This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/SWYonVyw6t-M4w3DUnG06hLvLEk.roa
File: SWYonVyw6t-M4w3DUnG06hLvLEk.roa (raw, json)
Hash identifier: tco63oARuy5EvMpcq7VsYr3Rw0Zp8rf/jNLMSLMD8J0=
Subject key identifier: 49:66:28:9D:5C:B0:EA:DF:8C:E3:0D:C3:52:71:B4:EA:12:EF:2C:49
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 019B7DCB5E11D90BC38926CEA0EC7287059A
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/SWYonVyw6t-M4w3DUnG06hLvLEk.roa
Signing time: Fri 02 Jan 2026 08:20:38 +0000
ROA not before: Fri 02 Jan 2026 08:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59883
IP address blocks: 185.67.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:5e:11:d9:0b:c3:89:26:ce:a0:ec:72:87:05:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Jan 2 08:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4966289d5cb0eadf8ce30dc35271b4ea12ef2c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:40:2c:21:19:a5:4e:b1:06:ad:83:ed:88:
22:b1:19:4d:2f:95:e0:2d:8a:a4:ab:cd:0f:bf:a6:
a0:3f:6d:73:24:e1:bf:cc:d7:ff:0c:dd:b3:91:31:
27:ae:75:58:5f:16:67:0f:29:ce:1d:93:bc:f0:03:
21:4c:ab:c7:c9:5f:41:c0:17:c9:50:a6:68:93:94:
cf:fa:1e:18:a5:2a:5d:1f:57:ae:9f:c9:bb:b0:5e:
8c:87:84:ba:2b:2f:4b:bc:03:73:ab:f5:96:31:f2:
ae:34:f6:4a:5f:23:7d:a7:70:b4:40:c3:37:6a:4d:
3f:f8:2f:ae:0e:45:89:4f:44:6c:12:57:fc:a0:0e:
6b:fd:6c:d3:9b:54:d8:5a:cd:c9:d4:e0:eb:c6:93:
b5:ac:ef:6f:85:7e:63:30:b0:31:7f:df:50:b5:eb:
0c:c9:45:c8:36:66:65:f5:8e:dc:c6:c8:ac:73:cc:
b1:66:b9:28:8f:0d:04:56:5d:a7:4c:6d:1c:30:66:
3f:7a:b3:3c:76:1b:c6:12:fd:d5:bf:94:2c:ce:e5:
da:4f:78:78:ac:1b:e3:0b:08:43:e7:ad:a1:3c:7d:
4c:ab:ab:be:c7:dc:04:cc:1e:9d:4e:a7:88:7c:1f:
86:45:ca:43:e3:f1:f4:03:ea:f0:95:5b:f1:eb:2c:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:66:28:9D:5C:B0:EA:DF:8C:E3:0D:C3:52:71:B4:EA:12:EF:2C:49
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/SWYonVyw6t-M4w3DUnG06hLvLEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.160.0/22
Signature Algorithm: sha256WithRSAEncryption
56:a2:00:ec:c9:d8:aa:12:7f:b2:a6:01:d9:ec:38:6e:19:44:
41:53:77:81:c8:66:17:b1:1a:6b:e5:57:3d:52:b6:b8:31:96:
cc:c4:ad:6c:bb:c6:73:4f:76:60:a7:19:d9:7b:3a:62:ec:a9:
97:2b:05:00:39:66:56:b1:0d:ec:05:06:19:e9:4b:a8:3c:e6:
11:82:04:c2:0b:66:e1:4b:58:7a:0e:79:15:6d:eb:dd:7e:81:
03:e8:e9:8c:fe:ad:e9:5e:c0:02:e7:f5:bb:e3:b5:a6:24:ee:
bb:2f:9e:0d:3b:72:fa:68:9b:03:0a:e0:b7:73:30:f2:9c:52:
1f:1f:42:84:3d:dc:d4:16:3a:c8:af:66:a3:5d:b4:ba:5a:ce:
f1:27:cc:98:7d:40:59:3d:e3:6d:d3:ac:d3:26:21:27:b1:c2:
e9:0a:e6:bc:ef:9a:97:b5:8c:3b:28:04:28:e6:0c:2f:ee:6e:
ab:da:f3:ec:60:8a:1e:1e:fd:4d:dc:25:92:f1:e9:e3:bb:c7:
30:cb:52:d4:95:df:7f:8c:e2:d9:61:34:bb:85:13:78:a3:0b:
48:ad:44:9b:f7:15:a8:6d:c2:a8:cb:59:08:85:af:7d:1a:03:
2e:2a:36:88:6e:3e:02:9e:2a:d0:7a:67:83:42:0a:b0:03:c1:
c5:94:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:11:29 2026 by rpki-client