This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Swr2pcQYtlkgkLfIshLGSG5FhJA.roa File: Swr2pcQYtlkgkLfIshLGSG5FhJA.roa (raw, json) Hash identifier: Mzpp0aSFoggPTee6ainNjk/dndLXufOwZczIKH038YU= Subject key identifier: 4B:0A:F6:A5:C4:18:B6:59:20:90:B7:C8:B2:12:C6:48:6E:45:84:90 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C56702A819EF4E85ACA3F4D8588B Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Swr2pcQYtlkgkLfIshLGSG5FhJA.roa Signing time: Thu 01 Jan 2026 18:18:56 +0000 ROA not before: Thu 01 Jan 2026 18:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43482 IP address blocks: 87.110.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c5:67:02:a8:19:ef:4e:85:ac:a3:f4:d8:58:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b0af6a5c418b6592090b7c8b212c6486e458490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3a:02:e6:b9:c6:b0:b9:74:b0:b6:91:7b:98: db:cd:9b:c1:84:d0:1b:2b:3c:fa:b9:87:51:0e:6a: 7c:54:90:7b:73:83:66:bf:4b:fe:fe:bb:3b:3b:0a: 0e:69:e3:8d:c2:5e:8b:62:ba:24:e4:77:64:6f:46: cf:21:f3:79:56:fe:67:9f:d1:44:3d:dd:73:f1:a0: fc:ef:4d:1d:85:39:50:7b:3f:7b:a5:ba:9f:97:92: 34:19:98:db:76:5a:af:80:14:63:34:ce:64:5f:9b: 2e:2a:dc:fb:47:53:28:e5:13:74:8f:76:6a:e7:c8: 7d:21:f0:37:1d:00:d1:64:79:33:62:39:7b:8f:7a: ff:8f:1d:bd:b1:23:d8:99:d7:cc:43:2d:ea:a7:dd: 4d:90:14:f2:4a:2a:6c:45:68:ad:d2:6d:9a:47:c3: bb:45:95:08:e3:8f:48:30:28:6e:68:3b:7e:de:65: 14:7a:dc:79:5c:b5:c2:70:e0:53:b5:bd:97:fb:5d: ef:67:41:fa:e2:47:e0:d2:f4:8b:cb:f0:4a:1b:f6: f5:59:dc:3f:ed:47:33:23:ec:a5:43:b8:a6:84:21: e6:47:fd:13:27:ef:f7:b1:4a:de:83:c6:a0:f9:4e: b6:61:ac:13:df:d6:76:1c:27:31:20:4b:e6:fc:03: b9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0A:F6:A5:C4:18:B6:59:20:90:B7:C8:B2:12:C6:48:6E:45:84:90 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Swr2pcQYtlkgkLfIshLGSG5FhJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.110.233.0/24 Signature Algorithm: sha256WithRSAEncryption bd:0d:8f:be:a1:8a:42:e2:87:b0:65:f9:d9:d8:75:fe:f5:80: 4a:de:06:f9:7b:55:68:40:7e:b0:fa:81:ea:62:ee:cb:45:b3: 34:36:e1:01:ca:71:5c:14:63:3d:d5:03:f6:e9:ae:d1:94:43: 0e:65:3e:03:b7:5e:18:35:6d:be:ce:2c:6a:97:98:e7:88:25: 72:00:5d:4e:51:4e:ad:cb:cf:b5:15:5a:63:c2:67:af:41:13: d3:fc:ee:2b:d9:14:76:c7:f4:ba:11:39:2c:da:14:d4:b4:4c: 88:5c:07:76:e1:56:b4:d9:e3:69:2d:23:8d:57:d3:ec:91:28: 08:eb:1a:13:30:89:94:19:b2:f3:0f:5d:f3:cf:92:ab:fc:00: b7:8c:01:69:e0:05:24:c6:fb:60:0c:5e:69:f7:f3:c5:68:34: f3:65:51:f0:8b:15:b9:82:85:f4:bf:a2:98:65:06:04:33:7b: 4e:05:7e:cf:6e:e7:b5:e4:4d:11:60:60:f7:4b:3e:4a:84:f9: 78:de:9c:e4:1b:95:ce:af:8f:ae:32:07:56:36:3e:b9:33:a5: d9:8a:84:8f:8e:53:86:47:0f:1b:c9:53:01:ae:1d:a1:92:1b: 5e:23:51:ac:9a:f7:07:a9:65:11:6b:4d:58:37:18:8a:3d:bd: bd:e0:df:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMVnAqgZ706FrKP02FiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjBhZjZhNWM0MThiNjU5MjA5MGI3YzhiMjEyYzY0ODZlNDU4NDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyToC5rnGsLl0sLaRe5jbzZvBhNAb Kzz6uYdRDmp8VJB7c4Nmv0v+/rs7OwoOaeONwl6LYrok5Hdkb0bPIfN5Vv5nn9FE Pd1z8aD8700dhTlQez97pbqfl5I0GZjbdlqvgBRjNM5kX5suKtz7R1Mo5RN0j3Zq 58h9IfA3HQDRZHkzYjl7j3r/jx29sSPYmdfMQy3qp91NkBTySipsRWit0m2aR8O7 RZUI449IMChuaDt+3mUUetx5XLXCcOBTtb2X+13vZ0H64kfg0vSLy/BKG/b1Wdw/ 7UczI+ylQ7imhCHmR/0TJ+/3sUreg8ag+U62YawT39Z2HCcxIEvm/AO5QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEsK9qXEGLZZIJC3yLISxkhuRYSQMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvU3dyMnBjUVl0bGtna0xmSXNoTEdTRzVGaEpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV27pMA0G CSqGSIb3DQEBCwUAA4IBAQC9DY++oYpC4oewZfnZ2HX+9YBK3gb5e1VoQH6w+oHq Yu7LRbM0NuEBynFcFGM91QP26a7RlEMOZT4Dt14YNW2+zixql5jniCVyAF1OUU6t y8+1FVpjwmevQRPT/O4r2RR2x/S6ETks2hTUtEyIXAd24Va02eNpLSONV9PskSgI 6xoTMImUGbLzD13zz5Kr/AC3jAFp4AUkxvtgDF5p9/PFaDTzZVHwixW5goX0v6KY ZQYEM3tOBX7Pbue15E0RYGD3Sz5KhPl43pzkG5XOr4+uMgdWNj65M6XZioSPjlOG Rw8byVMBrh2hkhteI1GsmvcHqWURa01YNxiKPb294N/S -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:30 2026 by rpki-client