This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa File: swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa (raw, json) Hash identifier: Xe4yfVJ7GclnsKO5T3vlkkQQQKjDz34ASisy6nJh1ys= Subject key identifier: B3:00:7E:FC:AC:96:AD:D0:93:2E:C1:5E:24:0E:41:6F:4C:84:B9:0C Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149 Certificate serial: 019B783450FBB816613D3ACD6E469B5F8BEB Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31662 IP address blocks: 94.228.144.0/20 maxlen: 20 185.27.4.0/22 maxlen: 22 185.251.56.0/22 maxlen: 22 217.151.112.0/20 maxlen: 20 2a00:d28::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:50:fb:b8:16:61:3d:3a:cd:6e:46:9b:5f:8b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149 Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3007efcac96add0932ec15e240e416f4c84b90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1d:df:b1:30:58:4e:3c:d2:4a:d3:87:df:e6: 06:45:aa:ae:63:8a:56:f8:ab:3b:f4:c0:0b:cf:06: 87:df:16:8b:5c:14:96:0e:73:69:47:77:77:fc:10: fa:db:91:c6:84:5e:bb:76:a9:0c:d7:61:37:6f:71: b8:05:c3:b4:b2:4f:32:60:f6:0c:fe:ac:3f:47:71: da:a7:43:82:02:80:97:bd:f0:92:c5:0a:5f:61:23: 3d:58:04:6f:4b:1d:d4:a6:5c:b4:50:8d:de:c6:4a: db:62:65:12:fa:4d:bb:26:2b:a0:db:19:fc:12:32: 20:46:1c:cb:a3:25:99:03:5b:65:5f:e6:3f:f0:9a: 53:a2:2d:0d:78:d3:30:d3:4d:f6:65:a4:78:c3:5a: 14:42:e1:7e:80:e3:1c:d5:53:e0:49:07:4d:5d:99: b1:bd:38:ac:58:30:09:8f:6e:39:dc:77:fe:b5:7e: 0a:07:cd:c6:da:ec:5d:03:7d:fd:6f:b3:cf:06:29: 4b:80:86:fd:2a:07:23:d2:d2:ff:c6:e9:2f:c4:4e: fd:92:bc:40:fc:dc:45:0d:f4:71:f7:d1:f4:b1:53: 01:7f:7d:48:87:d6:13:20:aa:73:c4:af:a2:ef:20: 34:67:fc:02:d3:b6:0e:fe:67:4a:19:8d:01:8c:ac: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:00:7E:FC:AC:96:AD:D0:93:2E:C1:5E:24:0E:41:6F:4C:84:B9:0C X509v3 Authority Key Identifier: keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.228.144.0/20 185.27.4.0/22 185.251.56.0/22 217.151.112.0/20 IPv6: 2a00:d28::/32 Signature Algorithm: sha256WithRSAEncryption 1b:b5:98:2b:8c:01:a9:1c:b6:23:4c:6f:cd:39:de:00:cf:44: 57:de:c5:3a:b5:e9:60:69:25:72:11:25:e3:f4:80:d6:45:b7: b4:15:63:d0:da:0c:f5:a3:fe:65:e8:18:2d:79:c5:18:78:b0: 44:b9:af:c7:e3:63:2c:20:a2:36:f9:6d:9e:5b:16:88:cd:a4: d8:03:76:c5:d7:3c:08:1a:02:b3:32:22:a7:4a:50:2a:b3:65: 9a:c8:6a:b8:77:23:d5:db:1b:7b:31:86:cb:30:3a:0e:fa:cb: e7:93:0a:72:b6:a6:4d:f6:48:75:0e:3d:bd:30:61:41:f1:3f: dd:0c:b9:1d:5c:be:fd:2c:fc:80:3b:36:60:03:ee:e4:fb:87: 3d:83:77:80:ff:e6:e4:af:fb:8a:30:3f:34:4b:ff:c6:58:b1: 72:90:2c:0a:38:31:55:77:a6:b9:fb:63:8a:b2:7f:db:5e:36: 73:e0:16:f0:10:61:fe:1e:84:59:f1:c6:e0:8b:3a:0a:a3:2a: 01:ba:d6:73:92:e2:f5:fb:83:91:94:dc:ff:12:ba:3c:66:4e: d0:74:2c:e9:f4:d7:62:fd:74:c0:0d:53:f1:2c:e8:37:a9:25: 05:ac:8c:f9:7d:17:91:9e:4c:3e:23:92:bb:74:81:f1:50:f4: c7:e2:12:39 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4NFD7uBZhPTrNbkabX4vrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOGI5OTYzYzk3MmMxZDdhMDNkZjk2ZmFkMjVmNjhlYmQ0 ZmExNDkwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzAwN2VmY2FjOTZhZGQwOTMyZWMxNWUyNDBlNDE2ZjRjODRiOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh3fsTBYTjzSStOH3+YGRaquY4pW +Ks79MALzwaH3xaLXBSWDnNpR3d3/BD625HGhF67dqkM12E3b3G4BcO0sk8yYPYM /qw/R3Hap0OCAoCXvfCSxQpfYSM9WARvSx3Uply0UI3exkrbYmUS+k27Jiug2xn8 EjIgRhzLoyWZA1tlX+Y/8JpToi0NeNMw0032ZaR4w1oUQuF+gOMc1VPgSQdNXZmx vTisWDAJj2453Hf+tX4KB83G2uxdA339b7PPBilLgIb9Kgcj0tL/xukvxE79krxA /NxFDfRx99H0sVMBf31Ih9YTIKpzxK+i7yA0Z/wC07YO/mdKGY0BjKxdywIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFLMAfvyslq3Qky7BXiQOQW9MhLkMMB8GA1UdIwQY MBaAFAOLmWPJcsHXoD35b60l9o69T6FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWIt NjE2M2I5OTdiNjQyLzEvc3dCLV9LeVdyZENUTHNGZUpBNUJiMHlFdVF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWItNjE2M2I5OTdiNjQy LzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEXuSQAwQC uRsEAwQCufs4AwQE2ZdwMA0EAgACMAcDBQAqAA0oMA0GCSqGSIb3DQEBCwUAA4IB AQAbtZgrjAGpHLYjTG/NOd4Az0RX3sU6telgaSVyESXj9IDWRbe0FWPQ2gz1o/5l 6BgtecUYeLBEua/H42MsIKI2+W2eWxaIzaTYA3bF1zwIGgKzMiKnSlAqs2WayGq4 dyPV2xt7MYbLMDoO+svnkwpytqZN9kh1Dj29MGFB8T/dDLkdXL79LPyAOzZgA+7k +4c9g3eA/+bkr/uKMD80S//GWLFykCwKODFVd6a5+2OKsn/bXjZz4BbwEGH+HoRZ 8cbgizoKoyoButZzkuL1+4ORlNz/Ero8Zk7QdCzp9Ndi/XTADVPxLOg3qSUFrIz5 fReRnkw+I5K7dIHxUPTH4hI5 -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:30 2026 by rpki-client