This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/b6Erm_E0JfoTsx36MNYwRzVz07g.roa File: b6Erm_E0JfoTsx36MNYwRzVz07g.roa (raw, json) Hash identifier: NfV3UCMt2Glm5Jb7jtkUpB797/TB6fH7J8w06K6ZAwc= Subject key identifier: 6F:A1:2B:9B:F1:34:25:FA:13:B3:1D:FA:30:D6:30:47:35:73:D3:B8 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C122FE10E8A2917B883AAAD391646BA Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/b6Erm_E0JfoTsx36MNYwRzVz07g.roa Signing time: Fri 02 Jan 2026 00:18:45 +0000 ROA not before: Fri 02 Jan 2026 00:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8456 IP address blocks: 79.123.176.0/23 maxlen: 23 79.123.178.0/24 maxlen: 24 79.123.179.0/24 maxlen: 24 79.123.180.0/24 maxlen: 24 79.123.181.0/24 maxlen: 24 79.123.182.0/24 maxlen: 24 79.123.183.0/24 maxlen: 24 95.183.228.0/24 maxlen: 24 193.140.192.0/24 maxlen: 24 193.140.193.0/24 maxlen: 24 193.140.194.0/24 maxlen: 24 193.140.195.0/24 maxlen: 24 193.140.196.0/22 maxlen: 22 193.140.196.0/24 maxlen: 24 193.140.199.0/24 maxlen: 24 193.140.200.0/22 maxlen: 22 193.140.200.0/24 maxlen: 24 193.140.201.0/24 maxlen: 24 193.140.203.0/24 maxlen: 24 193.140.204.0/22 maxlen: 24 193.140.208.0/21 maxlen: 24 193.255.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:2f:e1:0e:8a:29:17:b8:83:aa:ad:39:16:46:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fa12b9bf13425fa13b31dfa30d630473573d3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:62:4f:89:52:79:0a:bb:06:01:11:c0:1c: 7d:92:73:70:9f:f3:55:ee:f3:b5:5d:bf:85:92:6f: 08:a5:e0:9f:be:c8:7c:12:47:bd:a7:4a:8d:71:09: dd:24:98:31:e7:ca:6c:ff:30:c7:74:01:e0:34:73: e5:7d:c2:29:6e:d9:84:46:62:66:bc:f7:85:2f:a1: 62:4e:c2:3e:1e:09:82:dc:48:33:d6:10:36:0e:ec: 09:fa:67:1d:58:d9:cb:ec:2d:95:74:f2:ae:dd:27: 9c:c7:15:06:69:7f:6d:20:e5:5d:52:04:65:8a:96: c6:54:f2:44:62:97:88:2d:e5:aa:6f:63:a0:17:d3: 30:30:75:77:c8:1a:c8:5f:98:d5:70:cf:c6:b5:94: 01:eb:ec:74:53:10:83:ef:59:65:ae:5f:be:50:1d: 54:f4:cc:2f:35:ad:19:03:77:2f:2c:3a:22:4e:52: 9f:bf:c1:3f:87:4a:15:b4:d5:66:88:44:e0:e1:4c: b4:4e:4f:39:88:fa:20:85:67:85:e2:5c:1d:16:71: 00:3f:d3:cf:c3:98:29:7e:e9:03:9c:b5:49:d4:44: 5f:22:73:9a:85:0f:d2:a9:33:ed:dd:e3:e7:ce:69: 0a:e0:d7:ce:8f:a4:8a:fb:76:c0:74:cc:57:81:73: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A1:2B:9B:F1:34:25:FA:13:B3:1D:FA:30:D6:30:47:35:73:D3:B8 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/b6Erm_E0JfoTsx36MNYwRzVz07g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.123.176.0/21 95.183.228.0/24 193.140.192.0-193.140.215.255 193.255.30.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:8d:4f:01:f3:9e:ca:24:20:a1:a7:64:ac:1c:23:f6:84:da: ef:ab:4b:e2:bd:eb:e6:82:69:e6:6c:3e:d9:54:49:07:9f:13: 25:27:2b:31:62:66:21:11:90:a8:bd:d6:24:1e:69:b1:17:8f: e1:b9:97:24:62:fe:1c:b3:86:b9:8a:9e:7a:7d:eb:a8:c6:2c: ed:14:17:a3:0b:a2:25:6e:7d:5c:7a:b8:db:46:a9:dc:df:2b: c3:0f:b6:38:69:0f:1f:5c:a8:03:06:41:1e:77:4e:4c:8a:b4: aa:98:04:a4:ed:d7:e2:07:9d:cd:62:7d:f0:02:40:21:fc:28: 56:60:73:03:69:88:2f:e2:1c:db:21:4e:ac:4d:8b:cd:4f:af: 02:ac:2e:15:0d:51:9a:da:d0:e0:8e:26:f0:4f:1d:1a:4e:1c: 69:cb:46:3a:94:b0:36:5b:9c:c2:0c:10:49:29:84:3f:62:a7: 32:34:46:b9:46:86:a9:a4:3c:12:64:67:2a:23:fe:c6:c3:30: c2:e1:65:38:e7:35:f7:10:30:6d:06:51:20:5a:f8:84:68:3d: 7c:e2:2b:47:d6:76:2d:46:61:be:49:54:65:42:27:67:83:22: ec:96:3d:bb:09:99:42:1c:ef:fe:28:a9:95:99:90:41:29:3b: b2:67:6d:17 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8Ei/hDoopF7iDqq05Fka6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmExMmI5YmYxMzQyNWZhMTNiMzFkZmEzMGQ2MzA0NzM1NzNkM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfpiT4lSeQq7BgERwBx9knNwn/NV 7vO1Xb+Fkm8IpeCfvsh8Eke9p0qNcQndJJgx58ps/zDHdAHgNHPlfcIpbtmERmJm vPeFL6FiTsI+HgmC3Egz1hA2DuwJ+mcdWNnL7C2VdPKu3SecxxUGaX9tIOVdUgRl ipbGVPJEYpeILeWqb2OgF9MwMHV3yBrIX5jVcM/GtZQB6+x0UxCD71llrl++UB1U 9MwvNa0ZA3cvLDoiTlKfv8E/h0oVtNVmiETg4Uy0Tk85iPoghWeF4lwdFnEAP9PP w5gpfukDnLVJ1ERfInOahQ/SqTPt3ePnzmkK4NfOj6SK+3bAdMxXgXMllQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFG+hK5vxNCX6E7Md+jDWMEc1c9O4MB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvYjZFcm1fRTBKZm9Uc3gzNk1OWXdSelZ6MDdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDT3uwAwQA X7fkMAwDBAbBjMADBAPBjNADBADB/x4wDQYJKoZIhvcNAQELBQADggEBAA2NTwHz nsokIKGnZKwcI/aE2u+rS+K96+aCaeZsPtlUSQefEyUnKzFiZiERkKi91iQeabEX j+G5lyRi/hyzhrmKnnp966jGLO0UF6MLoiVufVx6uNtGqdzfK8MPtjhpDx9cqAMG QR53TkyKtKqYBKTt1+IHnc1iffACQCH8KFZgcwNpiC/iHNshTqxNi81PrwKsLhUN UZra0OCOJvBPHRpOHGnLRjqUsDZbnMIMEEkphD9ipzI0RrlGhqmkPBJkZyoj/sbD MMLhZTjnNfcQMG0GUSBa+IRoPXziK0fWdi1GYb5JVGVCJ2eDIuyWPbsJmUIc7/4o qZWZkEEpO7JnbRc= -----END CERTIFICATE-----Generated at Mon Jan 26 12:27:02 2026 by rpki-client