This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/skw12xegUDPBAzVVgfEQUedM0sU.roa File: skw12xegUDPBAzVVgfEQUedM0sU.roa (raw, json) Hash identifier: elgIalT9tqZ6d++fITpMMN30JqKzyDoJQyZW/4qUuNA= Subject key identifier: B2:4C:35:DB:17:A0:50:33:C1:03:35:55:81:F1:10:51:E7:4C:D2:C5 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AC5571ECDF3E3FAFA8B5F2C409F4C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/skw12xegUDPBAzVVgfEQUedM0sU.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211373 IP address blocks: 81.168.117.0/24 maxlen: 24 212.38.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c5:57:1e:cd:f3:e3:fa:fa:8b:5f:2c:40:9f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b24c35db17a05033c103355581f11051e74cd2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cb:fa:79:98:f6:1b:5d:8d:a9:30:94:2b:f4: ad:4b:76:0c:f7:a6:6d:bf:4e:8b:1d:70:9f:d2:1e: 37:dd:08:85:c3:05:83:61:19:cb:d2:77:01:22:2b: 84:36:8e:08:fe:f6:f2:51:4a:0c:1d:74:ae:ef:a3: 81:e2:19:f7:06:d0:e7:51:d1:5d:0f:fe:02:36:3a: f9:8f:55:cf:5f:31:0a:58:ee:fa:9f:93:13:31:4c: 81:30:19:f3:92:2e:7c:be:5b:ae:a9:04:7d:f0:4e: c2:2f:43:bb:9d:9a:8c:29:6f:36:43:9f:df:28:b7: 0f:e6:63:aa:b2:24:8d:ec:34:c1:13:7e:9f:95:e8: dc:4b:18:b5:26:fd:22:ad:a6:5a:42:28:b7:cc:36: d4:c8:53:58:7f:b7:6c:e0:5d:2c:d6:e4:cb:d4:e4: 5c:06:8f:d2:22:db:48:a0:45:88:ee:a4:43:ac:01: 93:32:3c:57:f2:ce:d2:82:28:05:f6:fc:a6:ff:93: 36:b5:69:15:1d:21:e3:2d:73:70:db:eb:bd:3c:18: 92:9d:69:b2:31:e7:06:50:47:76:5e:c3:51:38:d7: 6c:da:c9:d0:38:33:3a:da:e2:35:d8:6b:09:f3:be: 41:3a:01:83:d1:fe:ef:45:12:d0:5a:95:c1:e9:64: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4C:35:DB:17:A0:50:33:C1:03:35:55:81:F1:10:51:E7:4C:D2:C5 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/skw12xegUDPBAzVVgfEQUedM0sU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.168.117.0/24 212.38.68.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:98:8a:2e:02:94:3e:5a:db:1c:cc:2a:07:25:58:4c:3b:68: 5f:fc:32:00:28:f6:4f:e4:35:2d:72:2c:a0:fe:24:14:71:7b: a9:ab:7f:d8:4c:6b:eb:d7:43:80:88:1f:d1:f5:4a:2d:48:33: 78:b8:94:8e:5a:f3:f1:2a:d4:9d:e6:4c:86:52:ff:b5:de:03: 86:34:a2:13:ed:61:80:aa:10:98:50:15:08:9a:86:9d:4d:4f: c2:d6:ca:91:14:ab:be:96:be:d7:9d:89:43:93:83:be:5b:dc: 72:04:fa:8e:9a:50:bc:6d:6f:1a:3a:72:8e:bc:5b:56:a4:67: 7d:db:72:b8:8d:ae:26:48:48:05:49:e3:94:ae:78:c6:28:f6: 2d:d1:20:b7:a4:97:f1:31:d1:46:5f:2d:36:c3:b5:57:b2:ad: ce:0b:57:ca:36:1e:d4:a9:8c:38:9a:67:be:27:e7:de:45:5b: 12:3c:49:67:97:c3:f9:15:63:c2:e1:70:a6:16:22:4f:92:e8: 63:99:c5:5c:e4:dd:d2:0d:09:e7:9e:13:13:8f:33:c0:2b:26: 0a:9b:2d:7b:72:24:8e:a9:7b:ad:f9:95:f4:21:10:31:94:b0: 8e:0b:01:a2:37:02:f8:4e:2b:66:b6:0a:c3:e1:7b:a5:49:ef: c6:af:57:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WsVXHs3z4/r6i18sQJ9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjRjMzVkYjE3YTA1MDMzYzEwMzM1NTU4MWYxMTA1MWU3NGNkMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMv6eZj2G12NqTCUK/StS3YM96Zt v06LHXCf0h433QiFwwWDYRnL0ncBIiuENo4I/vbyUUoMHXSu76OB4hn3BtDnUdFd D/4CNjr5j1XPXzEKWO76n5MTMUyBMBnzki58vluuqQR98E7CL0O7nZqMKW82Q5/f KLcP5mOqsiSN7DTBE36flejcSxi1Jv0iraZaQii3zDbUyFNYf7ds4F0s1uTL1ORc Bo/SIttIoEWI7qRDrAGTMjxX8s7SgigF9vym/5M2tWkVHSHjLXNw2+u9PBiSnWmy MecGUEd2XsNRONds2snQODM62uI12GsJ875BOgGD0f7vRRLQWpXB6WQJAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLJMNdsXoFAzwQM1VYHxEFHnTNLFMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvc2t3MTJ4ZWdVRFBCQXpWVmdmRVFVZWRNMHNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUah1AwQA 1CZEMA0GCSqGSIb3DQEBCwUAA4IBAQBemIouApQ+WtsczCoHJVhMO2hf/DIAKPZP 5DUtciyg/iQUcXupq3/YTGvr10OAiB/R9UotSDN4uJSOWvPxKtSd5kyGUv+13gOG NKIT7WGAqhCYUBUImoadTU/C1sqRFKu+lr7XnYlDk4O+W9xyBPqOmlC8bW8aOnKO vFtWpGd923K4ja4mSEgFSeOUrnjGKPYt0SC3pJfxMdFGXy02w7VXsq3OC1fKNh7U qYw4mme+J+feRVsSPElnl8P5FWPC4XCmFiJPkuhjmcVc5N3SDQnnnhMTjzPAKyYK my17ciSOqXut+ZX0IRAxlLCOCwGiNwL4TitmtgrD4XulSe/Gr1cy -----END CERTIFICATE-----Generated at Mon Jan 19 10:57:33 2026 by rpki-client