This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/Sw3TBAZfbT7g9hIziOAVbID_LK0.roa File: Sw3TBAZfbT7g9hIziOAVbID_LK0.roa (raw, json) Hash identifier: GcVNx3s7JTViQrTy69Sa/cOemh0RTv4+/HNRQpVhgG8= Subject key identifier: 4B:0D:D3:04:06:5F:6D:3E:E0:F6:12:33:88:E0:15:6C:80:FF:2C:AD Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 019B7CEE4AC5DCEF9E662EF03B9567F0F086 Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/Sw3TBAZfbT7g9hIziOAVbID_LK0.roa Signing time: Fri 02 Jan 2026 04:19:10 +0000 ROA not before: Fri 02 Jan 2026 04:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52756 IP address blocks: 149.226.240.0/24 maxlen: 24 149.226.241.0/24 maxlen: 24 149.226.242.0/24 maxlen: 24 149.226.243.0/24 maxlen: 24 192.48.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4a:c5:dc:ef:9e:66:2e:f0:3b:95:67:f0:f0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b0dd304065f6d3ee0f6123388e0156c80ff2cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:92:4a:3b:18:0e:c1:58:30:55:a4:47:1f: 38:e2:1a:81:c9:2b:ca:11:95:72:7f:50:eb:96:66: 34:5a:5d:65:de:bc:6c:39:a5:2f:22:de:8c:e8:e4: ee:6c:b6:70:76:e8:84:c2:f9:d1:17:33:7c:c0:3b: 88:d4:8f:6a:8f:da:54:33:0d:75:f5:a0:8f:88:a3: c2:c3:e2:37:e6:4b:28:b2:09:95:09:c2:3d:6d:ad: 9e:ab:1e:e0:6a:75:00:ee:73:14:12:4f:79:34:4a: 5e:f2:13:98:3d:ef:cd:60:53:09:4c:d1:e6:d9:76: 6f:73:40:9d:0f:1b:71:75:0a:a1:02:ad:7b:91:c5: b2:7e:a2:8b:c3:f7:b3:3a:5d:be:ef:cf:8b:43:cd: e1:3e:28:b0:4f:e7:79:3b:f8:45:19:22:1e:cc:69: b2:bd:37:99:cd:00:4e:45:0c:86:a0:51:b8:18:45: 2b:62:88:63:51:4d:93:1a:b4:50:07:e6:09:2d:cf: 54:57:0e:cf:2d:0f:08:22:da:0a:60:77:af:27:21: 4f:51:a4:9a:70:be:31:67:56:b4:7c:b0:9a:03:71: b2:1c:f9:4b:95:b0:6f:1e:fd:98:6a:6f:99:2b:ab: 4a:ce:47:40:24:16:1f:c2:6f:3c:a4:be:2d:29:48: 06:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0D:D3:04:06:5F:6D:3E:E0:F6:12:33:88:E0:15:6C:80:FF:2C:AD X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/Sw3TBAZfbT7g9hIziOAVbID_LK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.226.240.0/22 192.48.31.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:df:51:68:cf:96:a7:de:48:c9:3b:ab:28:93:65:53:90:6f: 12:0c:c3:4e:de:ab:71:4c:c9:2e:3a:77:f9:8c:d2:d7:58:d4: fb:d9:79:10:30:fd:dc:fe:ce:4c:21:cf:18:8c:d6:7f:de:57: b3:05:09:b0:82:87:11:47:37:b1:ab:5b:68:ea:37:fc:2b:96: f3:63:ad:d6:a4:58:f6:88:01:42:36:54:8b:d2:67:e1:7a:6e: eb:82:82:a8:1b:85:23:53:a2:f3:87:df:d2:93:8b:a5:78:07: 6f:4e:c6:4c:b0:23:7a:53:ac:d9:12:12:d6:47:15:ab:cc:3b: c1:5b:cd:4d:66:14:52:47:0e:50:3d:6e:e2:25:e1:ed:90:1b: f7:2c:15:b2:3a:02:99:ae:13:4b:c9:1e:81:33:25:c8:9b:67: ad:a0:22:f9:a6:17:aa:c2:ac:52:c8:8d:ae:ab:86:25:33:7f: 96:3c:3d:3a:42:7e:b2:4e:cb:08:cb:ae:90:48:e3:92:d1:ba: bd:96:ef:09:28:6d:41:5e:bf:6b:82:59:8d:3f:63:88:c4:43: 42:5f:bc:2b:e4:3a:a9:16:92:c5:48:c9:d7:a9:c1:06:e6:4e: a1:90:89:40:a3:0a:74:35:24:ff:70:d0:43:86:90:bf:de:4a: c1:4d:83:ed -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87krF3O+eZi7wO5Vn8PCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjBkZDMwNDA2NWY2ZDNlZTBmNjEyMzM4OGUwMTU2YzgwZmYyY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrySSjsYDsFYMFWkRx844hqBySvK EZVyf1DrlmY0Wl1l3rxsOaUvIt6M6OTubLZwduiEwvnRFzN8wDuI1I9qj9pUMw11 9aCPiKPCw+I35ksosgmVCcI9ba2eqx7ganUA7nMUEk95NEpe8hOYPe/NYFMJTNHm 2XZvc0CdDxtxdQqhAq17kcWyfqKLw/ezOl2+78+LQ83hPiiwT+d5O/hFGSIezGmy vTeZzQBORQyGoFG4GEUrYohjUU2TGrRQB+YJLc9UVw7PLQ8IItoKYHevJyFPUaSa cL4xZ1a0fLCaA3GyHPlLlbBvHv2Yam+ZK6tKzkdAJBYfwm88pL4tKUgGZQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEsN0wQGX20+4PYSM4jgFWyA/yytMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvU3czVEJBWmZiVDdnOWhJemlPQVZiSURfTEswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCleLwAwQA wDAfMA0GCSqGSIb3DQEBCwUAA4IBAQBa31Foz5an3kjJO6sok2VTkG8SDMNO3qtx TMkuOnf5jNLXWNT72XkQMP3c/s5MIc8YjNZ/3lezBQmwgocRRzexq1to6jf8K5bz Y63WpFj2iAFCNlSL0mfhem7rgoKoG4UjU6Lzh9/Sk4uleAdvTsZMsCN6U6zZEhLW RxWrzDvBW81NZhRSRw5QPW7iJeHtkBv3LBWyOgKZrhNLyR6BMyXIm2etoCL5pheq wqxSyI2uq4YlM3+WPD06Qn6yTssIy66QSOOS0bq9lu8JKG1BXr9rglmNP2OIxENC X7wr5DqpFpLFSMnXqcEG5k6hkIlAowp0NST/cNBDhpC/3krBTYPt -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:05 2026 by rpki-client