This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SkPB_2C92M_g139f_sbXZc8kulg.roa File: SkPB_2C92M_g139f_sbXZc8kulg.roa (raw, json) Hash identifier: No0NlSR+lV6MZdHTNm2X+M6rZ2I/VFNEhBgDf+z3I1E= Subject key identifier: 4A:43:C1:FF:60:BD:D8:CF:E0:D7:7F:5F:FE:C6:D7:65:CF:24:BA:58 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B502747C2950421E6CABCC5E5860693F3 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SkPB_2C92M_g139f_sbXZc8kulg.roa Signing time: Wed 24 Dec 2025 11:38:30 +0000 ROA not before: Wed 24 Dec 2025 11:38:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213625 IP address blocks: 2a0c:9a40:84e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:27:47:c2:95:04:21:e6:ca:bc:c5:e5:86:06:93:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Dec 24 11:38:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4a43c1ff60bdd8cfe0d77f5ffec6d765cf24ba58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:7f:22:00:d0:59:8c:d7:23:19:f0:37:b1: 3e:07:a1:e4:bc:b5:8b:07:56:d2:ad:8c:02:a8:be: eb:d8:c1:ba:56:ff:2e:b1:33:e8:49:33:2a:20:79: ba:ce:85:48:94:bc:70:d9:dc:c0:1e:bb:ad:a0:9a: 8c:c3:bd:a3:22:8b:d8:b4:80:2d:07:db:a6:1f:87: 0d:9f:c1:0b:17:e2:e6:2f:63:a3:f0:30:6f:d7:83: 2a:45:ea:08:ee:fb:40:c7:24:cd:3c:ba:b2:21:6b: 08:5b:a9:55:10:63:10:81:bd:38:fc:85:ea:d8:3b: 9d:c4:85:2f:8e:39:c5:61:9f:22:9c:95:52:46:ad: 06:f5:99:76:1d:ef:35:e3:0b:e4:5d:2b:c8:94:1f: 7d:70:fc:ea:10:99:60:07:55:43:34:dc:25:e5:54: 8a:53:57:45:8d:1c:77:0a:a7:5b:38:22:9d:5f:8e: 7e:3c:c9:18:68:85:fa:9d:dd:31:e5:e9:58:73:cb: d5:05:67:a2:f8:f4:74:01:2d:c7:49:66:ca:26:2f: 24:34:13:7a:61:15:b8:ef:28:fc:b6:0d:f5:dd:23: fc:74:38:72:06:5a:a6:5c:a2:dc:7c:16:b0:c5:ea: 0c:32:a8:f9:a5:0d:d2:b7:b5:f1:99:1c:73:cb:8b: 25:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:43:C1:FF:60:BD:D8:CF:E0:D7:7F:5F:FE:C6:D7:65:CF:24:BA:58 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SkPB_2C92M_g139f_sbXZc8kulg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:84e0::/48 Signature Algorithm: sha256WithRSAEncryption 32:3b:de:ba:4d:cb:65:74:3b:95:11:7d:3e:f0:1d:7b:0b:e9: 8a:06:20:8c:85:06:a0:2b:24:64:37:80:07:72:96:bf:70:da: d1:fe:ac:60:22:67:99:9f:08:37:97:84:a9:59:53:d8:ad:73: ee:72:c1:fd:c9:7e:3e:ad:36:fc:97:51:92:60:52:3d:a5:d5: 4a:e2:c5:23:c4:30:7f:b6:96:5c:4a:a6:14:22:50:4e:80:ad: 6a:17:5a:aa:2f:b2:19:6f:0e:54:d2:51:fd:0c:2f:a8:97:23: 8b:1e:ec:ab:70:f1:32:1c:95:ce:dc:1a:8e:2a:e9:99:c8:4c: b9:7d:59:53:8d:5d:db:5c:4e:d6:e4:95:ee:91:4a:12:a9:e9: e8:d9:32:16:2a:63:6a:70:09:ba:0f:70:dd:17:ea:17:ce:51: 9a:a5:38:0b:b5:04:ac:38:b3:fe:67:f6:05:34:2c:c7:1c:b6: f3:af:00:74:f1:94:60:02:37:6a:c3:75:d1:91:ca:3b:49:94: 58:09:32:9d:a9:ce:ba:8d:a7:c5:27:56:d9:2e:32:01:eb:46: f4:19:a8:16:c6:e4:78:5d:19:49:12:9f:7a:b0:06:89:02:e7: e3:f7:06:64:e6:c0:50:51:f0:cb:02:33:c0:39:78:af:b7:a3: 8f:86:88:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtQJ0fClQQh5sq8xeWGBpPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMjI0MTEzODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTQzYzFmZjYwYmRkOGNmZTBkNzdmNWZmZWM2ZDc2NWNmMjRiYTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptR/IgDQWYzXIxnwN7E+B6HkvLWL B1bSrYwCqL7r2MG6Vv8usTPoSTMqIHm6zoVIlLxw2dzAHrutoJqMw72jIovYtIAt B9umH4cNn8ELF+LmL2Oj8DBv14MqReoI7vtAxyTNPLqyIWsIW6lVEGMQgb04/IXq 2DudxIUvjjnFYZ8inJVSRq0G9Zl2He814wvkXSvIlB99cPzqEJlgB1VDNNwl5VSK U1dFjRx3CqdbOCKdX45+PMkYaIX6nd0x5elYc8vVBWei+PR0AS3HSWbKJi8kNBN6 YRW47yj8tg313SP8dDhyBlqmXKLcfBawxeoMMqj5pQ3St7XxmRxzy4sl3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEpDwf9gvdjP4Nd/X/7G12XPJLpYMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvU2tQQl8yQzkyTV9nMTM5Zl9zYlhaYzhrdWxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQITg MA0GCSqGSIb3DQEBCwUAA4IBAQAyO966TctldDuVEX0+8B17C+mKBiCMhQagKyRk N4AHcpa/cNrR/qxgImeZnwg3l4SpWVPYrXPucsH9yX4+rTb8l1GSYFI9pdVK4sUj xDB/tpZcSqYUIlBOgK1qF1qqL7IZbw5U0lH9DC+olyOLHuyrcPEyHJXO3BqOKumZ yEy5fVlTjV3bXE7W5JXukUoSqeno2TIWKmNqcAm6D3DdF+oXzlGapTgLtQSsOLP+ Z/YFNCzHHLbzrwB08ZRgAjdqw3XRkco7SZRYCTKdqc66jafFJ1bZLjIB60b0GagW xuR4XRlJEp96sAaJAufj9wZk5sBQUfDLAjPAOXivt6OPhohJ -----END CERTIFICATE-----Generated at Sat Dec 27 00:40:35 2025 by rpki-client