This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SKTtIusQJIiy_EeAtoHdw5RACpE.roa File: SKTtIusQJIiy_EeAtoHdw5RACpE.roa (raw, json) Hash identifier: qisY7ZHYdFSyODnquGx4QCw/I9k920QTwvhaHzOIT04= Subject key identifier: 48:A4:ED:22:EB:10:24:88:B2:FC:47:80:B6:81:DD:C3:94:40:0A:91 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910B934DA557BDA1AA98EB69A30BF6B Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SKTtIusQJIiy_EeAtoHdw5RACpE.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215269 IP address blocks: 2a12:bec4:13f0::/44 maxlen: 48 2a12:bec4:1440::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b9:34:da:55:7b:da:1a:a9:8e:b6:9a:30:bf:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48a4ed22eb102488b2fc4780b681ddc394400a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:da:98:60:94:bb:ff:13:94:b1:ef:94:fa: 90:41:53:d0:97:e2:ca:c4:38:d7:22:7d:c4:86:e9: 66:62:4c:5b:98:4d:db:85:49:85:c1:31:d2:3d:07: 25:42:1b:97:9d:7e:b1:fa:f9:5c:c0:d3:f7:9d:24: 34:a5:03:55:d9:29:7d:e6:d2:e4:7e:9d:58:7c:0f: a9:01:d2:39:7a:6a:4f:68:55:9d:c9:26:2a:6b:a6: ec:cc:38:ac:a0:a7:4a:11:57:89:15:08:fe:1c:81: 69:ba:bd:aa:d4:5d:11:20:03:33:4c:89:e4:e8:f8: 60:de:d4:f4:45:91:36:f3:4e:2c:8c:c3:61:c0:c2: a6:b4:c4:6e:de:24:99:8d:bc:87:28:8c:63:10:c3: 68:12:4c:44:59:10:e4:54:1b:30:99:89:a9:65:b2: 57:b4:ac:e6:f3:22:a1:0d:41:68:c2:8a:bd:79:1e: 7f:fd:c5:bd:62:dc:14:db:e1:34:23:8f:34:75:c0: 7b:83:ca:fd:08:94:fb:80:8d:c1:c5:91:92:4c:30: 64:6b:ca:77:30:fd:82:16:27:d4:81:fe:6b:b9:28: f4:9e:b6:a2:46:6a:a6:01:90:ca:8c:fb:03:80:4a: e0:5c:9f:15:bf:46:f2:b0:90:73:a6:e2:2f:ea:e0: 9e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A4:ED:22:EB:10:24:88:B2:FC:47:80:B6:81:DD:C3:94:40:0A:91 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SKTtIusQJIiy_EeAtoHdw5RACpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:13f0::/44 2a12:bec4:1440::/44 Signature Algorithm: sha256WithRSAEncryption 75:a9:d2:25:0a:a4:5a:8b:6e:2c:6e:93:47:79:e9:a7:d3:1f: ba:4b:4e:d1:ec:ab:82:b8:dc:2a:41:93:c1:43:9d:e2:fe:ad: 7c:d1:70:27:27:67:25:8b:47:ce:41:49:20:63:08:a8:46:b4: 94:be:c0:8a:8a:5d:44:8d:4b:2a:e3:70:e0:6c:b6:b4:3c:5a: d9:56:9c:47:49:58:5d:f3:db:b4:c8:42:0d:02:ff:0a:37:ac: 43:95:6f:34:1c:46:72:58:32:be:73:8f:9c:ea:36:64:a0:a2: 84:00:40:ea:8b:7c:c5:af:3a:b7:fb:b6:b1:26:bd:75:4a:f2: dc:50:97:f4:2f:7e:86:42:81:52:88:fa:eb:48:ab:5a:c4:b8: bf:21:d1:01:fa:c0:22:c2:01:75:0a:42:18:5d:b2:7e:27:ff: 0f:62:11:55:8f:03:f7:6f:18:59:b4:1e:ea:58:f2:72:ed:ed: bc:1b:9b:df:7b:98:92:2d:ba:c9:d5:e4:e2:39:c4:fb:d7:20: 3d:c0:61:d8:f7:4c:f7:7d:5e:00:74:24:f8:78:3d:22:e1:e8: ae:38:d5:16:37:fb:c9:3f:79:85:4c:f7:27:49:ba:e2:8b:6d: 5a:53:14:79:fb:88:e7:ac:47:cf:44:37:be:65:75:c7:50:5a: 59:51:77:bc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ELk02lV72hqpjraaML9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGE0ZWQyMmViMTAyNDg4YjJmYzQ3ODBiNjgxZGRjMzk0NDAwYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT3amGCUu/8TlLHvlPqQQVPQl+LK xDjXIn3EhulmYkxbmE3bhUmFwTHSPQclQhuXnX6x+vlcwNP3nSQ0pQNV2Sl95tLk fp1YfA+pAdI5empPaFWdySYqa6bszDisoKdKEVeJFQj+HIFpur2q1F0RIAMzTInk 6Phg3tT0RZE2804sjMNhwMKmtMRu3iSZjbyHKIxjEMNoEkxEWRDkVBswmYmpZbJX tKzm8yKhDUFowoq9eR5//cW9YtwU2+E0I480dcB7g8r9CJT7gI3BxZGSTDBka8p3 MP2CFifUgf5ruSj0nraiRmqmAZDKjPsDgErgXJ8Vv0bysJBzpuIv6uCeDQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEik7SLrECSIsvxHgLaB3cOUQAqRMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvU0tUdEl1c1FKSWl5X0VlQXRvSGR3NVJBQ3BFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+xBPw AwcEKhK+xBRAMA0GCSqGSIb3DQEBCwUAA4IBAQB1qdIlCqRai24sbpNHeemn0x+6 S07R7KuCuNwqQZPBQ53i/q180XAnJ2cli0fOQUkgYwioRrSUvsCKil1EjUsq43Dg bLa0PFrZVpxHSVhd89u0yEINAv8KN6xDlW80HEZyWDK+c4+c6jZkoKKEAEDqi3zF rzq3+7axJr11SvLcUJf0L36GQoFSiPrrSKtaxLi/IdEB+sAiwgF1CkIYXbJ+J/8P YhFVjwP3bxhZtB7qWPJy7e28G5vfe5iSLbrJ1eTiOcT71yA9wGHY90z3fV4AdCT4 eD0i4eiuONUWN/vJP3mFTPcnSbrii21aUxR5+4jnrEfPRDe+ZXXHUFpZUXe8 -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:03 2026 by rpki-client