This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/swQMeQBE5wb78ss3tCTd5K3tnlI.roa File: swQMeQBE5wb78ss3tCTd5K3tnlI.roa (raw, json) Hash identifier: uIGxjGabnvBWdl9aXtwznXWVFMHKBrwT9BZDyH0VO8o= Subject key identifier: B3:04:0C:79:00:44:E7:06:FB:F2:CB:37:B4:24:DD:E4:AD:ED:9E:52 Certificate issuer: /CN=798e0da4f91007b224768acb4d131f12517d2b7a Certificate serial: 019B775926CF4139A0878D1C59AFAC41BE47 Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/swQMeQBE5wb78ss3tCTd5K3tnlI.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13110 IP address blocks: 91.202.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:26:cf:41:39:a0:87:8d:1c:59:af:ac:41:be:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3040c790044e706fbf2cb37b424dde4aded9e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:74:2d:2a:fa:6f:65:ff:1d:4b:e0:1c:62: 03:fb:1a:62:d9:a1:59:e3:bc:f9:5d:7d:45:a1:f1: bb:47:23:6e:11:be:d0:6a:c1:fe:72:81:5c:53:2d: be:0d:c8:37:ef:a1:9b:2d:74:d2:5c:4a:02:2c:d9: 13:a9:6c:90:d7:58:66:4b:2c:5b:a1:e7:b4:9f:7c: 0f:a5:e6:43:df:28:86:95:56:0c:ed:fd:26:2a:e6: 4f:67:35:81:0b:5c:01:1a:23:0d:81:a2:4e:3f:55: 9b:2b:6e:bc:3d:e8:e0:ed:e3:e6:8c:34:0b:72:e8: 47:eb:5a:10:3b:89:8e:04:bf:2f:5f:6a:30:12:04: 75:4b:27:a7:99:2a:ea:3a:27:01:72:ff:d6:62:06: ac:5a:0e:76:56:23:7f:d3:fa:df:a1:d3:18:80:d0: c3:18:d5:04:9e:b0:f9:2a:e2:81:8f:67:55:af:7b: 6e:59:c3:67:08:7e:0c:68:56:f0:03:a7:66:20:31: 27:fa:25:0b:85:21:1d:9a:96:ab:f4:be:8a:22:a4: 3f:aa:e3:1b:8b:73:56:45:a2:e3:c6:61:03:cf:05: 7f:16:48:99:1c:bb:ef:82:6b:f4:95:c0:de:b4:aa: 3b:b7:fb:4c:32:a6:4b:ca:e5:0c:0c:16:9d:85:f5: d5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:04:0C:79:00:44:E7:06:FB:F2:CB:37:B4:24:DD:E4:AD:ED:9E:52 X509v3 Authority Key Identifier: keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/swQMeQBE5wb78ss3tCTd5K3tnlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.102.0/24 Signature Algorithm: sha256WithRSAEncryption 18:79:73:47:f0:fc:b1:49:2c:55:51:ca:80:59:0a:6c:ba:f8: 5e:40:c7:3e:ac:6f:fe:d5:17:35:51:62:d6:81:b1:96:16:06: 0e:91:3b:4b:61:e8:bd:2a:06:9f:c5:05:d0:38:83:47:c9:5f: df:5a:9b:cf:cc:3f:b6:d1:9d:88:0c:d6:3a:98:68:85:79:76: b2:14:9f:99:45:ba:df:72:9c:4a:e1:73:1c:82:3e:b5:83:93: 01:b1:a8:48:5d:92:1a:eb:5e:71:ec:a0:2b:81:24:74:5c:16: d4:a9:c6:b8:e4:46:9e:24:2a:70:14:c1:83:02:1a:b6:21:fa: 4e:d5:9a:d7:21:d0:50:7f:f9:ba:bd:3e:1f:a9:36:de:11:cf: f0:59:d7:b8:e5:84:f5:96:f6:ff:2e:f0:89:8a:b4:91:2a:a1: fe:e6:e0:a8:35:68:d8:c4:60:04:ad:b2:32:3e:0c:2a:1f:e4: ab:af:3d:77:7b:5d:0d:d8:3e:7b:c6:b3:ec:ec:13:d0:06:0a: 48:c5:d3:17:e0:bf:4d:c3:b5:e1:f1:5e:a2:df:31:5e:7f:8a: 6a:0c:2c:77:d0:c6:05:c7:b9:dd:3e:fb:bd:8a:66:ad:00:4a: f3:70:97:1d:25:85:77:6c:ee:49:2a:30:7c:a6:d8:e0:00:5c: f9:1d:b1:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSbPQTmgh40cWa+sQb5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5OGUwZGE0ZjkxMDA3YjIyNDc2OGFjYjRkMTMxZjEyNTE3 ZDJiN2EwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzA0MGM3OTAwNDRlNzA2ZmJmMmNiMzdiNDI0ZGRlNGFkZWQ5ZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOR0LSr6b2X/HUvgHGID+xpi2aFZ 47z5XX1FofG7RyNuEb7QasH+coFcUy2+Dcg376GbLXTSXEoCLNkTqWyQ11hmSyxb oee0n3wPpeZD3yiGlVYM7f0mKuZPZzWBC1wBGiMNgaJOP1WbK268Pejg7ePmjDQL cuhH61oQO4mOBL8vX2owEgR1SyenmSrqOicBcv/WYgasWg52ViN/0/rfodMYgNDD GNUEnrD5KuKBj2dVr3tuWcNnCH4MaFbwA6dmIDEn+iULhSEdmpar9L6KIqQ/quMb i3NWRaLjxmEDzwV/FkiZHLvvgmv0lcDetKo7t/tMMqZLyuUMDBadhfXV5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLMEDHkAROcG+/LLN7Qk3eSt7Z5SMB8GA1UdIwQY MBaAFHmODaT5EAeyJHaKy00THxJRfSt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUt NGZiNGVmOTFhODJmLzEvc3dRTWVRQkU1d2I3OHNzM3RDVGQ1SzN0bmxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUtNGZiNGVmOTFhODJm LzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8pmMA0G CSqGSIb3DQEBCwUAA4IBAQAYeXNH8PyxSSxVUcqAWQpsuvheQMc+rG/+1Rc1UWLW gbGWFgYOkTtLYei9KgafxQXQOINHyV/fWpvPzD+20Z2IDNY6mGiFeXayFJ+ZRbrf cpxK4XMcgj61g5MBsahIXZIa615x7KArgSR0XBbUqca45EaeJCpwFMGDAhq2IfpO 1ZrXIdBQf/m6vT4fqTbeEc/wWde45YT1lvb/LvCJirSRKqH+5uCoNWjYxGAErbIy PgwqH+Srrz13e10N2D57xrPs7BPQBgpIxdMX4L9Nw7Xh8V6i3zFef4pqDCx30MYF x7ndPvu9imatAErzcJcdJYV3bO5JKjB8ptjgAFz5HbGG -----END CERTIFICATE-----Generated at Sun Jan 18 19:29:01 2026 by rpki-client