This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/SkqYNPRja7LPy9UVjnTfhDUjBXE.roa File: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (raw, json) Hash identifier: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU= Subject key identifier: 4A:4A:98:34:F4:63:6B:B2:CF:CB:D5:15:8E:74:DF:84:35:23:05:71 Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863 Certificate serial: 019B7C1329520F136C456DA42B2B8A918792 Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/SkqYNPRja7LPy9UVjnTfhDUjBXE.roa Signing time: Fri 02 Jan 2026 00:19:49 +0000 ROA not before: Fri 02 Jan 2026 00:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a13:84c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:29:52:0f:13:6c:45:6d:a4:2b:2b:8a:91:87:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863 Validity Not Before: Jan 2 00:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a4a9834f4636bb2cfcbd5158e74df8435230571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:99:e0:26:6c:90:32:34:1e:95:04:d4:43: f8:92:8c:4f:2c:1a:02:2c:7c:99:36:79:25:26:0c: 66:33:be:40:ec:41:78:4e:1c:8c:34:62:d7:a4:7b: e2:da:09:2e:d0:9b:e8:82:84:20:6a:30:63:07:f3: a6:d5:69:cb:6f:bd:00:fa:3f:1f:c6:3f:bc:59:c7: fa:2d:2a:cf:4c:52:c4:13:5e:c1:fa:98:a8:7b:8c: be:75:81:6b:3c:19:7c:bb:6d:54:38:f1:9d:53:79: b6:4a:c9:9f:68:b6:99:3d:9c:92:8a:43:e5:7f:b9: 0b:90:5e:61:c0:9b:21:6d:e7:74:7f:56:88:d1:9e: bf:e1:20:93:48:6d:ce:78:22:ae:c9:7b:02:ec:0f: 5d:bf:a2:4a:89:1a:c4:c7:b2:4a:c2:d2:13:10:8f: 9c:ee:ee:75:cb:6e:cd:a1:af:90:96:61:29:46:d6: 38:a3:75:96:1a:6c:16:27:29:73:e3:7d:be:1f:c3: 3e:d3:50:ce:32:6f:42:9b:74:c2:4d:8f:24:ff:67: 17:92:de:e9:ab:03:e6:d0:6f:33:42:cd:6b:d4:71: c3:3f:ec:7f:44:0c:71:65:de:98:7f:43:7f:ec:4e: 7d:1d:47:1c:38:6c:8e:6c:23:7f:a6:22:2e:84:29: f2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4A:98:34:F4:63:6B:B2:CF:CB:D5:15:8E:74:DF:84:35:23:05:71 X509v3 Authority Key Identifier: keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/SkqYNPRja7LPy9UVjnTfhDUjBXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:84c0::/32 Signature Algorithm: sha256WithRSAEncryption d0:d0:a1:07:4a:00:02:77:b3:21:49:67:96:c3:df:54:4b:c5: e6:49:b7:70:5c:31:95:fe:f9:40:7c:5c:3c:5d:9a:ca:af:66: b1:c1:90:f5:4e:a4:6d:62:d1:ab:78:4a:03:43:48:81:5f:7d: 8d:c5:39:ff:11:a7:da:8c:39:42:b9:bf:6e:21:6d:b3:83:07: 83:1d:9a:8d:fe:5d:c0:4b:50:ca:1a:b4:dd:35:a8:e7:6a:de: dc:b6:35:91:16:e8:25:c9:3c:68:a4:a2:bd:fe:7e:2c:69:8f: 5d:96:66:bf:c1:2f:3a:f7:fb:be:c8:ae:28:c4:e0:80:f1:58: 16:1e:ac:89:2f:ea:92:9c:7c:19:f8:42:66:ad:cb:ef:04:7a: f8:5b:55:5f:1c:7a:88:57:0b:08:de:8b:1f:03:52:1c:6b:7f: 1f:fd:9e:4a:8d:25:57:18:e1:3c:67:c1:6d:fc:a9:1d:5d:e9: 9b:99:da:7e:3c:f6:c8:5f:b0:4f:4a:7d:60:5c:6e:1c:20:bd: 75:39:97:48:a1:a9:b6:fe:79:4d:c7:6d:8e:cb:67:72:8c:9b: 09:2c:7a:f6:5c:d9:bd:3f:4a:6c:c1:cd:3e:e5:6a:b1:3a:a0: 5a:ec:cf:61:ff:0e:49:ae:eb:3b:56:ae:c2:70:b9:f5:ef:65: 92:5e:a0:ab -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EylSDxNsRW2kKyuKkYeSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDJkYzFkMmM4ZmJkYzA4NTE2YWIwYmIyMDg4YzM3ZWIw MDI4NjMwHhcNMjYwMTAyMDAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTRhOTgzNGY0NjM2YmIyY2ZjYmQ1MTU4ZTc0ZGY4NDM1MjMwNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOOZ4CZskDI0HpUE1EP4koxPLBoC LHyZNnklJgxmM75A7EF4ThyMNGLXpHvi2gku0JvogoQgajBjB/Om1WnLb70A+j8f xj+8Wcf6LSrPTFLEE17B+pioe4y+dYFrPBl8u21UOPGdU3m2SsmfaLaZPZySikPl f7kLkF5hwJshbed0f1aI0Z6/4SCTSG3OeCKuyXsC7A9dv6JKiRrEx7JKwtITEI+c 7u51y27Noa+QlmEpRtY4o3WWGmwWJylz432+H8M+01DOMm9Cm3TCTY8k/2cXkt7p qwPm0G8zQs1r1HHDP+x/RAxxZd6Yf0N/7E59HUccOGyObCN/piIuhCnynQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEpKmDT0Y2uyz8vVFY5034Q1IwVxMB8GA1UdIwQY MBaAFLvS3B0sj73AhRarC7IIjDfrAChjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTct MDY0MzdlYzQ2NmI4LzEvU2txWU5QUmphN0xQeTlVVmpuVGZoRFVqQlhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTctMDY0MzdlYzQ2NmI4 LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhOEwDAN BgkqhkiG9w0BAQsFAAOCAQEA0NChB0oAAnezIUlnlsPfVEvF5km3cFwxlf75QHxc PF2ayq9mscGQ9U6kbWLRq3hKA0NIgV99jcU5/xGn2ow5Qrm/biFts4MHgx2ajf5d wEtQyhq03TWo52re3LY1kRboJck8aKSivf5+LGmPXZZmv8EvOvf7vsiuKMTggPFY Fh6siS/qkpx8GfhCZq3L7wR6+FtVXxx6iFcLCN6LHwNSHGt/H/2eSo0lVxjhPGfB bfypHV3pm5nafjz2yF+wT0p9YFxuHCC9dTmXSKGptv55TcdtjstncoybCSx69lzZ vT9KbMHNPuVqsTqgWuzPYf8OSa7rO1auwnC59e9lkl6gqw== -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:44 2026 by rpki-client