This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa
File: SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa (raw, json)
Hash identifier: npoD/pw5DyWoHlNaWh25GF0UUSoDz0q9Mp04Q5//gew=
Subject key identifier: 49:65:D0:FF:2A:E2:AB:F6:7A:85:DA:3D:B3:F4:BE:B2:EF:48:39:C6
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 019B7C13607355226AB5B156159E3837056A
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa
Signing time: Fri 02 Jan 2026 00:20:03 +0000
ROA not before: Fri 02 Jan 2026 00:20:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 5.145.118.0/24 maxlen: 24
5.145.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:60:73:55:22:6a:b5:b1:56:15:9e:38:37:05:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 2 00:20:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4965d0ff2ae2abf67a85da3db3f4beb2ef4839c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:95:5b:39:d0:e3:4f:c6:8f:b9:e0:2c:8e:
6f:0c:30:f8:cf:23:3a:52:b6:b8:b5:b6:39:65:18:
31:e9:46:55:20:a5:70:a4:58:a7:8f:f5:83:22:0d:
73:dd:e3:a0:94:27:d6:62:1e:a5:6e:74:97:a3:f2:
bb:8f:5f:61:a6:c0:de:d1:15:c8:cd:3b:ee:c5:e7:
1e:e4:96:79:21:bd:09:fd:48:b2:5f:aa:b1:69:02:
64:7f:be:9d:5e:d8:8a:80:67:3d:d8:fe:28:34:8a:
2e:37:53:eb:22:2d:26:3d:c7:bb:d5:be:fd:dc:93:
29:7a:03:67:04:9b:23:4d:01:a7:9b:39:8d:3f:b1:
06:fe:12:c9:fa:d5:67:19:b9:8a:8c:c2:a6:c2:ec:
1f:ce:83:9d:46:44:85:4b:82:2b:cd:4f:af:2f:c5:
1e:fd:ab:f8:1e:1a:fc:eb:94:2f:32:d8:b6:e4:dc:
3d:8c:40:22:a4:09:9e:30:41:56:57:76:ca:45:89:
7c:33:bc:90:37:1b:d5:05:6f:29:17:e8:a1:11:29:
1a:50:df:10:25:77:62:a2:44:39:96:5a:19:63:31:
e9:98:7f:ef:96:9c:d8:db:6e:26:23:4b:3d:48:c1:
15:e6:9e:95:bf:43:f3:f0:c6:bf:f1:bd:7f:33:17:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:65:D0:FF:2A:E2:AB:F6:7A:85:DA:3D:B3:F4:BE:B2:EF:48:39:C6
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.118.0/23
Signature Algorithm: sha256WithRSAEncryption
20:bf:c3:75:cd:f1:4d:eb:03:27:2a:7b:80:7a:1f:a9:fa:75:
e7:75:11:9f:d4:5d:13:0e:8b:da:db:f8:17:1d:17:5f:5a:bb:
85:17:eb:8c:cf:3a:82:cb:5d:7a:40:36:9e:a0:1a:4a:34:1e:
dc:4b:21:0d:11:ba:19:33:7d:14:c2:80:72:99:f9:4a:d7:a3:
a2:07:f6:8e:d6:42:67:1e:99:99:d2:c2:65:1d:94:76:93:7b:
42:c7:bd:25:d6:fa:ad:dd:9d:6d:9a:bd:c4:da:57:54:02:bd:
e7:a7:fc:1c:0b:d0:60:13:dc:1f:00:3c:76:d3:e9:e8:10:9b:
32:86:5a:72:1d:4f:f3:8f:ef:77:2f:81:d8:cc:29:28:91:ce:
da:49:95:f0:90:a2:16:06:6b:b1:54:d9:f2:a7:a1:f8:94:13:
4b:cb:0d:10:0c:e0:d3:e2:c3:71:bb:eb:d5:6d:91:2e:e7:ae:
6f:02:cd:91:f9:34:67:59:31:85:ef:75:ff:4a:10:e3:3f:41:
53:60:b3:59:4d:d7:2e:b2:c4:7e:4b:17:ef:8e:40:18:63:86:
57:a8:21:9d:a1:e7:09:0c:e1:5b:3c:ff:db:1f:01:0b:70:be:
e0:61:81:12:45:cb:9d:b0:d5:43:17:5a:a0:fb:22:00:04:74:
2c:47:04:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:22:09 2026 by rpki-client