This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/SPId_SWHbv84MaBpzxcBFitrFiA.roa File: SPId_SWHbv84MaBpzxcBFitrFiA.roa (raw, json) Hash identifier: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg= Subject key identifier: 48:F2:1D:FD:25:87:6E:FF:38:31:A0:69:CF:17:01:16:2B:6B:16:20 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B7F83977A1D26F7E24B7861AD0B181D47 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/SPId_SWHbv84MaBpzxcBFitrFiA.roa Signing time: Fri 02 Jan 2026 16:21:28 +0000 ROA not before: Fri 02 Jan 2026 16:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 146961 IP address blocks: 194.53.201.0/24 maxlen: 24 194.53.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:97:7a:1d:26:f7:e2:4b:78:61:ad:0b:18:1d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jan 2 16:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48f21dfd25876eff3831a069cf1701162b6b1620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:7a:fb:bd:67:89:dd:f4:a5:20:dc:3b:f4: 9b:aa:ff:1f:ae:2b:a0:19:67:ad:f9:65:2c:b1:69: a8:e2:5a:f5:0d:4e:f3:e6:ed:8e:48:dc:5f:1b:d1: f6:f2:b4:7d:d8:f5:d0:3e:e5:a1:75:69:8a:70:ff: c2:63:11:92:69:40:7c:f9:b3:11:6d:1e:ae:f7:f9: c7:e2:9b:88:4c:39:2e:39:60:71:83:46:aa:a8:62: a5:9e:a0:cd:aa:87:a1:df:6c:65:97:be:95:42:74: 0e:2b:e5:b7:c4:54:6e:9a:b4:82:96:3a:1e:13:b4: 5d:21:e4:fc:ba:1e:21:c7:2f:3f:39:ca:24:43:90: b3:ee:36:32:d0:73:22:3b:c4:8c:f3:02:dc:08:35: 5a:7e:a2:7a:93:30:cb:bc:21:e5:e5:c4:dc:18:5f: 32:e2:c5:2f:bb:9c:c5:0b:2c:d4:59:c4:1b:d6:a7: 06:a6:d1:d9:8c:1f:5d:50:72:95:35:9a:8e:bf:f8: 8b:cf:e3:0f:52:7d:ec:d5:bf:25:91:11:eb:be:1f: 30:cf:c0:b1:14:92:fc:ba:4c:34:0f:66:33:b2:8a: a7:81:41:8a:b2:b7:5c:8f:a3:15:00:0a:2d:7b:46: 87:d4:ac:1d:3f:51:91:75:3e:e8:99:0a:02:6a:65: 11:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F2:1D:FD:25:87:6E:FF:38:31:A0:69:CF:17:01:16:2B:6B:16:20 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/SPId_SWHbv84MaBpzxcBFitrFiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.201.0-194.53.202.255 Signature Algorithm: sha256WithRSAEncryption 2f:eb:40:e6:ee:d8:a8:f8:54:7d:a0:90:27:08:78:30:96:d9: 9d:3a:65:fc:a5:6b:dc:0e:b3:76:bd:30:05:ce:ed:d3:11:9d: f2:3d:af:6a:44:74:28:70:35:37:40:2b:34:33:b7:74:90:5e: 32:b8:60:28:f5:3b:81:cc:ad:0e:73:44:98:9d:2b:cd:5d:33: 85:e9:86:c2:93:f1:4e:b1:b3:8f:25:58:2a:1b:06:a5:2a:04: c1:3b:35:c6:d0:f3:3b:0c:1a:1e:04:37:85:74:bd:52:5a:9d: c0:af:ac:f7:51:93:83:1d:be:ad:6e:63:9c:f2:f6:a3:f1:b1: 02:a7:ab:43:3a:94:58:fa:2d:46:e0:8d:4e:65:7b:32:b1:94: bd:87:96:6d:5c:55:3a:b7:f9:16:da:b5:f6:e6:39:62:7a:59: 21:20:74:a9:95:f9:38:74:6d:08:b3:92:8d:3b:ef:1f:f8:c3: 6f:cd:ce:e2:ca:15:ac:21:1c:d1:db:c4:82:c4:dc:d0:ab:ff: ad:f9:25:1d:98:7e:7a:57:e8:e8:02:58:a3:46:88:2d:c1:1f: e5:ca:4d:6c:47:95:6a:f2:6c:c5:c7:c4:23:15:7a:d5:7f:80: 0b:42:9b:c6:66:53:50:52:5d:10:4a:74:bc:8a:a0:b7:a5:92: 39:50:74:82 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/g5d6HSb34kt4Ya0LGB1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMTAyMTYyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGYyMWRmZDI1ODc2ZWZmMzgzMWEwNjljZjE3MDExNjJiNmIxNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9h6+71nid30pSDcO/Sbqv8friug GWet+WUssWmo4lr1DU7z5u2OSNxfG9H28rR92PXQPuWhdWmKcP/CYxGSaUB8+bMR bR6u9/nH4puITDkuOWBxg0aqqGKlnqDNqoeh32xll76VQnQOK+W3xFRumrSCljoe E7RdIeT8uh4hxy8/OcokQ5Cz7jYy0HMiO8SM8wLcCDVafqJ6kzDLvCHl5cTcGF8y 4sUvu5zFCyzUWcQb1qcGptHZjB9dUHKVNZqOv/iLz+MPUn3s1b8lkRHrvh8wz8Cx FJL8ukw0D2YzsoqngUGKsrdcj6MVAAote0aH1KwdP1GRdT7omQoCamURJwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEjyHf0lh27/ODGgac8XARYraxYgMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvU1BJZF9TV0hidjg0TWFCcHp4Y0JGaXRyRmlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCNckD BADCNcowDQYJKoZIhvcNAQELBQADggEBAC/rQObu2Kj4VH2gkCcIeDCW2Z06Zfyl a9wOs3a9MAXO7dMRnfI9r2pEdChwNTdAKzQzt3SQXjK4YCj1O4HMrQ5zRJidK81d M4XphsKT8U6xs48lWCobBqUqBME7NcbQ8zsMGh4EN4V0vVJancCvrPdRk4Mdvq1u Y5zy9qPxsQKnq0M6lFj6LUbgjU5lezKxlL2Hlm1cVTq3+RbatfbmOWJ6WSEgdKmV +Th0bQizko077x/4w2/NzuLKFawhHNHbxILE3NCr/635JR2YfnpX6OgCWKNGiC3B H+XKTWxHlWrybMXHxCMVetV/gAtCm8ZmU1BSXRBKdLyKoLelkjlQdII= -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:39 2026 by rpki-client