This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa File: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (raw, json) Hash identifier: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0= Subject key identifier: 9F:E4:96:37:DF:D4:D1:09:DF:59:BF:70:E8:64:94:3A:F9:BC:1E:C3 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBDA69220BA07E584208186D2BBF31 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa Signing time: Thu 01 Jan 2026 14:17:38 +0000 ROA not before: Thu 01 Jan 2026 14:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34905 IP address blocks: 80.120.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:da:69:22:0b:a0:7e:58:42:08:18:6d:2b:bf:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fe49637dfd4d109df59bf70e864943af9bc1ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:b0:03:5b:cc:de:a8:f5:da:2c:0e:93:b9: 21:e8:99:e4:4e:66:dc:57:5a:7c:24:a8:bd:00:5a: 24:26:32:0b:f4:c2:9c:e9:28:cb:3a:ef:fb:0d:66: 77:49:4d:f5:ca:75:c4:a7:b5:f2:9b:d6:69:07:77: 34:66:ec:09:93:4a:a9:ab:32:f6:ee:fe:84:2f:01: 15:d7:37:4b:81:7b:be:7f:ff:0b:8f:59:8c:b7:96: 50:07:1f:ec:0b:84:e3:cf:ba:12:ac:da:d8:ea:ba: bb:aa:c4:85:b7:d0:f1:c9:dd:ff:41:d6:28:9c:cd: ce:1d:b6:4c:26:dc:a8:9e:1e:c4:8f:2e:3e:fb:3a: d6:62:ce:b9:aa:32:fc:d6:b7:1c:eb:0f:73:f2:51: 54:f2:8e:d9:ed:ea:0e:01:55:6c:5a:1f:05:75:01: e1:a5:4f:4b:70:96:92:81:c2:a8:07:ea:cc:fb:aa: 3b:be:75:0e:07:ed:6f:6d:01:c4:59:04:12:ac:0c: db:82:6d:ea:af:e1:6a:bd:21:70:22:9f:27:c5:1b: e8:66:a2:35:0f:12:71:1a:d8:78:22:d3:e2:01:f5: f3:44:fb:2a:f6:81:8a:b8:a0:e6:14:92:83:a1:83: ec:97:f2:b5:96:9b:5c:ac:e4:ce:0c:63:a9:47:59: 7f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E4:96:37:DF:D4:D1:09:DF:59:BF:70:E8:64:94:3A:F9:BC:1E:C3 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.120.58.0/24 Signature Algorithm: sha256WithRSAEncryption 49:f6:fc:02:2c:d4:3a:5d:1b:c8:8f:0b:34:93:d5:ff:6b:eb: e4:0e:2b:ea:58:ad:78:b0:90:36:e1:aa:b9:b8:c1:f4:3a:52: 7c:82:8e:3e:27:ea:5b:2a:7c:96:2a:fc:2a:88:e4:aa:eb:92: 96:1f:b4:7f:f5:b7:d7:22:d5:3a:c5:6e:49:52:96:92:65:e3: d1:48:65:e8:09:35:1d:ff:fe:c7:e7:2c:4b:1b:84:2c:5a:25: 0d:28:de:89:08:67:62:d8:37:5d:35:e3:47:01:1b:e2:1c:af: ff:85:92:92:d1:64:25:7a:9a:7c:73:28:ea:a2:54:60:58:78: cc:26:4a:c8:8c:b6:45:ed:f1:fd:2f:0f:f8:8d:45:02:a0:74: 93:6f:32:0c:05:a7:21:e0:9c:03:2c:08:57:8d:33:09:ba:13: e0:d4:b5:3e:af:95:67:6c:d3:62:af:16:56:7a:50:9d:90:f7: 88:a3:7b:44:53:87:56:09:a6:f4:5f:2f:23:85:70:8a:f4:45: 90:2b:54:31:84:9a:55:97:c3:ba:e1:e9:b0:75:8b:2e:a6:1d: 18:28:04:2e:3d:c3:1e:f8:be:f4:6f:da:d0:5b:7d:a9:d9:0d: 94:7a:64:3d:17:19:b6:3e:e0:26:6f:8f:ec:60:cc:37:ab:f3: f1:10:b9:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt569ppIgugflhCCBhtK78xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmU0OTYzN2RmZDRkMTA5ZGY1OWJmNzBlODY0OTQzYWY5YmMxZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmGwA1vM3qj12iwOk7kh6JnkTmbc V1p8JKi9AFokJjIL9MKc6SjLOu/7DWZ3SU31ynXEp7Xym9ZpB3c0ZuwJk0qpqzL2 7v6ELwEV1zdLgXu+f/8Lj1mMt5ZQBx/sC4Tjz7oSrNrY6rq7qsSFt9Dxyd3/QdYo nM3OHbZMJtyonh7Ejy4++zrWYs65qjL81rcc6w9z8lFU8o7Z7eoOAVVsWh8FdQHh pU9LcJaSgcKoB+rM+6o7vnUOB+1vbQHEWQQSrAzbgm3qr+FqvSFwIp8nxRvoZqI1 DxJxGth4ItPiAfXzRPsq9oGKuKDmFJKDoYPsl/K1lptcrOTODGOpR1l/xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ/kljff1NEJ31m/cOhklDr5vB7DMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvbi1TV045X1UwUW5mV2I5dzZHU1VPdm04SHNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHg6MA0G CSqGSIb3DQEBCwUAA4IBAQBJ9vwCLNQ6XRvIjws0k9X/a+vkDivqWK14sJA24aq5 uMH0OlJ8go4+J+pbKnyWKvwqiOSq65KWH7R/9bfXItU6xW5JUpaSZePRSGXoCTUd //7H5yxLG4QsWiUNKN6JCGdi2DddNeNHARviHK//hZKS0WQlepp8cyjqolRgWHjM JkrIjLZF7fH9Lw/4jUUCoHSTbzIMBach4JwDLAhXjTMJuhPg1LU+r5VnbNNirxZW elCdkPeIo3tEU4dWCab0Xy8jhXCK9EWQK1QxhJpVl8O64emwdYsuph0YKAQuPcMe +L70b9rQW32p2Q2UemQ9Fxm2PuAmb4/sYMw3q/PxELm6 -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:27 2026 by rpki-client