This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SkkI38BiKq4dB3ltOultkwP0YsE.roa File: SkkI38BiKq4dB3ltOultkwP0YsE.roa (raw, json) Hash identifier: 0oBbioKa2MQejnc7HNzbPfTq8oYI3NsB7Ow9iltC40E= Subject key identifier: 4A:49:08:DF:C0:62:2A:AE:1D:07:79:6D:3A:E9:6D:93:03:F4:62:C1 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D01654E409E0B07E6B92512F225AC Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SkkI38BiKq4dB3ltOultkwP0YsE.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205531 IP address blocks: 2a0e:b107:178b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:01:65:4e:40:9e:0b:07:e6:b9:25:12:f2:25:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a4908dfc0622aae1d07796d3ae96d9303f462c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:36:46:93:35:63:40:e9:12:15:1c:55:fc: 63:50:75:79:ea:56:d7:97:40:6e:25:4d:35:53:b1: 2c:5e:7a:ee:44:17:14:11:0b:40:b0:ab:5d:e5:0f: 2e:99:e7:3e:9b:2e:5d:1f:10:ea:77:27:bb:b2:53: 44:e5:88:5f:2c:dd:e9:1e:13:4e:19:84:f0:10:93: ff:22:4d:37:b6:66:39:f4:dd:df:3b:da:2f:18:5a: b4:1e:aa:b2:80:6e:4f:2b:30:8d:af:b8:2f:b3:53: 26:01:4a:ee:74:5d:91:01:18:ac:f8:85:8f:2d:a5: ed:20:52:b0:c0:c9:96:c8:81:ed:be:06:0f:e6:36: 6b:bf:d7:06:6b:1f:f3:93:f9:5c:02:c7:06:7e:32: b7:64:68:23:0b:3c:e1:6f:73:21:0b:66:69:9b:30: 05:b4:b5:66:b4:28:bc:8b:82:4c:92:a8:f9:17:fd: 85:7f:66:bf:ef:57:4f:25:8f:75:32:ca:9c:8a:c6: f9:ef:d6:c6:ea:76:2e:7f:33:b6:98:0a:bd:e8:20: 29:25:03:b8:cc:2e:78:91:8b:7f:b3:93:fe:13:e6: 93:7c:58:43:e5:30:e7:6f:1a:fb:f5:8c:50:14:cf: ca:98:28:0c:65:70:99:e3:87:ab:6c:df:5e:6d:28: 29:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:49:08:DF:C0:62:2A:AE:1D:07:79:6D:3A:E9:6D:93:03:F4:62:C1 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SkkI38BiKq4dB3ltOultkwP0YsE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:178b::/48 Signature Algorithm: sha256WithRSAEncryption 5e:89:98:56:90:6f:ba:b4:7f:2d:5c:a6:6d:16:a7:a6:db:29: f3:90:2e:f5:7a:44:1c:51:55:9f:51:2e:de:8e:20:fe:49:2c: c1:f4:45:ad:f4:26:c5:33:ae:57:9e:5f:e9:5b:8c:84:b7:ed: 97:79:f6:f0:df:94:63:e8:8d:25:d3:99:22:3f:42:e8:da:5c: 5a:75:9f:77:61:2c:bb:b6:ab:10:7f:36:17:c6:67:f5:78:d9: b3:42:d4:4d:98:c8:f7:aa:82:1f:a9:23:37:a1:ff:29:8e:5e: 77:8d:52:ae:16:f9:96:0d:c0:55:7f:1c:c9:7e:37:b7:e7:fc: 3c:52:53:72:a5:a0:49:e7:78:e0:22:39:d6:83:02:f9:16:97: 71:7b:3a:10:72:a7:ef:db:6f:89:08:ae:e5:7e:77:00:0a:ee: 57:92:88:3b:1b:d9:52:26:67:a5:92:b1:5e:da:14:c5:2d:9b: cd:15:02:aa:b9:fd:df:19:47:3f:17:53:cb:00:bd:44:51:3c: 66:ae:22:cc:e2:72:61:aa:15:d8:bd:c8:e2:5c:bc:4f:c2:9c: 9e:0f:b4:10:33:80:ba:99:ad:dd:6c:bf:2c:a3:7c:94:c1:28: 78:8e:8d:17:23:db:28:ae:3c:e1:98:ad:16:5b:fc:ca:62:4d: 6e:b8:08:e1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQFlTkCeCwfmuSUS8iWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTQ5MDhkZmMwNjIyYWFlMWQwNzc5NmQzYWU5NmQ5MzAzZjQ2MmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv82RpM1Y0DpEhUcVfxjUHV56lbX l0BuJU01U7EsXnruRBcUEQtAsKtd5Q8umec+my5dHxDqdye7slNE5YhfLN3pHhNO GYTwEJP/Ik03tmY59N3fO9ovGFq0HqqygG5PKzCNr7gvs1MmAUrudF2RARis+IWP LaXtIFKwwMmWyIHtvgYP5jZrv9cGax/zk/lcAscGfjK3ZGgjCzzhb3MhC2ZpmzAF tLVmtCi8i4JMkqj5F/2Ff2a/71dPJY91Msqcisb579bG6nYufzO2mAq96CApJQO4 zC54kYt/s5P+E+aTfFhD5TDnbxr79YxQFM/KmCgMZXCZ44erbN9ebSgp9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEpJCN/AYiquHQd5bTrpbZMD9GLBMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvU2trSTM4QmlLcTRkQjNsdE91bHRrd1AwWXNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxeL MA0GCSqGSIb3DQEBCwUAA4IBAQBeiZhWkG+6tH8tXKZtFqem2ynzkC71ekQcUVWf US7ejiD+SSzB9EWt9CbFM65Xnl/pW4yEt+2Xefbw35Rj6I0l05kiP0Lo2lxadZ93 YSy7tqsQfzYXxmf1eNmzQtRNmMj3qoIfqSM3of8pjl53jVKuFvmWDcBVfxzJfje3 5/w8UlNypaBJ53jgIjnWgwL5FpdxezoQcqfv22+JCK7lfncACu5Xkog7G9lSJmel krFe2hTFLZvNFQKquf3fGUc/F1PLAL1EUTxmriLM4nJhqhXYvcjiXLxPwpyeD7QQ M4C6ma3dbL8so3yUwSh4jo0XI9sorjzhmK0WW/zKYk1uuAjh -----END CERTIFICATE-----Generated at Sat Jan 10 02:18:32 2026 by rpki-client