This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/SvwSo6WRjOoGhM5BcNP9E7M7iDQ.roa File: SvwSo6WRjOoGhM5BcNP9E7M7iDQ.roa (raw, json) Hash identifier: 8h6EiTcPQ+f6ADvauTqpBDw5pOHgH7YO/aoHwMnqpio= Subject key identifier: 4A:FC:12:A3:A5:91:8C:EA:06:84:CE:41:70:D3:FD:13:B3:3B:88:34 Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019B7BA3B0375EA8732384FFB58513D5F336 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/SvwSo6WRjOoGhM5BcNP9E7M7iDQ.roa Signing time: Thu 01 Jan 2026 22:18:03 +0000 ROA not before: Thu 01 Jan 2026 22:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137427 IP address blocks: 2.59.152.0/22 maxlen: 22 2.59.153.0/24 maxlen: 24 45.91.224.0/22 maxlen: 22 45.91.225.0/24 maxlen: 24 45.91.226.0/24 maxlen: 24 45.91.227.0/24 maxlen: 24 45.142.152.0/22 maxlen: 22 91.204.224.0/22 maxlen: 22 91.204.224.0/24 maxlen: 24 91.204.225.0/24 maxlen: 24 91.204.226.0/24 maxlen: 24 91.204.227.0/24 maxlen: 24 185.202.100.0/22 maxlen: 22 185.202.101.0/24 maxlen: 24 193.239.150.0/23 maxlen: 23 193.239.150.0/24 maxlen: 24 193.239.151.0/24 maxlen: 24 193.239.154.0/23 maxlen: 23 193.239.154.0/24 maxlen: 24 194.126.215.0/24 maxlen: 24 194.126.219.0/24 maxlen: 24 194.126.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b0:37:5e:a8:73:23:84:ff:b5:85:13:d5:f3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jan 1 22:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4afc12a3a5918cea0684ce4170d3fd13b33b8834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:b7:ff:1c:7e:6a:b9:63:87:cc:cf:1f:a7: e2:9e:24:e2:3a:3f:e7:cb:d2:51:a0:75:81:67:65: 1b:3c:04:ea:2b:fd:08:2e:ea:be:3d:b7:1d:56:b7: dc:03:68:fd:10:09:f2:69:45:99:2e:d3:15:89:ed: cf:98:de:df:05:14:1a:3b:e3:d3:5a:47:f6:54:b0: 46:28:2f:6d:a1:27:09:ca:96:e1:9a:4d:ef:63:a1: 7a:1b:85:91:05:d6:53:bd:63:49:7f:1d:28:5c:b8: 0c:dc:67:d7:a3:dd:26:79:55:67:db:8e:c8:55:99: 9b:a6:ef:0a:a0:8f:3d:e4:68:f9:da:4e:c0:b4:6a: 26:76:5d:2f:46:1b:e2:d9:f7:79:d0:ec:c1:67:7a: fe:8e:a8:57:12:b9:f3:a1:0a:62:69:de:68:c9:3f: ff:a4:37:64:a6:4b:5a:e5:d5:5f:e0:1b:b6:59:79: 9d:a9:c6:46:92:d9:ad:b4:fb:6b:3d:5a:ca:78:cb: 2f:d5:9c:43:f9:70:7c:c2:9d:47:d6:f4:8e:b9:5c: 7e:fe:c1:84:e8:6c:d0:bb:98:bc:36:b1:aa:9c:7e: 0d:dc:33:7a:11:c4:0e:5a:5e:43:62:1b:20:90:04: 93:b3:b0:7e:3b:0f:49:82:e6:8c:2c:7f:ca:d8:f3: 79:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FC:12:A3:A5:91:8C:EA:06:84:CE:41:70:D3:FD:13:B3:3B:88:34 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/SvwSo6WRjOoGhM5BcNP9E7M7iDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.152.0/22 45.91.224.0/22 45.142.152.0/22 91.204.224.0/22 185.202.100.0/22 193.239.150.0/23 193.239.154.0/23 194.126.215.0/24 194.126.219.0/24 194.126.227.