This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SV-hwKBbMXP6HnKqToHwVek6bMs.roa File: SV-hwKBbMXP6HnKqToHwVek6bMs.roa (raw, json) Hash identifier: 2YZ2QgnG7TM2z1NqqFbwnmjxEkIo3yJnr12au8x/BZU= Subject key identifier: 49:5F:A1:C0:A0:5B:31:73:FA:1E:72:AA:4E:81:F0:55:E9:3A:6C:CB Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019BB158F06A5FBB7C31417F7B930E4252CA Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SV-hwKBbMXP6HnKqToHwVek6bMs.roa Signing time: Mon 12 Jan 2026 08:35:54 +0000 ROA not before: Mon 12 Jan 2026 08:35:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136907 IP address blocks: 188.132.171.0/24 maxlen: 24 188.132.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:58:f0:6a:5f:bb:7c:31:41:7f:7b:93:0e:42:52:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 12 08:35:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=495fa1c0a05b3173fa1e72aa4e81f055e93a6ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:7c:d0:62:76:c8:97:ba:91:f2:16:99:7c: e4:6e:ff:be:d6:4b:8c:5c:6e:8e:98:d8:ef:21:9e: 45:24:b8:44:7e:d4:65:0b:4b:c1:af:8e:81:76:48: 78:5e:8e:a8:7c:12:00:58:5c:ce:3e:da:c4:42:cd: 1b:d2:a8:9e:55:67:1a:00:ca:46:67:c9:38:fc:81: 51:93:bf:3a:c8:aa:21:55:eb:86:66:d7:b6:d0:42: 31:40:a8:c2:8e:34:ae:2e:98:c7:63:5e:3f:ac:7d: 27:b4:27:db:b8:0b:b5:74:66:0d:0b:25:be:81:13: ae:28:2e:f3:8a:f4:98:a2:0f:77:b3:e1:6b:95:8b: a8:0d:a3:32:f6:ab:20:d0:a2:33:ce:30:6f:db:a1: 51:37:ab:5c:32:3d:e4:7d:94:55:8b:22:05:aa:0b: b0:84:10:ea:e9:53:b5:14:27:f2:d4:30:28:fe:e8: 86:fc:a2:73:81:e2:95:2b:a8:a1:a5:43:42:d6:b9: 21:25:02:34:09:c3:c5:ad:01:de:7e:ab:88:54:fa: f7:23:06:6b:9f:31:a6:a2:63:1a:3f:5c:37:28:c0: 4c:92:ae:75:14:2c:55:bd:2b:e0:48:e9:f6:58:b0: 7b:2e:1e:03:f8:db:ea:23:d2:ca:39:af:83:20:06: ff:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5F:A1:C0:A0:5B:31:73:FA:1E:72:AA:4E:81:F0:55:E9:3A:6C:CB X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SV-hwKBbMXP6HnKqToHwVek6bMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.171.0/24 188.132.188.0/24 Signature Algorithm: sha256WithRSAEncryption 72:f0:b1:ab:5e:4f:64:20:cf:dc:0f:1c:75:6b:ef:63:53:11: 0e:67:08:3a:f0:f8:5b:5c:21:12:40:18:63:24:21:ad:d6:f3: fa:a6:fa:0c:e9:25:e3:91:d5:70:6d:80:57:44:6f:04:50:3a: 7e:49:bf:1b:78:43:69:8a:0d:a6:82:c1:48:67:78:16:10:fb: 52:57:04:8f:92:33:9d:d6:a0:2b:ea:d7:a1:6d:30:28:90:d0: 1e:99:a2:03:2a:e5:f0:1e:98:a4:86:dc:df:f3:37:95:c0:c1: 0b:36:0b:f5:b5:19:59:e6:8f:83:2f:c7:32:c4:46:1c:14:9a: 49:1a:49:b2:56:0e:d9:99:65:d5:02:7a:a1:bf:99:8b:90:26: 81:fb:6c:a3:0c:ac:32:56:64:6e:4e:22:4e:07:4f:3b:07:96: e8:16:55:5f:8b:9e:39:96:72:2f:d6:6d:8d:ec:61:c6:24:e9: 59:40:47:60:99:4b:08:ca:db:fb:71:71:02:8b:ad:9a:d0:34: 13:c4:97:3b:62:79:24:34:17:d2:06:58:09:1e:04:fa:78:3f: fd:d6:7b:78:ae:e8:df:be:ed:26:da:e5:5b:8c:83:5e:c9:03: 7f:37:01:de:df:65:79:8a:52:02:6f:ad:ec:bf:66:37:e7:24: 1b:c8:fa:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuxWPBqX7t8MUF/e5MOQlLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTEyMDgzNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTVmYTFjMGEwNWIzMTczZmExZTcyYWE0ZTgxZjA1NWU5M2E2Y2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqN80GJ2yJe6kfIWmXzkbv++1kuM XG6OmNjvIZ5FJLhEftRlC0vBr46Bdkh4Xo6ofBIAWFzOPtrEQs0b0qieVWcaAMpG Z8k4/IFRk786yKohVeuGZte20EIxQKjCjjSuLpjHY14/rH0ntCfbuAu1dGYNCyW+ gROuKC7zivSYog93s+FrlYuoDaMy9qsg0KIzzjBv26FRN6tcMj3kfZRViyIFqguw hBDq6VO1FCfy1DAo/uiG/KJzgeKVK6ihpUNC1rkhJQI0CcPFrQHefquIVPr3IwZr nzGmomMaP1w3KMBMkq51FCxVvSvgSOn2WLB7Lh4D+NvqI9LKOa+DIAb/iQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFElfocCgWzFz+h5yqk6B8FXpOmzLMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvU1YtaHdLQmJNWFA2SG5LcVRvSHdWZWs2Yk1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvISrAwQA vIS8MA0GCSqGSIb3DQEBCwUAA4IBAQBy8LGrXk9kIM/cDxx1a+9jUxEOZwg68Phb XCESQBhjJCGt1vP6pvoM6SXjkdVwbYBXRG8EUDp+Sb8beENpig2mgsFIZ3gWEPtS VwSPkjOd1qAr6tehbTAokNAemaIDKuXwHpikhtzf8zeVwMELNgv1tRlZ5o+DL8cy xEYcFJpJGkmyVg7ZmWXVAnqhv5mLkCaB+2yjDKwyVmRuTiJOB087B5boFlVfi545 lnIv1m2N7GHGJOlZQEdgmUsIytv7cXECi62a0DQTxJc7YnkkNBfSBlgJHgT6eD/9 1nt4rujfvu0m2uVbjINeyQN/NwHe32V5ilICb63sv2Y35yQbyPpX -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:46 2026 by rpki-client