This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/e4nXI-_BDCIlp6mQT0lhpWhU9d0.roa File: e4nXI-_BDCIlp6mQT0lhpWhU9d0.roa (raw, json) Hash identifier: GZ/VMI7kEuHwqJlfhTt9/h0l9gE/ESRoHXyKDs1cwjs= Subject key identifier: 7B:89:D7:23:EF:C1:0C:22:25:A7:A9:90:4F:49:61:A5:68:54:F5:DD Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de Certificate serial: 019B7C7EEFD129269BA9D48EA61586B9FE71 Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/e4nXI-_BDCIlp6mQT0lhpWhU9d0.roa Signing time: Fri 02 Jan 2026 02:17:32 +0000 ROA not before: Fri 02 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206360 IP address blocks: 185.220.136.0/24 maxlen: 24 185.220.136.0/30 maxlen: 30 185.220.136.4/30 maxlen: 30 185.220.136.8/29 maxlen: 29 185.220.136.16/29 maxlen: 29 185.220.136.24/30 maxlen: 30 185.220.136.32/28 maxlen: 28 185.220.137.0/24 maxlen: 24 185.220.137.4/30 maxlen: 30 185.220.137.8/29 maxlen: 29 185.220.138.0/24 maxlen: 24 185.220.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:ef:d1:29:26:9b:a9:d4:8e:a6:15:86:b9:fe:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de Validity Not Before: Jan 2 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b89d723efc10c2225a7a9904f4961a56854f5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:d2:f7:5d:16:73:cd:61:16:59:c5:1e:81: 10:ad:29:39:c8:68:b7:a5:31:d2:e0:00:e9:db:de: fd:25:a6:be:ea:c9:94:ad:55:4b:4c:bf:66:eb:e0: 0c:d4:5c:98:da:ac:cc:90:80:6b:7f:4f:fa:ae:3c: 8f:ec:df:78:9b:d4:6f:14:56:8a:08:bc:61:04:a6: fe:b5:1f:c9:98:c2:d8:1a:6a:3d:d9:42:d3:05:a3: 5b:a3:aa:77:db:6f:6b:f9:ea:87:28:29:6a:de:4b: dc:8f:80:c1:9d:69:01:fd:09:63:42:33:52:c0:40: fb:ec:e1:27:58:77:63:7d:67:0a:c3:fa:1a:8c:f8: b6:6c:20:f0:c4:6d:6f:2c:18:70:e4:c6:f9:03:f9: 1c:c7:32:ea:5a:2c:2c:e4:95:6d:38:ff:4f:26:ec: a1:00:6c:dc:de:65:ec:c3:dd:7a:b6:de:9b:ed:5c: 24:b2:aa:f1:1c:b5:3c:be:0e:46:59:3e:f0:a6:54: e3:f2:d1:8b:c2:4e:bf:f8:12:0a:2a:f5:4f:1b:c9: 74:a4:d6:d4:a7:c0:ef:3d:73:0f:46:3d:c6:87:d1: 39:bb:c5:f3:b2:23:95:ae:68:0a:20:20:c6:51:95: 36:d6:da:9a:fc:f1:0f:34:7b:56:63:0e:fc:37:ee: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:89:D7:23:EF:C1:0C:22:25:A7:A9:90:4F:49:61:A5:68:54:F5:DD X509v3 Authority Key Identifier: keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/e4nXI-_BDCIlp6mQT0lhpWhU9d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.136.0/22 Signature Algorithm: sha256WithRSAEncryption b6:8e:c0:27:64:d2:8f:b1:3a:a0:1f:97:7e:91:8f:b5:94:10: 66:56:15:ff:08:c3:9b:df:8f:3d:0e:b9:97:14:74:e4:f3:ef: 2c:b2:43:21:7f:4b:fe:9a:f2:9b:4c:45:52:d4:7b:55:c6:87: cc:9e:f4:ab:01:dd:1c:9e:75:5b:0a:7b:94:fc:01:1f:4e:8a: c1:58:16:25:a9:f3:68:7a:e9:46:ab:42:b7:d4:44:92:5f:60: 2a:fa:23:24:5c:07:2e:93:e2:3a:8a:83:9e:1e:36:53:22:53: 68:10:05:a3:0d:a8:e0:85:9b:8e:89:a5:58:fd:a9:b8:7d:f2: 33:20:4f:7b:16:a1:3f:96:3e:39:b3:f4:5a:0d:56:ab:59:a7: 5d:31:bc:8c:db:0b:40:c1:a3:8f:d6:a7:78:c7:0d:1c:08:85: a1:8a:58:e8:9f:6f:b9:dd:f6:03:e4:bd:91:30:b3:30:df:e5: be:5f:d1:46:67:81:e0:b2:b6:b2:e2:57:e6:19:98:f8:4e:52: 39:97:61:c6:84:c8:3b:f6:18:4f:ac:2b:69:0d:19:e3:e4:63: 50:b4:5c:11:20:dc:37:6c:00:e0:92:39:25:6a:3c:55:41:53: ed:27:a5:6a:80:eb:27:20:7b:09:a6:4e:19:9c:fa:fe:23:62: a0:8f:50:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fu/RKSabqdSOphWGuf5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNDJmYjQ4MzFjMWRhZjJkOTYzYzQ3NjM4ZDcwMzA4NmVl Y2E4ZGUwHhcNMjYwMTAyMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yjg5ZDcyM2VmYzEwYzIyMjVhN2E5OTA0ZjQ5NjFhNTY4NTRmNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2vS910Wc81hFlnFHoEQrSk5yGi3 pTHS4ADp2979Jaa+6smUrVVLTL9m6+AM1FyY2qzMkIBrf0/6rjyP7N94m9RvFFaK CLxhBKb+tR/JmMLYGmo92ULTBaNbo6p3229r+eqHKClq3kvcj4DBnWkB/QljQjNS wED77OEnWHdjfWcKw/oajPi2bCDwxG1vLBhw5Mb5A/kcxzLqWiws5JVtOP9PJuyh AGzc3mXsw916tt6b7VwksqrxHLU8vg5GWT7wplTj8tGLwk6/+BIKKvVPG8l0pNbU p8DvPXMPRj3Gh9E5u8XzsiOVrmgKICDGUZU21tqa/PEPNHtWYw78N+6X6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHuJ1yPvwQwiJaepkE9JYaVoVPXdMB8GA1UdIwQY MBaAFAtC+0gxwdry2WPEdjjXAwhu7KjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEt YjM2NjNhMzQ1NTE4LzEvZTRuWEktX0JEQ0lscDZtUVQwbGhwV2hVOWQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEtYjM2NjNhMzQ1NTE4 LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudyIMA0G CSqGSIb3DQEBCwUAA4IBAQC2jsAnZNKPsTqgH5d+kY+1lBBmVhX/CMOb3489DrmX FHTk8+8sskMhf0v+mvKbTEVS1HtVxofMnvSrAd0cnnVbCnuU/AEfTorBWBYlqfNo eulGq0K31ESSX2Aq+iMkXAcuk+I6ioOeHjZTIlNoEAWjDajghZuOiaVY/am4ffIz IE97FqE/lj45s/RaDVarWaddMbyM2wtAwaOP1qd4xw0cCIWhiljon2+53fYD5L2R MLMw3+W+X9FGZ4Hgsray4lfmGZj4TlI5l2HGhMg79hhPrCtpDRnj5GNQtFwRINw3 bADgkjklajxVQVPtJ6VqgOsnIHsJpk4ZnPr+I2Kgj1Aa -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:16 2026 by rpki-client