This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/Swf3FFLXHYfQ6NVyQRwDIxCz49k.roa File: Swf3FFLXHYfQ6NVyQRwDIxCz49k.roa (raw, json) Hash identifier: WjJASBXtMbMx6UjFd1CviKnEyJIaLn92uMYlDMFmvww= Subject key identifier: 4B:07:F7:14:52:D7:1D:87:D0:E8:D5:72:41:1C:03:23:10:B3:E3:D9 Certificate issuer: /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25 Certificate serial: 019B7F8538B25B9E3F6DC693AD3149AC9021 Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/Swf3FFLXHYfQ6NVyQRwDIxCz49k.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 37.8.0.0/17 maxlen: 17 82.102.192.0/18 maxlen: 24 82.205.0.0/17 maxlen: 17 85.113.96.0/19 maxlen: 19 86.107.16.0/22 maxlen: 22 87.252.108.0/22 maxlen: 22 89.239.32.0/20 maxlen: 20 94.26.112.0/20 maxlen: 20 109.232.162.0/23 maxlen: 23 147.189.176.0/20 maxlen: 20 176.65.12.0/22 maxlen: 22 185.40.192.0/22 maxlen: 22 185.90.242.0/24 maxlen: 24 185.138.132.0/22 maxlen: 22 185.171.132.0/22 maxlen: 22 188.209.208.0/22 maxlen: 22 188.215.100.0/22 maxlen: 22 194.169.121.0/24 maxlen: 24 194.169.122.0/23 maxlen: 23 194.169.122.0/24 maxlen: 24 194.169.123.0/24 maxlen: 24 199.204.215.0/24 maxlen: 24 199.250.128.0/19 maxlen: 19 212.33.96.0/19 maxlen: 19 212.106.64.0/19 maxlen: 19 217.21.0.0/20 maxlen: 20 217.66.224.0/19 maxlen: 19 217.78.48.0/20 maxlen: 20 217.78.48.0/21 maxlen: 21 217.78.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:38:b2:5b:9e:3f:6d:c6:93:ad:31:49:ac:90:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b07f71452d71d87d0e8d572411c032310b3e3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:7e:5d:76:02:02:99:d9:ec:bc:33:7c:90: 2d:39:26:b2:eb:63:1e:d8:3a:d5:e6:e4:f6:40:84: 4e:56:13:a3:1f:b5:04:e1:61:4f:ec:7b:c5:80:f5: 34:12:1a:fd:51:79:19:ec:4b:02:65:d8:f5:29:8b: 14:26:56:ab:b5:af:86:eb:d0:89:59:88:d5:40:4b: 41:31:8f:42:20:e2:5e:eb:88:54:a3:a9:b4:a4:02: ad:45:f6:f4:e9:8d:f8:7c:70:6b:af:f0:9b:31:e3: e1:24:a6:52:e0:cb:7b:cc:fa:0d:c2:d4:7b:80:9a: 45:bd:bc:ca:6c:50:0c:76:ca:43:75:49:95:2e:27: 9e:67:5d:4f:37:27:9c:22:4d:90:cc:25:c4:a1:fe: 87:55:1f:f4:ae:32:e7:c2:7f:c5:ac:d3:98:6f:00: 5b:1c:df:9e:85:2f:e0:c1:61:49:1a:55:8c:a5:94: 39:27:ff:00:88:b1:b6:0a:ad:8f:bb:04:bc:d0:9f: 97:bd:aa:6b:9c:f6:34:fb:5e:43:79:39:24:09:78: 59:b0:57:23:7d:6d:30:83:d4:b3:74:98:b6:66:d0: ac:6c:69:cf:ca:6f:c2:e4:4e:4d:dd:a7:11:71:f3: 9a:02:3b:29:1b:5c:c3:d2:dd:5c:1f:1e:26:c7:74: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:07:F7:14:52:D7:1D:87:D0:E8:D5:72:41:1C:03:23:10:B3:E3:D9 X509v3 Authority Key Identifier: keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/Swf3FFLXHYfQ6NVyQRwDIxCz49k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.8.0.0/17 82.102.192.0/18 82.205.0.0/17 85.113.96.0/19 86.107.16.0/22 87.252.108.0/22 89.239.32.0/20 94.26.112.0/20 109.232.162.0/23 147.189.176.0/20 176.65.12.0/22 185.40.192.0/22 