This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/sxw94R-8dpDBFwr_QuU2x8m1Z70.roa File: sxw94R-8dpDBFwr_QuU2x8m1Z70.roa (raw, json) Hash identifier: nGqPu9eVja8tiL5hL0aJIPFGTLc3iJ+u/5CYg63lyAY= Subject key identifier: B3:1C:3D:E1:1F:BC:76:90:C1:17:0A:FF:42:E5:36:C7:C9:B5:67:BD Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300 Certificate serial: 019B7D5C52C0626EDFAB357240FB3F7FCF7F Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/sxw94R-8dpDBFwr_QuU2x8m1Z70.roa Signing time: Fri 02 Jan 2026 06:19:21 +0000 ROA not before: Fri 02 Jan 2026 06:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207271 IP address blocks: 192.145.60.0/22 maxlen: 24 2a10:a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:52:c0:62:6e:df:ab:35:72:40:fb:3f:7f:cf:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300 Validity Not Before: Jan 2 06:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b31c3de11fbc7690c1170aff42e536c7c9b567bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7b:bf:40:ab:a4:db:0a:3d:30:a8:70:e3:00: d0:be:f3:e4:22:2d:5c:85:f8:81:e8:41:e0:99:7c: e9:91:25:d4:d7:98:d0:d0:b9:20:82:ca:c3:98:2f: b3:d4:b9:dd:e8:2a:53:5d:53:af:30:79:79:6b:cd: 82:84:2d:e5:f1:8c:8f:54:74:1e:44:93:b3:48:ee: fc:dc:01:c2:96:ae:d5:b6:da:5e:61:5a:11:4e:39: 29:20:ee:90:fb:38:6a:db:12:10:03:fb:7d:b1:6a: 2a:00:ee:5c:03:10:a3:87:5e:f8:7d:58:55:dd:de: e3:88:52:99:5b:0e:95:24:a0:9b:04:2b:9f:76:dd: 1a:b3:c1:27:96:e1:e3:f3:39:93:d5:b9:19:c9:e2: 89:35:f2:f1:69:fe:f0:e2:43:ef:d4:82:87:c5:b3: 4c:09:59:50:21:d5:3c:c4:b7:5f:36:a9:2d:9c:68: c4:d8:65:9a:2b:c5:c8:13:bf:8b:da:6c:19:69:36: aa:4b:38:c6:74:4f:4f:77:ae:b6:16:11:b0:73:eb: ac:3d:aa:ec:48:ae:04:f4:1d:02:e7:e9:6d:20:c0: fc:3a:be:da:c7:ef:13:be:e6:29:06:0e:26:00:e3: a6:f4:81:d7:2e:41:d8:a7:78:1a:ce:57:9f:ac:70: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1C:3D:E1:1F:BC:76:90:C1:17:0A:FF:42:E5:36:C7:C9:B5:67:BD X509v3 Authority Key Identifier: keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/sxw94R-8dpDBFwr_QuU2x8m1Z70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.60.0/22 IPv6: 2a10:a40::/32 Signature Algorithm: sha256WithRSAEncryption 17:8d:3c:17:17:68:bf:15:7c:8c:fb:9b:31:f1:71:8a:35:f6: fc:58:21:b2:5f:a5:a6:5d:d0:e7:23:bf:67:64:c0:20:28:be: cb:33:cb:b9:2d:2e:c9:2e:02:d4:91:99:e5:1e:35:5a:61:03: 7c:07:26:92:2f:25:a9:73:ae:c7:61:c9:b0:ac:64:20:2b:4e: e9:17:51:aa:a2:a1:53:1b:37:aa:ab:c3:f7:a2:ae:92:e1:5c: 44:2f:be:ae:e2:1a:c3:60:69:08:64:85:7f:eb:9c:bf:b4:fc: da:94:36:cd:6a:fa:3c:21:39:c9:7e:ec:82:72:c3:00:35:bc: a8:de:47:45:79:89:7d:63:91:26:3b:ac:1d:86:ec:bf:17:cf: a5:ea:55:4a:ed:04:b5:3f:cd:60:a2:ca:06:73:90:45:b4:04: 23:0a:fa:80:91:a5:be:b7:a9:7b:e6:75:4f:cc:5e:f0:70:04: 28:d2:e0:6a:0a:66:0b:00:23:ac:b8:e1:b8:4d:45:e0:d2:9f: 7c:56:25:50:1d:5d:a8:e3:64:5d:4b:9a:84:55:ba:3a:b8:0f: e7:70:3b:19:8d:d6:62:76:0e:f0:d6:eb:cd:01:c8:65:52:24: c2:b0:ef:c9:e6:05:22:6c:f4:74:95:bf:67:43:79:3a:f6:ff: 5a:b4:6d:90 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XFLAYm7fqzVyQPs/f89/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZmFkYTg3YTc2ZjI5ZjgyZTI1YTMxNzllN2EzOGNmMGM2 YjAzMDAwHhcNMjYwMTAyMDYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzFjM2RlMTFmYmM3NjkwYzExNzBhZmY0MmU1MzZjN2M5YjU2N2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXu/QKuk2wo9MKhw4wDQvvPkIi1c hfiB6EHgmXzpkSXU15jQ0LkggsrDmC+z1Lnd6CpTXVOvMHl5a82ChC3l8YyPVHQe RJOzSO783AHClq7VttpeYVoRTjkpIO6Q+zhq2xIQA/t9sWoqAO5cAxCjh174fVhV 3d7jiFKZWw6VJKCbBCufdt0as8EnluHj8zmT1bkZyeKJNfLxaf7w4kPv1IKHxbNM CVlQIdU8xLdfNqktnGjE2GWaK8XIE7+L2mwZaTaqSzjGdE9Pd662FhGwc+usPars SK4E9B0C5+ltIMD8Or7ax+8TvuYpBg4mAOOm9IHXLkHYp3gazlefrHArnwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLMcPeEfvHaQwRcK/0LlNsfJtWe9MB8GA1UdIwQY MBaAFLj62oenbyn4LiWjF556OM8MawMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVByYWg2ZHZLZmd1SmFNWG5ubzR6d3hyQXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hNTZiMmQtZjc5NS00OTVkLTljNDgt NmY2N2I2NDc3MjJkLzEvc3h3OTRSLThkcERCRndyX1F1VTJ4OG0xWjcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hNTZiMmQtZjc5NS00OTVkLTljNDgtNmY2N2I2NDc3MjJk LzEvdVByYWg2ZHZLZmd1SmFNWG5ubzR6d3hyQXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwJE8MA0E AgACMAcDBQAqEApAMA0GCSqGSIb3DQEBCwUAA4IBAQAXjTwXF2i/FXyM+5sx8XGK Nfb8WCGyX6WmXdDnI79nZMAgKL7LM8u5LS7JLgLUkZnlHjVaYQN8ByaSLyWpc67H YcmwrGQgK07pF1GqoqFTGzeqq8P3oq6S4VxEL76u4hrDYGkIZIV/65y/tPzalDbN avo8ITnJfuyCcsMANbyo3kdFeYl9Y5EmO6wdhuy/F8+l6lVK7QS1P81gosoGc5BF tAQjCvqAkaW+t6l75nVPzF7wcAQo0uBqCmYLACOsuOG4TUXg0p98ViVQHV2o42Rd S5qEVbo6uA/ncDsZjdZidg7w1uvNAchlUiTCsO/J5gUibPR0lb9nQ3k69v9atG2Q -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:18 2026 by rpki-client