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:05:7b:de:86:c3:f6:43:87:80:36:00:5b:e5:15:14:44:30: d3:95:c1:a1:cb:7f:04:e5:9d:2d:11:13:f1:55:fa:30:58:9a: 28:64:c4:1c:da:50:e2:c8:b8:ae:26:ae:13:fe:d6:26:6b:5a: 6c:5a:5b:73:69:20:c5:d2:2e:07:29:e2:fe:af:ff:06:8e:67: e6:10:21:11:bb:fc:92:b8:8c:f6:30:04:61:c3:6a:a3:76:3e: 6f:7f:0a:1a:fb:f7:9c:59:90:b4:a4:8f:50:d2:45:4e:0f:41: 09:bf:d9:cd:b0:ab:54:e2:90:5d:12:a5:a7:d8:f5:ed:63:b9: 9b:40:af:a9:1c:c3:9a:23:c8:02:72:ba:cb:f7:8e:e5:a8:e5: 19:b0:3d:cd:84:87:b4:2b:39:4b:d0:ae:a8:b8:d8:2e:db:e2: 87:e8:00:f7:4a:c7:01:b6:db:80:23:c7:71:24:9d:1c:81:6c: 0f:46:16:26:1f:67:22:15:6e:19:18:3c:60:df:17:d0:ff:05: a1:10:95:5b:6c:dc:17:26:ee:83:b5:85:e8:fc:64:54:3a:12: cb:cc:b2:03:28:a2:19:8a:95:40:b7:c0:57:17:46:25:6e:53: 48:b3:25:31:b0:c2:ba:60:ef:ec:7e:5b:d9:6c:95:e6:4b:32: 82:b3:9c:e1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt7o7A3XqhzI4T/tYUT1fM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwMTAxMjIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWZjMTJhM2E1OTE4Y2VhMDY4NGNlNDE3MGQzZmQxM2IzM2I4ODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte63/xx+arljh8zPH6finiTiOj/n y9JRoHWBZ2UbPATqK/0ILuq+PbcdVrfcA2j9EAnyaUWZLtMVie3PmN7fBRQaO+PT Wkf2VLBGKC9toScJypbhmk3vY6F6G4WRBdZTvWNJfx0oXLgM3GfXo90meVVn247I VZmbpu8KoI895Gj52k7AtGomdl0vRhvi2fd50OzBZ3r+jqhXErnzoQpiad5oyT// pDdkpkta5dVf4Bu2WXmdqcZGktmttPtrPVrKeMsv1ZxD+XB8wp1H1vSOuVx+/sGE 6GzQu5i8NrGqnH4N3DN6EcQOWl5DYhsgkASTs7B+Ow9JguaMLH/K2PN5EQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFEr8EqOlkYzqBoTOQXDT/ROzO4g0MB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvU3Z3U282V1JqT29HaE01QmNOUDlFN003aURRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCAjuYAwQC LVvgAwQCLY6YAwQCW8zgAwQCucpkAwQBwe+WAwQBwe+aAwQAwn7XAwQAwn7bAwQA wn7jMA0GCSqGSIb3DQEBCwUAA4IBAQBLBXvehsP2Q4eANgBb5RUURDDTlcGhy38E 5Z0tERPxVfowWJooZMQc2lDiyLiuJq4T/tYma1psWltzaSDF0i4HKeL+r/8Gjmfm ECERu/ySuIz2MARhw2qjdj5vfwoa+/ecWZC0pI9Q0kVOD0EJv9nNsKtU4pBdEqWn 2PXtY7mbQK+pHMOaI8gCcrrL947lqOUZsD3NhIe0KzlL0K6ouNgu2+KH6AD3SscB ttuAI8dxJJ0cgWwPRhYmH2ciFW4ZGDxg3xfQ/wWhEJVbbNwXJu6DtYXo/GRUOhLL zLIDKKIZipVAt8BXF0YlblNIsyUxsMK6YO/sflvZbJXmSzKCs5zh -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:19 2026 by rpki-client