This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Swq_PK2fX8gRLCPrvD0d1E_Ybh4.roa
File: Swq_PK2fX8gRLCPrvD0d1E_Ybh4.roa (raw, json)
Hash identifier: bG1+XkivMOnnvUQvY/2HiEgsjA+MzsGlWWD5KHxdUbw=
Subject key identifier: 4B:0A:BF:3C:AD:9F:5F:C8:11:2C:23:EB:BC:3D:1D:D4:4F:D8:6E:1E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019B7C8054A9CD07B882967FC5118EAA4CC5
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Swq_PK2fX8gRLCPrvD0d1E_Ybh4.roa
Signing time: Fri 02 Jan 2026 02:19:03 +0000
ROA not before: Fri 02 Jan 2026 02:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44893
IP address blocks: 45.135.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:54:a9:cd:07:b8:82:96:7f:c5:11:8e:aa:4c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 02:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b0abf3cad9f5fc8112c23ebbc3d1dd44fd86e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:c7:d9:af:b1:1e:0c:53:d4:ff:1a:09:1f:
23:49:97:3b:45:05:42:3e:f9:3c:fc:d0:be:b9:07:
05:c6:70:76:19:25:85:c8:d9:26:e3:58:3c:37:92:
1c:90:2d:c9:0d:1e:c5:c3:da:82:88:17:c5:9e:a8:
7b:aa:89:4b:f2:58:88:b5:66:8f:93:fe:c0:b0:c5:
2e:e6:13:75:33:79:04:2a:a9:84:f6:2f:2e:aa:30:
61:b3:51:84:86:ee:75:92:3a:ac:8b:e6:b1:a4:a9:
d0:83:fa:8c:99:51:1e:f9:01:c3:54:eb:4b:c7:aa:
e5:63:db:e0:68:81:bc:bb:7a:11:7b:a5:e6:9b:9a:
19:a9:1f:46:2c:30:0e:23:8f:f5:b7:09:b8:f2:8c:
f8:0a:39:eb:da:47:31:51:f0:35:0d:91:80:cc:5b:
69:39:a4:54:e6:bc:1f:c0:96:3e:83:6b:4c:79:a0:
62:df:5b:a4:f7:2c:df:45:eb:4e:b0:11:84:90:77:
f1:7e:c9:e8:ac:05:a8:18:01:61:db:d3:54:40:06:
56:bd:ed:c7:b3:5f:83:59:9d:fb:bd:9d:7a:07:d8:
6e:e1:9d:5e:24:f4:80:29:6d:40:a0:d6:87:96:f8:
0a:c4:64:a5:0c:55:49:c8:5a:21:1a:02:fc:cd:9d:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0A:BF:3C:AD:9F:5F:C8:11:2C:23:EB:BC:3D:1D:D4:4F:D8:6E:1E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Swq_PK2fX8gRLCPrvD0d1E_Ybh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:80:2f:73:ca:f4:23:e8:0b:fc:6d:9b:2c:eb:82:fb:56:65:
43:dd:81:c5:e3:5a:17:35:67:5b:40:3c:84:fb:fd:10:2d:f4:
7b:ac:67:15:1a:36:37:8f:73:56:3f:51:13:28:9e:73:bc:a9:
d6:f3:f2:f2:c4:a7:70:c3:22:81:d0:b4:6e:99:5d:1e:6c:8f:
d8:11:e9:dd:16:e4:6a:90:82:95:d1:bd:5e:18:35:89:25:25:
3e:be:97:b9:e1:ab:43:ae:c5:5a:5a:8e:59:6b:e7:d4:3d:f9:
cb:c2:1f:29:1a:fd:2a:bc:6b:f1:de:7c:0d:16:a4:95:11:9d:
60:c5:de:2b:2e:07:56:b0:aa:4b:d8:d0:2f:9b:92:c5:18:b8:
16:69:33:87:60:d0:c5:39:8e:c6:39:e1:fb:18:db:e9:75:e6:
d5:2c:7c:54:71:30:af:8f:33:f3:78:3b:b5:1e:dd:64:28:00:
95:9b:fc:8d:b4:f3:f1:2c:ad:52:c3:fd:1e:82:0d:a0:5d:88:
86:3e:f2:f5:7a:a6:aa:ca:b5:fe:7d:a2:ef:99:1f:06:9f:6b:
e1:a8:3c:08:f5:70:49:47:c4:58:53:f1:5d:2f:92:58:cc:87:
43:9f:b0:5d:a8:7c:9c:bc:a1:0d:91:a0:21:05:1f:43:77:4b:
30:84:63:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gFSpzQe4gpZ/xRGOqkzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjBhYmYzY2FkOWY1ZmM4MTEyYzIzZWJiYzNkMWRkNDRmZDg2ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsszH2a+xHgxT1P8aCR8jSZc7RQVC
Pvk8/NC+uQcFxnB2GSWFyNkm41g8N5IckC3JDR7Fw9qCiBfFnqh7qolL8liItWaP
k/7AsMUu5hN1M3kEKqmE9i8uqjBhs1GEhu51kjqsi+axpKnQg/qMmVEe+QHDVOtL
x6rlY9vgaIG8u3oRe6Xmm5oZqR9GLDAOI4/1twm48oz4Cjnr2kcxUfA1DZGAzFtp
OaRU5rwfwJY+g2tMeaBi31uk9yzfRetOsBGEkHfxfsnorAWoGAFh29NUQAZWve3H
s1+DWZ37vZ16B9hu4Z1eJPSAKW1AoNaHlvgKxGSlDFVJyFohGgL8zZ1vvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEsKvzytn1/IESwj67w9HdRP2G4eMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvU3dxX1BLMmZYOGdSTENQcnZEMGQxRV9ZYmg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYeBMA0G
CSqGSIb3DQEBCwUAA4IBAQCigC9zyvQj6Av8bZss64L7VmVD3YHF41oXNWdbQDyE
+/0QLfR7rGcVGjY3j3NWP1ETKJ5zvKnW8/LyxKdwwyKB0LRumV0ebI/YEendFuRq
kIKV0b1eGDWJJSU+vpe54atDrsVaWo5Za+fUPfnLwh8pGv0qvGvx3nwNFqSVEZ1g
xd4rLgdWsKpL2NAvm5LFGLgWaTOHYNDFOY7GOeH7GNvpdebVLHxUcTCvjzPzeDu1
Ht1kKACVm/yNtPPxLK1Sw/0egg2gXYiGPvL1eqaqyrX+faLvmR8Gn2vhqDwI9XBJ
R8RYU/FdL5JYzIdDn7BdqHycvKENkaAhBR9Dd0swhGNJ
-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:39 2026 by rpki-client