This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/C_swQ1amU9xoTLneSqK5rEPwSHY.roa File: C_swQ1amU9xoTLneSqK5rEPwSHY.roa (raw, json) Hash identifier: kd5UBDyTUyD8YdrwighS1kP5DDkufkXNg0jZY2oswQA= Subject key identifier: 0B:FB:30:43:56:A6:53:DC:68:4C:B9:DE:4A:A2:B9:AC:43:F0:48:76 Certificate issuer: /CN=11e512976b91a2967ebce10ed4052ece12b14155 Certificate serial: 019B78A2A97AE27293A96AECA2D6606B94AB Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/C_swQ1amU9xoTLneSqK5rEPwSHY.roa Signing time: Thu 01 Jan 2026 08:18:04 +0000 ROA not before: Thu 01 Jan 2026 08:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.76.182.0/24 maxlen: 24 185.76.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a9:7a:e2:72:93:a9:6a:ec:a2:d6:60:6b:94:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155 Validity Not Before: Jan 1 08:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bfb304356a653dc684cb9de4aa2b9ac43f04876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:02:bd:d6:f4:e4:a7:d1:af:a7:28:a3:94: b3:99:c7:42:8c:cf:de:6b:aa:56:af:fe:67:46:6a: bb:11:a8:2b:a8:1d:1a:be:93:d1:d0:78:81:4c:2f: 4a:1e:45:1e:ef:28:32:d2:89:af:1b:b9:8e:1a:fe: 68:70:22:06:cf:0a:a3:a2:61:26:cc:c3:65:8f:10: bc:5e:16:f2:ad:d7:94:14:4a:62:4a:96:91:6e:2c: cd:26:4f:fc:c4:c1:7d:14:9b:7d:02:63:19:a8:75: 5e:8a:02:c7:0a:f3:cf:8b:6c:19:85:08:27:2f:44: 27:fe:5a:96:68:16:8c:db:e7:90:24:39:39:23:86: dd:b2:02:69:40:6d:7f:4c:ee:a2:2d:9a:3c:a0:1e: 5a:7e:d8:d7:3e:94:87:9a:d5:a0:91:5e:e2:c1:05: 9c:bc:18:6f:20:97:e5:f9:f9:6a:1a:0a:3e:25:29: 55:32:6b:a6:53:7a:bf:4b:09:a3:4e:79:29:cc:21: 5c:0c:fb:66:97:ab:c8:7a:10:7a:0a:6e:b3:73:70: fb:d0:1c:e2:90:f1:4a:03:b0:d6:61:5a:48:03:ad: f7:50:45:2e:48:af:e6:69:87:3f:18:45:41:d5:96: f6:6c:cf:33:a5:77:d4:83:5e:d8:59:6f:f0:60:da: 75:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FB:30:43:56:A6:53:DC:68:4C:B9:DE:4A:A2:B9:AC:43:F0:48:76 X509v3 Authority Key Identifier: keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/C_swQ1amU9xoTLneSqK5rEPwSHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.182.0/23 Signature Algorithm: sha256WithRSAEncryption af:92:06:6b:a7:46:f6:88:61:e6:93:f1:60:8f:3d:0e:2f:b0: 3a:94:58:0b:c3:33:de:23:65:dd:ee:4d:3a:f9:1d:37:cb:42: 4a:f8:32:70:f0:9f:da:af:42:09:9c:7b:53:61:7b:14:84:e9: 1a:51:d2:8d:40:e6:ef:16:40:74:16:23:ab:f9:57:2f:c6:90: 25:17:15:c5:f8:bc:5a:ea:e6:0c:7a:c2:11:eb:b3:ab:ae:cc: 32:b5:c1:5c:e5:8e:20:28:6f:ab:de:a7:40:0c:ee:5e:2a:af: 6e:79:cf:b6:a1:42:3e:15:3c:0a:f3:32:0b:f6:10:41:79:16: 06:da:d8:6c:12:4a:5f:20:0f:8e:bd:0b:97:8d:71:3a:b7:79: fe:ef:00:df:89:8a:f2:2c:56:cb:37:62:3f:e7:c6:36:cd:a8: b8:28:61:e3:7f:b8:1a:39:e1:77:c2:17:d6:3c:4d:7a:47:56: 7c:74:8c:4b:93:65:ed:04:2c:a4:73:ec:15:2d:e2:99:81:b5: 4f:96:d0:7b:03:28:1c:2b:5f:29:2a:0e:e4:8c:1f:fa:63:78: b9:57:32:ac:ad:15:7c:21:c1:66:79:80:03:36:be:85:89:f3: dd:a7:31:58:37:ec:60:ab:f9:da:c3:ce:d2:8e:aa:4e:f2:0e: ef:45:09:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oql64nKTqWrsotZga5SrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTUxMjk3NmI5MWEyOTY3ZWJjZTEwZWQ0MDUyZWNlMTJi MTQxNTUwHhcNMjYwMTAxMDgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmZiMzA0MzU2YTY1M2RjNjg0Y2I5ZGU0YWEyYjlhYzQzZjA0ODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFoCvdb05KfRr6coo5SzmcdCjM/e a6pWr/5nRmq7EagrqB0avpPR0HiBTC9KHkUe7ygy0omvG7mOGv5ocCIGzwqjomEm zMNljxC8XhbyrdeUFEpiSpaRbizNJk/8xMF9FJt9AmMZqHVeigLHCvPPi2wZhQgn L0Qn/lqWaBaM2+eQJDk5I4bdsgJpQG1/TO6iLZo8oB5aftjXPpSHmtWgkV7iwQWc vBhvIJfl+flqGgo+JSlVMmumU3q/SwmjTnkpzCFcDPtml6vIehB6Cm6zc3D70Bzi kPFKA7DWYVpIA633UEUuSK/maYc/GEVB1Zb2bM8zpXfUg17YWW/wYNp1xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAv7MENWplPcaEy53kqiuaxD8Eh2MB8GA1UdIwQY MBaAFBHlEpdrkaKWfrzhDtQFLs4SsUFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWVVU2wydVJvcFotdk9FTzFBVXV6aEt4UVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xN2EzYzAtZTk3YS00MzA2LWJjZTQt N2ZmMzJiNmZmZDFlLzEvQ19zd1ExYW1VOXhvVExuZVNxSzVyRVB3U0hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xN2EzYzAtZTk3YS00MzA2LWJjZTQtN2ZmMzJiNmZmZDFl LzEvRWVVU2wydVJvcFotdk9FTzFBVXV6aEt4UVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUy2MA0G CSqGSIb3DQEBCwUAA4IBAQCvkgZrp0b2iGHmk/Fgjz0OL7A6lFgLwzPeI2Xd7k06 +R03y0JK+DJw8J/ar0IJnHtTYXsUhOkaUdKNQObvFkB0FiOr+VcvxpAlFxXF+Lxa 6uYMesIR67OrrswytcFc5Y4gKG+r3qdADO5eKq9uec+2oUI+FTwK8zIL9hBBeRYG 2thsEkpfIA+OvQuXjXE6t3n+7wDfiYryLFbLN2I/58Y2zai4KGHjf7gaOeF3whfW PE16R1Z8dIxLk2XtBCykc+wVLeKZgbVPltB7AygcK18pKg7kjB/6Y3i5VzKsrRV8 IcFmeYADNr6FifPdpzFYN+xgq/naw87SjqpO8g7vRQm/ -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:46 2026 by rpki-client