This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa File: SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa (raw, json) Hash identifier: mkRGoCYQs5pO/fqORGXARxwk0SLVCsNlvRMucJrxHow= Subject key identifier: 4A:24:7C:14:71:CA:75:B5:EA:9B:03:24:8D:96:4E:AB:B1:D9:B7:1A Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780 Certificate serial: 019B7C110CE8A5A7454276CCDACD192B056F Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa Signing time: Fri 02 Jan 2026 00:17:30 +0000 ROA not before: Fri 02 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208621 IP address blocks: 45.92.36.0/24 maxlen: 24 45.92.37.0/24 maxlen: 24 45.92.38.0/24 maxlen: 24 45.92.39.0/24 maxlen: 24 2a0e:1bc0::/35 maxlen: 35 2a0e:1bc0:2000::/35 maxlen: 35 2a0e:1bc0:4000::/35 maxlen: 35 2a0e:1bc0:6000::/35 maxlen: 35 2a0e:1bc1::/35 maxlen: 35 2a0e:1bc1:2000::/35 maxlen: 35 2a0e:1bc1:4000::/35 maxlen: 35 2a0e:1bc1:6000::/35 maxlen: 35 2a0e:1bc4::/35 maxlen: 35 2a0e:1bc5::/35 maxlen: 35 2a0e:1bc7::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:0c:e8:a5:a7:45:42:76:cc:da:cd:19:2b:05:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780 Validity Not Before: Jan 2 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a247c1471ca75b5ea9b03248d964eabb1d9b71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e0:17:77:bb:64:64:88:63:f9:58:b2:eb:b2: 6e:cf:b6:bd:8b:d5:1c:e7:28:d6:b1:15:51:3d:d3: a1:18:f8:d4:2c:67:8e:83:1e:b8:bd:15:91:46:3b: fa:96:78:8e:c5:e1:6a:20:e7:92:4f:1f:ab:47:c8: 50:e6:55:77:5e:20:9f:5f:34:e8:a6:94:b5:9d:df: 7a:97:d9:95:4a:2c:fc:00:3c:be:6d:af:b8:70:d2: af:9b:17:a6:dc:65:54:13:15:46:22:d2:93:a9:20: 16:58:bd:55:fe:f5:4b:c3:ed:2d:e9:a2:70:33:8d: f5:fd:8f:c6:81:d2:ff:2f:bb:65:3e:15:2c:15:81: 66:3b:c8:0a:8b:83:d8:57:bb:c1:f4:85:6e:d7:ec: 19:a1:0e:8f:17:e5:f7:7a:d2:2e:79:ed:47:57:c7: a1:3d:5f:70:3f:73:66:ea:fa:b8:37:8d:1a:d4:f9: 37:a1:06:15:2f:cb:55:0d:c5:e4:d6:ec:6b:a5:a6: ea:e2:cf:bf:fb:d9:1b:51:9e:25:83:af:d9:05:66: 51:58:64:cc:2c:1d:5e:bd:23:7e:90:ef:6d:d5:60: af:36:8b:22:67:b0:3a:7f:29:b8:a1:df:43:9b:5d: 72:94:44:76:5a:38:31:8e:48:39:f7:9e:f8:ae:a6: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:24:7C:14:71:CA:75:B5:EA:9B:03:24:8D:96:4E:AB:B1:D9:B7:1A X509v3 Authority Key Identifier: keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.36.0/22 IPv6: 2a0e:1bc0::/33 2a0e:1bc1::/33 2a0e:1bc4::/35 2a0e:1bc5::/35 2a0e:1bc7::/35 Signature Algorithm: