This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/srs-2gJxDmgBkFBU7WzheGqpBy4.roa File: srs-2gJxDmgBkFBU7WzheGqpBy4.roa (raw, json) Hash identifier: M8sahyn+CGhviykxLGO4OXGDUGLt5W/3MG5YlWrxi28= Subject key identifier: B2:BB:3E:DA:02:71:0E:68:01:90:50:54:ED:6C:E1:78:6A:A9:07:2E Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019B7C11355F9147D5EC12BA7A166585AB93 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/srs-2gJxDmgBkFBU7WzheGqpBy4.roa Signing time: Fri 02 Jan 2026 00:17:41 +0000 ROA not before: Fri 02 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60995 IP address blocks: 45.13.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:35:5f:91:47:d5:ec:12:ba:7a:16:65:85:ab:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Jan 2 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2bb3eda02710e6801905054ed6ce1786aa9072e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:e4:02:97:57:6d:73:f5:83:14:8d:99:55: 61:d5:c3:62:79:84:f3:cd:09:3d:11:ed:7a:86:17: 20:ce:44:19:03:8e:60:90:91:e0:a1:69:fd:cc:c2: 0a:41:88:f5:45:a4:e1:42:c4:33:6f:bc:99:14:df: 2f:0b:c3:b2:c1:4c:64:39:29:01:1a:2b:e9:2b:86: a1:70:84:0a:21:6c:07:af:2d:b6:b8:46:8a:66:27: c5:12:53:68:28:a2:86:72:95:60:67:92:b5:e5:df: 82:3c:05:ff:91:a1:c3:54:07:3c:65:16:4c:55:59: 5e:49:f4:a4:f3:77:5f:61:1a:18:3c:18:60:33:ad: d9:94:fa:6d:51:2b:65:89:d9:05:d8:f0:a1:dd:40: eb:53:a2:b1:2b:ef:35:e0:30:e7:6c:f9:ab:30:de: 77:e0:df:a2:7f:f0:0c:e9:de:8c:27:4a:f0:78:d9: 02:f1:2d:06:3e:8c:0a:da:20:33:e7:e4:e5:3f:34: 25:4f:06:20:4e:90:f5:78:49:3f:04:68:ff:b3:61: a6:13:6b:4c:da:86:21:aa:89:a1:91:d7:ec:75:24: 17:61:02:f3:9f:9c:67:ca:4a:ef:80:c6:16:40:88: 7d:43:89:df:f9:0f:8b:e7:ce:64:f2:50:a2:9a:82: b4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BB:3E:DA:02:71:0E:68:01:90:50:54:ED:6C:E1:78:6A:A9:07:2E X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/srs-2gJxDmgBkFBU7WzheGqpBy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.136.0/24 Signature Algorithm: sha256WithRSAEncryption 23:52:36:6c:01:6e:1b:79:a3:4b:83:11:46:89:87:7e:b0:fe: 78:94:a0:89:dd:a9:ec:28:96:0c:f4:2b:21:d1:3a:8a:92:55: 70:9a:34:83:94:c5:40:60:39:0e:a5:7d:1c:c1:72:de:a9:14: b5:fc:54:f3:b3:c7:05:38:cc:bd:ae:8a:e2:fd:52:55:7f:42: 89:04:10:02:58:86:cf:b8:ba:eb:07:21:2c:ed:58:4e:07:92: 82:8a:a9:3b:70:d9:4c:73:dc:2a:00:75:ea:72:c1:ae:33:94: 39:41:65:f6:cc:9e:67:2f:34:4f:c5:a2:3c:c1:0c:e0:9f:84: a2:6c:b5:14:ef:f6:b9:2d:b2:57:98:2e:79:0e:5b:d4:7a:9f: d9:8e:70:9a:bf:2d:c1:1b:bc:95:5f:cd:49:e9:c8:9f:d9:6e: ef:05:52:80:e1:ee:d1:80:ba:75:86:39:c1:a2:06:f2:50:eb: 67:33:08:b2:d6:6c:2a:83:7a:a7:62:f3:64:f7:0e:1f:bf:c3: b6:78:6e:a7:5f:26:e1:06:69:c6:47:5b:f9:be:b3:68:fe:15: dc:18:95:6c:72:2a:00:7c:1a:85:4e:1f:3a:36:49:e6:87:b3: 36:8b:69:c1:32:15:7f:e7:4e:2f:2b:55:01:1a:7f:72:df:80: 0e:e8:d1:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ETVfkUfV7BK6ehZlhauTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYwMTAyMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmJiM2VkYTAyNzEwZTY4MDE5MDUwNTRlZDZjZTE3ODZhYTkwNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz3kApdXbXP1gxSNmVVh1cNieYTz zQk9Ee16hhcgzkQZA45gkJHgoWn9zMIKQYj1RaThQsQzb7yZFN8vC8OywUxkOSkB GivpK4ahcIQKIWwHry22uEaKZifFElNoKKKGcpVgZ5K15d+CPAX/kaHDVAc8ZRZM VVleSfSk83dfYRoYPBhgM63ZlPptUStlidkF2PCh3UDrU6KxK+814DDnbPmrMN53 4N+if/AM6d6MJ0rweNkC8S0GPowK2iAz5+TlPzQlTwYgTpD1eEk/BGj/s2GmE2tM 2oYhqomhkdfsdSQXYQLzn5xnykrvgMYWQIh9Q4nf+Q+L585k8lCimoK0TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLK7PtoCcQ5oAZBQVO1s4XhqqQcuMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc3JzLTJnSnhEbWdCa0ZCVTdXemhlR3FwQnk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ2IMA0G CSqGSIb3DQEBCwUAA4IBAQAjUjZsAW4beaNLgxFGiYd+sP54lKCJ3ansKJYM9Csh 0TqKklVwmjSDlMVAYDkOpX0cwXLeqRS1/FTzs8cFOMy9rori/VJVf0KJBBACWIbP uLrrByEs7VhOB5KCiqk7cNlMc9wqAHXqcsGuM5Q5QWX2zJ5nLzRPxaI8wQzgn4Si bLUU7/a5LbJXmC55DlvUep/ZjnCavy3BG7yVX81J6cif2W7vBVKA4e7RgLp1hjnB ogbyUOtnMwiy1mwqg3qnYvNk9w4fv8O2eG6nXybhBmnGR1v5vrNo/hXcGJVscioA fBqFTh86Nknmh7M2i2nBMhV/504vK1UBGn9y34AO6NGN -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:26 2026 by rpki-client