This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/skB-Hezp9u6dMSW47ypzkcQMALM.roa File: skB-Hezp9u6dMSW47ypzkcQMALM.roa (raw, json) Hash identifier: 7DCWoB2xt0+UZjjo6BwRXpvUHyGYHyqHkNc8BdIa858= Subject key identifier: B2:40:7E:1D:EC:E9:F6:EE:9D:31:25:B8:EF:2A:73:91:C4:0C:00:B3 Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d Certificate serial: 019B7CEDA5FD658095D041BFD2485123462C Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/skB-Hezp9u6dMSW47ypzkcQMALM.roa Signing time: Fri 02 Jan 2026 04:18:27 +0000 ROA not before: Fri 02 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 92.242.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a5:fd:65:80:95:d0:41:bf:d2:48:51:23:46:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d Validity Not Before: Jan 2 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2407e1dece9f6ee9d3125b8ef2a7391c40c00b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:b0:db:72:bd:08:42:3f:68:0a:c9:96:5e: 63:3a:98:f4:51:18:d0:1f:a3:77:61:f1:59:c3:26: 28:8b:cf:a9:d8:ac:c5:c4:9c:64:7f:b8:1a:d2:7d: 24:2f:1b:3e:f0:1b:1b:8d:11:0f:04:4f:a5:7b:ff: 3a:eb:79:8f:2a:e7:73:fd:7e:e3:2c:41:4e:f0:b6: e3:08:2d:90:8e:c9:1c:7b:bc:6e:3c:62:61:48:91: 85:a4:a9:03:df:6e:a4:77:10:10:c5:69:5c:a7:43: 89:46:b1:fc:d0:66:b1:38:d6:f1:ac:9b:75:6c:66: 99:d2:7a:31:03:63:2d:96:db:b0:98:24:e1:0a:ab: 7b:5e:66:05:d9:83:dc:52:89:ed:0c:37:73:0e:a6: f7:a3:f7:4b:e9:9b:89:fd:84:53:81:91:e0:3d:7b: d9:98:ba:ba:d4:90:8a:30:de:8f:98:7b:cb:d9:42: eb:b1:45:47:1a:3f:ed:0a:01:03:f1:61:b5:96:04: eb:7c:ac:5e:d0:ab:1b:99:75:79:0c:45:5b:1b:af: cd:7c:6a:ca:4e:8e:7b:43:4d:9d:07:88:61:70:03: 0c:48:7c:2e:17:30:7d:5c:b2:8d:24:0e:87:68:5e: 5f:be:18:ce:50:1d:51:d1:34:26:fc:9a:ce:23:cf: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:40:7E:1D:EC:E9:F6:EE:9D:31:25:B8:EF:2A:73:91:C4:0C:00:B3 X509v3 Authority Key Identifier: keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/skB-Hezp9u6dMSW47ypzkcQMALM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.242.164.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:fd:ea:c2:4c:6b:e5:09:ba:0a:5e:c3:bd:f5:76:f1:d2:85: ef:5f:2d:c4:2e:6b:93:28:02:71:58:f5:04:b4:c6:4b:04:39: c5:07:4c:99:04:b1:2f:ee:c2:7c:60:84:9a:f9:b3:dd:c6:2c: ab:38:c2:59:15:49:45:e5:8f:6e:c5:01:ca:1d:51:ec:51:79: f5:60:06:1e:14:7e:c4:f0:10:8e:e8:12:11:10:44:d0:54:ba: 74:17:29:8d:cd:f3:ce:a9:21:5d:e1:50:00:66:a9:0e:8c:25: 6e:53:61:38:a6:01:10:2f:c2:f8:47:2c:a7:8d:5f:b5:74:30: 13:0a:0a:39:69:d0:22:b5:ac:b7:1c:d3:7a:b9:4e:85:48:79: d1:36:33:4d:64:ed:68:2b:3a:6b:00:03:52:74:b9:f7:f1:d4: 18:3e:a4:93:7b:b7:8e:13:0c:86:ff:77:e8:dd:ae:82:6c:c6: 11:52:10:e2:de:25:ac:18:02:e5:e2:6f:f1:d0:39:9a:af:c1: 90:91:98:9c:eb:f9:9d:bd:fd:f3:dc:27:ea:5d:67:8d:cb:2e: dd:75:74:8c:97:6c:1c:83:35:c1:c0:29:1e:e2:89:42:b8:a8: 3d:37:31:08:b5:c4:9f:96:35:a9:b6:64:c6:fa:d3:40:91:3a: 3a:82:65:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87aX9ZYCV0EG/0khRI0YsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj NzcwMWQwHhcNMjYwMTAyMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjQwN2UxZGVjZTlmNmVlOWQzMTI1YjhlZjJhNzM5MWM0MGMwMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTuw23K9CEI/aArJll5jOpj0URjQ H6N3YfFZwyYoi8+p2KzFxJxkf7ga0n0kLxs+8BsbjREPBE+le/8663mPKudz/X7j LEFO8LbjCC2Qjskce7xuPGJhSJGFpKkD326kdxAQxWlcp0OJRrH80GaxONbxrJt1 bGaZ0noxA2MtltuwmCThCqt7XmYF2YPcUontDDdzDqb3o/dL6ZuJ/YRTgZHgPXvZ mLq61JCKMN6PmHvL2ULrsUVHGj/tCgED8WG1lgTrfKxe0KsbmXV5DEVbG6/NfGrK To57Q02dB4hhcAMMSHwuFzB9XLKNJA6HaF5fvhjOUB1R0TQm/JrOI89LbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLJAfh3s6fbunTEluO8qc5HEDACzMB8GA1UdIwQY MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt NmRmZTBmN2Q1M2JkLzEvc2tCLUhlenA5dTZkTVNXNDd5cHprY1FNQUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPKkMA0G CSqGSIb3DQEBCwUAA4IBAQAu/erCTGvlCboKXsO99Xbx0oXvXy3ELmuTKAJxWPUE tMZLBDnFB0yZBLEv7sJ8YISa+bPdxiyrOMJZFUlF5Y9uxQHKHVHsUXn1YAYeFH7E 8BCO6BIREETQVLp0FymNzfPOqSFd4VAAZqkOjCVuU2E4pgEQL8L4RyynjV+1dDAT Cgo5adAitay3HNN6uU6FSHnRNjNNZO1oKzprAANSdLn38dQYPqSTe7eOEwyG/3fo 3a6CbMYRUhDi3iWsGALl4m/x0Dmar8GQkZic6/mdvf3z3CfqXWeNyy7ddXSMl2wc gzXBwCke4olCuKg9NzEItcSfljWptmTG+tNAkTo6gmXQ -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:55 2026 by rpki-client