This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/sreC2wgD7tfWbcxeKGmM8jbVMK0.roa File: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (raw, json) Hash identifier: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU= Subject key identifier: B2:B7:82:DB:08:03:EE:D7:D6:6D:CC:5E:28:69:8C:F2:36:D5:30:AD Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Certificate serial: 019B7AC92F5BB73DDB6D5A30448C00193A36 Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/sreC2wgD7tfWbcxeKGmM8jbVMK0.roa Signing time: Thu 01 Jan 2026 18:19:23 +0000 ROA not before: Thu 01 Jan 2026 18:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210574 IP address blocks: 2.59.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:2f:5b:b7:3d:db:6d:5a:30:44:8c:00:19:3a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Validity Not Before: Jan 1 18:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2b782db0803eed7d66dcc5e28698cf236d530ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:af:c6:87:93:b5:66:21:fb:46:5f:20:92:96: 07:61:70:20:1d:ac:88:c6:e8:b7:ae:19:a6:4f:92: 55:e0:5d:1f:4f:cc:6b:39:51:29:26:5f:bd:10:47: 98:91:ee:83:24:f9:20:73:5c:6c:03:c4:59:a4:02: 00:fe:e8:36:15:e4:a3:55:8d:74:af:f9:52:6c:6b: d3:14:a8:86:3b:82:82:44:41:8c:5b:4c:7f:20:ed: 07:56:d3:e2:30:77:c4:16:72:ec:2a:75:4d:a1:64: f6:d7:0e:6c:f5:6e:2c:d8:a7:af:18:4d:57:df:4d: 2c:b6:ca:88:f0:7e:65:10:7c:e9:4b:6b:27:73:70: 9f:de:47:f0:4f:ae:76:1e:a2:d9:e4:9d:ea:4e:1a: db:f1:4b:b8:ab:09:33:72:f7:1f:41:35:65:c3:21: f2:1d:3f:c6:97:23:b1:13:ab:69:8f:1a:9a:f5:61: 4c:7e:8c:08:83:9e:61:c9:db:6c:7c:88:35:fd:b0: 7a:9b:3b:18:8a:c7:8d:e7:9e:2a:ae:11:f7:19:e9: e8:0b:fc:c8:15:4b:a2:59:7f:b4:a7:b6:2b:45:d8: f7:c2:d6:71:c6:98:b2:6f:ea:68:9a:b8:fc:dc:50: a4:6e:41:6d:c3:f0:83:f5:12:80:74:bf:d5:2d:d7: 71:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B7:82:DB:08:03:EE:D7:D6:6D:CC:5E:28:69:8C:F2:36:D5:30:AD X509v3 Authority Key Identifier: keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/sreC2wgD7tfWbcxeKGmM8jbVMK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.117.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:eb:cf:40:cf:c5:3c:80:4b:c8:86:9c:9c:fc:43:ea:aa:fd: 15:61:4d:a7:26:49:d3:be:3e:f7:81:60:f5:a7:29:2d:c5:bc: fc:df:28:c0:be:51:8f:d4:e4:fc:fc:28:50:0a:c0:3e:bf:9c: 55:2b:de:3e:01:58:87:7c:67:63:33:66:08:4f:ea:67:95:5d: 07:b7:c0:89:e6:e6:53:ca:d1:d5:cd:14:06:ef:fb:40:4e:d5: 98:f6:d3:b2:c2:a0:1e:ac:72:b7:3b:c5:5c:a0:ff:0c:e0:e8: 3e:e8:d9:db:27:72:f1:66:5b:87:eb:85:62:87:e8:f5:18:b0: 82:e1:68:8b:ac:14:19:c6:8b:2a:35:87:6f:28:8f:55:70:4a: 3e:d6:6a:28:5f:3b:c2:c0:b8:bc:62:d6:a7:22:e1:04:ba:d1: 43:21:b6:78:83:f6:46:4e:71:7d:f7:f4:c0:d9:25:0d:f7:54: af:3b:07:11:eb:1f:03:f1:b5:fe:2f:24:b1:8a:1c:85:7a:b3: 57:2e:fd:eb:e0:85:4a:ea:19:ca:6b:76:b5:13:6c:1b:3f:c5: ea:0b:38:f8:34:6f:4d:df:e1:a7:54:c7:6b:60:7b:e1:c0:a5: aa:df:44:fb:74:db:8e:0b:cd:c0:e3:11:dc:ce:a0:e4:87:5c: 07:36:bd:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yS9btz3bbVowRIwAGTo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm YWM5YWUwHhcNMjYwMTAxMTgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmI3ODJkYjA4MDNlZWQ3ZDY2ZGNjNWUyODY5OGNmMjM2ZDUzMGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK/Gh5O1ZiH7Rl8gkpYHYXAgHayI xui3rhmmT5JV4F0fT8xrOVEpJl+9EEeYke6DJPkgc1xsA8RZpAIA/ug2FeSjVY10 r/lSbGvTFKiGO4KCREGMW0x/IO0HVtPiMHfEFnLsKnVNoWT21w5s9W4s2KevGE1X 300stsqI8H5lEHzpS2snc3Cf3kfwT652HqLZ5J3qThrb8Uu4qwkzcvcfQTVlwyHy HT/GlyOxE6tpjxqa9WFMfowIg55hydtsfIg1/bB6mzsYiseN554qrhH3GenoC/zI FUuiWX+0p7YrRdj3wtZxxpiyb+pomrj83FCkbkFtw/CD9RKAdL/VLddxzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLK3gtsIA+7X1m3MXihpjPI21TCtMB8GA1UdIwQY MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt MjY3NjY5ZjM1NjQ4LzEvc3JlQzJ3Z0Q3dGZXYmN4ZUtHbU04amJWTUswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4 LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjt1MA0G CSqGSIb3DQEBCwUAA4IBAQB8689Az8U8gEvIhpyc/EPqqv0VYU2nJknTvj73gWD1 pyktxbz83yjAvlGP1OT8/ChQCsA+v5xVK94+AViHfGdjM2YIT+pnlV0Ht8CJ5uZT ytHVzRQG7/tATtWY9tOywqAerHK3O8VcoP8M4Og+6NnbJ3LxZluH64Vih+j1GLCC 4WiLrBQZxosqNYdvKI9VcEo+1mooXzvCwLi8YtanIuEEutFDIbZ4g/ZGTnF99/TA 2SUN91SvOwcR6x8D8bX+LySxihyFerNXLv3r4IVK6hnKa3a1E2wbP8XqCzj4NG9N 3+GnVMdrYHvhwKWq30T7dNuOC83A4xHczqDkh1wHNr2+ -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:45 2026 by rpki-client