This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/_Swl5gHDR66TZCO_pkS1vQ9SqpA.roa File: _Swl5gHDR66TZCO_pkS1vQ9SqpA.roa (raw, json) Hash identifier: 3hG7Kqg7tej55cxB4vcGvkTLY6M+LbT5b2wG9YFhS4E= Subject key identifier: FD:2C:25:E6:01:C3:47:AE:93:64:23:BF:A6:44:B5:BD:0F:52:AA:90 Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Certificate serial: 019B7D5CBF80155FDA11B2E5F864BC324256 Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/_Swl5gHDR66TZCO_pkS1vQ9SqpA.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15594 IP address blocks: 82.116.96.0/19 maxlen: 25 95.174.128.0/19 maxlen: 25 212.9.32.0/19 maxlen: 25 217.10.64.0/20 maxlen: 25 217.116.112.0/20 maxlen: 25 2001:ab0::/29 maxlen: 48 2001:ab0::/36 maxlen: 49 2001:ab7::/36 maxlen: 49 2001:ab7:1000::/36 maxlen: 49 2001:ab7:2000::/36 maxlen: 49 2001:ab7:3000::/36 maxlen: 49 2001:ab7:4000::/36 maxlen: 49 2001:ab7:f000::/36 maxlen: 49 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bf:80:15:5f:da:11:b2:e5:f8:64:bc:32:42:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd2c25e601c347ae936423bfa644b5bd0f52aa90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:f9:ce:5f:e6:09:2a:2e:9d:b7:c8:97:12: ba:c3:3c:d6:35:a2:61:c4:78:75:59:aa:bc:58:17: 1a:df:9b:0c:ce:b2:e3:82:6a:c0:38:f8:3a:3b:27: 55:00:19:0f:01:9f:a8:74:f3:9f:12:f5:7f:f5:65: e3:fd:c2:e7:d0:6a:45:d6:26:e4:d2:b8:dd:f5:e0: 91:34:63:50:a1:19:92:10:0a:d7:96:f6:2c:be:b3: 09:ca:6d:aa:8c:dd:42:a0:2c:c7:b1:ab:ff:de:c9: cc:78:10:d5:5f:c3:26:97:75:56:54:96:42:f9:49: 82:c8:d8:c6:ef:eb:90:11:76:e6:6e:c8:1f:d7:84: 62:f7:45:48:ee:7f:ed:d4:55:b4:4e:8a:be:bb:87: bb:7a:97:c4:6a:d8:b6:84:12:bf:35:29:d3:b8:d0: 9b:03:01:6b:c2:11:52:83:e4:8a:1a:7b:dc:33:4e: 9c:1c:9c:9f:4e:60:b3:bf:a9:54:24:24:ba:ec:3a: 02:ce:9a:12:3d:6d:62:49:bc:31:aa:55:8d:53:37: e0:d5:9b:9a:79:ee:bc:04:0f:4b:61:e5:c1:04:af: 1e:f8:66:d7:5b:b1:27:b1:09:28:a3:5e:38:5a:cb: 7a:93:a1:f2:70:5d:70:76:54:a9:dd:2f:a0:21:f8: c2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2C:25:E6:01:C3:47:AE:93:64:23:BF:A6:44:B5:BD:0F:52:AA:90 X509v3 Authority Key Identifier: keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/_Swl5gHDR66TZCO_pkS1vQ9SqpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.116.96.0/19 95.174.128.0/19 212.9.32.0/19 217.10.64.0/20 217.116.112.0/20 IPv6: 2001:ab0::/29 Signature Algorithm: sha256WithRSAEncryption 04:1f:18:42:bd:f3:aa:57:73:b4:67:d6:a7:fc:c7:a6:be:25: 53:24:4e:0a:7e:59:81:a0:6f:f2:b0:26:53:19:e1:cb:4e:5d: 93:bb:16:d3:db:3d:ff:7b:b3:31:e1:dc:95:0d:94:c2:2d:f2: ae:f1:e2:87:9c:04:5f:b9:46:bf:89:27:93:72:e6:5d:f9:08: 84:78:49:e8:2c:a3:83:05:09:d2:2e:a9:3c:53:82:72:68:6c: 6f:04:3b:c4:1e:54:42:45:a3:74:25:21:d8:08:ed:58:28:44: 4a:bc:e9:92:22:b4:bd:ab:f9:03:63:ef:42:96:d9:a9:01:e8: ff:18:d9:6f:e9:87:34:a3:d8:81:12:a3:f0:a1:b2:29:55:59: de:6e:dc:35:c1:33:a3:15:30:ce:f5:ba:8f:0f:a9:74:c6:9f: 74:94:ae:34:9a:78:c0:ed:31:a7:50:02:38:cb:55:45:21:26: 6b:19:13:00:87:56:af:90:43:55:4f:7f:0e:79:bc:a3:5e:ca: c2:a9:6a:38:cd:a8:16:3d:9a:6c:8d:66:f9:fa:29:7b:ba:90: 17:d5:be:60:20:4a:4e:45:a6:db:9e:b7:59:e0:bd:c6:78:30: f1:b2:98:c0:3e:2a:7b:4e:e7:71:dd:a6:40:51:9f:3e:e3:6e: 39:17:c9:e4 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt9XL+AFV/aEbLl+GS8MkJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0 MmY1MGQwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDJjMjVlNjAxYzM0N2FlOTM2NDIzYmZhNjQ0YjViZDBmNTJhYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy/5zl/mCSounbfIlxK6wzzWNaJh xHh1Waq8WBca35sMzrLjgmrAOPg6OydVABkPAZ+odPOfEvV/9WXj/cLn0GpF1ibk 0rjd9eCRNGNQoRmSEArXlvYsvrMJym2qjN1CoCzHsav/3snMeBDVX8Mml3VWVJZC +UmCyNjG7+uQEXbmbsgf14Ri90VI7n/t1FW0Toq+u4e7epfEati2hBK/NSnTuNCb AwFrwhFSg+SKGnvcM06cHJyfTmCzv6lUJCS67DoCzpoSPW1iSbwxqlWNUzfg1Zua ee68BA9LYeXBBK8e+GbXW7EnsQkoo144Wst6k6HycF1wdlSp3S+gIfjCLQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFP0sJeYBw0euk2Qjv6ZEtb0PUqqQMB8GA1UdIwQY MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt MDlmZjc5MzA4YmJlLzEvX1N3bDVnSERSNjZUWkNPX3BrUzF2UTlTcXBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFUnRgAwQF X66AAwQF1AkgAwQE2QpAAwQE2XRwMA0EAgACMAcDBQMgAQqwMA0GCSqGSIb3DQEB CwUAA4IBAQAEHxhCvfOqV3O0Z9an/MemviVTJE4KflmBoG/ysCZTGeHLTl2TuxbT 2z3/e7Mx4dyVDZTCLfKu8eKHnARfuUa/iSeTcuZd+QiEeEnoLKODBQnSLqk8U4Jy aGxvBDvEHlRCRaN0JSHYCO1YKERKvOmSIrS9q/kDY+9CltmpAej/GNlv6Yc0o9iB EqPwobIpVVnebtw1wTOjFTDO9bqPD6l0xp90lK40mnjA7TGnUAI4y1VFISZrGRMA h1avkENVT38OebyjXsrCqWo4zagWPZpsjWb5+il7upAX1b5gIEpORabbnrdZ4L3G eDDxspjAPip7Tudx3aZAUZ8+4245F8nk -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:11 2026 by rpki-client