This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/SRrECMJ3ZMD_TfSXLnYqpll22u4.roa File: SRrECMJ3ZMD_TfSXLnYqpll22u4.roa (raw, json) Hash identifier: qizHkZ1GpDS36mFIdR1OgqUp05JcTddRBFeSdEQ59Wg= Subject key identifier: 49:1A:C4:08:C2:77:64:C0:FF:4D:F4:97:2E:76:2A:A6:59:76:DA:EE Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598 Certificate serial: 019B79EBCF3ABD2D5D68CA920D3BB1D908C5 Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/SRrECMJ3ZMD_TfSXLnYqpll22u4.roa Signing time: Thu 01 Jan 2026 14:17:35 +0000 ROA not before: Thu 01 Jan 2026 14:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202391 IP address blocks: 185.83.180.0/24 maxlen: 24 185.170.236.0/22 maxlen: 24 185.170.236.0/24 maxlen: 24 185.170.237.0/24 maxlen: 24 185.170.238.0/24 maxlen: 24 185.170.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:cf:3a:bd:2d:5d:68:ca:92:0d:3b:b1:d9:08:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598 Validity Not Before: Jan 1 14:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=491ac408c27764c0ff4df4972e762aa65976daee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:f0:c5:6b:92:bf:6e:c7:f1:13:bd:f5:f8: 5b:10:84:06:33:77:dd:85:00:6b:a9:11:b2:1f:42: 9e:d8:e8:42:8b:5b:dc:8f:f2:34:4a:31:4e:77:ff: 4f:c1:ba:9c:9c:40:0b:32:23:2c:f7:7c:e5:1d:02: 0a:46:77:bf:5f:0e:a5:69:ab:90:9e:47:47:e4:21: a3:43:7c:2c:e3:f7:47:7e:4d:c9:71:39:99:c5:e8: 2c:b4:cc:7b:8f:c0:42:bb:53:96:99:8f:8c:ef:e6: b7:03:0d:e2:25:32:c0:b2:99:78:f8:68:ca:9a:f5: 92:8f:fa:1b:a3:59:8f:05:1d:9b:02:91:0d:e8:9b: f5:46:80:95:bc:da:59:ea:9d:c3:51:5b:49:d2:8a: 4a:68:fc:0a:e5:43:05:11:b8:0d:d2:4f:9f:3a:ca: d7:54:e0:cd:5b:5f:f5:d6:ad:fe:65:cb:4b:10:28: ad:57:71:fc:e8:50:76:42:e9:d1:2f:33:14:78:7f: b7:cc:27:5d:b3:c5:f4:93:92:36:3a:92:7d:bd:93: f8:21:c6:c9:4f:0b:5e:a8:2e:43:7a:ae:3a:d4:96: 94:4f:40:a3:eb:15:85:e0:5c:f8:6e:aa:68:cd:a5: 36:f3:08:9c:87:76:10:37:db:85:8a:6d:89:fb:da: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1A:C4:08:C2:77:64:C0:FF:4D:F4:97:2E:76:2A:A6:59:76:DA:EE X509v3 Authority Key Identifier: keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/SRrECMJ3ZMD_TfSXLnYqpll22u4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.180.0/24 185.170.236.0/22 Signature Algorithm: sha256WithRSAEncryption 01:4d:bb:3d:18:e9:73:97:19:fa:c9:43:ec:f3:01:06:ec:71: 8f:3b:43:63:97:08:ed:25:d3:15:13:9c:2d:76:e5:c4:e5:c9: b2:ec:51:3f:48:c5:33:e3:03:93:ad:5d:75:44:3d:dd:d6:51: 03:67:45:9c:54:ee:ce:b6:fe:c2:46:1a:e3:7f:86:00:e8:12: fc:cf:9c:70:21:0f:78:d9:b7:6c:fa:72:03:e9:c9:17:3a:f5: 30:87:53:a6:a9:3a:4c:c3:ab:bc:51:93:5c:c3:37:8c:1e:67: da:a5:4b:dc:cd:e2:eb:90:f8:6f:31:e1:49:57:79:73:a8:04: ac:5b:0d:c6:87:8c:30:df:60:c0:84:04:6c:d0:5e:e6:c9:6f: 7e:7a:25:e4:3d:f0:31:34:7d:8e:f9:08:a5:80:50:d2:e8:6b: 94:0e:44:ee:c3:af:34:e2:10:98:99:f4:7f:f0:db:2b:eb:1d: 7a:95:58:4d:45:f4:89:1f:b0:11:19:0a:c1:33:e5:9b:9d:18: 2c:c7:09:56:31:8d:b9:ab:36:d5:7b:d2:12:b2:33:bc:58:55: 66:69:ea:d7:2f:13:0e:c6:8d:d0:ee:79:4b:60:28:80:c3:2c: 39:a5:2e:43:63:f8:1e:80:9a:da:ef:48:bb:4d:d2:c7:bd:b7: 42:01:22:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt56886vS1daMqSDTux2QjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh ZGY1OTgwHhcNMjYwMTAxMTQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTFhYzQwOGMyNzc2NGMwZmY0ZGY0OTcyZTc2MmFhNjU5NzZkYWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDHwxWuSv27H8RO99fhbEIQGM3fd hQBrqRGyH0Ke2OhCi1vcj/I0SjFOd/9PwbqcnEALMiMs93zlHQIKRne/Xw6laauQ nkdH5CGjQ3ws4/dHfk3JcTmZxegstMx7j8BCu1OWmY+M7+a3Aw3iJTLAspl4+GjK mvWSj/obo1mPBR2bApEN6Jv1RoCVvNpZ6p3DUVtJ0opKaPwK5UMFEbgN0k+fOsrX VODNW1/11q3+ZctLECitV3H86FB2QunRLzMUeH+3zCdds8X0k5I2OpJ9vZP4IcbJ TwteqC5Deq461JaUT0Cj6xWF4Fz4bqpozaU28wich3YQN9uFim2J+9rXIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEkaxAjCd2TA/030ly52KqZZdtruMB8GA1UdIwQY MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt YTkzODhmMzFiNDdlLzEvU1JyRUNNSjNaTURfVGZTWExuWXFwbGwyMnU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVO0AwQC uarsMA0GCSqGSIb3DQEBCwUAA4IBAQABTbs9GOlzlxn6yUPs8wEG7HGPO0Njlwjt JdMVE5wtduXE5cmy7FE/SMUz4wOTrV11RD3d1lEDZ0WcVO7Otv7CRhrjf4YA6BL8 z5xwIQ942bds+nID6ckXOvUwh1OmqTpMw6u8UZNcwzeMHmfapUvczeLrkPhvMeFJ V3lzqASsWw3Gh4ww32DAhARs0F7myW9+eiXkPfAxNH2O+QilgFDS6GuUDkTuw680 4hCYmfR/8Nsr6x16lVhNRfSJH7ARGQrBM+WbnRgsxwlWMY25qzbVe9ISsjO8WFVm aerXLxMOxo3Q7nlLYCiAwyw5pS5DY/gegJra70i7TdLHvbdCASJI -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:06 2026 by rpki-client