This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/xYedTFBsRl5b1iJAErnPYcaR3OY.roa File: xYedTFBsRl5b1iJAErnPYcaR3OY.roa (raw, json) Hash identifier: A2Zy/D1noAod2gPyXy2Qnxa+PffBxwzOBc03vUahwok= Subject key identifier: C5:87:9D:4C:50:6C:46:5E:5B:D6:22:40:12:B9:CF:61:C6:91:DC:E6 Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de Certificate serial: 019AF2EB798DAC28836B0CAB5FD669BE879A Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/xYedTFBsRl5b1iJAErnPYcaR3OY.roa Signing time: Sat 06 Dec 2025 09:08:29 +0000 ROA not before: Sat 06 Dec 2025 09:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206360 IP address blocks: 185.220.136.0/24 maxlen: 24 185.220.136.0/30 maxlen: 30 185.220.136.4/30 maxlen: 30 185.220.136.8/29 maxlen: 29 185.220.136.16/29 maxlen: 29 185.220.136.24/30 maxlen: 30 185.220.136.32/28 maxlen: 28 185.220.137.0/24 maxlen: 24 185.220.137.4/30 maxlen: 30 185.220.137.8/29 maxlen: 29 185.220.138.0/24 maxlen: 24 185.220.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:eb:79:8d:ac:28:83:6b:0c:ab:5f:d6:69:be:87:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de Validity Not Before: Dec 6 09:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c5879d4c506c465e5bd6224012b9cf61c691dce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:65:a9:ad:c4:aa:fd:cd:25:52:95:e0:cd: 89:01:ee:74:d0:b4:28:28:3e:de:41:f5:2e:94:c6: ba:4a:7b:f8:52:14:49:af:62:12:ec:9c:3b:e5:9b: 69:9c:15:dc:78:e6:bf:a1:35:2f:ec:04:82:90:fe: 35:29:e3:4e:c3:c1:ac:cb:8f:30:f5:99:cb:84:19: 55:ed:da:36:18:ac:ff:bf:00:9e:69:0b:1e:22:cc: f5:da:73:d0:1b:f6:b2:4e:5a:7c:98:0a:10:84:22: 9d:23:5f:9b:d8:53:d7:71:0e:d6:6f:71:56:9d:f8: dc:4f:7a:c5:83:c0:01:e9:a4:b4:07:d0:7c:91:fe: 68:47:b7:5b:09:5f:f2:5b:46:c8:28:4b:d0:53:53: 83:07:66:fe:5f:68:c5:1b:1e:17:c7:6b:ca:74:d7: 78:9c:32:64:b7:39:00:c0:c8:80:b0:d3:87:ed:6c: d9:4c:71:f9:c5:4e:53:8e:66:91:d5:50:3d:5c:f0: e3:07:76:ac:9a:91:96:24:a2:f3:52:95:78:bb:22: 0b:33:f3:5b:89:84:0c:a3:cd:49:b3:a0:55:10:05: 9c:eb:77:f8:9f:b2:56:b1:05:0e:bf:b1:e4:13:65: 88:e2:bc:64:0f:88:71:54:a0:9d:18:69:58:b3:56: e4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:87:9D:4C:50:6C:46:5E:5B:D6:22:40:12:B9:CF:61:C6:91:DC:E6 X509v3 Authority Key Identifier: keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/xYedTFBsRl5b1iJAErnPYcaR3OY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.136.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:87:7a:c8:a4:8d:af:c5:0c:f2:f4:cf:56:a2:e9:63:24:42: a3:e2:4e:51:c2:dd:b0:dc:fb:5d:7b:95:10:e8:54:bc:88:1b: a0:17:fc:49:e5:b5:ec:1b:b6:cf:af:6c:63:1d:15:b6:4e:c5: 99:a9:82:ee:8c:a4:92:02:c5:1a:e4:a2:69:b5:5d:06:b3:f5: b6:9e:a9:79:e3:55:3f:b4:8a:e6:e1:7e:ef:36:fd:a4:91:aa: 1a:1c:16:67:c3:16:e9:32:ea:b4:46:77:5a:c1:0a:42:61:c2: 4d:dc:6e:74:6a:13:af:07:c7:c6:a5:97:52:27:ac:50:76:5f: 73:83:dc:ca:9c:c2:31:f4:cf:e1:33:57:9a:1f:36:d0:56:d7: 9a:66:f0:29:22:4c:00:2b:8d:3d:ee:90:23:19:bf:1a:e4:ac: e8:4d:c5:99:64:d8:13:b5:f9:9f:4e:7d:79:b3:79:79:dc:e1: f4:8c:bf:ad:59:e6:cd:f6:5d:07:e5:ad:04:8d:d4:6a:cd:cc: 54:a7:6d:9e:39:5c:a7:7f:77:5f:79:07:49:3a:e3:3d:b8:49: 13:72:97:fe:2b:60:31:50:2d:0b:50:cc:1a:3e:5e:40:ee:65: 68:23:60:e4:80:ab:7e:a9:07:3c:99:0c:5d:a3:ef:af:50:7f: 22:db:fe:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZry63mNrCiDawyrX9ZpvoeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNDJmYjQ4MzFjMWRhZjJkOTYzYzQ3NjM4ZDcwMzA4NmVl Y2E4ZGUwHhcNMjUxMjA2MDkwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTg3OWQ0YzUwNmM0NjVlNWJkNjIyNDAxMmI5Y2Y2MWM2OTFkY2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqhlqa3Eqv3NJVKV4M2JAe500LQo KD7eQfUulMa6Snv4UhRJr2IS7Jw75ZtpnBXceOa/oTUv7ASCkP41KeNOw8Gsy48w 9ZnLhBlV7do2GKz/vwCeaQseIsz12nPQG/ayTlp8mAoQhCKdI1+b2FPXcQ7Wb3FW nfjcT3rFg8AB6aS0B9B8kf5oR7dbCV/yW0bIKEvQU1ODB2b+X2jFGx4Xx2vKdNd4 nDJktzkAwMiAsNOH7WzZTHH5xU5TjmaR1VA9XPDjB3asmpGWJKLzUpV4uyILM/Nb iYQMo81Js6BVEAWc63f4n7JWsQUOv7HkE2WI4rxkD4hxVKCdGGlYs1bkVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWHnUxQbEZeW9YiQBK5z2HGkdzmMB8GA1UdIwQY MBaAFAtC+0gxwdry2WPEdjjXAwhu7KjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEt YjM2NjNhMzQ1NTE4LzEveFllZFRGQnNSbDViMWlKQUVyblBZY2FSM09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEtYjM2NjNhMzQ1NTE4 LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudyIMA0G CSqGSIb3DQEBCwUAA4IBAQAKh3rIpI2vxQzy9M9WouljJEKj4k5Rwt2w3Ptde5UQ 6FS8iBugF/xJ5bXsG7bPr2xjHRW2TsWZqYLujKSSAsUa5KJptV0Gs/W2nql541U/ tIrm4X7vNv2kkaoaHBZnwxbpMuq0RndawQpCYcJN3G50ahOvB8fGpZdSJ6xQdl9z g9zKnMIx9M/hM1eaHzbQVteaZvApIkwAK4097pAjGb8a5KzoTcWZZNgTtfmfTn15 s3l53OH0jL+tWebN9l0H5a0EjdRqzcxUp22eOVynf3dfeQdJOuM9uEkTcpf+K2Ax UC0LUMwaPl5A7mVoI2DkgKt+qQc8mQxdo++vUH8i2/7l -----END CERTIFICATE-----Generated at Sun Dec 7 07:33:35 2025 by rpki-client