This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SWKbvxWskgESoaoQ88jZRCK1Mbs.roa File: SWKbvxWskgESoaoQ88jZRCK1Mbs.roa (raw, json) Hash identifier: TA/thRXyEGGbGf5GBbD1y10lJQwN2FXrcAqQi8cryR0= Subject key identifier: 49:62:9B:BF:15:AC:92:01:12:A1:AA:10:F3:C8:D9:44:22:B5:31:BB Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019BDD43FB80C7228A19B80C7CC912C87FF5 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SWKbvxWskgESoaoQ88jZRCK1Mbs.roa Signing time: Tue 20 Jan 2026 21:16:18 +0000 ROA not before: Tue 20 Jan 2026 21:16:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57222 IP address blocks: 2a06:de01:a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:43:fb:80:c7:22:8a:19:b8:0c:7c:c9:12:c8:7f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 20 21:16:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49629bbf15ac920112a1aa10f3c8d94422b531bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:28:47:ae:ad:fa:0f:09:6a:b1:47:17:f8: 18:76:1c:f2:5b:0a:1e:71:4a:f8:5b:04:03:20:ea: 85:71:9b:2c:b0:60:63:25:0c:83:f5:f6:10:31:36: 67:43:2e:b4:4a:8b:1f:cf:ea:4c:61:56:b3:b2:95: e8:88:0d:86:c8:70:e5:b3:33:a3:ca:e6:b6:fc:26: 03:e7:86:47:f1:7e:bc:73:ab:32:13:15:f3:f0:00: f0:36:35:f3:81:d1:78:6f:94:9b:d5:d1:52:3a:57: 94:b9:8e:ee:de:e1:13:7e:a0:ca:b1:8e:65:23:92: 19:cc:87:91:ef:ac:11:ea:84:f8:8b:54:e1:1a:c4: dc:63:da:3a:b2:3c:88:de:61:45:3c:35:f1:9b:4e: 9a:6e:ed:0a:ef:a2:a6:62:1c:c7:33:13:c2:66:aa: c1:0e:68:af:32:df:6e:1e:88:78:31:f1:de:75:55: 76:f8:da:2d:dc:ef:3b:bb:0c:1a:b9:66:f2:74:a4: 85:17:45:b1:07:b6:2c:07:d8:39:20:de:a5:99:85: 10:9e:98:ad:db:83:b4:9e:b3:fb:3d:72:bc:19:15: c5:1f:7f:b5:c0:ae:d8:fd:29:c2:7e:61:c3:e3:fa: 27:10:8f:d6:7c:88:8f:66:c9:01:a4:6e:97:ba:c1: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:62:9B:BF:15:AC:92:01:12:A1:AA:10:F3:C8:D9:44:22:B5:31:BB X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SWKbvxWskgESoaoQ88jZRCK1Mbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de01:a0::/44 Signature Algorithm: sha256WithRSAEncryption 6a:b8:6d:39:50:36:24:de:00:2f:e4:a3:de:44:24:2f:df:db: 00:97:03:1b:39:24:46:1f:9a:0e:04:4d:85:1c:81:36:dc:68: d9:af:6e:fe:8f:b3:1c:6f:2b:99:55:d9:32:94:c7:bf:fc:61: ee:a9:ce:09:ba:8b:87:9e:e9:d8:ef:e4:a1:ae:75:24:28:b0: ed:87:95:ea:ad:df:73:80:17:6d:e2:01:eb:5e:5c:fd:ee:da: 2b:a2:9a:03:d3:c4:e3:94:9c:d4:8a:f2:33:cc:49:cb:4f:05: f8:d5:07:93:ab:8d:61:9c:d8:31:44:0d:f6:71:17:0e:69:83: cb:aa:ee:33:db:7c:9b:51:9f:f7:9b:85:bc:cb:80:77:6f:f4: eb:e8:10:91:5b:dc:e1:8e:70:0a:74:27:9a:c2:ef:16:e2:89: cf:60:e9:5e:98:72:2d:95:cb:89:f8:42:43:ff:4a:f5:f7:09: 1b:85:45:51:e3:b3:ac:98:ec:12:b5:24:6e:0e:2c:a8:d9:95: 1e:8d:5f:c4:6e:2b:15:4f:cd:4f:02:ca:b8:d0:97:11:0f:1d: f0:09:00:2d:da:07:38:4b:23:f3:5b:f8:f5:88:50:9e:a9:7c: ce:af:8c:10:8b:98:8c:ae:bb:52:cc:95:35:a3:76:ce:36:ca: 74:e2:84:ca -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvdQ/uAxyKKGbgMfMkSyH/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTIwMjExNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTYyOWJiZjE1YWM5MjAxMTJhMWFhMTBmM2M4ZDk0NDIyYjUzMWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BEoR66t+g8JarFHF/gYdhzyWwoe cUr4WwQDIOqFcZsssGBjJQyD9fYQMTZnQy60Sosfz+pMYVazspXoiA2GyHDlszOj yua2/CYD54ZH8X68c6syExXz8ADwNjXzgdF4b5Sb1dFSOleUuY7u3uETfqDKsY5l I5IZzIeR76wR6oT4i1ThGsTcY9o6sjyI3mFFPDXxm06abu0K76KmYhzHMxPCZqrB DmivMt9uHoh4MfHedVV2+Not3O87uwwauWbydKSFF0WxB7YsB9g5IN6lmYUQnpit 24O0nrP7PXK8GRXFH3+1wK7Y/SnCfmHD4/onEI/WfIiPZskBpG6XusHHhwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFElim78VrJIBEqGqEPPI2UQitTG7MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvU1dLYnZ4V3NrZ0VTb2FvUTg4alpSQ0sxTWJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeAQCg MA0GCSqGSIb3DQEBCwUAA4IBAQBquG05UDYk3gAv5KPeRCQv39sAlwMbOSRGH5oO BE2FHIE23GjZr27+j7McbyuZVdkylMe//GHuqc4JuouHnunY7+ShrnUkKLDth5Xq rd9zgBdt4gHrXlz97toropoD08TjlJzUivIzzEnLTwX41QeTq41hnNgxRA32cRcO aYPLqu4z23ybUZ/3m4W8y4B3b/Tr6BCRW9zhjnAKdCeawu8W4onPYOlemHItlcuJ +EJD/0r19wkbhUVR47OsmOwStSRuDiyo2ZUejV/EbisVT81PAsq40JcRDx3wCQAt 2gc4SyPzW/j1iFCeqXzOr4wQi5iMrrtSzJU1o3bONsp04oTK -----END CERTIFICATE-----Generated at Fri Jan 23 03:28:56 2026 by rpki-client