This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sryIYdL-pTyxEJIgq_xCXNzWm2c.roa File: sryIYdL-pTyxEJIgq_xCXNzWm2c.roa (raw, json) Hash identifier: 34vrRywy/Wld/U9QqoCRiFH68pktsAUgx5Yq/UQR7xg= Subject key identifier: B2:BC:88:61:D2:FE:A5:3C:B1:10:92:20:AB:FC:42:5C:DC:D6:9B:67 Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB412F2526A191ED470EE28DFC00AC Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sryIYdL-pTyxEJIgq_xCXNzWm2c.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48108 IP address blocks: 185.120.56.0/24 maxlen: 24 185.120.57.0/24 maxlen: 24 185.120.58.0/24 maxlen: 24 212.22.75.0/24 maxlen: 24 212.22.77.0/24 maxlen: 24 2a06:c3c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:41:2f:25:26:a1:91:ed:47:0e:e2:8d:fc:00:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2bc8861d2fea53cb1109220abfc425cdcd69b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:0c:cc:ee:ad:1f:e7:97:16:4f:b3:ee:f4: d7:e5:28:ce:3e:94:01:90:c0:f6:ab:c2:80:8c:fd: 89:1b:15:be:69:b5:df:4b:1d:4f:b3:24:d6:87:ff: fa:4f:9e:67:eb:94:4e:26:1a:34:c7:8e:74:0b:3a: 98:4a:59:b9:6a:b1:f7:4d:da:ee:c6:2d:c4:1e:bc: 31:59:20:2d:d9:83:a5:8f:1d:ca:ec:b7:f4:cf:58: 94:4c:80:fb:6e:83:15:92:40:90:ca:b4:fc:06:5d: 76:72:4d:69:9e:7d:2b:33:b4:e3:36:08:27:56:ea: 4b:01:0f:0c:e1:57:8b:e7:8b:5c:c7:fe:3c:8c:bf: 0a:4b:22:62:68:01:24:a8:97:a5:48:fd:48:0b:6a: 81:de:19:05:58:c3:92:62:41:1e:eb:92:32:64:5d: a5:7c:97:a5:62:2b:f4:4f:f5:58:df:9f:da:51:4a: cc:7a:bf:eb:f9:95:e2:77:a6:a6:6d:c3:5e:94:0a: 87:f0:0e:c0:4a:ab:54:43:6c:f2:b9:f3:20:e1:6b: 22:bf:09:17:aa:5d:ee:4f:71:b6:42:0b:2d:8a:7b: b9:51:12:6d:1c:8a:d6:a1:47:25:1f:d3:cd:1e:bb: 65:85:6f:3b:36:8d:ff:cc:17:a9:7c:9b:d5:ee:df: 29:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BC:88:61:D2:FE:A5:3C:B1:10:92:20:AB:FC:42:5C:DC:D6:9B:67 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sryIYdL-pTyxEJIgq_xCXNzWm2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.56.0-185.120.58.255 212.22.75.0/24 212.22.77.0/24 IPv6: 2a06:c3c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 95:91:df:1e:a4:be:87:ac:7f:f2:7c:ee:22:d4:5a:a9:7f:46: 66:e9:dd:e3:78:be:29:3a:ff:1c:a2:71:fd:10:65:06:c1:81: fc:28:6b:18:1f:3b:37:28:5f:1e:14:f4:06:c5:44:26:c0:b3: fb:8d:d9:33:87:dc:e2:60:f1:21:e4:1f:d8:2b:25:06:1b:87: 13:7a:a2:09:27:73:e7:0c:0d:9e:52:fd:17:6d:ae:67:2a:17: 10:47:1c:06:7b:97:2a:78:bc:0f:5a:7f:ff:79:43:2e:a7:fa: 40:41:82:2e:2e:95:06:96:81:22:3b:02:c7:9e:0b:6d:8f:dc: 6f:af:c3:db:bf:12:25:34:e4:d2:f9:ec:97:58:43:9f:8e:86: cf:df:1d:54:6b:13:f5:34:9d:2d:e8:ee:76:a5:41:f5:44:9c: 18:cb:15:28:ba:da:fa:2a:33:fb:15:6f:4e:33:44:7b:fe:44: cc:d4:b9:64:7b:f4:ad:74:d5:3d:0a:a9:39:20:b5:69:bc:19: 0b:fd:77:9e:ca:6c:27:3f:37:ff:b6:26:9e:17:18:a5:2d:87: 39:30:69:78:ca:67:9b:c0:f2:ff:b8:bf:99:14:db:4b:a6:58: f3:ee:eb:7b:6e:1c:83:b3:d7:5f:58:5e:e4:eb:02:54:e8:10: 92:c8:b0:4d -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt9y0EvJSahke1HDuKN/ACsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmJjODg2MWQyZmVhNTNjYjExMDkyMjBhYmZjNDI1Y2RjZDY5YjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvsMzO6tH+eXFk+z7vTX5SjOPpQB kMD2q8KAjP2JGxW+abXfSx1PsyTWh//6T55n65ROJho0x450CzqYSlm5arH3Tdru xi3EHrwxWSAt2YOljx3K7Lf0z1iUTID7boMVkkCQyrT8Bl12ck1pnn0rM7TjNggn VupLAQ8M4VeL54tcx/48jL8KSyJiaAEkqJelSP1IC2qB3hkFWMOSYkEe65IyZF2l fJelYiv0T/VY35/aUUrMer/r+ZXid6ambcNelAqH8A7ASqtUQ2zyufMg4WsivwkX ql3uT3G2Qgstinu5URJtHIrWoUclH9PNHrtlhW87No3/zBepfJvV7t8pjwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFLK8iGHS/qU8sRCSIKv8Qlzc1ptnMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvc3J5SVlkTC1wVHl4RUpJZ3FfeENYTnpXbTJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaMAwDBAO5eDgD BAC5eDoDBADUFksDBADUFk0wDwQCAAIwCQMHACoGw8AAATANBgkqhkiG9w0BAQsF AAOCAQEAlZHfHqS+h6x/8nzuItRaqX9GZund43i+KTr/HKJx/RBlBsGB/ChrGB87 NyhfHhT0BsVEJsCz+43ZM4fc4mDxIeQf2CslBhuHE3qiCSdz5wwNnlL9F22uZyoX EEccBnuXKni8D1p//3lDLqf6QEGCLi6VBpaBIjsCx54LbY/cb6/D278SJTTk0vns l1hDn46Gz98dVGsT9TSdLejudqVB9UScGMsVKLra+ioz+xVvTjNEe/5EzNS5ZHv0 rXTVPQqpOSC1abwZC/13nspsJz83/7YmnhcYpS2HOTBpeMpnm8Dy/7i/mRTbS6ZY 8+7re24cg7PXX1he5OsCVOgQksiwTQ== -----END CERTIFICATE-----Generated at Wed Jan 21 15:23:55 2026 by rpki-client