This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8skanl6_G3_84mDPbowyI8BNaU0.roa File: 8skanl6_G3_84mDPbowyI8BNaU0.roa (raw, json) Hash identifier: 6ArE9LLmmlwd8lmKXv/W5tlXHLt9Ewo5Gpi/mUjfuOA= Subject key identifier: F2:C9:1A:9E:5E:BF:1B:7F:FC:E2:60:CF:6E:8C:32:23:C0:4D:69:4D Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B791156B93EBC7F103DB1EE34BFEBD2A7 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8skanl6_G3_84mDPbowyI8BNaU0.roa Signing time: Thu 01 Jan 2026 10:18:58 +0000 ROA not before: Thu 01 Jan 2026 10:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214854 IP address blocks: 45.43.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:56:b9:3e:bc:7f:10:3d:b1:ee:34:bf:eb:d2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2c91a9e5ebf1b7ffce260cf6e8c3223c04d694d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:cc:14:59:fb:fe:a0:8c:20:1a:77:72:7f: 68:56:93:87:e1:29:f7:d8:e6:5d:7e:81:01:30:ba: 92:74:74:79:a6:e3:a3:10:b2:cd:9f:1b:e3:63:8d: 3e:a8:e3:de:84:e3:96:60:ef:ab:37:84:1b:e3:5e: 8e:18:49:6e:d7:34:3d:e9:cb:e8:12:f1:25:5e:3f: e7:19:a9:ca:cd:78:12:38:90:7a:3b:75:2b:ce:af: 78:c7:f4:74:b5:ca:f1:2a:5f:f3:87:15:81:ed:4e: de:90:59:65:79:e6:bd:36:d3:35:28:3d:48:8e:10: b9:8b:06:0a:98:39:d4:38:64:ca:c5:54:fc:45:ef: 4f:e9:06:e4:ce:41:57:b5:7f:af:b3:18:13:7c:2f: 31:01:99:ff:c7:4f:05:43:fe:04:e4:2e:05:23:64: f2:16:ae:b8:18:ab:56:6f:8a:25:47:b6:3d:da:aa: 3e:68:68:7c:c9:60:71:da:34:ef:37:56:64:7a:1f: 72:15:7f:f5:a3:ae:85:df:09:06:d3:3a:f3:37:59: 0a:0f:04:4c:74:24:e0:02:1d:66:04:8c:9f:dd:22: de:3f:40:93:ed:a2:00:71:ab:18:d5:78:9c:ee:42: 7e:12:e3:14:9f:bf:14:f7:fe:3a:b2:69:2e:78:a0: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C9:1A:9E:5E:BF:1B:7F:FC:E2:60:CF:6E:8C:32:23:C0:4D:69:4D X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8skanl6_G3_84mDPbowyI8BNaU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.154.0/24 Signature Algorithm: sha256WithRSAEncryption 76:ec:bc:79:27:37:7a:6a:17:31:3f:cb:e1:c9:2b:9d:6d:88: e6:79:c2:5b:1f:13:fb:15:46:bc:c4:a9:25:86:1b:b4:34:53: a3:7e:f5:46:2b:d3:d4:b0:e0:70:1b:0b:b7:0a:33:1c:ec:b2: a8:3f:f7:e4:e8:4d:f2:76:1c:c5:69:38:23:f6:ce:07:91:61: dd:a9:15:36:66:a9:bb:39:ed:fa:41:0f:54:00:a1:86:2a:64: ff:04:08:65:c5:ea:78:3b:3f:3c:20:30:16:4b:06:fd:f6:06: 50:ec:2c:01:19:93:20:85:9f:24:a2:01:90:ed:71:59:a6:e7: 01:01:c6:5f:71:4c:f5:9b:e8:85:66:35:ab:bf:44:f5:4f:72: 89:5c:04:97:58:f5:2a:54:1f:b1:d1:86:9b:7d:36:ac:5d:c0: 04:9d:6b:f7:bd:73:dd:cf:71:80:cd:38:ee:9b:32:0f:36:28: 35:b2:e4:fc:2f:d3:ee:86:92:45:45:62:8d:37:30:74:33:50: 7c:84:f0:60:0f:a6:81:c9:3b:b1:42:f2:d8:eb:6d:3b:10:7a: b5:f0:55:3e:35:c8:0e:36:81:be:bb:e6:e1:dd:52:37:ae:27: a5:16:82:5b:60:e5:ca:84:20:0a:6d:c8:a3:20:2f:a8:ed:7f: 1a:27:df:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EVa5Prx/ED2x7jS/69KnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmM5MWE5ZTVlYmYxYjdmZmNlMjYwY2Y2ZThjMzIyM2MwNGQ2OTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hTMFFn7/qCMIBp3cn9oVpOH4Sn3 2OZdfoEBMLqSdHR5puOjELLNnxvjY40+qOPehOOWYO+rN4Qb416OGElu1zQ96cvo EvElXj/nGanKzXgSOJB6O3Urzq94x/R0tcrxKl/zhxWB7U7ekFlleea9NtM1KD1I jhC5iwYKmDnUOGTKxVT8Re9P6QbkzkFXtX+vsxgTfC8xAZn/x08FQ/4E5C4FI2Ty Fq64GKtWb4olR7Y92qo+aGh8yWBx2jTvN1Zkeh9yFX/1o66F3wkG0zrzN1kKDwRM dCTgAh1mBIyf3SLeP0CT7aIAcasY1Xic7kJ+EuMUn78U9/46smkueKD/qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLJGp5evxt//OJgz26MMiPATWlNMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvOHNrYW5sNl9HM184NG1EUGJvd3lJOEJOYVUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSuaMA0G CSqGSIb3DQEBCwUAA4IBAQB27Lx5Jzd6ahcxP8vhySudbYjmecJbHxP7FUa8xKkl hhu0NFOjfvVGK9PUsOBwGwu3CjMc7LKoP/fk6E3ydhzFaTgj9s4HkWHdqRU2Zqm7 Oe36QQ9UAKGGKmT/BAhlxep4Oz88IDAWSwb99gZQ7CwBGZMghZ8kogGQ7XFZpucB AcZfcUz1m+iFZjWrv0T1T3KJXASXWPUqVB+x0YabfTasXcAEnWv3vXPdz3GAzTju mzIPNig1suT8L9PuhpJFRWKNNzB0M1B8hPBgD6aByTuxQvLY6207EHq18FU+NcgO NoG+u+bh3VI3rielFoJbYOXKhCAKbcijIC+o7X8aJ992 -----END CERTIFICATE-----Generated at Fri Jan 2 02:39:25 2026 by rpki-client