This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/rSwX2196FbpLG8u1F6t0YHqRbLQ.roa File: rSwX2196FbpLG8u1F6t0YHqRbLQ.roa (raw, json) Hash identifier: CP3uHv55fI/3QUOaoOcIQK1lwrzri0LzFHDnorRyRxM= Subject key identifier: AD:2C:17:DB:5F:7A:15:BA:4B:1B:CB:B5:17:AB:74:60:7A:91:6C:B4 Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a Certificate serial: 019B7CED061A423B106E358D9BBC1B5F76C4 Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/rSwX2196FbpLG8u1F6t0YHqRbLQ.roa Signing time: Fri 02 Jan 2026 04:17:46 +0000 ROA not before: Fri 02 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 45.138.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:06:1a:42:3b:10:6e:35:8d:9b:bc:1b:5f:76:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a Validity Not Before: Jan 2 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad2c17db5f7a15ba4b1bcbb517ab74607a916cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:32:6e:67:b5:88:4e:28:60:b2:33:34:0f: 33:d9:a2:90:77:eb:b3:1e:c5:cf:e6:a5:37:d7:b8: 8b:0d:f2:78:e1:29:01:8f:a4:59:06:d0:2f:2f:14: d3:79:42:a9:3c:a5:f2:fb:5d:8b:fb:28:ad:46:e9: 01:ab:17:b6:bf:81:ae:90:e0:5f:c4:de:6c:a1:d3: 46:f5:d1:90:46:18:f0:96:e3:fb:5f:60:9f:ed:e6: cb:64:83:cc:2e:77:77:78:4c:96:39:af:01:88:16: 52:e7:8d:2e:2f:b8:cc:b9:94:16:18:53:c7:f5:cc: 95:9d:ab:a6:15:79:68:ec:f1:cf:fd:59:27:4d:93: d3:49:a4:8a:e6:14:08:74:ca:47:94:ea:87:c3:f4: fe:81:ba:13:73:01:8d:e1:0f:1f:ad:02:92:45:3a: 25:b6:e7:11:75:75:44:4e:a9:05:81:93:5c:6c:6e: 9a:98:4f:03:fd:7f:aa:0b:29:6c:00:c2:a9:2f:b9: 18:2f:fa:37:7a:62:f3:32:2e:7d:f6:ae:6c:29:e6: 23:62:82:d8:53:f8:35:00:0c:14:68:97:e9:44:6b: be:38:14:fd:48:3b:63:25:7f:c1:0b:de:02:c6:b5: b4:bf:1a:30:63:80:99:1b:d2:ab:41:d9:27:8e:9d: 4f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2C:17:DB:5F:7A:15:BA:4B:1B:CB:B5:17:AB:74:60:7A:91:6C:B4 X509v3 Authority Key Identifier: keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/rSwX2196FbpLG8u1F6t0YHqRbLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.190.0/24 Signature Algorithm: sha256WithRSAEncryption 81:b7:70:a9:db:94:60:0e:6d:a9:7f:ae:fe:3c:2a:db:89:f7: dc:b3:58:d5:16:4c:80:3a:96:8a:3e:93:04:ef:97:50:73:1b: f0:78:86:9c:00:4d:82:9c:c1:66:3a:06:b5:61:83:d1:19:af: 30:22:39:87:39:7e:33:df:5c:73:0a:16:76:da:38:76:7a:5c: 8e:e3:bf:f4:5e:1c:5d:0c:d3:5e:fc:13:82:63:8a:d9:42:08: 64:da:ac:0e:19:b7:4c:9a:a3:37:ba:0d:b2:fb:6b:c1:41:1a: f4:31:e5:82:81:b9:20:2d:09:03:20:5f:f3:3b:e0:b5:ea:3c: 92:ce:63:fd:2b:09:a6:a5:4b:25:a1:8e:14:5c:38:0f:db:75: 78:e5:ac:fb:d9:f8:4e:7e:52:c8:57:6b:59:40:1f:29:b3:36: 17:8f:fb:15:5f:06:ed:ac:40:ad:ea:69:1f:7d:f6:9b:20:81: d9:de:04:9d:ce:fa:f8:c1:35:b3:39:c1:25:79:63:6a:7a:47: 40:43:e7:35:8a:8a:c9:a5:6f:83:8a:cc:52:9c:f7:66:51:72: f0:f6:05:4a:9b:31:bc:59:11:d5:b9:0e:1e:28:a1:5f:20:96: 8d:f4:d6:b6:c8:e7:59:fa:ab:11:12:1a:ed:82:3b:35:18:e3: ed:b2:6e:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87QYaQjsQbjWNm7wbX3bEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTU1YmYyODg4NzUzZTQ0Njc1YjYxZGRhMzAzOTRkOTAx NTZjMGEwHhcNMjYwMTAyMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDJjMTdkYjVmN2ExNWJhNGIxYmNiYjUxN2FiNzQ2MDdhOTE2Y2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Uybme1iE4oYLIzNA8z2aKQd+uz HsXP5qU317iLDfJ44SkBj6RZBtAvLxTTeUKpPKXy+12L+yitRukBqxe2v4GukOBf xN5sodNG9dGQRhjwluP7X2Cf7ebLZIPMLnd3eEyWOa8BiBZS540uL7jMuZQWGFPH 9cyVnaumFXlo7PHP/VknTZPTSaSK5hQIdMpHlOqHw/T+gboTcwGN4Q8frQKSRTol tucRdXVETqkFgZNcbG6amE8D/X+qCylsAMKpL7kYL/o3emLzMi599q5sKeYjYoLY U/g1AAwUaJfpRGu+OBT9SDtjJX/BC94CxrW0vxowY4CZG9KrQdknjp1PUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK0sF9tfehW6SxvLtRerdGB6kWy0MB8GA1UdIwQY MBaAFKGlW/KIh1PkRnW2HdowOU2QFWwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQt MjdjOWQ5MTE0MjM4LzEvclN3WDIxOTZGYnBMRzh1MUY2dDBZSHFSYkxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQtMjdjOWQ5MTE0MjM4 LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYq+MA0G CSqGSIb3DQEBCwUAA4IBAQCBt3Cp25RgDm2pf67+PCrbiffcs1jVFkyAOpaKPpME 75dQcxvweIacAE2CnMFmOga1YYPRGa8wIjmHOX4z31xzChZ22jh2elyO47/0Xhxd DNNe/BOCY4rZQghk2qwOGbdMmqM3ug2y+2vBQRr0MeWCgbkgLQkDIF/zO+C16jyS zmP9KwmmpUsloY4UXDgP23V45az72fhOflLIV2tZQB8pszYXj/sVXwbtrECt6mkf ffabIIHZ3gSdzvr4wTWzOcEleWNqekdAQ+c1iorJpW+DisxSnPdmUXLw9gVKmzG8 WRHVuQ4eKKFfIJaN9Na2yOdZ+qsREhrtgjs1GOPtsm65 -----END CERTIFICATE-----Generated at Mon Jan 19 08:05:23 2026 by rpki-client