This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/SwB1iAgYjly4csbv4jz0oadyUZk.roa File: SwB1iAgYjly4csbv4jz0oadyUZk.roa (raw, json) Hash identifier: TuHJEn/9Xw5181UZ/VH/apXlrIOdLQGvmuNms8pxlNU= Subject key identifier: 4B:00:75:88:08:18:8E:5C:B8:72:C6:EF:E2:3C:F4:A1:A7:72:51:99 Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e Certificate serial: 019B7D5C9D1DA72D43A06ABE1F0F7B553DCE Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/SwB1iAgYjly4csbv4jz0oadyUZk.roa Signing time: Fri 02 Jan 2026 06:19:40 +0000 ROA not before: Fri 02 Jan 2026 06:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 46.235.14.0/24 maxlen: 24 178.210.180.0/24 maxlen: 24 217.70.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9d:1d:a7:2d:43:a0:6a:be:1f:0f:7b:55:3d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e Validity Not Before: Jan 2 06:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b00758808188e5cb872c6efe23cf4a1a7725199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:56:47:d7:b2:81:27:6d:10:8e:6c:9a:d4:a0: ba:fb:5e:47:12:96:4f:a4:df:a7:87:1e:fc:df:9f: 25:e3:55:23:10:e1:6e:a8:8f:52:41:59:66:71:06: 10:1a:2d:9e:1a:ac:77:51:01:4e:2b:48:97:96:68: 19:93:e3:5b:26:53:58:25:bd:c3:72:26:ee:d0:e8: 5f:63:aa:07:ca:a1:cd:07:78:0a:c2:b7:a6:43:ff: 4f:24:31:4d:57:82:e5:e4:27:0a:a1:30:9d:e2:d5: d7:c3:66:83:10:57:a0:3c:25:b7:71:37:6f:10:71: b6:e3:15:ce:a3:0e:a2:bc:77:f5:71:40:c8:65:de: 07:7c:ff:8d:e0:bd:95:eb:76:9a:47:d4:af:b1:5b: 2f:35:d3:8b:f7:f8:6b:b1:ba:96:15:88:51:1e:49: ac:9d:47:fc:7b:8a:42:6d:3b:e6:d1:b9:a6:3f:4f: d5:85:5b:ff:a2:17:ea:44:02:ed:69:3d:bd:5d:07: 6f:19:c6:4e:43:23:8e:7f:7d:35:3a:d7:9f:ff:f5: 24:9f:d3:85:3a:e5:42:b2:cc:07:3d:b7:51:31:e5: 49:d0:7a:e0:4b:aa:72:fe:dc:1e:7b:34:af:cf:38: ef:3c:8a:17:0a:41:22:ce:9c:21:bf:3f:80:6f:86: e7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:00:75:88:08:18:8E:5C:B8:72:C6:EF:E2:3C:F4:A1:A7:72:51:99 X509v3 Authority Key Identifier: keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/SwB1iAgYjly4csbv4jz0oadyUZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.14.0/24 178.210.180.0/24 217.70.11.0/24 Signature Algorithm: sha256WithRSAEncryption ad:d1:c3:9a:61:e3:98:34:78:f0:b5:79:ed:36:f4:a2:cf:52: fe:c7:47:72:fd:2a:83:0d:e6:a7:57:22:be:79:97:ca:a6:a2: 06:10:d2:46:9c:b8:79:99:54:76:e6:3b:5d:44:2e:fb:57:fe: eb:71:93:95:ae:f2:15:9c:f6:0f:97:1d:09:cd:5f:76:c1:66: 32:cd:16:54:2a:e2:36:d0:f0:a6:f3:f0:89:05:81:d8:6a:29: 09:2c:7d:0f:c2:a1:c5:24:2d:36:ae:8c:12:d5:42:f1:33:51: 39:50:15:ca:35:56:a0:df:8e:1e:51:b3:b2:a7:ab:7b:6a:26: d8:fc:6c:83:81:76:39:91:0b:e5:1b:df:8f:b9:f4:41:a7:92: a4:35:f0:5c:aa:2e:78:9a:e0:7d:e9:db:31:01:61:3e:97:d9: 18:9f:16:ec:8e:e5:7e:b4:c5:7c:86:88:b9:3a:67:28:dc:81: 36:b0:8c:7d:d4:f5:2b:14:52:a8:ff:47:4f:0d:1e:3b:dd:e1: 01:7f:3e:a8:f4:98:2f:86:9d:e0:a5:ad:5c:78:44:4f:ca:c9: e6:43:75:4d:38:32:6a:fb:c5:91:85:23:67:27:a1:b0:4d:06: 99:97:da:6d:40:73:92:cd:e2:72:4e:00:d4:5f:1a:d4:e5:c7: 81:3d:f1:3a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XJ0dpy1DoGq+Hw97VT3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZjFiMjJiMjA1NDUwMmJmZDM4ODkxMzgyOTExMDNkODNi NmE1MGUwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjAwNzU4ODA4MTg4ZTVjYjg3MmM2ZWZlMjNjZjRhMWE3NzI1MTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lZH17KBJ20Qjmya1KC6+15HEpZP pN+nhx78358l41UjEOFuqI9SQVlmcQYQGi2eGqx3UQFOK0iXlmgZk+NbJlNYJb3D cibu0OhfY6oHyqHNB3gKwremQ/9PJDFNV4Ll5CcKoTCd4tXXw2aDEFegPCW3cTdv EHG24xXOow6ivHf1cUDIZd4HfP+N4L2V63aaR9SvsVsvNdOL9/hrsbqWFYhRHkms nUf8e4pCbTvm0bmmP0/VhVv/ohfqRALtaT29XQdvGcZOQyOOf301Otef//Ukn9OF OuVCsswHPbdRMeVJ0HrgS6py/tweezSvzzjvPIoXCkEizpwhvz+Ab4bn3wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEsAdYgIGI5cuHLG7+I89KGnclGZMB8GA1UdIwQY MBaAFKPxsisgVFAr/TiJE4KRED2DtqUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQt MjRkMjcyY2UxMWUzLzEvU3dCMWlBZ1lqbHk0Y3NidjRqejBvYWR5VVprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQtMjRkMjcyY2UxMWUz LzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALusOAwQA stK0AwQA2UYLMA0GCSqGSIb3DQEBCwUAA4IBAQCt0cOaYeOYNHjwtXntNvSiz1L+ x0dy/SqDDeanVyK+eZfKpqIGENJGnLh5mVR25jtdRC77V/7rcZOVrvIVnPYPlx0J zV92wWYyzRZUKuI20PCm8/CJBYHYaikJLH0PwqHFJC02rowS1ULxM1E5UBXKNVag 344eUbOyp6t7aibY/GyDgXY5kQvlG9+PufRBp5KkNfBcqi54muB96dsxAWE+l9kY nxbsjuV+tMV8hoi5Omco3IE2sIx91PUrFFKo/0dPDR473eEBfz6o9Jgvhp3gpa1c eERPysnmQ3VNODJq+8WRhSNnJ6GwTQaZl9ptQHOSzeJyTgDUXxrU5ceBPfE6 -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:26 2026 by rpki-client