This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/XPB35_Ur1hLtvwuFcRXxDRq1gyU.roa File: XPB35_Ur1hLtvwuFcRXxDRq1gyU.roa (raw, json) Hash identifier: ZlgHHVAOCQfTQ4HM2Zn2HD5FCyUatYZ6uXuKH+StOms= Subject key identifier: 5C:F0:77:E7:F5:2B:D6:12:ED:BF:0B:85:71:15:F1:0D:1A:B5:83:25 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B26F0BDC8F3BC6F4C06CAD1D1C28405B4 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/XPB35_Ur1hLtvwuFcRXxDRq1gyU.roa Signing time: Tue 16 Dec 2025 11:34:29 +0000 ROA not before: Tue 16 Dec 2025 11:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58272 IP address blocks: 37.18.0.0/24 maxlen: 24 37.18.23.0/24 maxlen: 24 37.18.60.0/24 maxlen: 24 37.18.63.0/24 maxlen: 24 37.18.78.0/24 maxlen: 24 37.18.82.0/24 maxlen: 24 37.18.103.0/24 maxlen: 24 37.18.106.0/24 maxlen: 24 37.18.125.0/24 maxlen: 24 37.18.126.0/24 maxlen: 24 37.230.130.0/24 maxlen: 24 37.230.132.0/24 maxlen: 24 37.230.134.0/24 maxlen: 24 37.230.135.0/24 maxlen: 24 37.230.145.0/24 maxlen: 24 37.230.151.0/24 maxlen: 24 37.230.163.0/24 maxlen: 24 37.230.176.0/24 maxlen: 24 37.230.177.0/24 maxlen: 24 37.230.178.0/24 maxlen: 24 37.230.182.0/24 maxlen: 24 37.230.183.0/24 maxlen: 24 37.230.187.0/24 maxlen: 24 37.230.200.0/24 maxlen: 24 37.230.208.0/24 maxlen: 24 37.230.226.0/24 maxlen: 24 37.230.227.0/24 maxlen: 24 37.230.231.0/24 maxlen: 24 37.230.238.0/24 maxlen: 24 37.230.254.0/24 maxlen: 24 37.230.255.0/24 maxlen: 24 46.243.138.0/24 maxlen: 24 46.243.139.0/24 maxlen: 24 46.243.140.0/24 maxlen: 24 46.243.148.0/24 maxlen: 24 46.243.149.0/24 maxlen: 24 46.243.163.0/24 maxlen: 24 46.243.214.0/24 maxlen: 24 46.243.215.0/24 maxlen: 24 46.243.217.0/24 maxlen: 24 46.243.220.0/24 maxlen: 24 46.243.221.0/24 maxlen: 24 46.243.222.0/24 maxlen: 24 46.243.223.0/24 maxlen: 24 46.243.224.0/24 maxlen: 24 46.243.225.0/24 maxlen: 24 46.243.236.0/24 maxlen: 24 46.243.237.0/24 maxlen: 24 46.243.238.0/24 maxlen: 24 46.243.239.0/24 maxlen: 24 46.243.240.0/24 maxlen: 24 46.243.241.0/24 maxlen: 24 46.243.242.0/24 maxlen: 24 46.243.243.0/24 maxlen: 24 46.243.246.0/23 maxlen: 23 46.243.246.0/24 maxlen: 24 46.243.247.0/24 maxlen: 24 46.243.248.0/24 maxlen: 24 46.243.249.0/24 maxlen: 24 46.243.250.0/24 maxlen: 24 46.243.251.0/24 maxlen: 24 128.0.71.0/24 maxlen: 24 141.101.132.0/24 maxlen: 24 141.101.133.0/24 maxlen: 24 141.101.134.0/24 maxlen: 24 141.101.135.0/24 maxlen: 24 141.101.136.0/24 maxlen: 24 141.101.138.0/23 maxlen: 23 141.101.143.0/24 maxlen: 24 141.101.144.0/24 maxlen: 24 141.101.145.0/24 maxlen: 24 141.101.146.0/24 maxlen: 24 141.101.147.0/24 maxlen: 24 141.101.148.0/24 