This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/swlvSyg5P2tG5hf6QszpyWKMn_k.roa File: swlvSyg5P2tG5hf6QszpyWKMn_k.roa (raw, json) Hash identifier: bb3L+IeAkS1sZt2NMi7C0qunZyUMt8jC260rx3ny2gs= Subject key identifier: B3:09:6F:4B:28:39:3F:6B:46:E6:17:FA:42:CC:E9:C9:62:8C:9F:F9 Certificate issuer: /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb Certificate serial: 019B7B36AA2F8C41006CAE101D08309CA09F Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/swlvSyg5P2tG5hf6QszpyWKMn_k.roa Signing time: Thu 01 Jan 2026 20:18:58 +0000 ROA not before: Thu 01 Jan 2026 20:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210711 IP address blocks: 94.154.121.0/24 maxlen: 24 2a11:48c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:aa:2f:8c:41:00:6c:ae:10:1d:08:30:9c:a0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3096f4b28393f6b46e617fa42cce9c9628c9ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:46:7a:6a:ad:24:78:72:a2:4d:bd:3a:06:51: 83:79:47:88:54:39:d8:65:d1:70:c2:1c:3b:84:92: 4f:1f:4b:70:37:5e:3e:ac:1c:47:0a:f2:cf:92:e5: 31:99:ad:f0:66:a7:9a:f0:ef:51:3b:89:8c:39:47: 82:a2:a1:91:8a:50:4f:22:3e:7c:97:12:8a:61:82: 08:f9:19:bb:60:a7:40:c3:b2:dc:0e:71:97:ca:e6: 38:d4:25:2e:82:9e:41:06:e8:27:ea:28:97:66:b3: 3f:79:9d:45:19:6f:74:56:09:a0:da:59:ab:47:b4: fe:19:97:fa:58:00:ea:f7:7b:22:35:92:75:41:57: 69:e3:1b:db:34:fb:3a:c7:83:c9:dd:5b:b7:d9:a7: b1:36:e5:b4:4f:e9:d1:47:f0:d1:2e:f0:92:44:75: 8f:69:80:e5:fa:e0:dc:fc:8f:04:d2:1a:bd:f1:84: 90:ad:01:c0:6f:0f:18:c9:ee:49:e8:df:c9:7b:50: 59:74:4a:e5:f7:6a:f6:28:fd:9f:78:cf:1c:9e:c3: 7c:24:9d:bf:c3:c8:5b:80:3b:56:c5:36:12:7f:75: 63:d4:c0:1d:31:59:d0:9d:3a:9c:a1:fb:79:f5:00: 8f:00:43:07:07:9a:eb:0c:fc:0b:08:67:82:c4:65: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:09:6F:4B:28:39:3F:6B:46:E6:17:FA:42:CC:E9:C9:62:8C:9F:F9 X509v3 Authority Key Identifier: keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/swlvSyg5P2tG5hf6QszpyWKMn_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.121.0/24 IPv6: 2a11:48c0::/29 Signature Algorithm: sha256WithRSAEncryption ce:5c:b8:51:c5:a1:e3:ee:3d:ed:d9:3f:ee:29:9b:12:3a:eb: d3:16:f3:20:7e:22:98:6e:75:c3:c8:53:a1:33:bc:2c:6b:f9: 7f:ab:42:a8:79:0b:55:80:6b:49:c8:38:0e:a9:7d:6c:59:f5: f2:fd:2b:cc:a8:83:f9:c3:61:af:4f:ea:2b:23:2f:85:be:fb: 17:db:2e:cd:76:b2:d8:d0:81:04:75:08:de:b3:e9:1a:2f:d2: 54:27:db:d7:f0:40:2c:14:78:9e:8b:4c:74:e2:70:95:c8:33: 43:fb:96:9e:06:24:8f:3d:7b:27:5e:b6:05:a2:9a:d2:9b:61: db:36:b4:8d:45:6c:7b:46:13:df:f4:a3:b2:9c:20:79:65:03: a9:b2:e3:0e:de:49:e3:b3:dc:45:56:a4:c8:1a:18:5a:d6:aa: f6:83:a6:e5:05:26:8f:4c:ea:1a:9c:e2:95:e7:3a:81:7f:bc: ba:ad:25:d4:bc:b3:f5:43:f4:d1:3e:9c:5c:32:a3:da:ac:e0: 23:67:8f:33:e3:1f:5c:5e:76:1a:61:fb:7b:7d:76:73:e0:bc: 04:de:69:13:44:4f:eb:48:63:82:ee:65:40:87:e5:79:93:aa: 14:00:21:af:b6:21:6c:c3:fa:37:5a:54:d6:33:a0:11:4e:c3: 8d:c1:71:c9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NqovjEEAbK4QHQgwnKCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWUyMjBiNDc2OGRhNmUyNzZlNmE2MmVkZDY3NDZkOGZj M2MxZmIwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzA5NmY0YjI4MzkzZjZiNDZlNjE3ZmE0MmNjZTljOTYyOGM5ZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEZ6aq0keHKiTb06BlGDeUeIVDnY ZdFwwhw7hJJPH0twN14+rBxHCvLPkuUxma3wZqea8O9RO4mMOUeCoqGRilBPIj58 lxKKYYII+Rm7YKdAw7LcDnGXyuY41CUugp5BBugn6iiXZrM/eZ1FGW90Vgmg2lmr R7T+GZf6WADq93siNZJ1QVdp4xvbNPs6x4PJ3Vu32aexNuW0T+nRR/DRLvCSRHWP aYDl+uDc/I8E0hq98YSQrQHAbw8Yye5J6N/Je1BZdErl92r2KP2feM8cnsN8JJ2/ w8hbgDtWxTYSf3Vj1MAdMVnQnTqcoft59QCPAEMHB5rrDPwLCGeCxGVwfwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLMJb0soOT9rRuYX+kLM6clijJ/5MB8GA1UdIwQY MBaAFImuIgtHaNpuJ25qYu3WdG2Pw8H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYjhhNDAtNzYxMC00ZTRkLTliMzct NzQxZmE0ZTEwZTM2LzEvc3dsdlN5ZzVQMnRHNWhmNlFzenB5V0tNbl9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zYjhhNDAtNzYxMC00ZTRkLTliMzctNzQxZmE0ZTEwZTM2 LzEvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXpp5MA0E AgACMAcDBQMqEUjAMA0GCSqGSIb3DQEBCwUAA4IBAQDOXLhRxaHj7j3t2T/uKZsS OuvTFvMgfiKYbnXDyFOhM7wsa/l/q0KoeQtVgGtJyDgOqX1sWfXy/SvMqIP5w2Gv T+orIy+FvvsX2y7NdrLY0IEEdQjes+kaL9JUJ9vX8EAsFHiei0x04nCVyDND+5ae BiSPPXsnXrYFoprSm2HbNrSNRWx7RhPf9KOynCB5ZQOpsuMO3knjs9xFVqTIGhha 1qr2g6blBSaPTOoanOKV5zqBf7y6rSXUvLP1Q/TRPpxcMqParOAjZ48z4x9cXnYa Yft7fXZz4LwE3mkTRE/rSGOC7mVAh+V5k6oUACGvtiFsw/o3WlTWM6ARTsONwXHJ -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:47 2026 by rpki-client