This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/Sw6DObPFj3054KXQBFZeQB7wzMY.roa File: Sw6DObPFj3054KXQBFZeQB7wzMY.roa (raw, json) Hash identifier: 9m0sNp12uy0l53c9ggycSG+pMrm4n1CEHsd/2IPjAns= Subject key identifier: 4B:0E:83:39:B3:C5:8F:7D:39:E0:A5:D0:04:56:5E:40:1E:F0:CC:C6 Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2 Certificate serial: 019B36CB44F067F738EDD91C414CF70131DE Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/Sw6DObPFj3054KXQBFZeQB7wzMY.roa Signing time: Fri 19 Dec 2025 13:27:29 +0000 ROA not before: Fri 19 Dec 2025 13:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211720 IP address blocks: 185.56.81.0/24 maxlen: 24 185.56.83.0/24 maxlen: 24 185.231.32.0/24 maxlen: 24 185.231.33.0/24 maxlen: 24 2a0c:4d00::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:cb:44:f0:67:f7:38:ed:d9:1c:41:4c:f7:01:31:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2 Validity Not Before: Dec 19 13:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b0e8339b3c58f7d39e0a5d004565e401ef0ccc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ad:d1:a4:f4:0b:f3:7b:f3:3d:c0:1c:c4:7f: f2:3e:8c:87:22:69:d1:0a:fb:ba:fa:c7:1b:dc:8f: cc:d5:d6:f4:ef:ab:9b:8c:90:08:20:70:7c:bc:a2: 97:5c:41:65:5b:3a:21:8f:c9:24:f8:57:9c:51:2b: a1:62:01:e1:95:29:f2:85:af:7e:26:bb:66:53:b8: 3a:76:f4:0d:3e:c7:aa:4f:33:e6:fe:de:f0:ad:e4: 8b:ac:01:39:d8:15:5a:3c:a4:11:16:63:81:ca:6f: d9:5c:b0:ba:ad:a2:95:43:7a:ad:6c:d7:07:f3:7f: 16:38:78:f1:9e:85:1b:1f:c3:7b:d3:87:b9:06:e9: d6:df:ac:cb:11:6e:11:08:6a:de:1b:2d:0e:9c:4d: f6:e2:ef:fe:3b:f8:a0:a0:a9:4d:a2:8b:0c:74:75: a3:78:c6:b7:f0:bc:69:a3:6a:26:05:67:c6:7c:a9: 53:de:dd:1d:5f:65:ee:87:e2:a0:fc:61:d5:fc:4c: b2:d8:d9:4d:af:61:2c:17:fb:06:7b:89:4d:5f:83: b2:6e:34:6e:0c:00:94:3c:e0:a5:06:36:7c:81:2c: 58:d3:5a:67:22:c9:83:f4:5e:cb:04:ad:76:bd:ce: cc:ce:01:7e:0b:35:0e:c6:14:b3:3e:bd:65:38:98: d2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0E:83:39:B3:C5:8F:7D:39:E0:A5:D0:04:56:5E:40:1E:F0:CC:C6 X509v3 Authority Key Identifier: keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/Sw6DObPFj3054KXQBFZeQB7wzMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.81.0/24 185.56.83.0/24 185.231.32.0/23 IPv6: 2a0c:4d00::/36 Signature Algorithm: sha256WithRSAEncryption 9b:01:28:fe:67:9d:5f:66:31:64:f5:fb:0c:eb:7e:59:25:7a: 93:ef:4e:f3:80:26:05:23:fa:23:12:01:4f:3e:10:9d:e0:ff: 84:3e:71:07:76:c6:78:77:92:ab:58:0f:66:f4:c7:01:4e:e4: 59:5b:6c:ab:71:24:d9:bd:15:99:cf:14:41:d8:4d:15:ea:b9: 17:95:ae:09:4d:81:a2:ec:eb:8a:85:10:22:1d:a8:ee:49:fa: 82:3d:62:21:16:03:38:95:1c:05:bc:23:a4:a5:74:46:56:73: 5f:af:65:94:9a:2f:1d:bc:39:07:66:1f:a4:1d:70:02:4f:95: 0d:63:07:0c:ba:09:14:95:f7:ee:3a:20:67:ba:bd:f6:10:74: dd:b6:9c:a5:50:bc:75:24:70:af:04:25:ef:8b:b6:0a:ab:fa: cb:fb:27:2d:7d:49:b1:f6:f8:79:0b:57:48:83:e0:7d:49:1c: 8b:42:5a:24:42:5d:ce:5c:18:62:49:c1:e0:ac:eb:10:87:b1: 8a:05:24:67:db:5b:48:82:40:e4:00:61:f0:fa:1e:17:f0:53: 4c:79:56:d5:39:8d:03:45:ba:9b:6c:f9:d2:2a:c2:38:49:2c: 46:7d:83:9a:b1:5a:b7:c2:41:a3:9d:b4:7e:3d:89:b5:16:e0: ea:95:6a:0e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs2y0TwZ/c47dkcQUz3ATHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNmMwODY2ZGMyNTIwOGU2YzA3ZDRhMjFkN2Q4MDUwYjUw OGQ2YTIwHhcNMjUxMjE5MTMyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjBlODMzOWIzYzU4ZjdkMzllMGE1ZDAwNDU2NWU0MDFlZjBjY2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq3RpPQL83vzPcAcxH/yPoyHImnR Cvu6+scb3I/M1db076ubjJAIIHB8vKKXXEFlWzohj8kk+FecUSuhYgHhlSnyha9+ JrtmU7g6dvQNPseqTzPm/t7wreSLrAE52BVaPKQRFmOBym/ZXLC6raKVQ3qtbNcH 838WOHjxnoUbH8N704e5BunW36zLEW4RCGreGy0OnE324u/+O/igoKlNoosMdHWj eMa38Lxpo2omBWfGfKlT3t0dX2Xuh+Kg/GHV/Eyy2NlNr2EsF/sGe4lNX4OybjRu DACUPOClBjZ8gSxY01pnIsmD9F7LBK12vc7MzgF+CzUOxhSzPr1lOJjS9QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEsOgzmzxY99OeCl0ARWXkAe8MzGMB8GA1UdIwQY MBaAFDBsCGbcJSCObAfUoh19gFC1CNaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYWRlZGYtZDBlOS00NWE5LWFmNzUt MTBlZGI1NDFlNmZmLzEvU3c2RE9iUEZqMzA1NEtYUUJGWmVRQjd3ek1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iYWRlZGYtZDBlOS00NWE5LWFmNzUtMTBlZGI1NDFlNmZm LzEvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQAuThRAwQA uThTAwQBuecgMA4EAgACMAgDBgQqDE0AADANBgkqhkiG9w0BAQsFAAOCAQEAmwEo /medX2YxZPX7DOt+WSV6k+9O84AmBSP6IxIBTz4QneD/hD5xB3bGeHeSq1gPZvTH AU7kWVtsq3Ek2b0Vmc8UQdhNFeq5F5WuCU2BouzrioUQIh2o7kn6gj1iIRYDOJUc BbwjpKV0RlZzX69llJovHbw5B2YfpB1wAk+VDWMHDLoJFJX37jogZ7q99hB03bac pVC8dSRwrwQl74u2Cqv6y/snLX1Jsfb4eQtXSIPgfUkci0JaJEJdzlwYYknB4Kzr EIexigUkZ9tbSIJA5ABh8PoeF/BTTHlW1TmNA0W6m2z50irCOEksRn2DmrFat8JB o520fj2JtRbg6pVqDg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:02:47 2025 by rpki-client