maxlen: 24 141.101.149.0/24 maxlen: 24 141.101.150.0/24 maxlen: 24 141.101.153.0/24 maxlen: 24 141.101.154.0/24 maxlen: 24 141.101.155.0/24 maxlen: 24 141.101.156.0/24 maxlen: 24 141.101.157.0/24 maxlen: 24 141.101.158.0/24 maxlen: 24 141.101.159.0/24 maxlen: 24 141.101.160.0/24 maxlen: 24 141.101.161.0/24 maxlen: 24 141.101.162.0/24 maxlen: 24 141.101.163.0/24 maxlen: 24 141.101.164.0/24 maxlen: 24 141.101.165.0/24 maxlen: 24 141.101.166.0/24 maxlen: 24 141.101.167.0/24 maxlen: 24 141.101.168.0/24 maxlen: 24 141.101.169.0/24 maxlen: 24 141.101.170.0/24 maxlen: 24 141.101.171.0/24 maxlen: 24 141.101.172.0/24 maxlen: 24 141.101.173.0/24 maxlen: 24 141.101.174.0/24 maxlen: 24 141.101.179.0/24 maxlen: 24 141.101.189.0/24 maxlen: 24 141.101.190.0/24 maxlen: 24 141.101.191.0/24 maxlen: 24 141.101.198.0/24 maxlen: 24 141.101.209.0/24 maxlen: 24 141.101.216.0/24 maxlen: 24 141.101.230.0/24 maxlen: 24 141.101.233.0/24 maxlen: 24 141.101.235.0/24 maxlen: 24 141.101.237.0/24 maxlen: 24 141.101.238.0/24 maxlen: 24 141.101.242.0/24 maxlen: 24 141.101.245.0/24 maxlen: 24 141.101.252.0/24 maxlen: 24 141.101.253.0/24 maxlen: 24 141.101.254.0/24 maxlen: 24 141.101.255.0/24 maxlen: 24 178.170.136.0/24 maxlen: 24 178.170.137.0/24 maxlen: 24 178.170.138.0/24 maxlen: 24 178.170.139.0/24 maxlen: 24 178.170.140.0/24 maxlen: 24 178.170.141.0/24 maxlen: 24 178.170.142.0/24 maxlen: 24 178.170.144.0/24 maxlen: 24 178.170.145.0/24 maxlen: 24 178.170.146.0/24 maxlen: 24 178.170.172.0/24 maxlen: 24 178.170.187.0/24 maxlen: 24 178.170.188.0/24 maxlen: 24 185.4.148.0/24 maxlen: 24 185.4.149.0/24 maxlen: 24 185.4.150.0/24 maxlen: 24 185.4.151.0/24 maxlen: 24 188.72.80.0/24 maxlen: 24 188.72.81.0/24 maxlen: 24 188.72.82.0/24 maxlen: 24 188.72.83.0/24 maxlen: 24 188.72.84.0/24 maxlen: 24 188.72.85.0/24 maxlen: 24 188.72.86.0/24 maxlen: 24 188.72.87.0/24 maxlen: 24 188.72.89.0/24 maxlen: 24 188.72.95.0/24 maxlen: 24 188.72.97.0/24 maxlen: 24 188.72.98.0/24 maxlen: 24 188.72.101.0/24 maxlen: 24 188.72.102.0/24 maxlen: 24 188.72.114.0/24 maxlen: 24 188.72.115.0/24 maxlen: 24 188.72.116.0/24 maxlen: 24 188.72.119.0/24 maxlen: 24 188.72.124.0/24 maxlen: 24 188.72.125.0/24 maxlen: 24 217.150.88.0/24 maxlen: 24 217.150.89.0/24 maxlen: 24 217.150.90.0/24 maxlen: 24 217.150.91.0/24 maxlen: 24 217.150.92.0/24 maxlen: 24 217.150.93.0/24 maxlen: 24 217.150.94.0/24 maxlen: 24 217.150.