This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/SRYxzczEXmhncJE8vjovYVerhU0.roa File: SRYxzczEXmhncJE8vjovYVerhU0.roa (raw, json) Hash identifier: f3BIypX5l7UFnGCWgZnN4C06Az0MJBR1k/+NKCJisp4= Subject key identifier: 49:16:31:CD:CC:C4:5E:68:67:70:91:3C:BE:3A:2F:61:57:AB:85:4D Certificate issuer: /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed Certificate serial: 019B79ECA1BE2855ED4D18CB0844BBC45577 Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/SRYxzczEXmhncJE8vjovYVerhU0.roa Signing time: Thu 01 Jan 2026 14:18:29 +0000 ROA not before: Thu 01 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48348 IP address blocks: 185.208.216.0/22 maxlen: 22 185.208.216.0/24 maxlen: 24 185.208.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a1:be:28:55:ed:4d:18:cb:08:44:bb:c4:55:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=491631cdccc45e686770913cbe3a2f6157ab854d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:64:b7:3a:40:6a:12:e3:43:c9:fb:1a:7e: 80:90:69:6e:1a:8b:dd:15:62:c9:28:40:68:a9:0a: 73:ba:37:8a:df:65:bc:3a:64:6a:7e:82:3e:c7:f9: 6d:3c:86:32:b0:57:c5:d1:01:f1:fa:92:56:0f:bf: 1e:fa:37:3c:d1:bf:f1:b9:78:92:0c:d8:18:69:95: 44:3b:d6:99:6a:58:10:61:3d:d2:d0:41:a3:5b:d0: 0e:ea:cd:e3:5f:54:b1:34:14:a5:4b:04:05:71:50: 41:0f:27:04:3d:d4:be:4f:8b:41:b7:9f:61:65:4f: 1b:b2:45:3e:05:b0:24:27:f7:e7:ac:3e:47:a1:23: 63:47:3c:2e:b6:f5:29:e2:b5:bf:92:5c:b1:ef:b3: fb:c1:a8:47:10:ea:b8:83:19:d0:69:b4:e3:42:c5: 45:60:2c:a1:30:85:e2:18:7a:ac:6e:9f:a0:e7:fd: 2c:dc:9b:01:02:d7:69:99:8f:e3:5f:12:2f:c2:65: d1:aa:60:dc:42:f1:f7:95:18:ee:ba:22:de:01:30: b4:11:e6:66:5a:a4:bb:6e:91:7e:39:f5:d3:cb:70: 69:20:63:9e:31:a3:b0:83:60:38:9a:d5:27:e4:ed: b4:99:96:ab:77:eb:63:c1:bd:c0:6d:06:06:6e:29: b6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:16:31:CD:CC:C4:5E:68:67:70:91:3C:BE:3A:2F:61:57:AB:85:4D X509v3 Authority Key Identifier: keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/SRYxzczEXmhncJE8vjovYVerhU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.216.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:a5:37:24:30:c0:90:5c:f8:8e:ab:e6:7c:9d:f0:93:96:ed: d6:be:c7:fa:18:a6:f6:a0:e3:a4:43:84:fb:9a:af:64:bd:e3: 00:c5:fe:97:95:f3:42:55:9f:a2:2b:b1:8d:79:a0:cd:3c:45: bc:13:03:19:2f:ed:17:6b:7e:9f:ad:06:b5:bc:d6:96:9f:02: ad:df:57:6d:44:cb:ad:84:f7:dc:c7:bf:ff:14:56:5f:3a:77: 63:6c:4c:62:13:5e:bc:4f:2d:cd:0f:51:41:f0:44:a0:eb:99: 86:af:f1:ef:0d:0e:74:f0:08:b6:51:9c:91:f3:9a:d9:b0:d6: bd:06:f1:9d:dd:0b:37:83:ed:ae:2c:3f:a8:2e:7c:07:cd:73: 57:47:12:44:26:dc:3e:6f:ca:88:05:dc:98:c4:32:5b:73:e2: 55:4f:19:c7:5d:5c:f4:0a:01:3e:93:00:77:88:13:a0:8c:6a: 12:53:56:fd:9a:e8:a7:b3:74:5d:85:c5:f8:5b:fa:36:21:dc: 51:c0:da:28:77:5a:4d:3a:26:fc:38:17:98:06:b9:d5:9e:4b: 88:31:83:12:0d:2d:f7:f9:c5:da:aa:ae:37:90:e1:73:b1:5c: fd:fc:c2:4c:40:e0:45:b5:85:ef:f1:66:2b:55:86:f7:34:72: 5d:11:63:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57KG+KFXtTRjLCES7xFV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjJiMmY2MTEzYmE0MzBmNzJlNTU0NDViNWM3ODQ5ZGM3 Y2ZhZWQwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTE2MzFjZGNjYzQ1ZTY4Njc3MDkxM2NiZTNhMmY2MTU3YWI4NTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQVktzpAahLjQ8n7Gn6AkGluGovd FWLJKEBoqQpzujeK32W8OmRqfoI+x/ltPIYysFfF0QHx+pJWD78e+jc80b/xuXiS DNgYaZVEO9aZalgQYT3S0EGjW9AO6s3jX1SxNBSlSwQFcVBBDycEPdS+T4tBt59h ZU8bskU+BbAkJ/fnrD5HoSNjRzwutvUp4rW/klyx77P7wahHEOq4gxnQabTjQsVF YCyhMIXiGHqsbp+g5/0s3JsBAtdpmY/jXxIvwmXRqmDcQvH3lRjuuiLeATC0EeZm WqS7bpF+OfXTy3BpIGOeMaOwg2A4mtUn5O20mZard+tjwb3AbQYGbim2AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkWMc3MxF5oZ3CRPL46L2FXq4VNMB8GA1UdIwQY MBaAFFiysvYRO6Qw9y5VRFtceEncfPrtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xLeTloRTdwREQzTGxWRVcxeDRTZHg4LXUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83YjM2OWYtYjA2ZS00YWYwLTlhY2It YTRjY2NlZjhjNGE4LzEvU1JZeHpjekVYbWhuY0pFOHZqb3ZZVmVyaFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My83YjM2OWYtYjA2ZS00YWYwLTlhY2ItYTRjY2NlZjhjNGE4 LzEvV0xLeTloRTdwREQzTGxWRVcxeDRTZHg4LXUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudDYMA0G CSqGSIb3DQEBCwUAA4IBAQBfpTckMMCQXPiOq+Z8nfCTlu3Wvsf6GKb2oOOkQ4T7 mq9kveMAxf6XlfNCVZ+iK7GNeaDNPEW8EwMZL+0Xa36frQa1vNaWnwKt31dtRMut hPfcx7//FFZfOndjbExiE168Ty3ND1FB8ESg65mGr/HvDQ508Ai2UZyR85rZsNa9 BvGd3Qs3g+2uLD+oLnwHzXNXRxJEJtw+b8qIBdyYxDJbc+JVTxnHXVz0CgE+kwB3 iBOgjGoSU1b9muins3RdhcX4W/o2IdxRwNood1pNOib8OBeYBrnVnkuIMYMSDS33 +cXaqq43kOFzsVz9/MJMQOBFtYXv8WYrVYb3NHJdEWP2 -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:34 2026 by rpki-client