This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/sw8tmXWb62c9gz1qsBrZbffyXTY.roa File: sw8tmXWb62c9gz1qsBrZbffyXTY.roa (raw, json) Hash identifier: b0ehz9drkVBnOmXweW7dtXPuDg7z70w2Le8bMJVLAGY= Subject key identifier: B3:0F:2D:99:75:9B:EB:67:3D:83:3D:6A:B0:1A:D9:6D:F7:F2:5D:36 Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8 Certificate serial: 019B797EC06DAFC8760E10799693020F296A Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/sw8tmXWb62c9gz1qsBrZbffyXTY.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202516 IP address blocks: 193.58.164.0/22 maxlen: 22 2a0c:9540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c0:6d:af:c8:76:0e:10:79:96:93:02:0f:29:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8 Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b30f2d99759beb673d833d6ab01ad96df7f25d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:a7:fe:31:dc:33:c4:dc:0d:71:ef:d9:00: 9b:3b:50:94:0b:b2:82:83:e5:5d:0e:45:91:da:45: ef:c2:d7:ea:e5:08:13:4d:43:64:ca:d7:c5:eb:b5: 80:03:8d:60:94:ad:cf:fc:5c:66:c7:be:6c:c9:37: 39:55:fa:2a:39:9c:63:30:ce:56:4f:58:73:fb:6d: 2a:ac:da:39:4f:f2:fc:34:99:e0:24:3c:da:a6:89: 2e:f4:dd:78:51:62:56:03:02:8e:20:35:f3:79:1c: 19:ba:ac:51:0c:15:f1:c5:ff:86:07:61:96:9a:fe: e7:2a:d7:cc:4e:ef:7d:b1:68:5f:1c:b9:14:85:16: ed:15:c3:c1:ec:68:82:8d:de:dc:fa:2e:e5:3e:c8: 73:c9:9a:6c:7c:cd:aa:00:6c:5a:3e:97:0d:93:48: 09:a1:a6:c8:68:14:60:0e:15:2a:f2:ac:e0:c1:1c: 9c:d7:68:7e:cd:6d:15:c4:ec:1d:e9:f7:c0:16:fb: 35:40:73:72:80:39:67:67:79:ae:a6:3e:8d:71:05: 90:51:f6:a1:61:ad:66:52:37:d5:bd:7e:86:ea:66: 61:e8:a0:1e:a3:23:79:a1:25:7b:df:b5:11:43:6e: d7:92:b3:f6:03:56:6b:a6:ac:56:2a:40:81:f4:fe: c5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0F:2D:99:75:9B:EB:67:3D:83:3D:6A:B0:1A:D9:6D:F7:F2:5D:36 X509v3 Authority Key Identifier: keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/sw8tmXWb62c9gz1qsBrZbffyXTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.58.164.0/22 IPv6: 2a0c:9540::/32 Signature Algorithm: sha256WithRSAEncryption 64:39:92:9f:fb:bc:ea:93:cb:63:96:e7:2f:c3:73:4d:1e:93: 68:1c:42:cc:e3:80:79:ef:35:83:d0:d8:fa:bd:8e:dd:2e:0c: 3d:8d:c3:05:73:8a:bd:6b:b4:0a:ca:91:e9:70:10:da:80:72: 48:2d:d8:ce:61:25:fe:c3:3f:6a:c2:0e:08:e9:84:82:1e:71: fe:27:f9:f6:a4:39:96:5a:eb:a5:e5:f4:49:35:9d:d5:3e:e2: 2c:b8:35:6c:3a:03:d6:8f:22:53:a9:ff:4e:7b:5a:4c:87:22: 5c:69:f1:5c:7b:6b:fd:c3:be:95:f0:9b:8d:f0:cb:c3:6a:3d: 33:e0:e9:dc:c3:83:b0:22:46:de:c1:59:d5:cb:14:14:21:2a: a7:75:28:60:cf:24:a8:2b:ad:3d:cc:11:16:f4:11:d3:a2:60: 41:84:d0:c0:f1:04:c7:41:f2:13:d7:1f:15:73:49:7b:af:be: 72:86:1c:03:12:67:98:0e:19:46:84:bb:71:f0:1a:23:08:f0: e8:d5:bd:06:61:08:c2:c6:de:7c:66:40:d6:1c:d3:a5:af:26: 50:99:6f:48:9d:c4:c9:af:bc:60:6f:9a:54:d7:c0:00:5b:d3: c0:72:e2:86:bc:79:1d:09:20:53:b4:d3:d2:03:e8:2b:36:f0: ad:ca:c2:30 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fsBtr8h2DhB5lpMCDylqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNWE5ZjY5ZmUwNzk3ZTA4M2I1MTYyODFjYWIzZjBiYTY1 ZTJlYTgwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzBmMmQ5OTc1OWJlYjY3M2Q4MzNkNmFiMDFhZDk2ZGY3ZjI1ZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFyn/jHcM8TcDXHv2QCbO1CUC7KC g+VdDkWR2kXvwtfq5QgTTUNkytfF67WAA41glK3P/Fxmx75syTc5VfoqOZxjMM5W T1hz+20qrNo5T/L8NJngJDzapoku9N14UWJWAwKOIDXzeRwZuqxRDBXxxf+GB2GW mv7nKtfMTu99sWhfHLkUhRbtFcPB7GiCjd7c+i7lPshzyZpsfM2qAGxaPpcNk0gJ oabIaBRgDhUq8qzgwRyc12h+zW0VxOwd6ffAFvs1QHNygDlnZ3mupj6NcQWQUfah Ya1mUjfVvX6G6mZh6KAeoyN5oSV737URQ27XkrP2A1ZrpqxWKkCB9P7FTwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLMPLZl1m+tnPYM9arAa2W338l02MB8GA1UdIwQY MBaAFGJan2n+B5fgg7UWKByrPwumXi6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWxxZmFmNEhsLUNEdFJZb0hLc19DNlplTHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82M2I2YWUtZDRmNS00OTQ2LWJiZjUt YjEzM2U2ZTZmYTg1LzEvc3c4dG1YV2I2MmM5Z3oxcXNCclpiZmZ5WFRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82M2I2YWUtZDRmNS00OTQ2LWJiZjUtYjEzM2U2ZTZmYTg1 LzEvWWxxZmFmNEhsLUNEdFJZb0hLc19DNlplTHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwTqkMA0E AgACMAcDBQAqDJVAMA0GCSqGSIb3DQEBCwUAA4IBAQBkOZKf+7zqk8tjlucvw3NN HpNoHELM44B57zWD0Nj6vY7dLgw9jcMFc4q9a7QKypHpcBDagHJILdjOYSX+wz9q wg4I6YSCHnH+J/n2pDmWWuul5fRJNZ3VPuIsuDVsOgPWjyJTqf9Oe1pMhyJcafFc e2v9w76V8JuN8MvDaj0z4Oncw4OwIkbewVnVyxQUISqndShgzySoK609zBEW9BHT omBBhNDA8QTHQfIT1x8Vc0l7r75yhhwDEmeYDhlGhLtx8BojCPDo1b0GYQjCxt58 ZkDWHNOlryZQmW9IncTJr7xgb5pU18AAW9PAcuKGvHkdCSBTtNPSA+grNvCtysIw -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:50 2026 by rpki-client