This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/yaioAwQqgstiMhVwqwEHasXnYDs.roa File: yaioAwQqgstiMhVwqwEHasXnYDs.roa (raw, json) Hash identifier: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM= Subject key identifier: C9:A8:A8:03:04:2A:82:CB:62:32:15:70:AB:01:07:6A:C5:E7:60:3B Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B7BA3DEBB195A2CF0A825B17036333218 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/yaioAwQqgstiMhVwqwEHasXnYDs.roa Signing time: Thu 01 Jan 2026 22:18:15 +0000 ROA not before: Thu 01 Jan 2026 22:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 178.17.48.0/24 maxlen: 24 178.17.49.0/24 maxlen: 24 178.17.50.0/24 maxlen: 24 178.17.51.0/24 maxlen: 24 178.17.52.0/24 maxlen: 24 178.17.60.0/24 maxlen: 24 178.17.61.0/24 maxlen: 24 178.17.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:de:bb:19:5a:2c:f0:a8:25:b1:70:36:33:32:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9a8a803042a82cb62321570ab01076ac5e7603b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:91:d2:2b:99:26:62:d5:98:07:b8:5d:ef: 83:3e:9f:3b:19:fe:69:c0:d2:b2:ab:53:08:33:df: 10:48:7e:3c:c1:28:ec:1a:3c:9e:b9:51:fb:2d:7b: a8:cb:74:7b:d3:10:f4:7d:de:85:2c:8c:90:47:27: 48:ee:4f:87:be:13:48:b3:a1:22:ec:02:b1:e5:69: 39:2f:ed:ff:5a:db:1c:68:d1:cb:0d:7f:9b:f3:1c: 09:23:9c:ce:62:2c:5c:c4:bf:85:d3:9f:5b:e4:ce: 08:ab:1b:24:f8:a5:d3:b2:4c:21:1a:56:8b:d5:cb: c7:2d:8c:1d:8a:5c:c9:80:26:bd:88:07:80:94:c1: e6:25:75:d6:2b:51:07:82:c0:bc:60:3f:a2:f9:44: 67:9a:2c:26:45:02:cb:04:cd:23:b0:de:1b:92:43: 51:4d:95:a7:07:12:bf:47:eb:d1:5c:71:2e:82:72: b7:02:b4:70:2f:56:9c:55:4f:3b:8c:32:d7:4f:bf: 69:4e:4b:0c:05:b1:3a:99:3b:2e:4b:b9:9f:fd:c7: 1b:6d:23:8d:33:3b:dc:fc:5c:77:4a:27:51:8b:aa: ee:ef:c5:42:ee:44:bd:9f:c7:60:1f:06:af:1d:e0: 14:02:ae:b1:87:5d:f4:eb:a0:dd:45:e2:b6:25:7e: 0c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A8:A8:03:04:2A:82:CB:62:32:15:70:AB:01:07:6A:C5:E7:60:3B X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/yaioAwQqgstiMhVwqwEHasXnYDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.17.48.0-178.17.52.255 178.17.60.0-178.17.62.255 Signature Algorithm: sha256WithRSAEncryption 85:02:a0:c2:1a:66:e7:3e:dc:ec:b4:4f:4c:10:58:18:f1:51: 79:95:e5:cc:12:5f:b0:66:63:1e:6c:02:58:1b:f2:45:d4:17: e1:30:4f:1b:74:46:5b:ff:95:54:7c:8e:3e:46:57:5d:8d:9c: 10:87:0f:53:05:b4:3d:61:54:84:69:00:7f:8d:9c:5c:b3:41: f1:2b:b3:54:65:dd:42:18:39:80:37:9b:58:28:a1:5d:02:14: e6:d4:e7:7d:bc:a1:41:4f:ac:9c:a2:bb:4f:3a:39:04:8d:89: 8a:1b:d5:d6:83:dd:2f:5d:7a:63:9d:e9:c6:ca:e2:f4:ef:6f: da:e5:53:b7:05:b5:0b:92:5e:b3:30:0c:14:98:8e:c0:6a:16: b1:f7:ad:e8:b7:5e:2f:81:0e:d2:7b:60:d5:9e:f2:78:53:8b: d8:37:5b:4b:bf:d9:93:87:c4:60:d9:e8:4f:ce:3b:d4:73:94: d8:93:76:a2:98:ca:66:5a:28:59:8e:9b:f4:92:54:87:d9:82: 71:06:8d:a0:a2:05:41:33:9f:ba:bf:2e:2c:1d:60:56:65:51: 07:73:d5:91:3e:bf:e5:e2:10:86:2b:4c:2b:0c:f8:dc:00:06: d1:ec:fd:67:ad:8c:3a:92:7b:76:0a:fd:47:a3:f9:4a:42:0c: 9c:c1:11:c2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt7o967GVos8KglsXA2MzIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWE4YTgwMzA0MmE4MmNiNjIzMjE1NzBhYjAxMDc2YWM1ZTc2MDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyKR0iuZJmLVmAe4Xe+DPp87Gf5p wNKyq1MIM98QSH48wSjsGjyeuVH7LXuoy3R70xD0fd6FLIyQRydI7k+HvhNIs6Ei 7AKx5Wk5L+3/WtscaNHLDX+b8xwJI5zOYixcxL+F059b5M4Iqxsk+KXTskwhGlaL 1cvHLYwdilzJgCa9iAeAlMHmJXXWK1EHgsC8YD+i+URnmiwmRQLLBM0jsN4bkkNR TZWnBxK/R+vRXHEugnK3ArRwL1acVU87jDLXT79pTksMBbE6mTsuS7mf/ccbbSON Mzvc/Fx3SidRi6ru78VC7kS9n8dgHwavHeAUAq6xh13066DdReK2JX4M1QIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFMmoqAMEKoLLYjIVcKsBB2rF52A7MB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEveWFpb0F3UXFnc3RpTWhWd3F3RUhhc1huWURzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBASyETAD BACyETQwDAMEArIRPAMEALIRPjANBgkqhkiG9w0BAQsFAAOCAQEAhQKgwhpm5z7c 7LRPTBBYGPFReZXlzBJfsGZjHmwCWBvyRdQX4TBPG3RGW/+VVHyOPkZXXY2cEIcP UwW0PWFUhGkAf42cXLNB8SuzVGXdQhg5gDebWCihXQIU5tTnfbyhQU+snKK7Tzo5 BI2JihvV1oPdL116Y53pxsri9O9v2uVTtwW1C5JeszAMFJiOwGoWsfet6LdeL4EO 0ntg1Z7yeFOL2DdbS7/Zk4fEYNnoT8471HOU2JN2opjKZlooWY6b9JJUh9mCcQaN oKIFQTOfur8uLB1gVmVRB3PVkT6/5eIQhitMKwz43AAG0ez9Z62MOpJ7dgr9R6P5 SkIMnMERwg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:38 2026 by rpki-client