This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa File: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (raw, json) Hash identifier: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M= Subject key identifier: 49:64:6A:FE:99:7D:60:4D:D5:99:EA:77:4B:3F:9B:1D:BC:E3:7A:75 Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Certificate serial: 019B7F15FF6881C3E89DEC731BA549A438EE Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa Signing time: Fri 02 Jan 2026 14:21:46 +0000 ROA not before: Fri 02 Jan 2026 14:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59854 IP address blocks: 77.81.164.0/23 maxlen: 23 89.35.173.0/24 maxlen: 24 93.119.227.0/24 maxlen: 24 128.0.46.0/23 maxlen: 23 185.171.184.0/24 maxlen: 24 185.171.185.0/24 maxlen: 24 185.171.187.0/24 maxlen: 24 188.214.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ff:68:81:c3:e8:9d:ec:73:1b:a5:49:a4:38:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Validity Not Before: Jan 2 14:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49646afe997d604dd599ea774b3f9b1dbce37a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:67:89:df:5f:1f:c6:30:46:4d:88:32:3f:e9: 97:4f:91:ff:36:ed:fb:48:e5:7d:8d:01:dc:79:e1: ab:01:30:56:13:a8:88:a5:6e:8d:52:81:c4:02:b9: 62:cf:c9:c9:2b:1c:4e:e7:a7:fb:ae:ef:d1:38:70: f5:9f:d9:f2:37:e4:36:9a:78:c0:0b:98:39:14:2c: 9f:73:90:45:ac:ab:ca:fc:09:9e:43:2d:ef:58:d0: 82:cb:7d:d8:a8:52:d4:0c:b5:f7:ba:46:98:54:b9: f6:70:f6:e4:66:99:f3:2e:90:5e:43:0b:ae:3a:89: 41:ca:d8:9b:de:a4:f6:22:09:55:02:c9:84:56:3e: ec:e2:7a:c9:cd:ff:13:a8:8b:5b:fb:b7:43:a0:11: b5:65:8d:d0:01:c5:26:4f:c0:65:57:ec:34:98:33: e4:51:3f:c3:73:96:c7:7a:22:9c:64:ba:42:22:be: e6:3a:2f:6e:75:c3:e1:b5:f8:c4:6e:9a:70:15:15: a7:cf:c3:a0:8c:23:cb:da:d3:cc:62:fd:da:b7:be: 37:7d:ca:67:54:73:07:83:67:3f:32:48:49:1e:df: 3d:03:96:6e:c3:0c:a3:1f:75:a5:b8:c0:62:f0:b2: 2e:dd:e3:f2:85:f6:dc:12:b2:e9:fd:26:e0:a0:03: 72:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:64:6A:FE:99:7D:60:4D:D5:99:EA:77:4B:3F:9B:1D:BC:E3:7A:75 X509v3 Authority Key Identifier: keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.164.0/23 89.35.173.0/24 93.119.227.0/24 128.0.46.0/23 185.171.184.0/23 185.171.187.0/24 188.214.142.0/24 Signature Algorithm: sha256WithRSAEncryption 37:a7:79:f1:ef:e5:76:f0:72:12:6d:28:4a:4d:b4:cf:11:f2: 44:b8:34:52:63:95:bc:91:c6:b6:1b:21:b2:e9:74:d5:f5:3c: 48:e8:96:dd:a1:6c:54:5c:8f:47:83:7a:a8:5d:0f:9d:7d:85: bd:a2:85:c5:9c:8b:28:c4:16:c7:8a:0f:71:da:21:08:bc:54: d1:81:07:b4:ee:f3:b3:8b:c3:d3:47:f7:d8:ae:79:5b:ba:a2: b2:63:be:07:79:7a:9e:ca:ca:2e:cf:ac:a5:8b:cb:5b:44:7a: 5e:a2:e2:c2:b6:86:6c:a1:97:39:cc:14:80:b8:fd:69:a4:0d: bf:c3:9c:54:28:15:47:49:ba:7f:e7:88:a3:a6:ef:cc:79:02: d8:07:98:3e:b0:3f:81:6f:10:ff:20:5e:44:db:79:4e:a6:d1: 4e:c1:af:4d:61:2a:54:ce:87:ad:e1:f0:c3:0b:fa:59:db:9f: 8b:b3:72:d1:df:76:ce:54:a7:99:b0:78:67:e8:db:e4:73:9f: 7e:7f:5d:05:05:28:28:1f:ab:e7:12:80:34:98:f7:2f:38:f5: ba:db:36:be:70:91:40:28:b1:3d:e7:2c:ea:29:25:8e:42:c7: b8:3f:1d:cd:58:f6:ae:25:a8:4c:46:6f:fc:04:9f:11:56:d7: 59:25:16:6f -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/Ff9ogcPonexzG6VJpDjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz ZWY0NmUwHhcNMjYwMTAyMTQyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTY0NmFmZTk5N2Q2MDRkZDU5OWVhNzc0YjNmOWIxZGJjZTM3YTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WeJ318fxjBGTYgyP+mXT5H/Nu37 SOV9jQHceeGrATBWE6iIpW6NUoHEArliz8nJKxxO56f7ru/ROHD1n9nyN+Q2mnjA C5g5FCyfc5BFrKvK/AmeQy3vWNCCy33YqFLUDLX3ukaYVLn2cPbkZpnzLpBeQwuu OolBytib3qT2IglVAsmEVj7s4nrJzf8TqItb+7dDoBG1ZY3QAcUmT8BlV+w0mDPk UT/Dc5bHeiKcZLpCIr7mOi9udcPhtfjEbppwFRWnz8OgjCPL2tPMYv3at743fcpn VHMHg2c/MkhJHt89A5ZuwwyjH3WluMBi8LIu3ePyhfbcErLp/SbgoANyUQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFElkav6ZfWBN1Znqd0s/mx2843p1MB8GA1UdIwQY MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt Yjk1YjA4YTIzYWUxLzEvU1dScV9wbDlZRTNWbWVwM1N6LWJIYnpqZW5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBTVGkAwQA WSOtAwQAXXfjAwQBgAAuAwQBuau4AwQAuau7AwQAvNaOMA0GCSqGSIb3DQEBCwUA A4IBAQA3p3nx7+V28HISbShKTbTPEfJEuDRSY5W8kca2GyGy6XTV9TxI6JbdoWxU XI9Hg3qoXQ+dfYW9ooXFnIsoxBbHig9x2iEIvFTRgQe07vOzi8PTR/fYrnlbuqKy Y74HeXqeysouz6yli8tbRHpeouLCtoZsoZc5zBSAuP1ppA2/w5xUKBVHSbp/54ij pu/MeQLYB5g+sD+BbxD/IF5E23lOptFOwa9NYSpUzoet4fDDC/pZ25+Ls3LR33bO VKeZsHhn6Nvkc59+f10FBSgoH6vnEoA0mPcvOPW62za+cJFAKLE95yzqKSWOQse4 Px3NWPauJahMRm/8BJ8RVtdZJRZv -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:59 2026 by rpki-client