This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/67JbtkLl_lydrJEUs03-aJCfJu8.roa File: 67JbtkLl_lydrJEUs03-aJCfJu8.roa (raw, json) Hash identifier: 7jfLLjxy8JsvhI7ber+RL+ELuddGL4nRXFUSNScrgW0= Subject key identifier: EB:B2:5B:B6:42:E5:FE:5C:9D:AC:91:14:B3:4D:FE:68:90:9F:26:EF Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3 Certificate serial: 019B7D5BDD4C67D79DD2432D0B5783F79AA5 Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/67JbtkLl_lydrJEUs03-aJCfJu8.roa Signing time: Fri 02 Jan 2026 06:18:50 +0000 ROA not before: Fri 02 Jan 2026 06:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201749 IP address blocks: 37.205.112.0/21 maxlen: 22 37.205.112.0/24 maxlen: 24 37.205.113.0/24 maxlen: 24 37.205.114.0/24 maxlen: 24 37.205.115.0/24 maxlen: 24 37.205.116.0/22 maxlen: 22 37.205.116.0/24 maxlen: 24 37.205.117.0/24 maxlen: 24 37.205.118.0/24 maxlen: 24 37.205.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:dd:4c:67:d7:9d:d2:43:2d:0b:57:83:f7:9a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3 Validity Not Before: Jan 2 06:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebb25bb642e5fe5c9dac9114b34dfe68909f26ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ab:06:b6:59:da:a3:60:9c:fe:98:cc:bd:21: 3e:4a:6e:f1:b5:bc:0e:62:98:4a:f6:b6:98:8a:df: 07:cd:45:82:27:4f:58:80:bf:03:37:c4:c4:45:35: 43:01:45:0e:ff:33:5a:24:27:3e:08:a2:3a:64:f3: 40:86:73:2c:29:4f:c9:73:17:49:d6:a8:2a:bc:60: 53:aa:f4:db:85:75:57:7e:5d:80:1a:0a:24:a8:b8: c2:d9:4e:f5:92:09:0a:74:7c:ae:31:ab:68:e8:78: 57:59:cb:9d:79:74:04:67:84:f4:8b:90:22:0f:83: 87:b0:0c:ac:d5:c1:2f:e7:07:33:79:76:ac:be:07: 71:1f:c0:bf:33:5b:4d:c0:f6:ac:d9:98:80:3b:ca: 59:64:ff:df:ab:23:f6:1b:f3:dc:13:a1:c1:4e:9b: c8:d4:f4:24:57:93:56:db:6f:27:47:f1:4c:24:a8: 1e:5d:68:30:bc:56:a6:a3:f9:ef:87:58:9a:a7:8b: d9:d9:1c:54:7a:5f:fb:5c:28:91:3d:aa:44:49:99: 89:41:54:09:23:b3:25:2d:de:48:51:38:ab:4e:a3: 1e:33:ff:80:36:6e:ae:20:0a:35:56:a8:ff:59:cf: fa:e6:b8:6b:c9:63:d3:d0:74:8b:7b:c2:ee:26:dd: e4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B2:5B:B6:42:E5:FE:5C:9D:AC:91:14:B3:4D:FE:68:90:9F:26:EF X509v3 Authority Key Identifier: keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/67JbtkLl_lydrJEUs03-aJCfJu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.205.112.0/21 Signature Algorithm: sha256WithRSAEncryption 59:e7:7c:4a:0d:56:fe:40:79:dc:6c:da:e8:70:89:4b:1d:58: 2f:c5:65:1c:7e:19:c3:12:72:fc:5f:4b:b7:58:0e:f2:ba:0a: 10:dd:77:18:c2:27:d7:67:1c:55:ec:27:99:09:7c:c0:f6:65: e4:2d:5b:50:9a:31:89:c6:83:5f:f6:0e:37:28:5e:33:89:5c: d9:df:96:f1:56:17:18:e1:c3:a2:cb:9b:e4:06:c0:db:cd:28: a8:c0:18:8e:40:7b:b4:b6:36:06:c0:9b:2e:a5:e7:15:7a:39: 6e:1d:d3:35:1f:a3:ce:98:b7:85:3b:ba:77:59:74:ef:77:9c: d6:6c:9c:22:a4:e3:14:34:84:31:6b:1d:8e:ff:88:d2:7e:7d: 8c:38:6a:cf:0f:54:0b:86:8b:42:74:65:62:1f:8c:56:28:4a: fb:f2:70:1d:57:b7:ff:2c:a0:63:3e:a7:2a:80:d2:a8:ec:38: 87:12:d9:ad:5c:21:0b:db:8f:81:a6:2a:e2:53:f2:07:b7:e9: c4:80:38:ce:2a:a9:fc:4c:b9:f4:43:65:a5:b5:ed:ea:02:69: d3:fd:1a:1f:95:70:3e:49:9f:3e:57:2d:5e:4b:54:42:4b:f0: a7:65:5d:12:87:0c:7d:20:02:f8:a0:63:c6:24:09:35:23:6f: f0:9d:76:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W91MZ9ed0kMtC1eD95qlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2Q1Y2FkNGQzMzA2YzRmNzJjNDJhZmMwNmU1Y2QxZmJh ZmUzYTMwHhcNMjYwMTAyMDYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmIyNWJiNjQyZTVmZTVjOWRhYzkxMTRiMzRkZmU2ODkwOWYyNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KsGtlnao2Cc/pjMvSE+Sm7xtbwO YphK9raYit8HzUWCJ09YgL8DN8TERTVDAUUO/zNaJCc+CKI6ZPNAhnMsKU/JcxdJ 1qgqvGBTqvTbhXVXfl2AGgokqLjC2U71kgkKdHyuMato6HhXWcudeXQEZ4T0i5Ai D4OHsAys1cEv5wczeXasvgdxH8C/M1tNwPas2ZiAO8pZZP/fqyP2G/PcE6HBTpvI 1PQkV5NW228nR/FMJKgeXWgwvFamo/nvh1iap4vZ2RxUel/7XCiRPapESZmJQVQJ I7MlLd5IUTirTqMeM/+ANm6uIAo1Vqj/Wc/65rhryWPT0HSLe8LuJt3kGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOuyW7ZC5f5cnayRFLNN/miQnybvMB8GA1UdIwQY MBaAFG7NXK1NMwbE9yxCr8BuXNH7r+OjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgt NWZiYzIzMGFiZGMyLzEvNjdKYnRrTGxfbHlkckpFVXMwMy1hSkNmSnU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgtNWZiYzIzMGFiZGMy LzEvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJc1wMA0G CSqGSIb3DQEBCwUAA4IBAQBZ53xKDVb+QHncbNrocIlLHVgvxWUcfhnDEnL8X0u3 WA7yugoQ3XcYwifXZxxV7CeZCXzA9mXkLVtQmjGJxoNf9g43KF4ziVzZ35bxVhcY 4cOiy5vkBsDbzSiowBiOQHu0tjYGwJsupecVejluHdM1H6POmLeFO7p3WXTvd5zW bJwipOMUNIQxax2O/4jSfn2MOGrPD1QLhotCdGViH4xWKEr78nAdV7f/LKBjPqcq gNKo7DiHEtmtXCEL24+BpiriU/IHt+nEgDjOKqn8TLn0Q2Wlte3qAmnT/RoflXA+ SZ8+Vy1eS1RCS/CnZV0Shwx9IAL4oGPGJAk1I2/wnXaQ -----END CERTIFICATE-----Generated at Thu Jan 29 12:36:18 2026 by rpki-client