This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/srgFShOceYZc8BEx-4KRd7_dBNs.roa File: srgFShOceYZc8BEx-4KRd7_dBNs.roa (raw, json) Hash identifier: s6LZiMCYlJdzG+ZeLeEfHIvrSApv9TQoNoxc3N5VXmE= Subject key identifier: B2:B8:05:4A:13:9C:79:86:5C:F0:11:31:FB:82:91:77:BF:DD:04:DB Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054 Certificate serial: 019B78A345E66D42FFF4AB137BCED16C158E Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/srgFShOceYZc8BEx-4KRd7_dBNs.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42828 IP address blocks: 185.84.104.0/24 maxlen: 24 185.84.105.0/24 maxlen: 24 185.84.106.0/24 maxlen: 24 185.84.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:45:e6:6d:42:ff:f4:ab:13:7b:ce:d1:6c:15:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2b8054a139c79865cf01131fb829177bfdd04db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:76:b4:db:92:35:f4:36:03:4f:0b:93:b0: e8:99:a6:d0:b3:1b:16:4d:e3:09:4d:ca:a5:b6:0e: 30:a1:6e:a2:9a:d8:92:20:60:5c:bd:8f:61:3d:08: b8:5f:cb:af:81:93:42:37:73:74:7c:af:43:00:79: af:9a:d0:a3:fb:98:09:62:68:01:68:3b:bb:aa:fe: ea:d2:3e:13:3e:d7:67:10:4c:42:e3:9b:e6:96:35: 1a:0a:cf:dc:a1:9e:30:e2:5f:d9:d9:24:96:b1:2a: d5:31:03:13:d8:aa:50:df:35:36:6c:e4:06:f2:ae: f9:d8:5a:9f:72:3f:d8:74:e0:1c:b6:e1:24:3f:79: 06:b9:c8:a8:c3:41:2c:5b:f8:7e:12:5b:e6:bb:50: 18:c4:97:81:be:c4:f6:a7:95:40:76:67:45:a0:8c: f1:25:27:0e:56:d4:19:77:73:65:ee:21:8c:05:64: 0f:86:74:40:4c:fd:79:3b:7d:76:31:55:56:ec:97: ea:61:dd:43:26:26:7a:79:3e:f3:60:e8:4f:da:c1: ba:15:0f:68:1f:06:f4:7f:be:47:fd:5d:35:8e:23: b3:a6:7e:95:80:6c:13:0d:34:b9:4b:02:02:1e:d3: 12:d1:5d:98:1b:8c:7b:d5:69:81:9f:19:36:ac:68: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B8:05:4A:13:9C:79:86:5C:F0:11:31:FB:82:91:77:BF:DD:04:DB X509v3 Authority Key Identifier: keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/srgFShOceYZc8BEx-4KRd7_dBNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.104.0/22 Signature Algorithm: sha256WithRSAEncryption 84:30:cd:01:12:58:7e:57:3b:95:42:3a:f3:c2:38:46:3a:bb: d9:1c:71:60:79:5d:6a:a7:54:b8:d2:00:30:b8:c0:cf:87:ac: 39:00:08:c1:90:92:84:ec:79:89:56:c4:a8:be:25:d1:fe:6b: ef:44:3e:68:ab:c9:ae:1c:52:05:a6:56:90:4b:08:56:c4:b9: 77:75:a7:f6:44:70:0e:6c:86:e0:d1:56:45:0a:bc:9d:de:5a: 1b:43:fc:97:6e:06:f2:c5:9e:26:40:c8:84:8b:71:57:c4:49: 44:1b:c0:57:26:23:dd:db:92:5e:34:29:4a:31:90:a1:da:93: 32:12:2f:81:81:2c:a5:6d:de:f2:ac:67:50:56:b6:34:0d:f1: 48:b3:e9:b4:f8:25:8b:ac:e7:0f:47:2e:ea:2b:89:3f:a7:ed: ea:c5:65:ab:25:b0:c0:00:7a:01:10:d7:a3:3d:00:21:f1:ef: 25:88:b1:eb:d5:82:6b:72:a7:cf:25:4f:e5:d9:83:a8:f3:37: c7:5d:7a:d0:ab:51:f8:51:59:5f:5a:bd:53:92:aa:dd:31:d6: 2e:fa:6e:a8:c4:23:ff:4c:36:16:64:b2:8e:4f:61:e0:d0:30: 1e:9e:8b:b2:f6:43:fe:3f:9f:a5:08:4a:57:d2:82:31:8a:bf: 28:16:ae:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0XmbUL/9KsTe87RbBWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzhjNGEwNjZlMmMxNTAzMTNlZTFjMDg3NDcxZjNjOGIw ZGUwNTQwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmI4MDU0YTEzOWM3OTg2NWNmMDExMzFmYjgyOTE3N2JmZGQwNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVh2tNuSNfQ2A08Lk7DomabQsxsW TeMJTcqltg4woW6imtiSIGBcvY9hPQi4X8uvgZNCN3N0fK9DAHmvmtCj+5gJYmgB aDu7qv7q0j4TPtdnEExC45vmljUaCs/coZ4w4l/Z2SSWsSrVMQMT2KpQ3zU2bOQG 8q752Fqfcj/YdOActuEkP3kGuciow0EsW/h+Elvmu1AYxJeBvsT2p5VAdmdFoIzx JScOVtQZd3Nl7iGMBWQPhnRATP15O312MVVW7JfqYd1DJiZ6eT7zYOhP2sG6FQ9o Hwb0f75H/V01jiOzpn6VgGwTDTS5SwICHtMS0V2YG4x71WmBnxk2rGjVzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLK4BUoTnHmGXPARMfuCkXe/3QTbMB8GA1UdIwQY MBaAFOvIxKBm4sFQMT7hwIdHHzyLDeBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMt NDdlYWQ1MzcyYmZiLzEvc3JnRlNoT2NlWVpjOEJFeC00S1JkN19kQk5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMtNDdlYWQ1MzcyYmZi LzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVRoMA0G CSqGSIb3DQEBCwUAA4IBAQCEMM0BElh+VzuVQjrzwjhGOrvZHHFgeV1qp1S40gAw uMDPh6w5AAjBkJKE7HmJVsSoviXR/mvvRD5oq8muHFIFplaQSwhWxLl3daf2RHAO bIbg0VZFCryd3lobQ/yXbgbyxZ4mQMiEi3FXxElEG8BXJiPd25JeNClKMZCh2pMy Ei+BgSylbd7yrGdQVrY0DfFIs+m0+CWLrOcPRy7qK4k/p+3qxWWrJbDAAHoBENej PQAh8e8liLHr1YJrcqfPJU/l2YOo8zfHXXrQq1H4UVlfWr1TkqrdMdYu+m6oxCP/ TDYWZLKOT2Hg0DAenouy9kP+P5+lCEpX0oIxir8oFq4q -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:07 2026 by rpki-client