This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/siRrAgt6VgHA0m1baM4YFf-i5gE.roa File: siRrAgt6VgHA0m1baM4YFf-i5gE.roa (raw, json) Hash identifier: H+L66KQaqxYD6TNvSo89HsSzeFEI3jv0iuGT7ONN7vs= Subject key identifier: B2:24:6B:02:0B:7A:56:01:C0:D2:6D:5B:68:CE:18:15:FF:A2:E6:01 Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8 Certificate serial: 019B7F832D0BDE9519AF1847CBBFEBB29B58 Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/siRrAgt6VgHA0m1baM4YFf-i5gE.roa Signing time: Fri 02 Jan 2026 16:21:01 +0000 ROA not before: Fri 02 Jan 2026 16:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202482 IP address blocks: 185.161.28.0/24 maxlen: 24 185.161.29.0/24 maxlen: 24 185.161.30.0/24 maxlen: 24 185.161.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:2d:0b:de:95:19:af:18:47:cb:bf:eb:b2:9b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8 Validity Not Before: Jan 2 16:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2246b020b7a5601c0d26d5b68ce1815ffa2e601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:fc:37:0e:86:b3:f4:df:b2:ff:ba:a8:0e: 0b:d1:5d:1e:36:81:12:89:ab:5a:63:5b:06:1a:98: 81:84:0c:15:6d:dc:22:2f:ab:0c:18:34:37:df:4d: 46:bf:21:b0:eb:33:d3:a2:39:d5:bb:24:50:e2:2f: 09:21:41:79:e4:76:00:c4:98:0a:31:f8:b5:0a:f2: c3:1b:78:7c:c6:66:c6:0d:a2:6e:61:62:d7:09:82: 9e:73:0e:36:ca:fb:a5:45:1c:9c:35:dd:56:39:61: 7d:b3:35:fc:53:e9:b7:cb:80:1f:77:c4:6d:c1:7b: 9a:4f:f5:0e:79:56:f8:22:b7:fe:5e:5c:0e:57:25: 9b:2e:45:f8:40:fd:86:a3:78:12:4e:20:6f:ce:fd: d8:5f:09:10:89:11:c4:9c:ae:d8:32:fb:bf:a9:32: ac:d4:93:1d:09:e4:96:be:52:67:97:a6:38:b7:e6: 8f:60:7a:71:31:a4:e7:0c:2d:0e:91:4d:44:22:16: ae:62:81:f3:e4:35:8f:7c:34:ca:e8:ee:35:69:c7: 26:80:ee:78:a0:02:e7:a1:a1:7b:2b:39:1a:a9:f7: 82:f5:2e:2d:b5:16:58:d3:f8:16:f1:d9:6c:aa:06: 4d:a2:59:11:ae:d7:81:a4:e5:03:c7:68:12:6f:8e: 80:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:24:6B:02:0B:7A:56:01:C0:D2:6D:5B:68:CE:18:15:FF:A2:E6:01 X509v3 Authority Key Identifier: keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/siRrAgt6VgHA0m1baM4YFf-i5gE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.28.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:3f:4b:e8:71:73:4d:05:9d:3b:d3:6d:87:c5:23:b2:71:ee: 8b:93:92:37:1a:02:1c:59:b4:ef:08:15:85:ac:e4:5d:0d:e7: 1b:00:a5:88:8a:a4:94:93:d7:81:f6:b3:0f:d8:ea:4d:68:40: 74:de:8e:cc:ab:4a:69:ca:3c:18:16:e5:b9:7e:88:4a:53:c7: 0e:61:4a:86:76:5c:0c:63:d0:67:be:64:dc:28:51:ac:1f:b3: 7e:aa:6f:95:e2:b9:13:1a:39:ee:f4:43:09:e6:01:36:38:d2: de:79:39:44:2d:1c:c7:15:08:40:75:91:13:96:51:1f:8b:6e: 47:7f:e1:ed:e2:19:46:3d:21:b8:85:32:57:09:27:c8:66:79: 03:32:e2:3c:68:71:5b:88:a6:b9:2e:8b:05:e0:22:6d:9a:ca: 1d:9a:e6:14:d1:df:50:58:95:d7:2a:a7:81:16:fd:1d:19:c9: 1e:3c:5f:cd:14:36:84:f5:69:15:ec:09:4e:ab:bf:34:85:7e: a9:c5:a2:80:06:9c:93:bf:a1:df:c5:58:f3:43:4f:a8:6d:f8: 2e:59:2d:3a:0b:cc:da:da:8c:a5:d9:35:4a:4e:f9:17:e3:eb: 00:a6:f7:38:82:fe:49:ff:0b:02:73:17:d1:bc:a7:ce:60:9f: 16:d5:97:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gy0L3pUZrxhHy7/rsptYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhOWZkMmNkZGY0YjQ0ZGU3OWE1YmZjOGNhMTlhNTZmNTUy ZWI0ZTgwHhcNMjYwMTAyMTYyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjI0NmIwMjBiN2E1NjAxYzBkMjZkNWI2OGNlMTgxNWZmYTJlNjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPb8Nw6Gs/Tfsv+6qA4L0V0eNoES iataY1sGGpiBhAwVbdwiL6sMGDQ3301GvyGw6zPTojnVuyRQ4i8JIUF55HYAxJgK Mfi1CvLDG3h8xmbGDaJuYWLXCYKecw42yvulRRycNd1WOWF9szX8U+m3y4Afd8Rt wXuaT/UOeVb4Irf+XlwOVyWbLkX4QP2Go3gSTiBvzv3YXwkQiRHEnK7YMvu/qTKs 1JMdCeSWvlJnl6Y4t+aPYHpxMaTnDC0OkU1EIhauYoHz5DWPfDTK6O41accmgO54 oALnoaF7KzkaqfeC9S4ttRZY0/gW8dlsqgZNolkRrteBpOUDx2gSb46AZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLIkawILelYBwNJtW2jOGBX/ouYBMB8GA1UdIwQY MBaAFIqf0s3fS0TeeaW/yMoZpW9VLrToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXBfU3pkOUxSTjU1cGJfSXlobWxiMVV1dE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ODU4NjctZDZjOS00ZGIwLWI4MDgt NDRlZjU2NzRmZTMwLzEvc2lSckFndDZWZ0hBMG0xYmFNNFlGZi1pNWdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ODU4NjctZDZjOS00ZGIwLWI4MDgtNDRlZjU2NzRmZTMw LzEvaXBfU3pkOUxSTjU1cGJfSXlobWxiMVV1dE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaEcMA0G CSqGSIb3DQEBCwUAA4IBAQAbP0vocXNNBZ07022HxSOyce6Lk5I3GgIcWbTvCBWF rORdDecbAKWIiqSUk9eB9rMP2OpNaEB03o7Mq0ppyjwYFuW5fohKU8cOYUqGdlwM Y9BnvmTcKFGsH7N+qm+V4rkTGjnu9EMJ5gE2ONLeeTlELRzHFQhAdZETllEfi25H f+Ht4hlGPSG4hTJXCSfIZnkDMuI8aHFbiKa5LosF4CJtmsodmuYU0d9QWJXXKqeB Fv0dGckePF/NFDaE9WkV7AlOq780hX6pxaKABpyTv6HfxVjzQ0+obfguWS06C8za 2oyl2TVKTvkX4+sApvc4gv5J/wsCcxfRvKfOYJ8W1ZcD -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:05 2026 by rpki-client