This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/SWzmxkcms-jTEkFlEBsrwFHKioI.roa File: SWzmxkcms-jTEkFlEBsrwFHKioI.roa (raw, json) Hash identifier: uOjBtIA7vP+7x6zbZJlt3bEVrBiCfHuidbUPAIy44V4= Subject key identifier: 49:6C:E6:C6:47:26:B3:E8:D3:12:41:65:10:1B:2B:C0:51:CA:8A:82 Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019B7AC89F1AD2D80B309FF5B9A52F3B6604 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/SWzmxkcms-jTEkFlEBsrwFHKioI.roa Signing time: Thu 01 Jan 2026 18:18:46 +0000 ROA not before: Thu 01 Jan 2026 18:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202470 IP address blocks: 109.107.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9f:1a:d2:d8:0b:30:9f:f5:b9:a5:2f:3b:66:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=496ce6c64726b3e8d3124165101b2bc051ca8a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:44:72:59:4f:ce:df:1e:2a:e3:bf:88:f4: 00:d4:a6:62:5b:6e:e6:33:17:fd:4e:d7:a6:02:d9: c2:e3:07:e0:14:b6:7c:14:c2:ae:46:b9:5d:87:d6: 78:01:01:a4:60:c3:21:d8:1d:bc:2c:a9:9c:3e:26: 8b:e3:9c:bf:83:23:61:b9:4d:9d:7c:dd:cd:3c:4c: c6:e4:0a:b4:2e:1f:fc:3b:74:62:b3:eb:8f:89:33: e4:d1:03:39:49:9a:55:94:06:d2:29:36:15:3a:32: a0:93:0d:06:27:ab:29:69:e4:42:52:8c:aa:c3:15: c6:64:29:2e:78:67:48:51:e0:1d:e6:5f:a1:51:60: 97:17:8d:10:94:4a:67:d4:1b:e6:c1:ab:85:a7:5b: d1:4f:ca:df:0b:91:b1:8d:38:35:84:b1:86:c4:b9: a7:68:76:e0:af:bb:d3:8f:32:c6:09:d9:25:73:a3: 02:0c:00:5d:fb:44:ec:2a:ad:8a:a5:48:37:aa:48: 1c:fe:c0:67:dd:94:a7:bc:39:f3:85:49:f5:b3:fd: 25:40:b8:c1:dc:41:13:e0:01:17:0a:2f:fa:e2:79: c5:89:eb:9d:44:f3:e4:48:8e:cb:75:9d:94:5d:25: e9:27:7d:db:70:76:22:2a:7d:46:eb:6e:69:26:7d: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6C:E6:C6:47:26:B3:E8:D3:12:41:65:10:1B:2B:C0:51:CA:8A:82 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/SWzmxkcms-jTEkFlEBsrwFHKioI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.146.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:b4:17:87:11:ff:4e:ef:a1:23:9d:06:ce:ea:a3:fc:60:b8: a7:ff:18:49:81:bd:74:b8:d2:c5:92:e5:55:40:8b:75:60:6f: d6:64:81:d1:2f:f0:0a:21:6a:6c:5b:d3:2d:63:a1:24:d5:f5: cc:c9:79:6d:23:05:5a:b1:1b:23:f1:55:89:8d:2c:d5:67:8f: 65:57:02:02:04:75:77:cb:a9:71:74:66:c6:8a:22:1f:d7:0d: c3:e0:5d:95:a5:39:3b:c9:8d:ad:5c:f2:6e:47:37:b1:09:62: f5:92:08:97:24:ce:52:e3:4c:66:35:15:e0:34:f2:74:62:76: e5:b5:27:3a:d9:3d:ff:c7:f4:94:9c:bd:c8:d1:d8:61:03:44: 4e:7f:cf:4c:e9:7a:9e:e7:bf:56:f5:ba:6d:a9:07:9c:ae:38: 36:f4:75:f9:9a:0b:a9:be:b7:b6:5e:dd:0e:f3:4d:e3:18:dd: 23:ba:a0:9c:fd:28:53:50:e9:44:f6:74:cb:b3:a8:16:e9:30: f2:91:84:ca:1f:ce:48:a9:8d:66:e9:ec:b3:5f:a8:bc:f7:2a: bf:4a:9e:75:e2:59:68:5b:16:77:50:b8:83:42:d7:90:d6:2d: 29:fa:1f:07:c6:54:0e:73:9c:bb:45:ed:58:97:c5:04:2a:05: 9f:8f:aa:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJ8a0tgLMJ/1uaUvO2YEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTZjZTZjNjQ3MjZiM2U4ZDMxMjQxNjUxMDFiMmJjMDUxY2E4YTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZZEcllPzt8eKuO/iPQA1KZiW27m Mxf9TtemAtnC4wfgFLZ8FMKuRrldh9Z4AQGkYMMh2B28LKmcPiaL45y/gyNhuU2d fN3NPEzG5Aq0Lh/8O3Ris+uPiTPk0QM5SZpVlAbSKTYVOjKgkw0GJ6spaeRCUoyq wxXGZCkueGdIUeAd5l+hUWCXF40QlEpn1BvmwauFp1vRT8rfC5GxjTg1hLGGxLmn aHbgr7vTjzLGCdklc6MCDABd+0TsKq2KpUg3qkgc/sBn3ZSnvDnzhUn1s/0lQLjB 3EET4AEXCi/64nnFieudRPPkSI7LdZ2UXSXpJ33bcHYiKn1G625pJn1LzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEls5sZHJrPo0xJBZRAbK8BRyoqCMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvU1d6bXhrY21zLWpURWtGbEVCc3J3RkhLaW9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuSMA0G CSqGSIb3DQEBCwUAA4IBAQBftBeHEf9O76EjnQbO6qP8YLin/xhJgb10uNLFkuVV QIt1YG/WZIHRL/AKIWpsW9MtY6Ek1fXMyXltIwVasRsj8VWJjSzVZ49lVwICBHV3 y6lxdGbGiiIf1w3D4F2VpTk7yY2tXPJuRzexCWL1kgiXJM5S40xmNRXgNPJ0Ynbl tSc62T3/x/SUnL3I0dhhA0ROf89M6Xqe579W9bptqQecrjg29HX5mgupvre2Xt0O 803jGN0juqCc/ShTUOlE9nTLs6gW6TDykYTKH85IqY1m6eyzX6i89yq/Sp514llo WxZ3ULiDQteQ1i0p+h8HxlQOc5y7Re1Yl8UEKgWfj6qZ -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:15 2026 by rpki-client