185.90.242.0/24 185.138.132.0/22 185.171.132.0/22 188.209.208.0/22 188.215.100.0/22 194.169.121.0-194.169.123.255 199.204.215.0/24 199.250.128.0/19 212.33.96.0/19 212.106.64.0/19 217.21.0.0/20 217.66.224.0/19 217.78.48.0/20 Signature Algorithm: sha256WithRSAEncryption 75:a5:ae:1c:11:8a:df:f4:e0:60:bd:98:d1:d3:09:2d:86:fb: e5:96:77:26:0f:f3:69:2d:4c:8a:76:43:4e:04:5d:bb:6f:18: 88:69:17:7a:d7:d9:0e:f4:a0:94:18:a9:66:dd:9f:6c:b3:c7: ef:21:39:94:98:b9:fd:96:b3:40:14:b0:05:94:71:53:2c:66: c5:cc:28:a7:89:f0:d2:c1:e9:b9:d4:a8:a9:55:92:7e:4c:e9: 2f:4b:a5:86:ee:1c:29:c0:7f:f4:ff:92:c8:ee:ba:62:e5:4e: 60:ea:c0:dc:51:30:4e:f9:b5:a9:48:d0:13:33:40:3b:8d:52: 41:43:98:70:a3:03:db:55:54:f5:7b:a8:6e:21:50:22:01:08: 17:55:06:38:02:08:1c:67:53:60:04:ab:28:13:9a:73:82:55: ab:c7:fb:3a:f7:2c:94:38:84:26:35:97:28:c2:0d:c6:cf:77: b6:df:28:32:94:67:da:82:a1:cd:da:89:00:74:78:df:4e:b5: 1c:3a:e6:f1:ce:1b:04:59:f4:15:c7:15:cb:30:0b:85:d5:f1: 58:5a:ec:05:e4:35:23:9a:5b:a5:2e:2c:13:19:0e:eb:48:27: e9:d8:dc:7b:d7:1c:87:80:84:74:36:56:8f:99:c7:62:67:9b: 6d:90:17:a9 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/hTiyW54/bcaTrTFJrJAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2E2MzNlZjJjMDgyNTFhNTg2MDM1NjJlNTZhYTZlZmE5 M2VjMjUwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjA3ZjcxNDUyZDcxZDg3ZDBlOGQ1NzI0MTFjMDMyMzEwYjNlM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU1+XXYCApnZ7LwzfJAtOSay62Me 2DrV5uT2QIROVhOjH7UE4WFP7HvFgPU0Ehr9UXkZ7EsCZdj1KYsUJlarta+G69CJ WYjVQEtBMY9CIOJe64hUo6m0pAKtRfb06Y34fHBrr/CbMePhJKZS4Mt7zPoNwtR7 gJpFvbzKbFAMdspDdUmVLieeZ11PNyecIk2QzCXEof6HVR/0rjLnwn/FrNOYbwBb HN+ehS/gwWFJGlWMpZQ5J/8AiLG2Cq2PuwS80J+XvaprnPY0+15DeTkkCXhZsFcj fW0wg9SzdJi2ZtCsbGnPym/C5E5N3acRcfOaAjspG1zD0t1cHx4mx3R26QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFEsH9xRS1x2H0OjVckEcAyMQs+PZMB8GA1UdIwQY MBaAFOw6Yz7ywIJRpYYDVi5Wqm76k+wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMWIxZjAtMjM0Zi00NWQ1LTg1OTUt ZjdjMmMyYTkxYmMyLzEvU3dmM0ZGTFhIWWZRNk5WeVFSd0RJeEN6NDlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jMWIxZjAtMjM0Zi00NWQ1LTg1OTUtZjdjMmMyYTkxYmMy LzEvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAcl CAADBAZSZsADBAdSzQADBAVVcWADBAJWaxADBAJX/GwDBARZ7yADBAReGnADBAFt 6KIDBASTvbADBAKwQQwDBAK5KMADBAC5WvIDBAK5ioQDBAK5q4QDBAK80dADBAK8 12QwDAMEAMKpeQMEAsKpeAMEAMfM1wMEBcf6gAMEBdQhYAMEBdRqQAMEBNkVAAME BdlC4AMEBNlOMDANBgkqhkiG9w0BAQsFAAOCAQEAdaWuHBGK3/TgYL2Y0dMJLYb7 5ZZ3Jg/zaS1MinZDTgRdu28YiGkXetfZDvSglBipZt2fbLPH7yE5lJi5/ZazQBSw BZRxUyxmxcwop4nw0sHpudSoqVWSfkzpL0ulhu4cKcB/9P+SyO66YuVOYOrA3FEw Tvm1qUjQEzNAO41SQUOYcKMD21VU9XuobiFQIgEIF1UGOAIIHGdTYASrKBOac4JV q8f7OvcslDiEJjWXKMINxs93tt8oMpRn2oKhzdqJAHR43061HDrm8c4bBFn0FccV yzALhdXxWFrsBeQ1I5pbpS4sExkO60gn6djce9cch4CEdDZWj5nHYmebbZAXqQ== -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:19 2026 by rpki-client