This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/SWXlrp_KHbpScAIrtUkbU-A97Pk.roa File: SWXlrp_KHbpScAIrtUkbU-A97Pk.roa (raw, json) Hash identifier: YhkqNCekLA3hNQEfB6zGt0cZpzbXMw8xz8SLJdFwSDc= Subject key identifier: 49:65:E5:AE:9F:CA:1D:BA:52:70:02:2B:B5:49:1B:53:E0:3D:EC:F9 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EB02AA17863C59DBAFCFCF75896973 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/SWXlrp_KHbpScAIrtUkbU-A97Pk.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216397 IP address blocks: 89.251.10.0/24 maxlen: 24 2a05:ec80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:02:aa:17:86:3c:59:db:af:cf:cf:75:89:69:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4965e5ae9fca1dba5270022bb5491b53e03decf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:39:9f:42:64:89:ab:42:19:87:d1:1e:4b: fa:bc:56:13:6c:c9:80:32:24:a3:8e:d5:b1:d0:cc: 47:02:ee:81:d0:4d:56:e4:2b:54:d1:c8:d6:5f:b5: be:c1:ea:f4:e2:ff:32:0a:df:6e:dd:92:3e:7c:b8: ff:8c:ab:e9:74:e7:2f:64:86:9d:9b:83:6b:33:f9: a9:51:fb:55:f4:ae:c3:84:e4:de:ca:d2:65:0a:70: 3b:d0:fb:d6:06:6b:14:9f:b3:85:b5:a6:64:96:9f: 89:e6:24:62:25:ec:0e:b8:63:e1:4e:d9:25:83:b6: 35:5a:da:b3:b4:2f:d0:92:13:5a:7c:dc:bb:36:47: 69:c8:f8:21:d7:34:58:c0:d1:05:2f:33:7c:9d:53: 6e:e3:b2:d5:d7:80:ee:3e:e6:d2:49:7b:c7:86:64: 87:43:89:f7:e5:ed:cc:22:43:03:c0:81:67:2d:05: 00:f2:5b:29:f6:76:e7:c0:1c:0d:29:d2:bb:3a:77: 87:aa:3f:01:4c:d2:b0:6c:94:56:ca:f8:da:f3:f7: b6:28:17:aa:e4:a8:b0:d0:9e:4d:dc:1b:1a:21:35: 2c:a9:e4:92:8e:7b:15:dd:c3:4b:1e:ec:04:da:31: af:a5:35:ae:ac:83:63:91:21:80:1d:80:4c:f3:14: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:65:E5:AE:9F:CA:1D:BA:52:70:02:2B:B5:49:1B:53:E0:3D:EC:F9 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/SWXlrp_KHbpScAIrtUkbU-A97Pk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.10.0/24 IPv6: 2a05:ec80::/48 Signature Algorithm: sha256WithRSAEncryption 09:ae:7a:4b:37:45:1d:28:b6:b5:40:9e:68:96:a4:6b:f9:98: eb:88:10:a3:fc:eb:2f:43:96:a7:26:4c:ed:fc:c9:8a:ee:97: 78:73:c2:e6:1b:9f:1b:47:90:36:8b:0d:c6:bf:0f:40:32:9f: 82:91:e3:86:49:b0:12:9a:91:b8:50:97:c9:f9:6d:a1:6e:aa: 7a:b2:9e:ed:b1:98:f9:9f:e9:98:77:ae:cb:f6:6f:5c:70:fe: d9:16:50:97:93:87:5e:dd:7d:34:0a:22:c4:e2:29:e7:85:8f: bf:f7:49:b4:10:4b:f7:08:93:39:03:95:05:64:25:e6:82:94: 02:d1:06:67:45:22:be:e2:7f:ea:b7:ab:42:65:d6:d6:fd:5e: 55:6d:8a:a0:e8:1b:9b:6e:f6:23:58:9c:91:93:a2:d2:03:46: a5:72:b3:93:1f:b2:e9:b7:b2:89:bb:06:02:e9:6c:ef:7d:ee: f9:c2:22:47:eb:2e:f6:9d:02:45:f8:61:09:9e:aa:25:38:ea: 51:61:99:c0:f1:9e:96:7d:81:8a:24:52:4e:76:b3:d1:79:5e: 1e:59:7c:5d:7b:63:bc:94:68:14:a3:9e:7b:29:24:a0:5c:9a: 36:a9:86:fa:ce:52:b6:c3:ce:08:13:70:e7:de:6a:b0:39:de: a8:8e:2d:44 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt26wKqF4Y8Wduvz891iWlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTY1ZTVhZTlmY2ExZGJhNTI3MDAyMmJiNTQ5MWI1M2UwM2RlY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A45n0JkiatCGYfRHkv6vFYTbMmA MiSjjtWx0MxHAu6B0E1W5CtU0cjWX7W+wer04v8yCt9u3ZI+fLj/jKvpdOcvZIad m4NrM/mpUftV9K7DhOTeytJlCnA70PvWBmsUn7OFtaZklp+J5iRiJewOuGPhTtkl g7Y1WtqztC/QkhNafNy7NkdpyPgh1zRYwNEFLzN8nVNu47LV14DuPubSSXvHhmSH Q4n35e3MIkMDwIFnLQUA8lsp9nbnwBwNKdK7OneHqj8BTNKwbJRWyvja8/e2KBeq 5Kiw0J5N3BsaITUsqeSSjnsV3cNLHuwE2jGvpTWurINjkSGAHYBM8xQDZQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEll5a6fyh26UnACK7VJG1PgPez5MB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvU1dYbHJwX0tIYnBTY0FJcnRVa2JVLUE5N1BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWfsKMA8E AgACMAkDBwAqBeyAAAAwDQYJKoZIhvcNAQELBQADggEBAAmueks3RR0otrVAnmiW pGv5mOuIEKP86y9DlqcmTO38yYrul3hzwuYbnxtHkDaLDca/D0Ayn4KR44ZJsBKa kbhQl8n5baFuqnqynu2xmPmf6Zh3rsv2b1xw/tkWUJeTh17dfTQKIsTiKeeFj7/3 SbQQS/cIkzkDlQVkJeaClALRBmdFIr7if+q3q0Jl1tb9XlVtiqDoG5tu9iNYnJGT otIDRqVys5Mfsum3som7BgLpbO997vnCIkfrLvadAkX4YQmeqiU46lFhmcDxnpZ9 gYokUk52s9F5Xh5ZfF17Y7yUaBSjnnspJKBcmjaphvrOUrbDzggTcOfearA53qiO LUQ= -----END CERTIFICATE-----Generated at Sun Jan 25 11:58:11 2026 by rpki-client