This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/sWGnDVwimopkL3RZ1VddUdr6UVQ.roa File: sWGnDVwimopkL3RZ1VddUdr6UVQ.roa (raw, json) Hash identifier: 3ebBFe3M69O9ovZ86/tHdRoJbVlqNSPTb4bi7x1ufJQ= Subject key identifier: B1:61:A7:0D:5C:22:9A:8A:64:2F:74:59:D5:57:5D:51:DA:FA:51:54 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B360B237669260DF8B33A5DFEED25F4 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/sWGnDVwimopkL3RZ1VddUdr6UVQ.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44289 IP address blocks: 85.204.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0b:23:76:69:26:0d:f8:b3:3a:5d:fe:ed:25:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b161a70d5c229a8a642f7459d5575d51dafa5154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:eb:ab:2d:c9:57:15:27:3b:87:1e:93:1a:79: 23:eb:bf:28:e3:55:17:a4:86:77:07:08:e4:6e:ae: b9:88:52:e9:21:3a:8d:e5:46:27:72:3b:bf:35:38: b4:c9:70:3a:90:90:a6:80:1e:ca:58:07:b3:94:df: 88:eb:38:04:7f:17:9f:32:0c:5a:08:be:cd:73:46: 67:a8:c6:cc:a1:2f:e8:8e:45:6a:03:ab:5e:6e:46: 29:90:ce:42:6d:b9:b1:ef:f8:9b:f4:c8:ea:4c:0b: 92:89:3d:0a:ac:c0:7e:e3:22:d4:bd:39:0e:79:40: ab:34:48:f0:e0:00:4c:ef:ab:73:db:c0:5c:b6:e2: 9f:4a:5a:74:c2:f5:be:94:e6:8f:d6:9d:e6:d3:4e: 25:9b:0c:04:40:3c:ad:91:5d:a9:60:bd:a5:dc:50: 7a:ca:d2:fe:70:72:b9:7e:92:08:1c:bd:54:85:e6: 40:a2:ea:60:31:d7:0c:3e:39:05:41:b4:4b:a2:54: 53:ad:3f:e4:a3:0c:2e:f5:a1:77:0b:e5:a1:89:58: 11:1f:6b:4f:09:5c:12:55:de:8b:58:f2:91:07:b9: 5e:84:36:20:e7:e0:2f:53:a1:c3:f1:79:69:86:39: f8:0e:52:29:4b:5c:31:18:df:17:de:ae:aa:54:42: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:61:A7:0D:5C:22:9A:8A:64:2F:74:59:D5:57:5D:51:DA:FA:51:54 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/sWGnDVwimopkL3RZ1VddUdr6UVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.68.0/24 Signature Algorithm: sha256WithRSAEncryption 70:d6:ba:54:f7:24:73:2e:cf:8c:00:55:38:eb:56:21:85:15: 7f:72:94:f5:5d:1b:84:24:c3:e2:97:b3:a6:25:14:df:5d:f5: 0d:24:34:4a:bf:86:f5:2b:d8:80:7d:83:f6:76:06:f6:3f:ff: 40:56:9a:2b:5d:8d:26:72:fa:56:06:24:ae:6b:86:fd:1a:f2: a2:68:bd:63:7a:f5:a8:6d:0b:20:62:3b:41:b2:fd:ac:69:21: e8:73:ca:48:bf:72:a7:0d:3c:1a:37:d1:81:bd:dc:ff:27:70: 56:4e:c7:35:9e:47:0d:e3:bb:c5:b1:18:ae:86:dd:e1:e5:bb: 4f:df:97:1e:fc:12:a0:78:d9:8e:44:16:ee:ba:b8:21:36:b6: c4:6a:90:6a:ba:c8:c3:74:f3:58:0f:d0:77:58:36:61:18:4e: 25:76:da:27:46:4b:4d:13:f7:82:ff:db:e3:68:9b:f2:83:69: 17:48:d1:c9:8f:81:f9:4a:06:9b:3c:3f:c5:31:3d:48:81:4b: ab:e7:39:a5:a3:82:4d:32:a4:63:27:38:a1:45:8f:53:9d:66: 3f:e4:20:46:8f:6e:9d:4e:c8:b2:07:16:46:55:e0:7f:05:19: 78:3d:88:22:cf:6f:02:53:0e:ce:5a:0d:f3:e6:d1:0e:4f:15: 88:0a:e1:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgsjdmkmDfizOl3+7SX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTYxYTcwZDVjMjI5YThhNjQyZjc0NTlkNTU3NWQ1MWRhZmE1MTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uurLclXFSc7hx6TGnkj678o41UX pIZ3Bwjkbq65iFLpITqN5UYncju/NTi0yXA6kJCmgB7KWAezlN+I6zgEfxefMgxa CL7Nc0ZnqMbMoS/ojkVqA6tebkYpkM5Cbbmx7/ib9MjqTAuSiT0KrMB+4yLUvTkO eUCrNEjw4ABM76tz28BctuKfSlp0wvW+lOaP1p3m004lmwwEQDytkV2pYL2l3FB6 ytL+cHK5fpIIHL1UheZAoupgMdcMPjkFQbRLolRTrT/kowwu9aF3C+WhiVgRH2tP CVwSVd6LWPKRB7lehDYg5+AvU6HD8Xlphjn4DlIpS1wxGN8X3q6qVELFAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLFhpw1cIpqKZC90WdVXXVHa+lFUMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvc1dHbkRWd2ltb3BrTDNSWjFWZGRVZHI2VVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcxEMA0G CSqGSIb3DQEBCwUAA4IBAQBw1rpU9yRzLs+MAFU461YhhRV/cpT1XRuEJMPil7Om JRTfXfUNJDRKv4b1K9iAfYP2dgb2P/9AVporXY0mcvpWBiSua4b9GvKiaL1jevWo bQsgYjtBsv2saSHoc8pIv3KnDTwaN9GBvdz/J3BWTsc1nkcN47vFsRiuht3h5btP 35ce/BKgeNmORBbuurghNrbEapBqusjDdPNYD9B3WDZhGE4ldtonRktNE/eC/9vj aJvyg2kXSNHJj4H5SgabPD/FMT1IgUur5zmlo4JNMqRjJzihRY9TnWY/5CBGj26d TsiyBxZGVeB/BRl4PYgiz28CUw7OWg3z5tEOTxWICuF5 -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:36 2026 by rpki-client