This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/SWC8q5CH8zumHrflzVp4e7i8dGY.roa File: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (raw, json) Hash identifier: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw= Subject key identifier: 49:60:BC:AB:90:87:F3:3B:A6:1E:B7:E5:CD:5A:78:7B:B8:BC:74:66 Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695 Certificate serial: 019B77C678FFAB5B39B4E55F0B590D10E4D9 Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/SWC8q5CH8zumHrflzVp4e7i8dGY.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15525 IP address blocks: 193.43.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:78:ff:ab:5b:39:b4:e5:5f:0b:59:0d:10:e4:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4960bcab9087f33ba61eb7e5cd5a787bb8bc7466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c3:26:c3:57:63:2e:e3:f9:04:c1:33:d0:b7: 7f:a9:db:b3:8c:8e:6f:fb:af:91:d7:92:57:6d:67: 02:75:ed:c3:c4:93:f3:82:5c:2e:20:d1:fc:0f:30: 20:e8:51:05:91:2e:84:99:24:a6:5a:c6:08:68:66: 35:2f:8d:a9:a9:3b:ce:ea:5b:33:a7:28:ec:39:7b: 0d:e7:ec:04:d4:dd:61:5b:ae:5c:ae:3e:41:e3:ce: 2f:70:a7:5a:c4:81:79:14:3e:c1:a9:2d:81:df:6d: c2:f4:9c:59:c0:2c:4f:20:cd:86:57:92:c0:95:a9: 8a:cc:9c:e0:c5:2f:aa:7d:4f:c7:44:19:6e:ed:4c: 89:1d:92:d3:bd:d8:c0:76:02:70:4e:2b:26:7d:d5: 40:ab:7c:06:55:62:01:a9:df:54:81:15:09:9c:96: 3d:ca:a5:0a:bb:8a:b8:28:da:0e:c3:28:b8:06:fd: 39:1b:b3:87:9a:8f:97:94:e7:eb:cb:b0:e2:2b:f6: a4:c2:01:bc:44:9b:f8:d7:22:df:8c:cd:84:05:b9: 2f:e4:51:5c:71:f7:11:93:51:cd:02:d0:19:04:21: 9a:8c:5e:ae:04:89:fd:7a:8c:b6:ef:60:7c:0b:39: 1d:9e:ca:e5:8a:ba:ed:87:4a:30:e6:1f:9f:94:95: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:60:BC:AB:90:87:F3:3B:A6:1E:B7:E5:CD:5A:78:7B:B8:BC:74:66 X509v3 Authority Key Identifier: keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/SWC8q5CH8zumHrflzVp4e7i8dGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.40.0/24 Signature Algorithm: sha256WithRSAEncryption 08:55:66:86:69:06:63:b5:38:a4:0a:99:97:c2:c8:84:5b:cc: 3d:29:b5:52:e4:d9:e4:ba:b9:59:b4:3d:29:5e:82:21:c4:0c: 91:c5:80:02:ae:92:e3:6e:10:da:3d:86:70:f1:00:b0:99:3d: a4:4f:ec:df:db:7d:92:a3:68:57:23:a5:ad:50:66:54:42:3b: 2f:c2:c6:c9:33:62:bb:cc:8c:f4:0c:5a:d9:4a:24:2d:07:4b: 35:5d:36:fe:e1:8b:30:c1:15:ef:9a:4e:2f:bc:06:9a:e3:51: ff:dc:e7:6b:b7:91:40:54:63:e1:8b:7c:fc:e2:7f:76:c4:10: 87:7a:45:e9:01:5e:1a:7c:b6:09:5d:6f:72:2b:a7:d9:1b:c8: 3d:e6:cf:62:d1:6e:d2:0e:84:cc:7a:a0:46:c1:87:2b:8d:61: f2:7a:00:40:b4:76:be:56:16:5a:97:27:70:58:74:aa:bf:17: fb:be:60:72:b5:1f:61:db:e1:19:31:93:5a:51:b3:46:12:76: 81:0b:bf:4d:78:eb:b6:a8:cd:9c:bb:a1:d8:c5:41:3d:3e:55: d1:ad:c4:a8:c0:34:ab:96:a1:73:10:02:35:be:63:12:4c:70: cf:3a:0e:de:a0:d7:ce:a8:ed:3c:c8:92:7e:21:f8:1b:ce:49: c2:53:ba:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnj/q1s5tOVfC1kNEOTZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YWVjODAyNGNhYTEwM2E4NDEyNjk2YzdlNzJmNzc4MDNj ZDg2OTUwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTYwYmNhYjkwODdmMzNiYTYxZWI3ZTVjZDVhNzg3YmI4YmM3NDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cMmw1djLuP5BMEz0Ld/qduzjI5v +6+R15JXbWcCde3DxJPzglwuINH8DzAg6FEFkS6EmSSmWsYIaGY1L42pqTvO6lsz pyjsOXsN5+wE1N1hW65crj5B484vcKdaxIF5FD7BqS2B323C9JxZwCxPIM2GV5LA lamKzJzgxS+qfU/HRBlu7UyJHZLTvdjAdgJwTismfdVAq3wGVWIBqd9UgRUJnJY9 yqUKu4q4KNoOwyi4Bv05G7OHmo+XlOfry7DiK/akwgG8RJv41yLfjM2EBbkv5FFc cfcRk1HNAtAZBCGajF6uBIn9eoy272B8Czkdnsrlirrth0ow5h+flJWNHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFElgvKuQh/M7ph635c1aeHu4vHRmMB8GA1UdIwQY MBaAFGSuyAJMqhA6hBJpbH5y93gDzYaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wZjI0ZGQtZWY0YS00ZGJmLWIyMGQt YjAzOWMyNGI5OWNhLzEvU1dDOHE1Q0g4enVtSHJmbHpWcDRlN2k4ZEdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wZjI0ZGQtZWY0YS00ZGJmLWIyMGQtYjAzOWMyNGI5OWNh LzEvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSsoMA0G CSqGSIb3DQEBCwUAA4IBAQAIVWaGaQZjtTikCpmXwsiEW8w9KbVS5NnkurlZtD0p XoIhxAyRxYACrpLjbhDaPYZw8QCwmT2kT+zf232So2hXI6WtUGZUQjsvwsbJM2K7 zIz0DFrZSiQtB0s1XTb+4YswwRXvmk4vvAaa41H/3Odrt5FAVGPhi3z84n92xBCH ekXpAV4afLYJXW9yK6fZG8g95s9i0W7SDoTMeqBGwYcrjWHyegBAtHa+VhZalydw WHSqvxf7vmBytR9h2+EZMZNaUbNGEnaBC79NeOu2qM2cu6HYxUE9PlXRrcSowDSr lqFzEAI1vmMSTHDPOg7eoNfOqO08yJJ+IfgbzknCU7ou -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:33 2026 by rpki-client