This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SRGzPBiTreUhvJ5dW2N9vn--oLQ.roa File: SRGzPBiTreUhvJ5dW2N9vn--oLQ.roa (raw, json) Hash identifier: FstQ/9sn45fkTmFT1CHch5u79zanWtRBlJ/bSMPgSuk= Subject key identifier: 49:11:B3:3C:18:93:AD:E5:21:BC:9E:5D:5B:63:7D:BE:7F:BE:A0:B4 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA489D256E3AEF1B1746DB8A27B78B4 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SRGzPBiTreUhvJ5dW2N9vn--oLQ.roa Signing time: Thu 01 Jan 2026 22:18:59 +0000 ROA not before: Thu 01 Jan 2026 22:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16353 IP address blocks: 45.153.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:89:d2:56:e3:ae:f1:b1:74:6d:b8:a2:7b:78:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4911b33c1893ade521bc9e5d5b637dbe7fbea0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:bc:d5:cc:08:28:17:60:87:bd:be:91:71: 89:75:ca:7c:9c:30:b8:d8:8d:13:b7:9a:85:45:75: 43:4c:66:84:c3:5e:64:b4:80:3a:b4:5b:c6:04:55: 22:97:1f:88:2c:6f:73:9b:d6:1f:11:63:79:25:26: 40:ff:85:ca:a9:8f:c8:33:78:41:60:9d:7b:45:8a: 5f:7e:39:6b:15:36:ae:c1:26:79:98:fb:24:a6:fc: d9:b6:fc:9f:3c:7e:b1:35:ca:c6:67:73:ee:f4:aa: 0f:98:03:de:73:27:4c:be:0d:fe:db:a0:ba:d6:e8: d8:1b:25:b2:5b:48:41:42:01:21:97:b0:0d:e8:e6: e1:8c:68:4f:ec:0c:5f:6c:0f:bc:c1:89:75:19:ee: 7c:08:77:fd:14:e9:30:51:a3:ff:c6:2b:1e:f6:e6: ee:08:d1:91:62:15:05:f7:47:77:2c:fb:4a:db:8a: 10:cf:30:ef:0d:96:21:1e:b2:70:9b:1a:52:6a:51: a0:37:de:84:8c:00:06:3e:f2:a5:af:61:87:be:a8: 0d:39:17:6b:0c:98:31:dc:60:81:97:ba:de:4b:87: 3b:2c:55:ff:12:a8:ad:7d:81:d4:f7:4a:c8:5a:4e: 0f:3b:91:47:38:09:ff:e4:bd:16:96:8a:4b:0b:8a: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:11:B3:3C:18:93:AD:E5:21:BC:9E:5D:5B:63:7D:BE:7F:BE:A0:B4 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SRGzPBiTreUhvJ5dW2N9vn--oLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.228.0/24 Signature Algorithm: sha256WithRSAEncryption 60:82:08:aa:b6:d4:ad:cf:21:c3:16:82:b5:e7:d7:f9:18:56: 9d:ef:a0:e2:17:73:ea:a7:94:ce:77:d5:c5:87:70:ad:d5:d0: 3e:1e:60:90:cc:8c:ae:52:73:cb:59:ca:7e:a5:30:96:9e:c7: 72:5e:d8:4d:4a:aa:3d:71:1e:2e:65:ac:15:2f:b7:b3:c6:96: 20:bc:64:b5:cf:ea:23:a7:c0:c3:f3:84:1f:cb:80:3b:ae:4c: 2e:89:71:4a:75:e9:9a:89:71:d1:11:9b:11:68:e7:41:bb:2a: 8d:7f:29:09:a6:60:a7:73:a1:ae:bc:2c:9d:0e:9f:ce:da:9f: d0:1f:35:49:05:93:f9:c9:6a:85:4b:80:7b:93:2b:ff:ec:05: b6:8b:bd:3d:2c:49:a3:fb:cc:17:5b:d8:e1:79:d2:c3:19:ff: 5e:31:b7:78:bc:d2:b9:37:69:df:b9:f2:17:a7:59:bc:e6:97: 93:b0:65:e6:a5:65:9b:0c:df:40:da:32:60:6c:5f:f8:6c:98: c6:d8:70:90:ed:d2:f3:a9:67:4e:c2:10:8f:1d:06:d0:e0:6c: 7a:ec:53:70:71:f4:70:f1:a3:ab:ce:75:b7:4a:9a:10:55:05: 2a:71:9b:2a:90:1e:d3:66:5b:25:af:d7:b7:16:89:7a:72:8a: 96:f6:43:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pInSVuOu8bF0bbiie3i0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTExYjMzYzE4OTNhZGU1MjFiYzllNWQ1YjYzN2RiZTdmYmVhMGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MO81cwIKBdgh72+kXGJdcp8nDC4 2I0Tt5qFRXVDTGaEw15ktIA6tFvGBFUilx+ILG9zm9YfEWN5JSZA/4XKqY/IM3hB YJ17RYpffjlrFTauwSZ5mPskpvzZtvyfPH6xNcrGZ3Pu9KoPmAPecydMvg3+26C6 1ujYGyWyW0hBQgEhl7AN6ObhjGhP7AxfbA+8wYl1Ge58CHf9FOkwUaP/xise9ubu CNGRYhUF90d3LPtK24oQzzDvDZYhHrJwmxpSalGgN96EjAAGPvKlr2GHvqgNORdr DJgx3GCBl7reS4c7LFX/EqitfYHU90rIWk4PO5FHOAn/5L0WlopLC4rwSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkRszwYk63lIbyeXVtjfb5/vqC0MB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvU1JHelBCaVRyZVVodko1ZFcyTjl2bi0tb0xRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZnkMA0G CSqGSIb3DQEBCwUAA4IBAQBgggiqttStzyHDFoK159f5GFad76DiF3Pqp5TOd9XF h3Ct1dA+HmCQzIyuUnPLWcp+pTCWnsdyXthNSqo9cR4uZawVL7ezxpYgvGS1z+oj p8DD84Qfy4A7rkwuiXFKdemaiXHREZsRaOdBuyqNfykJpmCnc6GuvCydDp/O2p/Q HzVJBZP5yWqFS4B7kyv/7AW2i709LEmj+8wXW9jhedLDGf9eMbd4vNK5N2nfufIX p1m85peTsGXmpWWbDN9A2jJgbF/4bJjG2HCQ7dLzqWdOwhCPHQbQ4Gx67FNwcfRw 8aOrznW3SpoQVQUqcZsqkB7TZlslr9e3Fol6coqW9kPf -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:11 2026 by rpki-client