This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/SkAOEDeuA2PQ-A10S9FavkFhiAE.roa File: SkAOEDeuA2PQ-A10S9FavkFhiAE.roa (raw, json) Hash identifier: kVOuXVUzFINGvVbrPdqSgnfvVUvQgBv0NhdbBuvyTSo= Subject key identifier: 4A:40:0E:10:37:AE:03:63:D0:F8:0D:74:4B:D1:5A:BE:41:61:88:01 Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Certificate serial: 019ABB210813B9C3CBCD87281A7F2CEC425F Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/SkAOEDeuA2PQ-A10S9FavkFhiAE.roa Signing time: Tue 25 Nov 2025 13:08:15 +0000 ROA not before: Tue 25 Nov 2025 13:08:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201513 IP address blocks: 213.184.154.0/24 maxlen: 24 2a03:720:5::/48 maxlen: 48 2a03:720:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:21:08:13:b9:c3:cb:cd:87:28:1a:7f:2c:ec:42:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Validity Not Before: Nov 25 13:08:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4a400e1037ae0363d0f80d744bd15abe41618801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:33:f1:67:3c:0a:b4:bc:ed:a0:01:6c:ac: d5:ca:14:60:c0:cc:82:0f:be:f4:85:4c:1f:18:33: 4a:f7:9f:60:31:1f:c7:67:d0:d7:56:84:06:6a:f0: 85:37:1d:52:97:e5:eb:4a:d5:32:fa:eb:86:39:bf: 10:54:68:ef:c2:9f:1b:4c:e1:8c:b0:f7:4b:94:45: 99:eb:ac:3d:0c:ff:ad:86:63:a5:53:32:13:b7:b2: 1e:6c:c1:2b:55:ed:f1:ad:49:8a:84:00:d6:d2:e7: 7b:d6:3e:9c:89:52:bb:a5:16:f3:2e:86:4f:81:41: 0d:40:88:60:0f:7f:95:d7:06:1d:da:f4:bb:d6:4f: 5a:74:84:a0:39:9e:e9:eb:28:8c:c5:ad:79:f5:12: ad:10:a0:83:9f:58:a0:e1:45:c1:95:1f:c5:62:04: 08:d6:e4:04:9f:88:76:34:7f:9e:66:5f:03:94:33: db:ae:fd:c2:df:6b:35:59:56:9e:49:9f:d2:de:d0: 49:9c:cb:f0:8e:8d:e4:2a:7d:08:1e:5c:2e:06:ef: 27:21:c2:47:2f:1a:86:5d:06:91:f1:22:91:fc:df: 96:24:81:c7:fc:83:d2:5a:b2:49:9a:ca:13:d7:de: 39:38:79:4c:6c:a0:7a:1e:74:83:3d:e0:43:d1:47: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:40:0E:10:37:AE:03:63:D0:F8:0D:74:4B:D1:5A:BE:41:61:88:01 X509v3 Authority Key Identifier: keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/SkAOEDeuA2PQ-A10S9FavkFhiAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.184.154.0/24 IPv6: 2a03:720:5::/48 2a03:720:1005::/48 Signature Algorithm: sha256WithRSAEncryption ab:a0:e0:d9:c4:8f:49:02:51:07:71:d6:5c:f8:33:00:35:86: 23:c7:e7:59:bf:0c:71:46:76:5f:3f:ae:52:58:51:b2:e8:4a: 43:5a:9c:83:dc:d8:52:bf:7a:25:17:db:f1:ac:89:23:bf:90: eb:8d:8e:73:05:a1:f4:11:42:22:a8:56:3a:ce:4c:26:97:d3: dc:58:50:3d:19:f3:5b:fa:12:55:7f:a0:34:7f:e6:a8:db:1f: 5a:42:23:41:3b:78:39:58:35:26:de:91:86:c9:7e:03:4e:12: ce:aa:6e:d3:4d:0b:03:17:8c:bb:0a:d5:78:77:35:ac:bc:12: 68:38:b5:eb:61:ff:59:be:4d:e1:07:f9:79:c4:96:71:66:3b: 7b:af:a5:a8:6e:99:dc:2d:ac:e4:d5:09:59:3f:63:82:f2:cd: 84:2b:c6:e4:64:1a:73:5a:59:b2:42:f9:0b:59:1b:b7:11:37: 4d:1c:6d:10:95:ed:82:6f:97:2f:0c:4c:62:7a:96:bc:9f:ec: d6:d2:51:06:6b:7f:9b:3e:ff:c4:2b:2b:1c:57:96:0f:ad:ac: 09:d6:bb:dc:69:06:89:3c:b4:50:f5:1b:b5:8d:5b:28:12:bc: eb:70:4e:05:2d:d1:1a:8b:cd:a0:d6:2f:d6:d8:e5:3d:fb:f7: 31:c7:64:5d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZq7IQgTucPLzYcoGn8s7EJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5 MDBhNzYwHhcNMjUxMTI1MTMwODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTQwMGUxMDM3YWUwMzYzZDBmODBkNzQ0YmQxNWFiZTQxNjE4ODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ikz8Wc8CrS87aABbKzVyhRgwMyC D770hUwfGDNK959gMR/HZ9DXVoQGavCFNx1Sl+XrStUy+uuGOb8QVGjvwp8bTOGM sPdLlEWZ66w9DP+thmOlUzITt7IebMErVe3xrUmKhADW0ud71j6ciVK7pRbzLoZP gUENQIhgD3+V1wYd2vS71k9adISgOZ7p6yiMxa159RKtEKCDn1ig4UXBlR/FYgQI 1uQEn4h2NH+eZl8DlDPbrv3C32s1WVaeSZ/S3tBJnMvwjo3kKn0IHlwuBu8nIcJH LxqGXQaR8SKR/N+WJIHH/IPSWrJJmsoT1945OHlMbKB6HnSDPeBD0UdzyQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFEpADhA3rgNj0PgNdEvRWr5BYYgBMB8GA1UdIwQY MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt ODlhY2UzODIyMGZiLzEvU2tBT0VEZXVBMlBRLUExMFM5RmF2a0ZoaUFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQA1biaMBgE AgACMBIDBwAqAwcgAAUDBwAqAwcgEAUwDQYJKoZIhvcNAQELBQADggEBAKug4NnE j0kCUQdx1lz4MwA1hiPH51m/DHFGdl8/rlJYUbLoSkNanIPc2FK/eiUX2/GsiSO/ kOuNjnMFofQRQiKoVjrOTCaX09xYUD0Z81v6ElV/oDR/5qjbH1pCI0E7eDlYNSbe kYbJfgNOEs6qbtNNCwMXjLsK1Xh3Nay8Emg4teth/1m+TeEH+XnElnFmO3uvpahu mdwtrOTVCVk/Y4LyzYQrxuRkGnNaWbJC+QtZG7cRN00cbRCV7YJvly8MTGJ6lryf 7NbSUQZrf5s+/8QrKxxXlg+trAnWu9xpBok8tFD1G7WNWygSvOtwTgUt0RqLzaDW L9bY5T379zHHZF0= -----END CERTIFICATE-----Generated at Sat Dec 6 21:32:02 2025 by rpki-client