This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/skdgLCepJ6YdLpHAuQ64Mk9EtIw.roa File: skdgLCepJ6YdLpHAuQ64Mk9EtIw.roa (raw, json) Hash identifier: ct+nsIFE67MU5zxELXDrFdR/8fVfITxVTEyaMZnWttc= Subject key identifier: B2:47:60:2C:27:A9:27:A6:1D:2E:91:C0:B9:0E:B8:32:4F:44:B4:8C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B2FEAB7944D000EEC669516123FFF82D7 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/skdgLCepJ6YdLpHAuQ64Mk9EtIw.roa Signing time: Thu 18 Dec 2025 05:24:30 +0000 ROA not before: Thu 18 Dec 2025 05:24:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213622 IP address blocks: 89.106.64.0/24 maxlen: 24 185.13.156.0/24 maxlen: 24 185.121.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:ea:b7:94:4d:00:0e:ec:66:95:16:12:3f:ff:82:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 18 05:24:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b247602c27a927a61d2e91c0b90eb8324f44b48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:57:7b:47:72:1f:20:01:a4:aa:25:ea:ca: ac:24:b3:8d:10:55:31:6d:c0:6a:5c:41:27:f8:e5: 81:2a:bb:55:e7:92:18:0d:48:5d:4a:5d:83:a1:5c: 93:fc:fc:70:7f:74:9a:3e:b0:d1:80:bf:97:a7:32: 95:9e:0a:65:9b:9c:d3:27:67:47:62:42:a3:32:76: c3:06:06:8a:7f:93:4c:e2:94:e3:05:05:17:f5:bd: 0b:4a:32:5d:ff:04:d8:a0:84:01:5f:a6:aa:c9:31: 75:de:f3:5b:7d:2d:17:16:ae:0c:05:f5:75:6c:0a: 79:24:c0:af:75:cb:99:98:e3:f7:17:68:ce:f6:8e: 2f:3e:d5:50:8a:2d:fc:3a:86:31:8b:a2:11:23:3b: fd:87:fb:48:0a:3b:6d:9e:da:ab:62:85:bc:b1:85: 5a:de:fb:14:06:41:e8:dc:84:b9:19:1c:0e:9a:07: 4d:96:c1:b2:db:cd:3b:41:5b:eb:3d:77:09:40:43: 13:90:c8:48:34:e8:f8:e7:96:9a:d3:b8:d6:d3:98: 78:22:64:ea:80:05:43:68:60:03:89:39:a3:29:27: f8:0d:a1:ac:b6:66:fc:c6:c7:5e:7a:ba:ed:a3:25: 53:97:a9:64:e0:04:07:f6:29:c0:da:5a:f4:d3:d1: 14:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:47:60:2C:27:A9:27:A6:1D:2E:91:C0:B9:0E:B8:32:4F:44:B4:8C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/skdgLCepJ6YdLpHAuQ64Mk9EtIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.64.0/24 185.13.156.0/24 185.121.69.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:64:13:ff:37:ab:98:04:1b:db:b4:79:c2:9b:30:23:3b:5d: ca:f5:24:9e:fd:b2:7c:4d:3e:fa:aa:46:a1:47:dd:f3:7e:2d: 69:e1:fc:c3:fa:bb:17:96:83:25:fb:dd:6f:27:75:48:42:e2: 26:fb:77:49:a6:5c:75:f5:7b:a5:93:af:9d:59:a6:81:81:a7: d2:5f:d4:de:82:a9:b0:40:90:70:ae:fa:cf:f4:31:a1:6a:d4: 01:4a:ae:51:90:95:a5:fe:6f:0f:ce:61:3b:6c:99:3e:90:78: 26:ad:30:c8:ed:35:2d:d9:98:9f:19:fd:48:ae:11:bb:b8:56: 2f:c2:1a:6c:7e:9a:f7:20:e5:ea:d1:c6:82:57:e1:29:e5:e5: 89:c4:4b:a4:80:24:0b:a7:3f:98:c9:36:50:c5:14:d6:fa:34: 29:29:24:11:44:ee:1b:36:ff:af:cd:4d:7c:19:4f:5a:5b:d0: e2:bf:78:11:97:76:2c:21:bd:87:5d:47:01:07:dd:f2:8c:a4: 9d:15:34:24:c6:42:32:32:40:b0:40:06:1d:75:ff:b5:21:52: d8:d6:d9:83:bd:18:02:00:38:1e:34:d5:d8:91:36:1b:e6:c0: fa:a0:fb:13:d4:13:43:96:b1:39:d5:12:49:ff:bc:ac:a4:35: c5:7c:2b:28 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsv6reUTQAO7GaVFhI//4LXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE4MDUyNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjQ3NjAyYzI3YTkyN2E2MWQyZTkxYzBiOTBlYjgzMjRmNDRiNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaRXe0dyHyABpKol6sqsJLONEFUx bcBqXEEn+OWBKrtV55IYDUhdSl2DoVyT/Pxwf3SaPrDRgL+XpzKVngplm5zTJ2dH YkKjMnbDBgaKf5NM4pTjBQUX9b0LSjJd/wTYoIQBX6aqyTF13vNbfS0XFq4MBfV1 bAp5JMCvdcuZmOP3F2jO9o4vPtVQii38OoYxi6IRIzv9h/tICjttntqrYoW8sYVa 3vsUBkHo3IS5GRwOmgdNlsGy2807QVvrPXcJQEMTkMhINOj455aa07jW05h4ImTq gAVDaGADiTmjKSf4DaGstmb8xsdeerrtoyVTl6lk4AQH9inA2lr009EUTwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLJHYCwnqSemHS6RwLkOuDJPRLSMMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvc2tkZ0xDZXBKNllkTHBIQXVRNjRNazlFdEl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWWpAAwQA uQ2cAwQAuXlFMA0GCSqGSIb3DQEBCwUAA4IBAQB8ZBP/N6uYBBvbtHnCmzAjO13K 9SSe/bJ8TT76qkahR93zfi1p4fzD+rsXloMl+91vJ3VIQuIm+3dJplx19Xulk6+d WaaBgafSX9TegqmwQJBwrvrP9DGhatQBSq5RkJWl/m8PzmE7bJk+kHgmrTDI7TUt 2ZifGf1IrhG7uFYvwhpsfpr3IOXq0caCV+Ep5eWJxEukgCQLpz+YyTZQxRTW+jQp KSQRRO4bNv+vzU18GU9aW9Div3gRl3YsIb2HXUcBB93yjKSdFTQkxkIyMkCwQAYd df+1IVLY1tmDvRgCADgeNNXYkTYb5sD6oPsT1BNDlrE51RJJ/7yspDXFfCso -----END CERTIFICATE-----Generated at Fri Dec 19 20:48:46 2025 by rpki-client