This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/sWwYUGN-qX4W4KsEuJ-NzSM85K4.roa File: sWwYUGN-qX4W4KsEuJ-NzSM85K4.roa (raw, json) Hash identifier: 7Ca2j50Ko1N7zY6m8PRjHntwoi86jOPRDQ4B+sSksSw= Subject key identifier: B1:6C:18:50:63:7E:A9:7E:16:E0:AB:04:B8:9F:8D:CD:23:3C:E4:AE Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Certificate serial: 019B7CEE57B7AE9EB8B8DDCE2134C18E2011 Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/sWwYUGN-qX4W4KsEuJ-NzSM85K4.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39040 IP address blocks: 194.187.88.0/22 maxlen: 22 194.187.89.0/24 maxlen: 24 2a02:388::/32 maxlen: 32 2a02:388:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:57:b7:ae:9e:b8:b8:dd:ce:21:34:c1:8e:20:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b16c1850637ea97e16e0ab04b89f8dcd233ce4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:69:cb:89:9f:d5:ac:cc:3f:0a:80:5d:2d: 56:98:b9:41:63:f7:77:7c:b7:15:f0:7f:52:c0:3f: bf:f6:4a:cb:cb:6a:a2:af:fb:60:43:31:cf:51:79: 99:8b:0f:24:9a:d7:af:5b:69:b8:43:a5:ba:01:78: 62:ee:4f:03:18:41:70:11:cf:e3:fe:bb:62:c4:2a: cd:cd:6e:d6:fd:86:46:14:03:e0:e3:83:dd:d6:72: c0:f5:3a:33:06:02:c0:02:1c:f9:d1:70:47:a5:d9: a9:f2:f2:0b:62:57:25:00:7b:0c:21:72:da:d1:46: 4d:2e:28:4a:92:5c:86:70:ed:bf:5a:72:cb:95:44: 03:dc:7f:70:ba:64:f5:9f:35:9a:e4:6e:3f:78:e4: 18:0e:25:c7:e0:b4:cc:ac:b6:49:ef:7f:99:a7:65: f0:e2:43:f6:19:cd:58:a0:ed:08:f8:39:78:61:74: e2:18:6b:68:5c:d6:8b:c0:b4:b0:9c:40:40:11:4f: 71:f2:40:51:e3:c1:55:a0:bd:58:3e:c6:5d:2a:82: 0a:e6:4d:00:ce:99:b4:9e:81:d2:9b:fe:50:59:d5: 85:3e:ce:36:69:c2:bc:98:fd:dc:9c:13:cc:40:0b: 8e:c2:95:e0:fe:7b:96:c0:93:9e:b5:e8:5c:57:84: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6C:18:50:63:7E:A9:7E:16:E0:AB:04:B8:9F:8D:CD:23:3C:E4:AE X509v3 Authority Key Identifier: keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/sWwYUGN-qX4W4KsEuJ-NzSM85K4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.187.88.0/22 IPv6: 2a02:388::/32 Signature Algorithm: sha256WithRSAEncryption 88:82:ce:77:ae:ad:66:3d:49:7f:93:19:8f:d5:5f:fa:ca:69: 29:cd:87:e3:28:3b:bd:2d:46:72:a6:47:01:54:73:6d:f6:37: ea:92:9c:88:f3:85:2f:82:b7:a6:2a:74:4b:ad:21:e2:79:61: ec:cd:07:56:29:23:e8:46:38:5e:84:ef:04:40:80:dc:59:16: f8:55:4d:d4:c4:4c:02:44:e8:18:e5:74:ee:83:4d:de:57:70: 01:0e:55:b5:d4:29:27:8f:34:8d:5c:51:d5:cd:59:fd:ef:56: 59:5e:aa:46:14:6e:25:c6:ee:97:b1:56:81:97:08:40:4f:5e: da:96:a3:66:54:85:d7:84:82:33:d0:3b:dd:59:dc:4a:4c:c7: 3b:06:95:86:0e:a5:05:83:08:ae:09:50:e7:a0:36:14:f6:e9: bd:1a:77:78:2e:5e:05:75:2e:81:d8:ef:af:8c:5a:20:94:bb: b9:e3:33:dc:23:64:24:3a:05:f6:3e:e6:63:f2:52:cf:1f:77: 42:33:19:91:ee:3b:8e:5c:db:7d:b9:4d:af:2e:00:50:f5:57: 05:0d:28:8c:a4:2d:9b:dc:61:48:03:df:56:b5:1b:53:66:41: 3e:1c:73:86:18:51:33:81:9d:b3:4a:fd:a9:bd:f3:64:98:c4: 78:3d:c8:61 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87le3rp64uN3OITTBjiARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm ZDUzYWUwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTZjMTg1MDYzN2VhOTdlMTZlMGFiMDRiODlmOGRjZDIzM2NlNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGdpy4mf1azMPwqAXS1WmLlBY/d3 fLcV8H9SwD+/9krLy2qir/tgQzHPUXmZiw8kmtevW2m4Q6W6AXhi7k8DGEFwEc/j /rtixCrNzW7W/YZGFAPg44Pd1nLA9TozBgLAAhz50XBHpdmp8vILYlclAHsMIXLa 0UZNLihKklyGcO2/WnLLlUQD3H9wumT1nzWa5G4/eOQYDiXH4LTMrLZJ73+Zp2Xw 4kP2Gc1YoO0I+Dl4YXTiGGtoXNaLwLSwnEBAEU9x8kBR48FVoL1YPsZdKoIK5k0A zpm0noHSm/5QWdWFPs42acK8mP3cnBPMQAuOwpXg/nuWwJOetehcV4R4BwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLFsGFBjfql+FuCrBLifjc0jPOSuMB8GA1UdIwQY MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt OGVlMjFiNzRkZDU2LzEvc1d3WVVHTi1xWDRXNEtzRXVKLU56U004NUs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2 LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwrtYMA0E AgACMAcDBQAqAgOIMA0GCSqGSIb3DQEBCwUAA4IBAQCIgs53rq1mPUl/kxmP1V/6 ymkpzYfjKDu9LUZypkcBVHNt9jfqkpyI84UvgremKnRLrSHieWHszQdWKSPoRjhe hO8EQIDcWRb4VU3UxEwCROgY5XTug03eV3ABDlW11CknjzSNXFHVzVn971ZZXqpG FG4lxu6XsVaBlwhAT17alqNmVIXXhIIz0DvdWdxKTMc7BpWGDqUFgwiuCVDnoDYU 9um9Gnd4Ll4FdS6B2O+vjFoglLu54zPcI2QkOgX2PuZj8lLPH3dCMxmR7juOXNt9 uU2vLgBQ9VcFDSiMpC2b3GFIA99WtRtTZkE+HHOGGFEzgZ2zSv2pvfNkmMR4Pchh -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:27 2026 by rpki-client