This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/AcDYJhONPbrOnDXucR_bbR1A5kg.roa File: AcDYJhONPbrOnDXucR_bbR1A5kg.roa (raw, json) Hash identifier: 88oN9iWkRyRsEw49ibrN6cr6y4laodB6sXFL6B6zm+E= Subject key identifier: 01:C0:D8:26:13:8D:3D:BA:CE:9C:35:EE:71:1F:DB:6D:1D:40:E6:48 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019A970C9E4F06DAFCEC135D2DF24DF2B230 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/AcDYJhONPbrOnDXucR_bbR1A5kg.roa Signing time: Tue 18 Nov 2025 12:59:37 +0000 ROA not before: Tue 18 Nov 2025 12:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214624 IP address blocks: 178.17.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:0c:9e:4f:06:da:fc:ec:13:5d:2d:f2:4d:f2:b2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Nov 18 12:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=01c0d826138d3dbace9c35ee711fdb6d1d40e648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d7:70:16:c8:46:5a:ba:0e:1d:04:8e:6d:43: 90:19:94:fc:47:ce:0b:10:84:a9:55:e9:5c:db:f2: 0d:9a:0d:09:1f:3d:21:57:88:86:01:b1:8b:82:54: de:e7:9d:ed:15:d3:48:45:05:b0:7a:93:a4:a7:f2: 78:81:c5:42:33:f5:ab:99:71:c6:be:ea:20:a9:d9: d9:5a:58:13:ce:9e:cd:03:05:45:70:b1:56:2e:bf: 77:a7:0f:e5:b3:ec:c3:cd:e1:1c:d4:2a:6f:af:34: 72:15:e0:f8:f2:ff:aa:38:22:49:df:4b:c7:80:0d: c0:da:b5:1a:49:5a:1f:b9:87:74:58:97:dd:dd:31: 47:ed:be:e9:58:1a:b4:2c:c2:58:ab:b4:92:79:c0: dd:70:4c:9d:22:73:17:db:a6:df:9c:18:8b:17:4d: 02:e6:4e:fc:ea:89:a9:7d:a3:6f:70:32:05:e9:22: 4d:11:58:a7:7c:2e:e2:7b:77:aa:e8:1b:c9:bc:28: 82:75:21:c8:00:a1:b8:c1:65:af:75:53:c3:2b:6f: 4f:87:3f:e2:3a:6e:c8:99:fc:18:0f:4c:2d:16:0d: 01:26:d8:80:80:5b:a7:4d:eb:10:36:a6:86:cb:24: 4f:ba:5f:f0:8e:ce:fb:8d:d0:c1:5a:b8:8e:97:7e: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C0:D8:26:13:8D:3D:BA:CE:9C:35:EE:71:1F:DB:6D:1D:40:E6:48 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/AcDYJhONPbrOnDXucR_bbR1A5kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.17.56.0/24 Signature Algorithm: sha256WithRSAEncryption b4:e8:56:ee:b5:3f:a0:b1:25:4f:7b:1b:59:8a:92:e7:3e:08: fa:ed:4c:69:d6:ed:bf:6d:fe:3b:20:09:b9:23:5d:98:b3:23: 54:44:92:fa:af:c7:29:c4:e5:5c:69:4a:a6:15:49:cd:28:2c: 11:a1:51:a5:9e:4e:1c:79:cd:34:7f:b1:79:69:83:66:66:e8: f2:3d:77:ea:aa:db:ff:f1:78:56:3c:27:db:82:2f:60:c6:b2: 3a:c5:f0:e4:99:a7:95:0b:16:48:fc:18:c2:a1:af:2d:a1:ce: e8:af:1e:51:37:8d:27:93:a0:30:0a:14:93:fc:cc:62:ca:f1: 39:14:8c:ed:ef:3a:74:7c:90:02:48:8e:3f:c2:20:55:12:be: 8c:aa:92:ba:3b:70:12:77:1b:e0:6e:5f:19:b2:eb:37:e2:d3: c5:d6:eb:91:b6:11:8d:b7:3c:97:f1:9b:6b:19:ba:5d:4d:c3: 37:fa:6a:40:53:39:8c:ab:b0:fb:7c:66:c3:98:03:19:5d:7c: 04:a5:c4:e4:42:6f:6f:97:cd:2d:08:cb:0f:fe:cb:cb:80:45: 05:5a:eb:b7:87:5e:bc:b7:40:71:1f:29:b4:94:dd:92:94:6b: b4:a9:42:4b:d2:fb:a8:6c:46:23:d8:69:49:d2:37:61:c4:2c: 23:c5:cb:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqXDJ5PBtr87BNdLfJN8rIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjUxMTE4MTI1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWMwZDgyNjEzOGQzZGJhY2U5YzM1ZWU3MTFmZGI2ZDFkNDBlNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstdwFshGWroOHQSObUOQGZT8R84L EISpVelc2/INmg0JHz0hV4iGAbGLglTe553tFdNIRQWwepOkp/J4gcVCM/WrmXHG vuogqdnZWlgTzp7NAwVFcLFWLr93pw/ls+zDzeEc1CpvrzRyFeD48v+qOCJJ30vH gA3A2rUaSVofuYd0WJfd3TFH7b7pWBq0LMJYq7SSecDdcEydInMX26bfnBiLF00C 5k786ompfaNvcDIF6SJNEVinfC7ie3eq6BvJvCiCdSHIAKG4wWWvdVPDK29Phz/i Om7ImfwYD0wtFg0BJtiAgFunTesQNqaGyyRPul/wjs77jdDBWriOl36G3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAHA2CYTjT26zpw17nEf220dQOZIMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvQWNEWUpoT05QYnJPbkRYdWNSX2JiUjFBNWtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshE4MA0G CSqGSIb3DQEBCwUAA4IBAQC06FbutT+gsSVPextZipLnPgj67Uxp1u2/bf47IAm5 I12YsyNURJL6r8cpxOVcaUqmFUnNKCwRoVGlnk4cec00f7F5aYNmZujyPXfqqtv/ 8XhWPCfbgi9gxrI6xfDkmaeVCxZI/BjCoa8toc7orx5RN40nk6AwChST/MxiyvE5 FIzt7zp0fJACSI4/wiBVEr6MqpK6O3ASdxvgbl8Zsus34tPF1uuRthGNtzyX8Ztr GbpdTcM3+mpAUzmMq7D7fGbDmAMZXXwEpcTkQm9vl80tCMsP/svLgEUFWuu3h168 t0BxHym0lN2SlGu0qUJL0vuobEYj2GlJ0jdhxCwjxcu+ -----END CERTIFICATE-----Generated at Sat Dec 6 14:07:16 2025 by rpki-client