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:f0:bd:c8:f3:bc:6f:4c:06:ca:d1:d1:c2:84:05:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Dec 16 11:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5cf077e7f52bd612edbf0b857115f10d1ab58325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:07:c5:54:79:8f:66:da:3d:be:7a:38:f4:a2: bd:f3:10:81:a4:99:cb:bd:b0:2d:93:e4:71:59:2e: 79:eb:6f:0a:8a:cf:4c:08:e4:56:63:66:3b:43:7b: 12:11:7f:d2:1d:9d:b8:d3:02:31:03:f5:a0:40:f1: 68:18:d0:71:a7:0a:21:b5:a8:8e:57:32:f5:be:57: 90:cf:f6:e5:72:c1:cd:8f:93:87:69:4c:2d:ab:75: d5:54:a2:79:a8:84:95:3e:b1:ae:81:64:b2:d1:2b: b9:f5:18:06:88:44:28:d8:50:d5:94:a4:73:d5:76: 9c:8f:b8:e9:7c:cd:13:fc:91:f8:0f:6e:19:e1:71: a5:27:31:2d:8c:64:38:b7:65:97:3b:f9:ef:d2:c0: 39:38:df:a7:bc:ea:d9:3b:77:d8:32:0e:f6:54:c9: fe:69:f9:91:a7:7a:1c:98:cb:b8:8a:eb:85:6d:dd: 11:9f:35:52:25:d4:e3:36:f1:34:b1:6c:04:de:70: fc:f2:d2:4e:7f:68:a4:e3:40:69:b7:e6:ef:4c:15: 65:1d:c0:01:71:8d:8c:60:1b:b3:e9:b4:86:1a:e2: 9a:64:40:37:77:89:be:c0:0b:b1:d3:b1:51:91:21: df:9a:72:3f:14:80:39:5d:09:0f:15:7e:a6:7a:99: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F0:77:E7:F5:2B:D6:12:ED:BF:0B:85:71:15:F1:0D:1A:B5:83:25 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/XPB35_Ur1hLtvwuFcRXxDRq1gyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.0.0/24 37.18.23.0/24 37.18.60.0/24 37.18.63.0/24 37.18.78.0/24 37.18.82.0/24 37.18.103.0/24 37.18.106.0/24 37.18.125.0-37.18.126.255 37.230.130.0/24 37.230.132.0/24 37.230.134.0/23 37.230.145.0/24 37.230.151.0/24 37.230.163.0/24 37.230.176.0-37.230.178.255 37.230.182.0/23 37.230.187.0/24 37.230.200.0/24 37.230.208.0/24 37.230.226.0/23 37.230.231.0/24 37.230.238.0/24 37.230.254.0/23 46.243.138.0-46.243.140.255 46.243.148.0/23 46.243.163.0/24 46.243.214.0/23 46.243.217.0/24 46.243.220.0-46.243.225.255 46.243.236.0-46.243.243.255 46.243.246.0-46.243.251.255 128.0.71.0/24 141.101.132.0-141.101.136.255 141.101.138.0/23 141.101.143.0-141.101.150.255 141.101.153.0-141.101.174.255 141.101.179.0/24 141.101.189.0-141.101.191.255 141.101.198.0/24 141.101.209.0/24 141.101.216.0/24 141.101.230.0/24 141.101.233.0/24 141.101.235.0/24 141.101.237.0-141.101.238.255 141.101.242.0/24 141.101.245.0/24 141.101.252.0/22 178.170.136.0-178.170.142.255 178.170.144.0-178.170.146.255 178.170.172.0/24 178.170.187.0-178.170.188.255 185.4.148.0/22 188.72.80.0/21 188.72.89.0/24 188.72.95.0/24 188.72.97.0-188.72.98.255 188.72.101.0-188.72.102.255 188.72.114.0-188.72.116.255 188.72.119.0/24 188.72.124.0/23 217.150.88.0/21 Signature Algorithm: sha256WithRSAEncryption 6d:fe:df:c1:89:75:f9:28:17:7c:16:73:ed:9f:fe:21:0e:87: 56:90:a6:b1:02:4f:a7:f5:ba:60:e5:74:9d:7a:d4:68:8e:2c: 37:90:4a:b4:4d:8a:2e:c9:3e:d9:9b:d3:19:d0:b0:57:54:52: b2:d7:5e:3d:24:f3:70:72:5e:41:62:cb:40:f2:b3:3e:e9:ac: 