This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/SgwWdv9ocngRvW2K02ifqUivtcQ.roa File: SgwWdv9ocngRvW2K02ifqUivtcQ.roa (raw, json) Hash identifier: izn7KBIRyMFNkWZLTgF4j0JhnqGHKfT+NOehKQRrMYg= Subject key identifier: 4A:0C:16:76:FF:68:72:78:11:BD:6D:8A:D3:68:9F:A9:48:AF:B5:C4 Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae Certificate serial: 019B7BA515CF12A997E422C168EE531D6EE9 Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/SgwWdv9ocngRvW2K02ifqUivtcQ.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210882 IP address blocks: 213.132.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:15:cf:12:a9:97:e4:22:c1:68:ee:53:1d:6e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a0c1676ff68727811bd6d8ad3689fa948afb5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e6:b4:60:d0:58:d8:1a:32:15:de:53:f6:2d: d6:01:f0:a9:35:31:36:4d:75:49:cf:b6:97:0a:0b: 83:09:af:3b:14:43:cc:f1:2f:5c:d9:1c:f6:d5:f3: 9e:04:98:9c:d0:1f:a2:b2:32:0d:05:9b:66:94:be: fb:c2:44:80:83:4c:c1:f7:8b:48:0e:3b:35:1d:0e: c6:ef:52:26:52:51:1c:89:c0:05:43:51:5e:31:4b: 3b:96:ca:13:68:00:62:82:7f:7a:a6:16:c1:bb:6f: dc:e9:32:f7:70:e1:79:8a:05:06:1e:83:92:69:e1: 01:d3:74:f3:5f:94:f2:b6:1f:37:e8:bf:67:d8:65: ba:b8:28:95:50:7f:7e:a5:c5:02:bf:6c:10:d7:b4: 36:43:1a:67:3b:81:03:78:2c:c4:a8:2a:b4:c3:22: b4:13:9d:27:1e:b8:29:f9:6e:2a:35:4e:0d:97:44: 98:ee:e3:f1:65:ec:11:ad:31:e8:03:df:12:56:41: a1:8c:c0:c7:07:36:5d:be:93:7e:d6:10:9e:ef:d4: 10:b8:3b:48:81:c8:4f:9a:33:b2:97:57:52:86:b3: 10:49:85:79:b3:62:eb:5b:d4:11:48:6a:2a:aa:07: ce:e3:06:31:af:56:2d:e0:b7:6c:5a:b7:81:c9:c3: fb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0C:16:76:FF:68:72:78:11:BD:6D:8A:D3:68:9F:A9:48:AF:B5:C4 X509v3 Authority Key Identifier: keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/SgwWdv9ocngRvW2K02ifqUivtcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.132.221.0/24 Signature Algorithm: sha256WithRSAEncryption 07:f9:77:fa:e7:ae:be:78:37:16:e2:b3:94:2a:d3:49:18:e0: 53:27:f0:a8:00:0c:bf:d7:c2:37:82:04:77:45:2e:e4:7b:f1: 60:a1:10:bd:37:c9:91:da:b5:a0:64:e9:67:ac:5f:c9:74:b8: 65:54:1b:3b:b0:7e:6f:ab:3e:2a:82:4b:cb:9b:74:c4:51:c4: bb:96:61:7d:c1:68:df:93:96:cf:d7:be:37:85:3d:6d:3d:7b: 23:99:cf:19:67:b8:03:24:e7:8e:8e:70:39:42:d4:f8:8a:74: 34:1b:11:7d:be:f0:dc:da:5b:b0:46:3c:42:ed:86:1f:d4:34: 53:36:85:57:de:78:12:60:8c:b8:c8:7c:44:00:98:7f:08:df: 02:eb:5f:c1:aa:8b:7e:c7:f1:c5:b2:db:ff:79:69:31:4d:2d: ab:9b:d7:5d:b8:ca:3e:58:6f:30:d0:b0:b9:ac:93:15:b5:b6: 1d:1d:bb:6c:41:26:ec:84:9a:bc:b2:f7:88:27:96:09:be:6b: f3:37:2b:6f:78:64:22:6f:e6:ab:d8:cb:11:80:f2:a0:c3:35: 45:c7:4a:26:55:34:f3:6e:1f:8e:50:f5:b9:4b:35:00:57:d4: 1a:72:af:47:f6:9a:99:57:d2:7f:60:dd:75:90:98:b1:2b:a2: ac:5b:a5:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRXPEqmX5CLBaO5THW7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNGI0OGVkYzdhMzI1ZDdmMWFlMGYyNTdjMGUyODM1MTcx YmM5YWUwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTBjMTY3NmZmNjg3Mjc4MTFiZDZkOGFkMzY4OWZhOTQ4YWZiNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzea0YNBY2BoyFd5T9i3WAfCpNTE2 TXVJz7aXCguDCa87FEPM8S9c2Rz21fOeBJic0B+isjINBZtmlL77wkSAg0zB94tI Djs1HQ7G71ImUlEcicAFQ1FeMUs7lsoTaABign96phbBu2/c6TL3cOF5igUGHoOS aeEB03TzX5Tyth836L9n2GW6uCiVUH9+pcUCv2wQ17Q2QxpnO4EDeCzEqCq0wyK0 E50nHrgp+W4qNU4Nl0SY7uPxZewRrTHoA98SVkGhjMDHBzZdvpN+1hCe79QQuDtI gchPmjOyl1dShrMQSYV5s2LrW9QRSGoqqgfO4wYxr1Yt4LdsWreBycP7wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEoMFnb/aHJ4Eb1titNon6lIr7XEMB8GA1UdIwQY MBaAFKJLSO3HoyXX8a4PJXwOKDUXG8muMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82MmFmZWYtNzBkMS00ZmUyLTllZGYt N2YxZTU3NDg3YzFhLzEvU2d3V2R2OW9jbmdSdlcySzAyaWZxVWl2dGNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82MmFmZWYtNzBkMS00ZmUyLTllZGYtN2YxZTU3NDg3YzFh LzEvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YTdMA0G CSqGSIb3DQEBCwUAA4IBAQAH+Xf6566+eDcW4rOUKtNJGOBTJ/CoAAy/18I3ggR3 RS7ke/FgoRC9N8mR2rWgZOlnrF/JdLhlVBs7sH5vqz4qgkvLm3TEUcS7lmF9wWjf k5bP1743hT1tPXsjmc8ZZ7gDJOeOjnA5QtT4inQ0GxF9vvDc2luwRjxC7YYf1DRT NoVX3ngSYIy4yHxEAJh/CN8C61/Bqot+x/HFstv/eWkxTS2rm9dduMo+WG8w0LC5 rJMVtbYdHbtsQSbshJq8sveIJ5YJvmvzNytveGQib+ar2MsRgPKgwzVFx0omVTTz bh+OUPW5SzUAV9Qacq9H9pqZV9J/YN11kJixK6KsW6Ur -----END CERTIFICATE-----Generated at Tue Jan 27 05:33:00 2026 by rpki-client