This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/SWVnyA5WjBDcWwF_MRnjuEfhPno.roa File: SWVnyA5WjBDcWwF_MRnjuEfhPno.roa (raw, json) Hash identifier: vX+fvHGK4FoX/xsn9TXZWN2j9aU+Kb5GX9r/V61bABY= Subject key identifier: 49:65:67:C8:0E:56:8C:10:DC:5B:01:7F:31:19:E3:B8:47:E1:3E:7A Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1 Certificate serial: 019B7AC8088B8C1F8EDDD1AA85892E5343E1 Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/SWVnyA5WjBDcWwF_MRnjuEfhPno.roa Signing time: Thu 01 Jan 2026 18:18:08 +0000 ROA not before: Thu 01 Jan 2026 18:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200003 IP address blocks: 185.39.104.0/22 maxlen: 22 185.39.104.0/24 maxlen: 24 185.39.105.0/24 maxlen: 24 185.39.106.0/24 maxlen: 24 185.39.107.0/24 maxlen: 24 2a04:7b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:08:8b:8c:1f:8e:dd:d1:aa:85:89:2e:53:43:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=496567c80e568c10dc5b017f3119e3b847e13e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:44:7e:a5:a1:0f:6d:24:27:1b:81:96:46:e2: b5:a5:aa:07:71:91:13:67:4e:ff:6b:a0:84:d4:bf: b2:4f:68:88:dc:28:5e:6d:b7:4e:db:b8:90:fb:03: 2b:f0:2e:37:a7:56:05:ce:d6:e5:8a:a5:78:ac:87: 0c:e4:8b:c3:7f:d7:32:54:bf:cc:c4:c4:40:a9:dc: 27:4d:9a:e3:37:2c:07:f2:2e:0b:be:bd:a1:58:fc: 2f:96:0a:c5:82:f9:89:35:d6:36:95:4c:ba:bc:41: 7b:36:2f:6e:7f:76:67:c2:7f:4f:0a:2d:90:a1:53: 0e:0f:fc:46:35:93:67:76:39:9f:e1:57:ae:14:76: 77:92:8f:20:c3:43:d2:ce:80:64:ed:07:ab:5b:bd: 43:65:78:8f:da:c7:3e:2f:b9:d3:a6:32:ab:ec:15: 71:12:a9:6e:8b:b9:4a:13:c2:f1:15:3c:2a:17:25: 46:b6:92:9b:c7:79:e2:7f:40:27:e8:59:09:e8:ce: 7d:d7:23:c9:79:d5:38:7f:21:a3:21:e5:7c:54:e8: 7f:ce:49:cd:20:d2:7e:4d:a3:e5:c0:88:9c:72:e4: 21:ae:2e:be:a6:7d:e6:c6:7c:9c:6f:44:31:3d:bb: 35:93:e1:ed:1e:77:59:d6:3d:aa:df:d2:e9:17:5d: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:65:67:C8:0E:56:8C:10:DC:5B:01:7F:31:19:E3:B8:47:E1:3E:7A X509v3 Authority Key Identifier: keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/SWVnyA5WjBDcWwF_MRnjuEfhPno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.104.0/22 IPv6: 2a04:7b40::/29 Signature Algorithm: sha256WithRSAEncryption 44:fb:0a:fc:8e:04:7e:9d:47:64:73:07:1f:1a:c0:d4:c8:b9: e3:17:16:00:ac:50:35:2e:92:39:2f:6c:20:d9:ad:32:ca:64: 8b:17:83:13:f6:d1:a1:b7:ba:50:18:c0:f1:a7:96:58:3c:28: 12:e9:80:f2:dc:e1:e3:e3:90:71:10:3b:e5:5a:e2:81:98:33: 83:5c:42:f5:60:49:b0:d0:4d:24:7f:20:7c:52:f2:00:13:12: c3:df:5e:3e:5d:ee:94:8d:a8:a4:c9:e8:2c:44:8d:12:0b:c9: ab:bd:6c:80:71:a3:f5:6b:63:d4:e3:48:b0:96:e3:97:cd:91: 13:48:eb:be:0b:55:56:35:bd:75:20:97:93:43:f6:70:c0:df: f9:ae:15:c5:74:af:46:3e:87:45:81:ab:a5:6c:dd:a4:40:57: fd:7f:ba:a8:04:a7:a5:8e:e7:bc:20:7c:68:2c:68:3b:0c:44: ec:4d:9e:ff:db:b4:10:46:27:cd:dd:d5:24:7b:ae:87:a4:b3: ed:f0:a3:2d:25:db:bf:15:5a:d1:26:88:4c:ef:8d:ed:cc:59: ad:c9:32:b5:0f:a1:ff:ac:b5:7e:03:71:b2:3a:cf:51:ee:7e: b6:12:de:3e:96:d6:ab:38:ff:fb:dd:ec:77:36:68:fe:cf:05: e4:c1:c7:df -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yAiLjB+O3dGqhYkuU0PhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZThlMzZiZTFkYmEwNzM1OTAzODJiYjFmZmZmMzE3NjUz OTAwZDEwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTY1NjdjODBlNTY4YzEwZGM1YjAxN2YzMTE5ZTNiODQ3ZTEzZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UR+paEPbSQnG4GWRuK1paoHcZET Z07/a6CE1L+yT2iI3ChebbdO27iQ+wMr8C43p1YFztbliqV4rIcM5IvDf9cyVL/M xMRAqdwnTZrjNywH8i4Lvr2hWPwvlgrFgvmJNdY2lUy6vEF7Ni9uf3Znwn9PCi2Q oVMOD/xGNZNndjmf4VeuFHZ3ko8gw0PSzoBk7QerW71DZXiP2sc+L7nTpjKr7BVx Eqlui7lKE8LxFTwqFyVGtpKbx3nif0An6FkJ6M591yPJedU4fyGjIeV8VOh/zknN INJ+TaPlwIiccuQhri6+pn3mxnycb0QxPbs1k+HtHndZ1j2q39LpF10CjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEllZ8gOVowQ3FsBfzEZ47hH4T56MB8GA1UdIwQY MBaAFPXo42vh26BzWQOCux//8xdlOQDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMt MmE5OTBmMjg1MGZiLzEvU1dWbnlBNVdqQkRjV3dGX01Sbmp1RWZoUG5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMtMmE5OTBmMjg1MGZi LzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSdoMA0E AgACMAcDBQMqBHtAMA0GCSqGSIb3DQEBCwUAA4IBAQBE+wr8jgR+nUdkcwcfGsDU yLnjFxYArFA1LpI5L2wg2a0yymSLF4MT9tGht7pQGMDxp5ZYPCgS6YDy3OHj45Bx EDvlWuKBmDODXEL1YEmw0E0kfyB8UvIAExLD314+Xe6UjaikyegsRI0SC8mrvWyA caP1a2PU40iwluOXzZETSOu+C1VWNb11IJeTQ/ZwwN/5rhXFdK9GPodFgaulbN2k QFf9f7qoBKeljue8IHxoLGg7DETsTZ7/27QQRifN3dUke66HpLPt8KMtJdu/FVrR JohM743tzFmtyTK1D6H/rLV+A3GyOs9R7n62Et4+ltarOP/73ex3Nmj+zwXkwcff -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:27 2026 by rpki-client