This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa File: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (raw, json) Hash identifier: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE= Subject key identifier: 4B:03:82:E8:B5:91:52:77:3E:3A:06:FB:BB:7B:F1:17:FD:26:79:AE Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9 Certificate serial: 019B7F857DDF3A791E1AE1FD3E59110761A7 Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa Signing time: Fri 02 Jan 2026 16:23:33 +0000 ROA not before: Fri 02 Jan 2026 16:23:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 193.16.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:7d:df:3a:79:1e:1a:e1:fd:3e:59:11:07:61:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9 Validity Not Before: Jan 2 16:23:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b0382e8b59152773e3a06fbbb7bf117fd2679ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d7:47:12:08:1e:c8:0b:ba:65:5f:13:f9:f1: e0:15:47:37:51:23:64:82:ad:75:4d:31:9b:17:8b: 70:94:60:2f:ec:ac:ae:56:43:b7:9f:a6:96:83:df: 72:dc:f6:2a:dd:9d:3f:28:eb:ee:22:c5:4f:b2:d6: 8d:ec:cc:79:ca:a2:83:c8:7f:9f:60:ea:34:1e:f2: f5:e3:97:d1:7e:0e:c4:e2:17:c8:bd:70:a2:34:57: c5:e9:82:70:f8:d9:1d:f6:e1:e0:2f:a1:9e:9e:f9: cb:19:67:c4:e9:04:67:9f:b5:81:d3:56:39:fe:51: 9c:f0:b0:3b:7e:cf:15:9b:37:ee:af:fc:cc:17:69: 06:45:31:4a:ff:d2:f6:a2:99:6f:fe:7f:6a:77:cf: b6:74:df:ed:64:7c:ae:26:62:b2:41:d0:61:88:fc: ce:60:be:93:dd:42:58:dd:cb:bc:68:ff:cc:60:63: 21:cb:8b:ce:fe:da:ac:a7:79:93:f6:53:4a:36:ba: fd:25:16:11:af:00:ab:46:62:90:f3:62:fc:8d:c8: 53:f7:fb:bb:26:be:63:af:f9:e2:c2:5e:b0:03:f7: a8:ca:28:96:60:3b:d7:9a:50:d4:c5:39:7a:d0:55: c6:e3:9d:da:bf:e9:a1:cc:87:4f:36:3f:e5:da:08: bc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:03:82:E8:B5:91:52:77:3E:3A:06:FB:BB:7B:F1:17:FD:26:79:AE X509v3 Authority Key Identifier: keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.63.0/24 Signature Algorithm: sha256WithRSAEncryption 35:1b:c4:47:78:f2:a3:aa:db:10:fe:d0:d4:00:a1:33:39:41: 93:63:5f:12:13:83:aa:05:8d:e3:25:a3:45:cb:4d:56:87:80: 74:4e:ac:e4:02:e9:fa:60:d5:aa:9d:95:35:3c:c4:2b:03:93: e3:e5:21:e0:6e:16:2c:e3:34:e6:00:98:63:46:97:27:8a:ca: 06:27:1d:28:78:9d:b5:69:9b:03:f9:1e:6c:e7:83:de:50:bf: 0b:54:f2:b3:d9:60:90:ae:84:da:ce:46:86:cd:d1:09:ab:cb: ff:4c:a2:cd:a3:64:94:55:fd:f8:51:23:74:d8:06:cd:fc:fb: 96:c8:67:74:e7:79:78:ae:ab:83:ac:ed:b3:9f:1a:b1:09:71: 51:a3:3c:c0:f7:c1:74:f7:7b:bf:c8:5d:b7:39:05:c0:76:5b: 57:8e:eb:60:3a:b9:bc:7f:b5:c6:a9:fb:69:e9:68:72:91:c5: 2b:c8:71:7a:32:9f:1f:3a:7e:29:0b:39:64:a5:a0:69:45:90: 5d:b1:01:bf:40:74:d9:83:ef:b4:4f:f7:e0:57:3f:9b:7f:27: 73:b5:13:fd:1b:33:d4:52:fa:12:22:d8:f2:5a:5e:63:08:60: 6a:a7:5b:8a:8e:b3:20:7f:53:e6:76:de:6d:bf:31:05:90:12: 4e:f1:ca:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hX3fOnkeGuH9PlkRB2GnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDdkYTYzOTI5OTk5NjAzMzk1ODc3NDQ4Y2U1MGFjNmUw MjEzYTkwHhcNMjYwMTAyMTYyMzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjAzODJlOGI1OTE1Mjc3M2UzYTA2ZmJiYjdiZjExN2ZkMjY3OWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tdHEggeyAu6ZV8T+fHgFUc3USNk gq11TTGbF4twlGAv7KyuVkO3n6aWg99y3PYq3Z0/KOvuIsVPstaN7Mx5yqKDyH+f YOo0HvL145fRfg7E4hfIvXCiNFfF6YJw+Nkd9uHgL6GenvnLGWfE6QRnn7WB01Y5 /lGc8LA7fs8Vmzfur/zMF2kGRTFK/9L2oplv/n9qd8+2dN/tZHyuJmKyQdBhiPzO YL6T3UJY3cu8aP/MYGMhy4vO/tqsp3mT9lNKNrr9JRYRrwCrRmKQ82L8jchT9/u7 Jr5jr/niwl6wA/eoyiiWYDvXmlDUxTl60FXG453av+mhzIdPNj/l2gi8MwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEsDgui1kVJ3PjoG+7t78Rf9JnmuMB8GA1UdIwQY MBaAFHTX2mOSmZlgM5WHdEjOUKxuAhOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUt NGI1ZDVkNWY4Njk5LzEvU3dPQzZMV1JVbmMtT2diN3UzdnhGXzBtZWE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUtNGI1ZDVkNWY4Njk5 LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRA/MA0G CSqGSIb3DQEBCwUAA4IBAQA1G8RHePKjqtsQ/tDUAKEzOUGTY18SE4OqBY3jJaNF y01Wh4B0TqzkAun6YNWqnZU1PMQrA5Pj5SHgbhYs4zTmAJhjRpcnisoGJx0oeJ21 aZsD+R5s54PeUL8LVPKz2WCQroTazkaGzdEJq8v/TKLNo2SUVf34USN02AbN/PuW yGd053l4rquDrO2znxqxCXFRozzA98F093u/yF23OQXAdltXjutgOrm8f7XGqftp 6WhykcUryHF6Mp8fOn4pCzlkpaBpRZBdsQG/QHTZg++0T/fgVz+bfydztRP9GzPU UvoSItjyWl5jCGBqp1uKjrMgf1Pmdt5tvzEFkBJO8crx -----END CERTIFICATE-----Generated at Wed Jan 21 14:41:09 2026 by rpki-client