This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/SKNgL9EtUSHtY6XWC1t8-mkwb8s.roa File: SKNgL9EtUSHtY6XWC1t8-mkwb8s.roa (raw, json) Hash identifier: qbcYTlDoQlcLT8kuTCFoE2vVHnFviJrGXzlocQtB00Q= Subject key identifier: 48:A3:60:2F:D1:2D:51:21:ED:63:A5:D6:0B:5B:7C:FA:69:30:6F:CB Certificate issuer: /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027 Certificate serial: 019B79ECE59A5219BF09B1A0D70A886416EB Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/SKNgL9EtUSHtY6XWC1t8-mkwb8s.roa Signing time: Thu 01 Jan 2026 14:18:46 +0000 ROA not before: Thu 01 Jan 2026 14:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50883 IP address blocks: 91.216.6.0/24 maxlen: 24 178.216.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e5:9a:52:19:bf:09:b1:a0:d7:0a:88:64:16:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027 Validity Not Before: Jan 1 14:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48a3602fd12d5121ed63a5d60b5b7cfa69306fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:96:28:64:f2:71:b5:b8:56:56:e3:96:cd:de: 4a:4e:00:f3:17:dc:6c:80:e2:5b:94:23:cf:23:4a: 02:d6:1d:89:21:fe:a7:ac:e9:90:31:1c:83:10:13: 6e:c5:c4:64:05:a9:cf:c0:2e:aa:98:ad:30:34:10: c4:f6:f2:29:26:45:d9:0e:b8:c9:d1:32:3c:d5:53: bb:98:7d:f4:4b:9a:24:13:48:ca:da:37:fb:6b:cd: 18:ff:4e:d4:7b:3b:b2:80:52:ea:08:b2:cb:70:a2: 02:a1:d5:61:55:64:a0:a6:89:ca:bc:a5:31:3f:61: 04:1e:75:06:c6:f2:9e:d2:53:23:ed:15:ef:84:c7: 54:2c:01:af:86:64:e8:53:ac:7c:d1:9e:69:41:e9: b0:a1:c3:d8:e2:54:96:3a:0b:6e:40:96:bf:60:4d: 47:e0:37:6a:cd:5f:d4:d4:da:8d:a5:cd:25:08:2b: 41:fe:4f:cc:e8:e6:aa:e5:a6:f4:da:b4:14:c8:87: 1b:34:7b:c0:cd:f4:e0:b0:51:5c:fc:9b:f6:31:a9: 6e:0c:0c:2b:b0:38:85:29:03:0b:65:43:0b:58:7e: e1:4d:91:4e:43:61:19:5f:c7:d4:80:03:71:b0:56: f0:8e:e4:fd:d7:d2:e6:af:c2:50:44:67:19:04:24: 86:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A3:60:2F:D1:2D:51:21:ED:63:A5:D6:0B:5B:7C:FA:69:30:6F:CB X509v3 Authority Key Identifier: keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/SKNgL9EtUSHtY6XWC1t8-mkwb8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.6.0/24 178.216.112.0/21 Signature Algorithm: sha256WithRSAEncryption 81:1e:d3:86:a0:45:0e:e2:d7:d7:1b:c1:74:ed:69:13:45:d9: 07:0f:9f:30:ee:b7:0b:06:dd:c0:c4:4d:09:fa:66:f9:b8:9b: 49:e2:ed:19:6f:6a:23:82:53:d6:a1:3f:b9:79:64:e9:1e:fa: d9:9c:32:36:5f:eb:db:be:8e:c5:71:c3:46:85:19:de:a4:b7: ee:71:60:5f:5c:5b:bf:88:93:f7:fe:80:19:5f:c0:65:2a:32: 4e:92:3b:52:de:d4:2a:d1:26:5c:92:cb:ba:ad:52:25:0c:b1: 52:6c:07:80:99:bb:5e:ac:59:71:d3:af:47:46:40:6e:8d:8d: ef:e5:5b:fe:6f:74:41:21:b8:94:2d:22:ff:83:17:1d:91:8a: 3a:44:d5:fc:53:dd:93:66:ad:ec:f0:65:6a:2c:a5:31:69:77: 3a:ca:5b:f2:21:4f:1f:51:02:32:e0:2b:f7:6e:ed:ae:30:36: 85:74:3d:4e:39:d1:05:a5:60:96:c6:97:08:8e:5b:ff:a6:b5: 2c:b0:73:fa:b2:ad:9a:32:ec:43:d0:d5:72:c1:0d:60:c7:14: 64:a7:0d:23:0e:ee:da:27:5b:75:01:37:0c:04:c4:96:b9:fd: 8f:f8:14:51:91:c5:62:95:fa:e5:09:4e:df:0d:e7:c9:3a:20: d9:32:a8:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57OWaUhm/CbGg1wqIZBbrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YmJjODlhZDA0MjBkZTdiNWJjMmRkMzJmZWEzYjk3OWZh ZGUwMjcwHhcNMjYwMTAxMTQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGEzNjAyZmQxMmQ1MTIxZWQ2M2E1ZDYwYjViN2NmYTY5MzA2ZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJYoZPJxtbhWVuOWzd5KTgDzF9xs gOJblCPPI0oC1h2JIf6nrOmQMRyDEBNuxcRkBanPwC6qmK0wNBDE9vIpJkXZDrjJ 0TI81VO7mH30S5okE0jK2jf7a80Y/07UezuygFLqCLLLcKICodVhVWSgponKvKUx P2EEHnUGxvKe0lMj7RXvhMdULAGvhmToU6x80Z5pQemwocPY4lSWOgtuQJa/YE1H 4DdqzV/U1NqNpc0lCCtB/k/M6Oaq5ab02rQUyIcbNHvAzfTgsFFc/Jv2MaluDAwr sDiFKQMLZUMLWH7hTZFOQ2EZX8fUgANxsFbwjuT919Lmr8JQRGcZBCSGJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEijYC/RLVEh7WOl1gtbfPppMG/LMB8GA1UdIwQY MBaAFHW7yJrQQg3ntbwt0y/qO5efreAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAt MDJmYTIxOGQxNGY4LzEvU0tOZ0w5RXRVU0h0WTZYV0MxdDgtbWt3YjhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAtMDJmYTIxOGQxNGY4 LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9gGAwQD sthwMA0GCSqGSIb3DQEBCwUAA4IBAQCBHtOGoEUO4tfXG8F07WkTRdkHD58w7rcL Bt3AxE0J+mb5uJtJ4u0Zb2ojglPWoT+5eWTpHvrZnDI2X+vbvo7FccNGhRnepLfu cWBfXFu/iJP3/oAZX8BlKjJOkjtS3tQq0SZcksu6rVIlDLFSbAeAmbterFlx069H RkBujY3v5Vv+b3RBIbiULSL/gxcdkYo6RNX8U92TZq3s8GVqLKUxaXc6ylvyIU8f UQIy4Cv3bu2uMDaFdD1OOdEFpWCWxpcIjlv/prUssHP6sq2aMuxD0NVywQ1gxxRk pw0jDu7aJ1t1ATcMBMSWuf2P+BRRkcVilfrlCU7fDefJOiDZMqg6 -----END CERTIFICATE-----Generated at Fri Jan 2 21:42:13 2026 by rpki-client