This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/swGFUTWOXUe99AW4UAnyiW3gY2Q.roa File: swGFUTWOXUe99AW4UAnyiW3gY2Q.roa (raw, json) Hash identifier: m5rwzGfEVZaEpVcuRJk6LpH2JpmpgTyQJgllQOQrn/0= Subject key identifier: B3:01:85:51:35:8E:5D:47:BD:F4:05:B8:50:09:F2:89:6D:E0:63:64 Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa Certificate serial: 019B7AC943E53165F7A42D41AE0044BD62F3 Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/swGFUTWOXUe99AW4UAnyiW3gY2Q.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209891 IP address blocks: 217.25.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:43:e5:31:65:f7:a4:2d:41:ae:00:44:bd:62:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3018551358e5d47bdf405b85009f2896de06364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:14:47:ae:13:9c:c4:b9:7a:1c:90:88:1f: 06:05:21:2e:16:d4:b9:07:5a:84:e9:7f:82:6a:d3: 64:01:41:6a:05:ab:1b:4c:dd:e1:5f:9f:93:21:02: 54:75:43:56:9a:cb:1b:f9:38:80:7c:45:a5:21:75: 2e:61:fc:9a:b5:d4:50:09:4f:a2:87:03:52:cc:f7: 2f:db:90:b2:d8:8f:2d:05:36:17:ca:a7:25:7d:32: c3:85:54:4f:8f:8c:b7:bf:94:5f:c9:41:c9:22:70: 27:02:7d:8b:34:e1:12:e5:5f:69:7a:82:43:30:c8: 05:81:cc:7d:0e:07:ca:c0:c6:eb:e9:13:bb:de:3a: f2:62:33:65:73:8f:35:e7:af:a7:5f:59:e5:62:a2: 6b:43:2b:39:3a:a5:22:c9:95:5c:60:5c:cb:c9:54: 07:1a:40:fb:f2:4b:7e:45:31:73:73:2c:c0:ef:3d: a7:ef:42:82:8d:69:0e:49:df:4e:d5:a4:dc:65:b3: fd:18:84:aa:3e:b5:8d:8b:00:f5:4d:b4:a8:24:65: 7d:c7:7b:6e:4d:b8:ab:6a:39:34:04:98:52:9c:c6: 5a:28:4f:49:42:ee:c3:b8:6b:a0:d6:b5:d0:4a:74: 8a:1b:29:1e:c7:ce:ff:38:95:d2:5c:ed:51:bd:27: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:01:85:51:35:8E:5D:47:BD:F4:05:B8:50:09:F2:89:6D:E0:63:64 X509v3 Authority Key Identifier: keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/swGFUTWOXUe99AW4UAnyiW3gY2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.25.138.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:93:24:79:3a:34:99:db:64:fe:31:6f:7f:ef:a2:8d:ef:81: be:44:ec:72:0f:1f:48:29:d4:5e:43:10:b8:ad:55:a3:0b:5b: a5:aa:b8:c2:d7:47:0b:cd:c4:79:17:a5:0e:c9:3a:7a:f9:71: e7:ea:61:62:80:af:73:5a:83:56:92:72:a1:04:fb:bc:ce:01: e7:35:1a:ec:26:9f:46:91:58:74:f5:c0:f4:3e:24:3a:88:84: 07:20:26:17:62:be:52:37:3f:0a:c0:d6:a9:ec:ae:34:5d:bc: 4a:bf:24:00:b0:33:ef:e0:bc:9d:f2:74:e4:d4:2a:2e:78:c2: 9e:fa:af:11:46:ec:6b:9f:0f:be:db:ed:7d:94:39:4a:e4:68: a2:aa:ca:aa:b7:cc:59:70:65:7a:52:f1:3c:92:7b:5c:4a:83: 36:76:df:33:4b:d9:d4:87:1b:18:71:4f:83:ae:25:ca:53:d0: 4f:c4:77:ee:5b:49:b3:d7:2b:5e:b1:41:0c:ed:26:df:27:06: 12:d0:e8:30:06:ea:aa:39:fd:a3:bc:21:1a:38:d5:e3:b2:98: 3f:88:51:e7:9c:2d:13:30:9c:2d:b0:71:5b:de:e2:fb:da:62: 52:fd:ff:fb:a2:df:24:bb:17:3a:19:8a:81:16:17:a7:2c:75: 33:61:93:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUPlMWX3pC1BrgBEvWLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMmYwOWYyNjVlOWIyNzhmODA3M2Q2OTgyZmYxNzU3MTNh NWEwZmEwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzAxODU1MTM1OGU1ZDQ3YmRmNDA1Yjg1MDA5ZjI4OTZkZTA2MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWcUR64TnMS5ehyQiB8GBSEuFtS5 B1qE6X+CatNkAUFqBasbTN3hX5+TIQJUdUNWmssb+TiAfEWlIXUuYfyatdRQCU+i hwNSzPcv25Cy2I8tBTYXyqclfTLDhVRPj4y3v5RfyUHJInAnAn2LNOES5V9peoJD MMgFgcx9DgfKwMbr6RO73jryYjNlc48156+nX1nlYqJrQys5OqUiyZVcYFzLyVQH GkD78kt+RTFzcyzA7z2n70KCjWkOSd9O1aTcZbP9GISqPrWNiwD1TbSoJGV9x3tu Tbirajk0BJhSnMZaKE9JQu7DuGug1rXQSnSKGykex87/OJXSXO1RvScU4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLMBhVE1jl1HvfQFuFAJ8olt4GNkMB8GA1UdIwQY MBaAFDAvCfJl6bJ4+Ac9aYL/F1cTpaD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODct M2I1NWYyMzI3YjM0LzEvc3dHRlVUV09YVWU5OUFXNFVBbnlpVzNnWTJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODctM2I1NWYyMzI3YjM0 LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RmKMA0G CSqGSIb3DQEBCwUAA4IBAQAqkyR5OjSZ22T+MW9/76KN74G+ROxyDx9IKdReQxC4 rVWjC1ulqrjC10cLzcR5F6UOyTp6+XHn6mFigK9zWoNWknKhBPu8zgHnNRrsJp9G kVh09cD0PiQ6iIQHICYXYr5SNz8KwNap7K40XbxKvyQAsDPv4Lyd8nTk1CoueMKe +q8RRuxrnw++2+19lDlK5Giiqsqqt8xZcGV6UvE8kntcSoM2dt8zS9nUhxsYcU+D riXKU9BPxHfuW0mz1ytesUEM7SbfJwYS0OgwBuqqOf2jvCEaONXjspg/iFHnnC0T MJwtsHFb3uL72mJS/f/7ot8kuxc6GYqBFhenLHUzYZNl -----END CERTIFICATE-----Generated at Tue Jan 27 00:30:31 2026 by rpki-client