This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/e-BLTmUZr4RQnQtoII2qK120t20.roa File: e-BLTmUZr4RQnQtoII2qK120t20.roa (raw, json) Hash identifier: R8x94sW5eyjEsBywxnIhAGd8cj5zCs/8K4KlXN7U2TU= Subject key identifier: 7B:E0:4B:4E:65:19:AF:84:50:9D:0B:68:20:8D:AA:2B:5D:B4:B7:6D Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019A56920B812B03E31FB496EA58C57EC052 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/e-BLTmUZr4RQnQtoII2qK120t20.roa Signing time: Thu 06 Nov 2025 00:30:03 +0000 ROA not before: Thu 06 Nov 2025 00:30:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397373 IP address blocks: 185.114.206.0/23 maxlen: 23 185.114.206.0/24 maxlen: 24 185.114.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:56:92:0b:81:2b:03:e3:1f:b4:96:ea:58:c5:7e:c0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Nov 6 00:30:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7be04b4e6519af84509d0b68208daa2b5db4b76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:d6:21:ea:a0:1a:3d:94:8b:a7:f9:ba:11: e7:de:4f:3c:1b:d1:09:53:bb:1d:b9:03:7b:f6:af: 04:c3:d3:3a:15:fc:50:d2:ec:84:fd:14:9e:69:7b: 07:4d:d6:b1:88:5b:10:58:ee:e7:02:85:a0:05:6d: 10:70:8a:84:99:a4:25:87:89:15:44:90:46:fd:25: 6c:cf:38:88:9c:4c:ed:1d:5a:18:46:25:e0:c9:d6: 54:c5:4c:7c:05:a0:fa:86:7c:ef:21:ee:74:8b:ce: 1b:11:14:c8:26:cd:7d:a9:bb:cf:1b:bc:f1:9e:fd: b7:65:2a:22:d8:1c:f0:a6:15:c1:bf:0f:8c:07:9f: c9:69:9e:32:ec:96:ab:17:ed:82:3d:2f:bd:d2:3a: 8e:85:b6:d1:b0:dc:43:95:b5:ba:27:a3:10:ca:70: e5:ce:e0:a4:1c:11:04:58:3a:10:df:ca:66:72:f5: 02:6f:cf:23:ab:d4:d0:54:44:cd:46:23:ce:d2:24: ff:6c:e4:6f:9a:27:42:07:93:20:78:d1:6e:7b:db: 31:44:6a:51:7b:26:a6:8c:59:b6:14:4e:18:ae:e8: d0:51:6e:0c:31:83:f5:52:bf:46:07:ac:a4:ba:63: 5f:ef:9d:2f:49:67:3f:bc:74:c7:46:bc:4c:60:87: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E0:4B:4E:65:19:AF:84:50:9D:0B:68:20:8D:AA:2B:5D:B4:B7:6D X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/e-BLTmUZr4RQnQtoII2qK120t20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.206.0/23 Signature Algorithm: sha256WithRSAEncryption 91:7d:6b:d1:95:d8:a0:bb:7f:9f:b3:e7:1e:1d:a4:a0:ac:61: 0c:30:e0:4e:95:f6:e1:bc:4c:9e:8b:ef:2a:c6:df:ba:a8:57: c4:8d:ca:59:36:35:d8:b4:25:ff:93:8c:47:34:90:03:09:da: 9f:d9:fc:9e:f2:6f:9c:9b:e0:26:f7:fa:e7:91:86:c2:e8:f4: f7:85:d2:69:67:37:3e:ca:13:6b:94:fe:8f:fb:1d:25:6d:b7: d9:b4:75:97:4b:b2:2e:4e:db:ad:08:d1:85:b4:0d:5f:d3:14: 73:4b:f1:e1:af:28:d2:2c:e6:0a:55:3d:63:c8:53:24:00:99: cf:59:6b:d3:0c:f6:3a:ee:17:ee:2f:03:57:ec:8d:be:81:8f: 93:87:0e:7c:2b:0e:f2:39:79:f1:0b:5e:df:51:c9:a4:74:cf: c1:1a:65:00:88:82:5a:60:08:b2:eb:5f:69:38:15:85:77:b2: 4f:36:bd:3a:0d:4a:30:ad:b8:a2:39:ed:61:5e:67:57:9a:37: 0e:6d:c5:d9:63:77:c2:e6:17:59:36:7b:9f:56:c0:32:66:0c: 7f:65:f9:30:6e:9e:f1:ee:d5:62:47:e4:64:b1:a8:89:89:64: 57:b1:99:bc:5d:9a:ec:a7:58:e9:2f:0f:64:d6:bd:a4:de:2e: 3f:c4:05:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpWkguBKwPjH7SW6ljFfsBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUxMTA2MDAzMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmUwNGI0ZTY1MTlhZjg0NTA5ZDBiNjgyMDhkYWEyYjVkYjRiNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W7WIeqgGj2Ui6f5uhHn3k88G9EJ U7sduQN79q8Ew9M6FfxQ0uyE/RSeaXsHTdaxiFsQWO7nAoWgBW0QcIqEmaQlh4kV RJBG/SVszziInEztHVoYRiXgydZUxUx8BaD6hnzvIe50i84bERTIJs19qbvPG7zx nv23ZSoi2BzwphXBvw+MB5/JaZ4y7JarF+2CPS+90jqOhbbRsNxDlbW6J6MQynDl zuCkHBEEWDoQ38pmcvUCb88jq9TQVETNRiPO0iT/bORvmidCB5MgeNFue9sxRGpR eyamjFm2FE4YrujQUW4MMYP1Ur9GB6ykumNf750vSWc/vHTHRrxMYIfmowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHvgS05lGa+EUJ0LaCCNqitdtLdtMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvZS1CTFRtVVpyNFJRblF0b0lJMnFLMTIwdDIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXLOMA0G CSqGSIb3DQEBCwUAA4IBAQCRfWvRldigu3+fs+ceHaSgrGEMMOBOlfbhvEyei+8q xt+6qFfEjcpZNjXYtCX/k4xHNJADCdqf2fye8m+cm+Am9/rnkYbC6PT3hdJpZzc+ yhNrlP6P+x0lbbfZtHWXS7IuTtutCNGFtA1f0xRzS/HhryjSLOYKVT1jyFMkAJnP WWvTDPY67hfuLwNX7I2+gY+Thw58Kw7yOXnxC17fUcmkdM/BGmUAiIJaYAiy619p OBWFd7JPNr06DUowrbiiOe1hXmdXmjcObcXZY3fC5hdZNnufVsAyZgx/Zfkwbp7x 7tViR+RksaiJiWRXsZm8XZrsp1jpLw9k1r2k3i4/xAXZ -----END CERTIFICATE-----Generated at Fri Dec 5 10:20:20 2025 by rpki-client