sha256WithRSAEncryption 53:f3:88:a6:cd:12:81:87:06:24:19:0d:e9:57:03:e4:f5:55: f6:99:0a:d7:8e:65:d1:3d:83:50:c4:17:63:6c:67:d6:14:f6: c5:b5:e1:62:27:a7:20:c4:da:71:ba:ea:06:f9:50:f2:05:07: 85:dc:f9:d4:b8:08:7b:c3:4a:73:b8:20:3b:35:de:04:c3:19: 2f:1c:5b:67:8d:8d:50:27:6e:2c:4d:7f:c5:c3:12:d0:24:ef: 9f:24:73:23:f8:6c:c6:1f:b6:01:a3:5e:97:88:85:fd:5a:af: f5:17:18:18:06:ec:29:19:08:ca:64:57:96:72:68:1b:27:22: 69:b9:db:7a:88:59:75:a0:ee:9c:0f:3b:e2:98:b8:9a:a2:8c: 4e:d6:99:a8:5f:de:c8:07:ba:75:b7:23:67:92:ee:e1:cf:af: af:f3:8e:15:4e:19:1a:ba:9b:b0:09:8a:04:7f:36:af:69:e8: 7e:89:d4:4b:92:78:b5:de:2e:93:c6:61:b4:70:df:31:57:e2: 8e:1b:69:d8:cf:eb:e5:45:4a:b4:ea:5b:ae:d8:85:13:1f:62: e8:c4:0e:da:65:2c:07:04:1a:d6:8f:c6:e7:48:9c:2d:f2:9f: 5d:a8:4a:08:f4:2e:e8:8c:3a:e2:06:8c:22:9b:97:86:00:1d: 1f:48:2a:fd -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt8EQzopadFQnbM2s0ZKwVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjg2NTYxMjYxOTgzNzNkMDc4ODZiZjRhYjhmYjA2Yjkw MDY3ODAwHhcNMjYwMTAyMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTI0N2MxNDcxY2E3NWI1ZWE5YjAzMjQ4ZDk2NGVhYmIxZDliNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+AXd7tkZIhj+Viy67Juz7a9i9Uc 5yjWsRVRPdOhGPjULGeOgx64vRWRRjv6lniOxeFqIOeSTx+rR8hQ5lV3XiCfXzTo ppS1nd96l9mVSiz8ADy+ba+4cNKvmxem3GVUExVGItKTqSAWWL1V/vVLw+0t6aJw M431/Y/GgdL/L7tlPhUsFYFmO8gKi4PYV7vB9IVu1+wZoQ6PF+X3etIuee1HV8eh PV9wP3Nm6vq4N40a1Pk3oQYVL8tVDcXk1uxrpabq4s+/+9kbUZ4lg6/ZBWZRWGTM LB1evSN+kO9t1WCvNosiZ7A6fym4od9Dm11ylER2Wjgxjkg59574rqYzRQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFEokfBRxynW16psDJI2WTqux2bcaMB8GA1UdIwQY MBaAFBtoZWEmGYNz0HiGv0q4+wa5AGeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODIt MjM5ODcwNGFiNTBjLzEvU2lSOEZISEtkYlhxbXdNa2paWk9xN0hadHhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODItMjM5ODcwNGFiNTBj LzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAMBAIAATAGAwQCLVwkMC4E AgACMCgDBgcqDhvAAAMGByoOG8EAAwYFKg4bxAADBgUqDhvFAAMGBSoOG8cAMA0G CSqGSIb3DQEBCwUAA4IBAQBT84imzRKBhwYkGQ3pVwPk9VX2mQrXjmXRPYNQxBdj bGfWFPbFteFiJ6cgxNpxuuoG+VDyBQeF3PnUuAh7w0pzuCA7Nd4EwxkvHFtnjY1Q J24sTX/FwxLQJO+fJHMj+GzGH7YBo16XiIX9Wq/1FxgYBuwpGQjKZFeWcmgbJyJp udt6iFl1oO6cDzvimLiaooxO1pmoX97IB7p1tyNnku7hz6+v844VThkaupuwCYoE fzavaeh+idRLkni13i6TxmG0cN8xV+KOG2nYz+vlRUq06luu2IUTH2LoxA7aZSwH BBrWj8bnSJwt8p9dqEoI9C7ojDriBowim5eGAB0fSCr9 -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:00 2026 by rpki-client