This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa File: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (raw, json) Hash identifier: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8= Subject key identifier: 48:A9:AD:42:41:0B:BC:F5:E1:AC:B3:43:14:A1:82:CC:64:3E:6B:D0 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E3896FCB94133CEBA0C1F2ADCBA9A0C Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46436 IP address blocks: 83.126.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:96:fc:b9:41:33:ce:ba:0c:1f:2a:dc:ba:9a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48a9ad42410bbcf5e1acb34314a182cc643e6bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:55:74:07:42:aa:b2:74:6f:02:66:b8:e8: 6b:03:4b:11:c5:29:a9:2d:01:cc:7b:a3:14:92:43: 28:11:b8:14:d1:82:58:9a:3d:fb:41:e5:68:1a:4c: 59:74:68:e7:7d:75:08:88:f5:d2:39:7c:66:b5:7a: 80:73:c3:4e:d5:a6:f3:5b:53:a2:02:d9:87:62:85: dc:a0:78:99:1e:0b:c3:74:7f:4f:44:63:5d:88:53: 17:ae:56:95:a5:bd:fa:e2:2c:dd:e1:46:03:85:2a: e0:08:f9:ab:35:6c:2c:79:7a:c1:cd:0d:01:b0:99: 93:a5:3b:7d:f3:a2:06:c9:17:aa:57:ee:c9:98:ba: fa:3e:87:2b:67:bf:58:46:3e:47:59:06:17:f4:25: 65:d2:76:e6:e0:c4:af:c4:7c:25:ab:69:13:2f:10: 76:97:85:b9:9a:73:80:b5:b3:dc:fc:78:71:24:aa: 89:90:ba:49:35:48:ba:5d:6a:7f:1a:05:06:e0:16: e0:ba:e5:fc:f5:a7:cd:d7:a2:f6:9a:c0:9c:07:7b: c9:7f:15:be:ce:6c:dd:f2:41:ad:14:cf:4e:64:c2: 52:2e:5a:78:53:68:6d:e9:15:fb:1c:d7:c7:f4:f7: 08:f5:08:db:19:04:c2:5b:e7:5e:1f:f1:7b:7c:f8: 6f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A9:AD:42:41:0B:BC:F5:E1:AC:B3:43:14:A1:82:CC:64:3E:6B:D0 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.126.54.0/24 Signature Algorithm: sha256WithRSAEncryption 33:74:e9:09:6c:6b:11:7e:55:e1:2a:4f:3d:4c:d9:51:0f:b4: d6:7e:66:dc:d9:2c:35:ad:0c:d1:15:65:0e:6c:7d:e1:0c:f5: 15:72:d1:c2:10:d6:dc:7d:19:3b:6d:38:bd:12:37:37:b4:af: dc:c4:14:d3:5d:49:6c:ea:8c:2e:c4:83:dd:e3:5e:6b:81:e8: ba:6a:62:9d:65:bf:c1:07:5b:dd:e2:07:a4:8f:d2:a8:ed:4e: 8c:ac:82:f7:d3:0e:5c:9a:52:a0:29:25:b1:de:c1:51:bb:02: b0:2a:79:16:35:c5:ab:8b:60:00:35:ba:3a:59:b7:0c:30:8d: 2e:51:af:72:cc:25:e7:2e:ed:de:b0:cf:80:9c:63:7f:22:37: 24:bd:60:05:59:90:b6:4c:34:63:10:e8:a8:46:de:d1:31:ce: 71:4f:ed:23:00:46:0e:48:08:fa:2f:24:8a:6e:57:0d:4c:c8: bc:18:bd:25:38:5d:6a:6e:48:8b:5b:73:e8:14:de:11:a9:9b: 3d:01:40:f5:b2:2e:a0:33:fc:82:1d:09:c1:43:d6:79:07:78: 88:5b:b9:30:32:7b:89:66:fb:39:03:bd:97:30:99:f4:e7:bd: d5:b4:3e:74:2a:98:f0:7f:7d:3c:20:e9:31:83:9f:fc:3e:97: 99:85:2b:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJb8uUEzzroMHyrcupoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGE5YWQ0MjQxMGJiY2Y1ZTFhY2IzNDMxNGExODJjYzY0M2U2YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaNVdAdCqrJ0bwJmuOhrA0sRxSmp LQHMe6MUkkMoEbgU0YJYmj37QeVoGkxZdGjnfXUIiPXSOXxmtXqAc8NO1abzW1Oi AtmHYoXcoHiZHgvDdH9PRGNdiFMXrlaVpb364izd4UYDhSrgCPmrNWwseXrBzQ0B sJmTpTt986IGyReqV+7JmLr6PocrZ79YRj5HWQYX9CVl0nbm4MSvxHwlq2kTLxB2 l4W5mnOAtbPc/HhxJKqJkLpJNUi6XWp/GgUG4BbguuX89afN16L2msCcB3vJfxW+ zmzd8kGtFM9OZMJSLlp4U2ht6RX7HNfH9PcI9QjbGQTCW+deH/F7fPhvoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEiprUJBC7z14ayzQxShgsxkPmvQMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvU0ttdFFrRUx2UFhockxOREZLR0N6R1EtYTlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU342MA0G CSqGSIb3DQEBCwUAA4IBAQAzdOkJbGsRflXhKk89TNlRD7TWfmbc2Sw1rQzRFWUO bH3hDPUVctHCENbcfRk7bTi9Ejc3tK/cxBTTXUls6owuxIPd415rgei6amKdZb/B B1vd4gekj9Ko7U6MrIL30w5cmlKgKSWx3sFRuwKwKnkWNcWri2AANbo6WbcMMI0u Ua9yzCXnLu3esM+AnGN/IjckvWAFWZC2TDRjEOioRt7RMc5xT+0jAEYOSAj6LySK blcNTMi8GL0lOF1qbkiLW3PoFN4RqZs9AUD1si6gM/yCHQnBQ9Z5B3iIW7kwMnuJ Zvs5A72XMJn0573VtD50Kpjwf308IOkxg5/8PpeZhSuQ -----END CERTIFICATE-----Generated at Thu Feb 5 13:55:52 2026 by rpki-client