This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SCKWOmDdiyizlr7OxM7yS0JtVgQ.roa File: SCKWOmDdiyizlr7OxM7yS0JtVgQ.roa (raw, json) Hash identifier: bLIsjSpuGooxzilrE+GpxcOxxDsw5ihTgntCk2lOou4= Subject key identifier: 48:22:96:3A:60:DD:8B:28:B3:96:BE:CE:C4:CE:F2:4B:42:6D:56:04 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D1CBF2D0B11707133E8D120B6218B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SCKWOmDdiyizlr7OxM7yS0JtVgQ.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209460 IP address blocks: 2a0e:b107:19a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1c:bf:2d:0b:11:70:71:33:e8:d1:20:b6:21:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4822963a60dd8b28b396becec4cef24b426d5604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:21:ad:6e:e4:1f:bd:0f:e1:62:fd:ec:6b: f1:17:bb:37:b8:a0:d7:ce:09:38:0b:47:e2:11:1a: 6f:4a:02:a5:4f:33:85:47:91:b2:47:b8:e2:5d:d4: 01:c8:27:2b:dc:2b:0b:bb:c0:d7:da:ac:09:0d:2d: aa:59:28:fd:4b:7c:9d:ca:4d:c0:a3:09:b1:17:fa: b4:18:66:37:4a:3c:c7:61:7d:8d:e5:95:92:48:84: 28:6b:f6:56:77:1f:0c:74:32:f7:9b:c5:de:b4:c2: 94:07:aa:fa:27:8c:9b:04:03:17:7a:7a:32:ae:12: da:95:94:b9:3d:48:b6:85:29:5c:75:ed:e5:ca:4c: c9:b3:0c:79:db:35:9e:a0:4f:b0:d9:d2:b1:06:3a: 57:03:4a:a3:ed:77:d5:15:08:58:0c:11:8a:3e:ee: 5c:d0:b6:b5:43:d5:31:2d:a7:34:54:1e:0a:b2:52: 24:85:b8:36:ed:73:3a:57:2b:11:b2:2b:3e:1d:34: 6e:93:4c:a2:8a:43:be:85:6e:80:5b:61:79:11:26: bd:cc:b8:0c:26:f4:a5:4f:f0:60:78:6b:2f:02:b0: 6c:3f:2a:65:3c:f7:d7:13:22:05:3a:e7:ca:27:2c: c8:30:18:ca:e2:97:81:17:ee:36:f6:c1:9e:89:9d: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:22:96:3A:60:DD:8B:28:B3:96:BE:CE:C4:CE:F2:4B:42:6D:56:04 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SCKWOmDdiyizlr7OxM7yS0JtVgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:19a1::/48 Signature Algorithm: sha256WithRSAEncryption c2:2c:85:9f:17:ed:64:3c:e1:c3:4f:66:2e:a2:4c:b7:01:5d: 99:5c:37:92:1d:0c:f5:71:47:5e:e6:89:74:59:08:22:3b:13: 71:d7:fb:97:25:c8:e9:3e:7c:9a:b9:6b:f9:13:0b:95:ca:94: 82:19:a1:ec:70:f1:c6:20:b1:74:48:19:b3:79:bf:80:12:49: 0d:ee:8c:26:ee:d5:93:38:0a:52:63:84:3f:47:99:5b:d8:51: eb:ea:ab:95:85:f0:1f:11:5b:f6:7d:80:8c:02:38:35:84:0b: db:d8:7c:4e:32:df:cb:8f:44:86:59:a7:93:0f:1b:66:6b:4e: 3a:6a:e7:5d:9c:e9:6c:86:4c:31:b5:9f:c6:a6:eb:49:4a:7f: a0:15:15:c6:99:3e:6a:49:35:3b:8f:14:83:3e:96:7f:ee:cf: 6c:24:8b:1e:e2:fd:da:e8:c2:83:87:4d:db:86:b5:51:28:28: 68:dd:4c:23:38:65:e1:c3:58:44:08:23:58:f8:91:78:4d:34: 17:80:8d:10:77:5a:06:1b:90:a0:c9:b9:04:11:3b:fe:25:84: b3:48:94:e0:ca:71:c2:f0:b3:e1:8f:5d:54:77:9d:45:4e:67: 12:ed:83:93:ad:25:19:2f:75:6f:dc:02:1d:91:ca:71:92:7b: d8:c2:52:ca -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRy/LQsRcHEz6NEgtiGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODIyOTYzYTYwZGQ4YjI4YjM5NmJlY2VjNGNlZjI0YjQyNmQ1NjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSEhrW7kH70P4WL97GvxF7s3uKDX zgk4C0fiERpvSgKlTzOFR5GyR7jiXdQByCcr3CsLu8DX2qwJDS2qWSj9S3ydyk3A owmxF/q0GGY3SjzHYX2N5ZWSSIQoa/ZWdx8MdDL3m8XetMKUB6r6J4ybBAMXenoy rhLalZS5PUi2hSlcde3lykzJswx52zWeoE+w2dKxBjpXA0qj7XfVFQhYDBGKPu5c 0La1Q9UxLac0VB4KslIkhbg27XM6VysRsis+HTRuk0yiikO+hW6AW2F5ESa9zLgM JvSlT/BgeGsvArBsPyplPPfXEyIFOufKJyzIMBjK4peBF+429sGeiZ3DzwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEgiljpg3Ysos5a+zsTO8ktCbVYEMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvU0NLV09tRGRpeWl6bHI3T3hNN3lTMEp0VmdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxmh MA0GCSqGSIb3DQEBCwUAA4IBAQDCLIWfF+1kPOHDT2Yuoky3AV2ZXDeSHQz1cUde 5ol0WQgiOxNx1/uXJcjpPnyauWv5EwuVypSCGaHscPHGILF0SBmzeb+AEkkN7owm 7tWTOApSY4Q/R5lb2FHr6quVhfAfEVv2fYCMAjg1hAvb2HxOMt/Lj0SGWaeTDxtm a046auddnOlshkwxtZ/GputJSn+gFRXGmT5qSTU7jxSDPpZ/7s9sJIse4v3a6MKD h03bhrVRKCho3UwjOGXhw1hECCNY+JF4TTQXgI0Qd1oGG5CgybkEETv+JYSzSJTg ynHC8LPhj11Ud51FTmcS7YOTrSUZL3Vv3AIdkcpxknvYwlLK -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:05 2026 by rpki-client