This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/SWToFRt_6tmEm6Z8-etXYlP5mtY.roa File: SWToFRt_6tmEm6Z8-etXYlP5mtY.roa (raw, json) Hash identifier: 8bPzOcUuusLs1dcrovR1xhzN3lKnr3gbUufI9urpO/s= Subject key identifier: 49:64:E8:15:1B:7F:EA:D9:84:9B:A6:7C:F9:EB:57:62:53:F9:9A:D6 Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Certificate serial: 019B7EA6B70FF826D4F2E8C74AD00A68DDCA Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/SWToFRt_6tmEm6Z8-etXYlP5mtY.roa Signing time: Fri 02 Jan 2026 12:20:13 +0000 ROA not before: Fri 02 Jan 2026 12:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209808 IP address blocks: 2a13:75c1:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b7:0f:f8:26:d4:f2:e8:c7:4a:d0:0a:68:dd:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Validity Not Before: Jan 2 12:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4964e8151b7fead9849ba67cf9eb576253f99ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:52:ec:4f:03:7e:74:af:8b:c9:06:9b:5d:da: 7a:97:a7:0b:5f:d1:d0:13:ec:85:92:d2:2b:b8:5b: 8d:e4:c2:63:fb:73:fd:49:05:70:0b:86:85:5d:df: a2:ca:bb:a3:81:96:f9:76:f1:71:f8:20:76:2d:93: 9c:ae:d2:fd:6a:2e:0c:5b:a4:73:d0:86:39:d4:af: 27:3b:7b:50:1e:52:67:12:d3:4f:41:66:ff:6f:63: e8:f9:d5:6b:62:e8:a4:aa:90:a1:be:02:15:2b:cb: ec:f4:13:ad:e6:5b:a2:49:7f:8a:21:64:4e:16:33: d4:2f:03:c3:eb:f7:8f:79:e7:0f:6e:ff:75:6b:5a: f8:f7:cf:56:43:fc:9e:8f:a1:1d:19:30:b9:e3:16: 3f:ec:89:49:b8:80:52:01:45:17:9d:37:c8:22:ee: 29:d8:17:45:6d:f7:ca:af:5f:52:2b:df:88:a4:cf: aa:44:43:86:a7:a0:d3:47:a8:85:45:dc:a8:2d:22: 1e:0e:eb:82:2c:50:62:6e:a7:1e:ef:d1:e8:b1:20: 7d:cc:51:01:e8:94:df:b1:e4:5d:b1:4b:da:60:52: f2:e5:82:a8:a8:d4:1b:a4:0b:53:85:76:5a:d5:51: 91:53:d9:e9:a4:f3:b6:eb:41:4e:48:1b:03:b2:b5: c7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:64:E8:15:1B:7F:EA:D9:84:9B:A6:7C:F9:EB:57:62:53:F9:9A:D6 X509v3 Authority Key Identifier: keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/SWToFRt_6tmEm6Z8-etXYlP5mtY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:75c1:200::/40 Signature Algorithm: sha256WithRSAEncryption 97:38:ad:ba:59:7c:b5:e9:77:54:ff:4c:fd:fa:72:bb:d2:fa: 0c:19:a2:b5:e5:1f:65:a7:a4:71:48:fd:ad:3e:d1:1d:97:4c: 94:cc:e7:55:a2:ae:d6:2b:9a:7b:bb:b2:0b:16:27:67:38:ed: a6:51:8f:53:21:a7:df:68:9c:3f:16:c7:aa:10:25:db:a7:25: 60:82:67:82:e8:64:02:f1:12:3f:3d:95:8f:41:63:ab:f3:b9: 24:cb:e2:c5:42:6b:9c:a5:41:42:fa:f7:e9:98:ee:f4:e1:2d: a6:8e:a4:3f:ea:cb:7d:e2:a8:ea:f0:aa:ac:7f:6a:cb:7c:43: 19:0c:d0:db:7a:1a:86:9c:07:03:78:f0:d1:d8:f3:2a:e1:cb: 4a:f6:47:a0:28:d7:7d:33:4d:ba:d6:29:35:41:40:1c:a4:12: 41:e3:69:2c:ef:06:2f:15:6a:8c:74:32:9e:42:03:07:d7:c4: 5b:8a:d4:ba:7a:13:d2:07:04:15:64:ca:f1:92:64:a2:8d:1e: 7b:33:bb:69:e7:91:32:5a:d4:e4:d6:ac:d9:af:b4:35:62:bb: 4b:a4:a6:de:ea:06:00:d2:8d:da:84:df:af:89:9b:73:eb:70: 2b:ae:22:79:8d:c2:82:ef:01:43:9b:6b:db:03:be:a9:64:be: 89:6a:f0:f8 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+prcP+CbU8ujHStAKaN3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNTIzN2MzOWEzMjVhYTMwOWI2OWU2NmZlMDkyMzdkYTFh ZDBkMmIwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTY0ZTgxNTFiN2ZlYWQ5ODQ5YmE2N2NmOWViNTc2MjUzZjk5YWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1LsTwN+dK+LyQabXdp6l6cLX9HQ E+yFktIruFuN5MJj+3P9SQVwC4aFXd+iyrujgZb5dvFx+CB2LZOcrtL9ai4MW6Rz 0IY51K8nO3tQHlJnEtNPQWb/b2Po+dVrYuikqpChvgIVK8vs9BOt5luiSX+KIWRO FjPULwPD6/ePeecPbv91a1r4989WQ/yej6EdGTC54xY/7IlJuIBSAUUXnTfIIu4p 2BdFbffKr19SK9+IpM+qREOGp6DTR6iFRdyoLSIeDuuCLFBibqce79HosSB9zFEB 6JTfseRdsUvaYFLy5YKoqNQbpAtThXZa1VGRU9nppPO260FOSBsDsrXHvwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFElk6BUbf+rZhJumfPnrV2JT+ZrWMB8GA1UdIwQY MBaAFKFSN8OaMlqjCbaeZv4JI32hrQ0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQt NGM5MTBhZTM3MzVkLzEvU1dUb0ZSdF82dG1FbTZaOC1ldFhZbFA1bXRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQtNGM5MTBhZTM3MzVk LzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhN1wQIw DQYJKoZIhvcNAQELBQADggEBAJc4rbpZfLXpd1T/TP36crvS+gwZorXlH2WnpHFI /a0+0R2XTJTM51WirtYrmnu7sgsWJ2c47aZRj1Mhp99onD8Wx6oQJdunJWCCZ4Lo ZALxEj89lY9BY6vzuSTL4sVCa5ylQUL69+mY7vThLaaOpD/qy33iqOrwqqx/ast8 QxkM0Nt6GoacBwN48NHY8yrhy0r2R6Ao130zTbrWKTVBQBykEkHjaSzvBi8Vaox0 Mp5CAwfXxFuK1Lp6E9IHBBVkyvGSZKKNHnszu2nnkTJa1OTWrNmvtDViu0ukpt7q BgDSjdqE36+Jm3PrcCuuInmNwoLvAUOba9sDvqlkvolq8Pg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:41 2026 by rpki-client