02:86:71:27:26:cf:e5:88:11:51:a5:de:40:19:16:cf:a0:ea: 21:ff:99:fc:99:f2:eb:04:53:2b:cd:ae:f1:63:a6:96:df:59: 9f:00:51:ac:13:a7:c5:2e:1a:64:37:3c:56:b9:a4:eb:74:52: c4:85:4e:82:d0:cd:68:78:74:25:bc:8c:b6:8a:db:9e:ba:b1: 3b:51:14:3f:88:cb:99:71:9b:15:2c:f2:86:c3:af:ef:32:c8: f1:c5:1d:75:4c:95:33:3a:75:62:8d:d2:89:3c:14:30:b2:43: 25:b5:88:22:0d:93:6a:b2:91:11:01:d3:1c:4d:ab:b8:58:41: e5:e4:47:94:54:4f:bf:f1:e5:84:c3:9e:a6:26:7c:14:9a:a9: 91:06:6f:93:40:4b:cb:2f:75:b4:c8:3d:ea:a4:dd:a6:e6:fa: be:39:4d:7e:a8:5b:a4:21:4a:d5:94:64:37:73:3a:d4:ca:d6: 9c:ea:33:c4 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgISAZsm8L3I87xvTAbK0dHChAW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjUxMjE2MTEzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2YwNzdlN2Y1MmJkNjEyZWRiZjBiODU3MTE1ZjEwZDFhYjU4MzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wfFVHmPZto9vno49KK98xCBpJnL vbAtk+RxWS55628Kis9MCORWY2Y7Q3sSEX/SHZ240wIxA/WgQPFoGNBxpwohtaiO VzL1vleQz/blcsHNj5OHaUwtq3XVVKJ5qISVPrGugWSy0Su59RgGiEQo2FDVlKRz 1Xacj7jpfM0T/JH4D24Z4XGlJzEtjGQ4t2WXO/nv0sA5ON+nvOrZO3fYMg72VMn+ afmRp3ocmMu4iuuFbd0RnzVSJdTjNvE0sWwE3nD88tJOf2ik40Bpt+bvTBVlHcAB cY2MYBuz6bSGGuKaZEA3d4m+wAux07FRkSHfmnI/FIA5XQkPFX6meplvFwIDAQAB o4IEDzCCBAswHQYDVR0OBBYEFFzwd+f1K9YS7b8LhXEV8Q0atYMlMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvWFBCMzVfVXIxaEx0dnd1RmNSWHhEUnExZ3lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICIwYIKwYBBQUHAQcBAf8EggISMIICDjCCAgoEAgABMIIC AgMEACUSAAMEACUSFwMEACUSPAMEACUSPwMEACUSTgMEACUSUgMEACUSZwMEACUS ajAMAwQAJRJ9AwQAJRJ+AwQAJeaCAwQAJeaEAwQBJeaGAwQAJeaRAwQAJeaXAwQA JeajMAwDBAQl5rADBAAl5rIDBAEl5rYDBAAl5rsDBAAl5sgDBAAl5tADBAEl5uID BAAl5ucDBAAl5u4DBAEl5v4wDAMEAS7zigMEAC7zjAMEAS7zlAMEAC7zowMEAS7z 1gMEAC7z2TAMAwQCLvPcAwQBLvPgMAwDBAIu8+wDBAIu8/AwDAMEAS7z9gMEAi7z +AMEAIAARzAMAwQCjWWEAwQAjWWIAwQBjWWKMAwDBACNZY8DBACNZZYwDAMEAI1l mQMEAI1lrgMEAI1lszAMAwQAjWW9AwQGjWWAAwQAjWXGAwQAjWXRAwQAjWXYAwQA jWXmAwQAjWXpAwQAjWXrMAwDBACNZe0DBACNZe4DBACNZfIDBACNZfUDBAKNZfww DAMEA7KqiAMEALKqjjAMAwQEsqqQAwQAsqqSAwQAsqqsMAwDBACyqrsDBACyqrwD BAK5BJQDBAO8SFADBAC8SFkDBAC8SF8wDAMEALxIYQMEALxIYjAMAwQAvEhlAwQA vEhmMAwDBAG8SHIDBAC8SHQDBAC8SHcDBAG8SHwDBAPZllgwDQYJKoZIhvcNAQEL BQADggEBAG3+38GJdfkoF3wWc+2f/iEOh1aQprECT6f1umDldJ161GiOLDeQSrRN ii7JPtmb0xnQsFdUUrLXXj0k83ByXkFiy0Dysz7prAKGcScmz+WIEVGl3kAZFs+g 6iH/mfyZ8usEUyvNrvFjppbfWZ8AUawTp8UuGmQ3PFa5pOt0UsSFToLQzWh4dCW8 jLaK2566sTtRFD+Iy5lxmxUs8obDr+8yyPHFHXVMlTM6dWKN0ok8FDCyQyW1iCIN k2qykREB0xxNq7hYQeXkR5RUT7/x5YTDnqYmfBSaqZEGb5NAS8svdbTIPeqk3abm +r45TX6oW6QhStWUZDdzOtTK1pzqM8Q= -----END CERTIFICATE-----Generated at Thu Dec 18 14:47:58 2025 by rpki-client