This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/swbVUbnSsxnoG3niwtidHdx3_9U.roa File: swbVUbnSsxnoG3niwtidHdx3_9U.roa (raw, json) Hash identifier: VDLYsVphU8g7UoUf4DvolnUKqPft0iPZAZA7etjhrmY= Subject key identifier: B3:06:D5:51:B9:D2:B3:19:E8:1B:79:E2:C2:D8:9D:1D:DC:77:FF:D5 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758E01F00DC9DC9478942307DC775FA Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/swbVUbnSsxnoG3niwtidHdx3_9U.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56876 IP address blocks: 2a0f:5707:aab0::/44 maxlen: 44 2a0f:5707:aab0::/48 maxlen: 48 2a0f:5707:aab1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e0:1f:00:dc:9d:c9:47:89:42:30:7d:c7:75:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b306d551b9d2b319e81b79e2c2d89d1ddc77ffd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:5d:fd:c8:6d:88:c0:3b:d5:67:8a:cd:87: c7:f0:00:7b:7a:fc:f5:2c:b8:e0:43:62:18:e5:5a: b4:da:9f:f3:bf:d3:ad:2d:f6:87:d2:9b:ff:6e:57: cb:2a:f0:dc:73:56:c2:82:c1:08:5a:85:35:d0:53: 43:ad:c0:85:eb:72:68:13:7c:99:1f:e5:90:4b:65: b0:b2:2a:bf:60:3d:13:e2:83:60:57:a3:55:06:0a: 5f:af:d2:38:f9:a7:6d:dc:ef:3d:b6:6c:77:30:d1: 35:d5:dc:ed:3d:b8:34:68:75:42:a7:ff:af:ca:7d: 33:1c:da:26:e9:64:77:25:c5:eb:14:7c:1b:7b:bb: ee:41:ad:5a:e9:0a:82:09:fe:10:86:40:51:3f:59: 93:18:24:27:86:01:3d:9f:4a:cc:a7:c9:0e:64:8a: 7c:f2:70:4a:ed:a2:ec:9b:40:95:0d:c9:48:2e:0c: 5c:ae:22:8f:8b:1a:af:4b:34:8f:39:6f:fe:e9:8a: 4d:c4:03:9f:03:61:ea:e7:5d:29:24:37:69:e5:8b: 48:98:75:07:47:d5:26:1c:19:6c:d7:21:84:e0:2a: ec:b9:36:52:23:9a:e9:1f:dd:d9:48:02:01:0b:bb: bf:2f:ba:5c:b5:12:de:41:36:b0:30:ce:ce:30:24: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:06:D5:51:B9:D2:B3:19:E8:1B:79:E2:C2:D8:9D:1D:DC:77:FF:D5 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/swbVUbnSsxnoG3niwtidHdx3_9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:aab0::/44 Signature Algorithm: sha256WithRSAEncryption 40:0e:d7:ad:9a:80:0e:9e:a0:09:79:47:cc:94:ae:25:f1:70: f0:ff:d4:2a:98:2d:4e:84:ff:bf:d3:38:fc:a3:7f:20:4d:16: 21:3d:ad:72:64:a2:79:12:21:21:10:4d:fc:66:8d:5a:7a:0a: 25:7f:87:48:01:57:29:72:64:9d:62:dc:e0:0f:45:46:88:10: 1d:97:ac:1b:1c:eb:f1:6b:27:2c:8c:ed:b8:b7:1b:1c:28:ac: 17:4e:c5:e4:ce:30:f9:e0:96:c7:a0:7e:ea:0c:6a:df:aa:16: ed:53:9f:7c:8b:0d:59:ad:ec:55:36:4b:82:bf:31:c2:5f:c6: 96:b2:8b:81:d5:85:e1:06:95:25:77:58:5d:64:6b:d0:f1:b0: 83:7b:87:9e:4d:77:e9:47:cd:0f:1e:5d:30:f0:87:77:83:a0: 8f:f9:e2:7d:2a:1c:c3:07:60:c6:d8:e3:f4:b4:f6:fc:8c:b4: 7b:c8:9a:d0:0e:f1:85:cc:7b:35:e2:57:88:1b:4b:02:31:f6: 90:1b:98:1b:98:53:98:9e:f7:11:1d:da:a6:66:16:06:a1:14: 43:f5:ed:15:57:9f:f5:02:0b:3e:6e:60:58:f8:bb:f6:bd:33: f9:cc:88:04:cb:6a:04:6f:1a:96:f0:53:48:6e:69:f9:4b:ac: 43:02:32:70 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WOAfANydyUeJQjB9x3X6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzA2ZDU1MWI5ZDJiMzE5ZTgxYjc5ZTJjMmQ4OWQxZGRjNzdmZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKdd/chtiMA71WeKzYfH8AB7evz1 LLjgQ2IY5Vq02p/zv9OtLfaH0pv/blfLKvDcc1bCgsEIWoU10FNDrcCF63JoE3yZ H+WQS2Wwsiq/YD0T4oNgV6NVBgpfr9I4+adt3O89tmx3MNE11dztPbg0aHVCp/+v yn0zHNom6WR3JcXrFHwbe7vuQa1a6QqCCf4QhkBRP1mTGCQnhgE9n0rMp8kOZIp8 8nBK7aLsm0CVDclILgxcriKPixqvSzSPOW/+6YpNxAOfA2Hq510pJDdp5YtImHUH R9UmHBls1yGE4CrsuTZSI5rpH93ZSAIBC7u/L7pctRLeQTawMM7OMCQg/wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLMG1VG50rMZ6Bt54sLYnR3cd//VMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvc3diVlViblNzeG5vRzNuaXd0aWRIZHgzXzlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6qw MA0GCSqGSIb3DQEBCwUAA4IBAQBADtetmoAOnqAJeUfMlK4l8XDw/9QqmC1OhP+/ 0zj8o38gTRYhPa1yZKJ5EiEhEE38Zo1aegolf4dIAVcpcmSdYtzgD0VGiBAdl6wb HOvxaycsjO24txscKKwXTsXkzjD54JbHoH7qDGrfqhbtU598iw1ZrexVNkuCvzHC X8aWsouB1YXhBpUld1hdZGvQ8bCDe4eeTXfpR80PHl0w8Id3g6CP+eJ9KhzDB2DG 2OP0tPb8jLR7yJrQDvGFzHs14leIG0sCMfaQG5gbmFOYnvcRHdqmZhYGoRRD9e0V V5/1Ags+bmBY+Lv2vTP5zIgEy2oEbxqW8FNIbmn5S6xDAjJw -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:06 2026 by rpki-client