This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/bl7MJdXz_EhEovm2UbN_gTDULoY.roa File: bl7MJdXz_EhEovm2UbN_gTDULoY.roa (raw, json) Hash identifier: d4NySi+tNKI3bH93zeiTjj+HNhdoL7gliIMJmvtOe7U= Subject key identifier: 6E:5E:CC:25:D5:F3:FC:48:44:A2:F9:B6:51:B3:7F:81:30:D4:2E:86 Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87 Certificate serial: 019B7A5B958A605B0C954EE76592B2E8605C Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/bl7MJdXz_EhEovm2UbN_gTDULoY.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202047 IP address blocks: 85.208.140.0/24 maxlen: 24 85.208.141.0/24 maxlen: 24 85.208.142.0/24 maxlen: 24 85.208.143.0/24 maxlen: 24 194.169.184.0/24 maxlen: 24 194.169.185.0/24 maxlen: 24 194.169.186.0/24 maxlen: 24 194.169.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:95:8a:60:5b:0c:95:4e:e7:65:92:b2:e8:60:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e5ecc25d5f3fc4844a2f9b651b37f8130d42e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:3f:c7:95:71:d7:84:cd:1d:70:f9:19:84: c5:1c:b1:c2:30:2d:f7:4a:d1:05:fa:ec:c8:fc:59: c7:bc:df:fd:f1:49:34:3e:d1:ef:18:c2:e0:90:e1: d5:3e:a7:bb:c3:93:1a:df:e6:8e:91:3f:bf:29:a3: 18:c8:34:a1:1d:ee:a3:31:6c:bc:ab:ca:5e:dd:c6: cd:53:45:6e:2b:84:cf:ca:d4:56:da:32:03:77:12: 06:36:41:23:6a:8f:e0:c4:c9:59:48:30:a9:39:59: 8a:08:35:0d:18:4f:1c:e4:ae:9b:a4:84:bd:8b:70: d0:b7:3d:b8:48:3c:7a:a1:40:4a:dc:5d:d9:ae:42: 06:43:5a:d5:60:ad:fb:eb:84:cc:8d:e2:01:e7:0d: 39:73:f2:62:c4:2b:8a:fa:c2:24:16:6c:4d:ed:19: 37:e7:97:1c:f4:1c:3b:3f:07:32:79:e0:c2:4c:07: d0:f9:09:6a:04:5f:63:5c:43:33:9c:d8:41:4e:24: e5:6b:ee:69:dd:f1:18:16:f3:e6:ae:60:e6:5d:4a: 70:e7:c0:da:7a:ff:f9:c2:17:58:01:ec:0a:ee:be: 15:31:76:71:a7:72:01:49:43:73:70:33:52:95:38: 6c:b2:90:4e:c7:02:4f:8c:d3:62:c3:21:1a:a3:51: fe:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5E:CC:25:D5:F3:FC:48:44:A2:F9:B6:51:B3:7F:81:30:D4:2E:86 X509v3 Authority Key Identifier: keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/bl7MJdXz_EhEovm2UbN_gTDULoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.140.0/22 194.169.184.0/22 Signature Algorithm: sha256WithRSAEncryption 81:4d:2c:f9:3d:8a:49:f2:b6:60:65:56:0d:1c:a9:21:da:66: 51:46:af:18:85:52:3e:6d:aa:b7:1a:ad:bc:ba:bf:2e:1d:03: 41:48:38:80:ee:59:bb:95:b1:84:5e:91:e1:d2:b6:68:66:e9: 53:f9:e4:21:44:b4:56:72:67:0a:7d:fb:c6:4a:dd:54:43:5b: a1:6d:e4:e5:84:0a:bc:d8:b9:bc:7d:92:01:f6:ae:7c:43:02: d7:17:13:70:3e:30:80:0a:31:16:b4:af:7d:be:3c:e1:9f:02: 22:25:70:17:49:8d:77:33:3d:d8:8b:90:c1:2b:a5:9f:2a:9a: 22:b5:11:36:76:e5:d4:a5:76:3e:5c:8a:1f:2b:a4:35:a4:7e: 03:7a:6f:5d:71:0e:00:d2:74:32:e7:79:f1:8b:82:42:8c:7c: 6b:6e:ae:49:f7:f2:0a:98:32:b2:ec:bd:05:28:51:70:e6:15: 58:1e:1e:ff:53:65:85:11:5d:96:ab:84:b5:a0:4b:2e:39:74: 6a:e0:7c:75:f1:c4:ce:45:1a:22:be:99:18:27:c6:8c:ae:09: ec:00:88:65:43:78:bc:ac:81:f9:89:61:ed:3d:56:16:cc:60: cd:62:7f:9d:c9:f5:ae:00:61:fb:5a:60:73:1a:60:9c:e9:d2: 6c:ab:d4:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W5WKYFsMlU7nZZKy6GBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNGY2NjVkNDZkNmEyYWJmMDUyMWU1Y2IxZjdjNDUxY2Ez MzdhODcwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTVlY2MyNWQ1ZjNmYzQ4NDRhMmY5YjY1MWIzN2Y4MTMwZDQyZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2g/x5Vx14TNHXD5GYTFHLHCMC33 StEF+uzI/FnHvN/98Uk0PtHvGMLgkOHVPqe7w5Ma3+aOkT+/KaMYyDShHe6jMWy8 q8pe3cbNU0VuK4TPytRW2jIDdxIGNkEjao/gxMlZSDCpOVmKCDUNGE8c5K6bpIS9 i3DQtz24SDx6oUBK3F3ZrkIGQ1rVYK3764TMjeIB5w05c/JixCuK+sIkFmxN7Rk3 55cc9Bw7PwcyeeDCTAfQ+QlqBF9jXEMznNhBTiTla+5p3fEYFvPmrmDmXUpw58Da ev/5whdYAewK7r4VMXZxp3IBSUNzcDNSlThsspBOxwJPjNNiwyEao1H++wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG5ezCXV8/xIRKL5tlGzf4Ew1C6GMB8GA1UdIwQY MBaAFE5PZl1G1qKr8FIeXLH3xFHKM3qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGs5bVhVYldvcXZ3VWg1Y3NmZkVVY296ZW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNzBiODktN2M0Ny00MjYzLTg2YTAt MDA3M2MyYjdhN2VlLzEvYmw3TUpkWHpfRWhFb3ZtMlViTl9nVERVTG9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yNzBiODktN2M0Ny00MjYzLTg2YTAtMDA3M2MyYjdhN2Vl LzEvVGs5bVhVYldvcXZ3VWg1Y3NmZkVVY296ZW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVdCMAwQC wqm4MA0GCSqGSIb3DQEBCwUAA4IBAQCBTSz5PYpJ8rZgZVYNHKkh2mZRRq8YhVI+ baq3Gq28ur8uHQNBSDiA7lm7lbGEXpHh0rZoZulT+eQhRLRWcmcKffvGSt1UQ1uh beTlhAq82Lm8fZIB9q58QwLXFxNwPjCACjEWtK99vjzhnwIiJXAXSY13Mz3Yi5DB K6WfKpoitRE2duXUpXY+XIofK6Q1pH4Dem9dcQ4A0nQy53nxi4JCjHxrbq5J9/IK mDKy7L0FKFFw5hVYHh7/U2WFEV2Wq4S1oEsuOXRq4Hx18cTORRoivpkYJ8aMrgns AIhlQ3i8rIH5iWHtPVYWzGDNYn+dyfWuAGH7WmBzGmCc6dJsq9TZ -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:20 2026 by rpki-client