.248.0/24 188.244.126.0/24 193.3.180.0/23 193.3.187.0/24 193.9.25.0/24 193.38.154.0/24 193.163.192.0/23 193.163.195.0/24 193.201.12.0/24 193.201.14.0/24 193.221.210.0/24 194.26.200.0/24 194.150.76.0/24 212.18.102.0/24 212.18.106.0/24 212.24.123.0/24 212.52.9.0-212.52.11.255 213.109.149.0/24 213.109.156.0/24 213.109.159.0/24 213.173.37.0/24 217.119.135.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:31:3d:4a:f5:22:d3:50:c1:d5:e3:24:7f:5a:44:ac:f7:52: 05:b9:fe:0e:55:dd:b0:5f:d5:72:22:0d:58:c3:ec:69:2c:e4: 63:c2:85:91:20:65:01:2d:da:35:ab:68:95:6e:c5:20:6b:89: fd:37:58:39:c4:a7:61:a0:29:01:dd:28:a0:b2:f0:00:23:68: 20:9f:e1:59:c9:e6:71:70:77:fc:42:e2:3a:ef:c8:b4:89:cb: fd:49:3f:44:27:14:4b:85:f1:fc:8f:01:4c:20:28:2b:1f:c7: 6d:5f:57:92:eb:05:bc:95:40:3d:af:9f:e5:58:8a:b4:6a:04: 70:fe:ae:15:fc:8c:25:d0:88:e7:5a:33:70:f1:47:a2:30:a1: 25:0b:a5:57:f5:10:1d:8c:7d:87:3d:38:14:95:5a:6a:b9:24: 48:9d:c6:a0:6b:78:03:c7:df:3f:29:12:dc:b0:49:d3:48:52: 3f:db:43:d5:d1:ae:3b:d5:ba:c3:bb:4b:08:f5:da:27:73:75: 93:27:96:77:d4:3c:5a:b5:cc:07:63:67:58:97:9f:5c:0a:f2: 0c:06:bd:28:5b:59:20:bd:56:34:69:b9:bd:c8:6b:53:d5:ee: e2:7a:8d:5f:88:71:b6:85:32:b7:6f:db:77:b2:77:45:db:d4: e8:a4:ee:63 -----BEGIN CERTIFICATE----- MIIGxTCCBa2gAwIBAgISAZt9XSkOohA2rTp7olOq4NNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWQ1ZDZjYjM3MGRiZTUzYTc3Y2E3ODFjYzM2ZGUxNDI1YjhkYzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp87jOD4Yl12JgQ9epp07Fnr5vSV9 7hxcGHzJx5gu5fWpUtaCZgagwNSX7KKOhE631FYPA8n+qt9wWQgFTErz1F0Iy/6A QWKwyc1xcEpFu36mMGa8lUfzwRx/kFgGiK7pSMjoW9XNWBJgdJlULeotPPi5Yzlw raF8SI48h1zAHp17o0lQwavxjL6NyfhQs6mplKhT7+s1jeoTDtER7GbOrl1poLJr cF5kph0QOkEnpCKl1+TPYduDzocW3EDX1xyemrErc6ZNFoI52l5PznurkWAiTpJf 7wuMTA4TAcvjkg22hq0FKcRhzADAfK80UxE52SmqHelgZG2ico8lgZY/xQIDAQAB o4ID0TCCA80wHQYDVR0OBBYEFJnV1ss3Db5Tp3yngcw23hQluNw8MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvbWRYV3l6Y052bE9uZktlQnpEYmVGQ1c0M0R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB5QYIKwYBBQUHAQcBAf8EggHUMIIB0DCCAcwEAgABMIIB xAMEAAW0sgMEACVIiAMEACWM3gMEAC1WJQMEAC79hwMEAD4DBQMEAD4DOQMEAD5q SgMEAD5qWwMEAD56vwMEAD7FgAMEAD7MPAMEAD7pIAMEAD7pJgMEAE6O8wMEAE9u 5AMEAE9u5gMEAFkmiAMEAFvRDAMEAFvy6QMEAFvy/AMEAFv2IAMEAFv2JQMEAFv2 PwMEAFv3rAMEAF6afgMEAG3NugMEAJITHgMEAJITJAMEAJITKAMEAJITbgMEAJIT hAMEAJITlwMEAJITtgMEAJITuAMEAJIT3QMEAJIT4QMEAJIT6AMEALBhwwMEALBh xgMEALBhyAMEALBh0wMEALB2IwMEALB+dwMEALmXkQMEALmhewMEALm42AMEALnq DwMEALnr4QMEALnr5AMEALn81QMEALzxnwMEALzx+AMEALz0fgMEAcEDtAMEAMED uwMEAMEJGQMEAMEmmgMEAcGjwAMEAMGjwwMEAMHJDAMEAMHJDgMEAMHd0gMEAMIa yAMEAMKWTAMEANQSZgMEANQSagMEANQYezAMAwQA1DQJAwQC1DQIAwQA1W2VAwQA 1W2cAwQA1W2fAwQA1a0lAwQA2XeHMA0GCSqGSIb3DQEBCwUAA4IBAQBKMT1K9SLT UMHV4yR/WkSs91IFuf4OVd2wX9VyIg1Yw+xpLORjwoWRIGUBLdo1q2iVbsUga4n9 N1g5xKdhoCkB3SigsvAAI2ggn+FZyeZxcHf8QuI678i0icv9ST9EJxRLhfH8jwFM ICgrH8dtX1eS6wW8lUA9r5/lWIq0agRw/q4V/Iwl0IjnWjNw8UeiMKElC6VX9RAd jH2HPTgUlVpquSRIncaga3gDx98/KRLcsEnTSFI/20PV0a471brDu0sI9donc3WT J5Z31DxatcwHY2dYl59cCvIMBr0oW1kgvVY0abm9yGtT1e7ieo1fiHG2hTK3b9t3 sndF29TopO5j -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:53 2026 by rpki-client