This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/swrZGoXaQCfrjypHTqOsA4yjBec.roa File: swrZGoXaQCfrjypHTqOsA4yjBec.roa (raw, json) Hash identifier: QKAckhdncgwKzSTG1sKhPcq2+chBy3FM03vPyVPytqA= Subject key identifier: B3:0A:D9:1A:85:DA:40:27:EB:8F:2A:47:4E:A3:AC:03:8C:A3:05:E7 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA54F42431FA84C67F547AA213A63AE Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/swrZGoXaQCfrjypHTqOsA4yjBec.roa Signing time: Thu 01 Jan 2026 22:19:49 +0000 ROA not before: Thu 01 Jan 2026 22:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47377 IP address blocks: 45.93.164.0/23 maxlen: 24 93.185.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:4f:42:43:1f:a8:4c:67:f5:47:aa:21:3a:63:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b30ad91a85da4027eb8f2a474ea3ac038ca305e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:9e:d1:bd:06:7b:f2:69:aa:01:dd:77:9a: 64:01:c0:9a:ed:3a:99:55:79:75:d8:8d:60:f3:b7: 31:9a:52:48:78:c8:55:6f:de:b3:a4:37:d4:79:de: a1:fd:3b:ba:86:56:63:db:8e:9c:85:25:c7:c9:74: 94:5f:90:98:23:67:0f:2c:0e:14:a0:e3:26:26:87: 16:ed:48:7c:6e:35:b0:6a:cd:9b:fe:b9:0a:5e:e3: d8:de:69:55:65:7a:eb:3b:e7:e4:c3:33:a8:6c:fd: 60:fc:b5:50:67:71:c4:23:c3:b3:ef:58:1b:d5:75: 09:7c:cb:40:ec:48:9f:b9:b4:2c:7a:78:49:44:c5: 8f:c9:d4:85:3b:7c:2f:92:9f:77:64:24:5f:d8:e2: 37:54:9d:b2:f8:8e:4c:1c:5b:cc:d8:64:19:a8:e8: 30:38:cf:b7:fb:74:91:02:4b:46:8b:66:aa:d0:b4: f0:55:37:f4:ee:5a:e0:24:01:05:ca:26:8a:fe:8d: e5:a7:1c:e4:4f:cc:cc:b0:34:b5:54:58:26:10:a8: 87:c2:05:1f:17:c9:8b:7f:50:ea:50:45:3b:ce:6b: 13:0e:4c:be:db:ab:2c:e2:dc:f6:a7:95:04:72:ee: 5a:62:35:05:82:d9:ef:1b:04:b3:02:ab:3e:28:d9: e2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0A:D9:1A:85:DA:40:27:EB:8F:2A:47:4E:A3:AC:03:8C:A3:05:E7 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/swrZGoXaQCfrjypHTqOsA4yjBec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.164.0/23 93.185.160.0/23 Signature Algorithm: sha256WithRSAEncryption 41:f0:29:e5:66:a2:70:14:0b:ab:59:16:f0:38:6f:6c:4c:06: aa:10:55:a5:11:27:fe:a7:87:c5:4f:f4:04:8d:5a:c0:99:87: 32:5f:c5:42:c1:5b:94:dd:5d:b9:93:58:35:fe:a7:7b:17:4f: 74:f4:74:ba:01:79:15:a8:c7:60:fb:21:45:5d:17:db:e2:60: e5:9a:fb:be:53:b2:7c:fe:c6:81:3d:5e:94:66:75:26:d3:22: f8:27:cf:f1:db:9e:63:3e:7d:6e:70:79:e5:6a:02:dd:ab:77: 35:55:fe:d7:e6:eb:c4:d1:92:91:21:49:57:bc:35:79:11:2c: cd:b2:07:63:2a:96:92:23:f8:2c:b4:94:2a:0d:c9:f4:31:50: 73:7d:b2:28:62:c9:50:69:74:d1:0d:68:2d:51:81:10:01:be: e9:81:ea:f1:93:78:57:e6:9a:23:c8:4e:0f:f5:48:35:8b:a1: 9c:0f:8a:99:3d:a3:d3:9f:07:8e:28:d5:c6:1e:02:af:0e:23: 07:bc:42:3e:98:7a:31:57:09:d1:f4:78:f0:e2:e6:26:26:ec: 15:83:ee:2e:6a:0f:76:63:29:3f:98:c8:9f:09:95:71:4e:0f: e9:aa:8d:87:18:1a:84:dc:fb:9e:c7:72:e5:06:6e:ed:2b:06: d5:5b:ab:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pU9CQx+oTGf1R6ohOmOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzBhZDkxYTg1ZGE0MDI3ZWI4ZjJhNDc0ZWEzYWMwMzhjYTMwNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoESe0b0Ge/JpqgHdd5pkAcCa7TqZ VXl12I1g87cxmlJIeMhVb96zpDfUed6h/Tu6hlZj246chSXHyXSUX5CYI2cPLA4U oOMmJocW7Uh8bjWwas2b/rkKXuPY3mlVZXrrO+fkwzOobP1g/LVQZ3HEI8Oz71gb 1XUJfMtA7EifubQsenhJRMWPydSFO3wvkp93ZCRf2OI3VJ2y+I5MHFvM2GQZqOgw OM+3+3SRAktGi2aq0LTwVTf07lrgJAEFyiaK/o3lpxzkT8zMsDS1VFgmEKiHwgUf F8mLf1DqUEU7zmsTDky+26ss4tz2p5UEcu5aYjUFgtnvGwSzAqs+KNniowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLMK2RqF2kAn648qR06jrAOMowXnMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvc3dyWkdvWGFRQ2ZyanlwSFRxT3NBNHlqQmVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLV2kAwQB XbmgMA0GCSqGSIb3DQEBCwUAA4IBAQBB8CnlZqJwFAurWRbwOG9sTAaqEFWlESf+ p4fFT/QEjVrAmYcyX8VCwVuU3V25k1g1/qd7F0909HS6AXkVqMdg+yFFXRfb4mDl mvu+U7J8/saBPV6UZnUm0yL4J8/x255jPn1ucHnlagLdq3c1Vf7X5uvE0ZKRIUlX vDV5ESzNsgdjKpaSI/gstJQqDcn0MVBzfbIoYslQaXTRDWgtUYEQAb7pgerxk3hX 5pojyE4P9Ug1i6GcD4qZPaPTnweOKNXGHgKvDiMHvEI+mHoxVwnR9Hjw4uYmJuwV g+4uag92Yyk/mMifCZVxTg/pqo2HGBqE3Puex3LlBm7tKwbVW6v4 -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:15 2026 by rpki-client