This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/BspvOWyaA8GFCA1fJ7jCXD7tIjg.roa File: BspvOWyaA8GFCA1fJ7jCXD7tIjg.roa (raw, json) Hash identifier: 2U/cEiEXfM/V9obW2VJzDgequjDHigSdc4MigkHUA08= Subject key identifier: 06:CA:6F:39:6C:9A:03:C1:85:08:0D:5F:27:B8:C2:5C:3E:ED:22:38 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B360027D5EDB37CA5CCD857F990F99C Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/BspvOWyaA8GFCA1fJ7jCXD7tIjg.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38051 IP address blocks: 172.110.217.0/24 maxlen: 24 172.110.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:00:27:d5:ed:b3:7c:a5:cc:d8:57:f9:90:f9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06ca6f396c9a03c185080d5f27b8c25c3eed2238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:d3:32:25:4c:92:c9:f3:a7:df:ab:06:94:5b: 4e:8c:bc:49:3b:bb:de:97:b3:0c:07:a8:07:91:eb: 42:fb:29:c6:af:64:84:bf:2d:e6:59:dc:d8:17:cd: b3:0f:6b:97:34:08:7a:8a:14:6c:32:4e:37:a1:76: 7c:68:d1:ee:a9:17:29:05:ba:72:96:5c:88:ca:e5: 5d:04:f3:7b:fd:3e:46:86:8c:e1:6b:bb:67:59:6f: 46:0b:b0:26:43:98:fb:9f:2d:bf:1c:42:18:20:06: dc:2a:67:5b:33:92:32:1a:38:61:dc:fa:91:7b:ff: 05:04:a5:cd:aa:c7:cc:b7:2b:71:b4:c3:a5:58:a5: 5b:6d:db:66:95:98:94:e5:28:3f:8f:ba:e2:4c:93: 39:15:2e:22:da:14:c7:c3:02:15:4c:30:bb:4a:2e: 95:8b:6d:ca:5a:aa:ba:76:8e:c6:ef:ff:83:44:e0: 44:08:ea:92:1f:44:5c:4d:1e:89:56:c4:4b:55:dc: 07:15:e2:97:a5:87:f7:ed:89:c3:12:e2:b8:9e:eb: 02:48:ea:3e:a4:8f:69:21:f2:5a:f1:94:85:8f:34: f3:f2:00:db:7b:71:84:7f:f0:07:c5:3b:64:4e:46: 30:f6:4a:c3:43:a6:a0:62:13:30:a9:63:7a:7d:98: cc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CA:6F:39:6C:9A:03:C1:85:08:0D:5F:27:B8:C2:5C:3E:ED:22:38 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/BspvOWyaA8GFCA1fJ7jCXD7tIjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.110.217.0-172.110.218.255 Signature Algorithm: sha256WithRSAEncryption 29:a9:26:49:72:60:da:48:bc:89:6f:1a:99:b8:33:9d:20:0d: 51:67:4a:2f:d3:51:4f:24:42:ee:42:ea:d6:66:de:43:49:f0: 69:77:1c:19:d9:a3:3d:0b:cc:cb:de:29:d7:de:7b:6b:29:56: 20:37:10:c6:a3:50:57:80:80:3e:d0:c9:ce:1c:f6:65:0e:2d: ae:3a:33:78:e5:c4:f2:88:72:b9:97:d8:d1:af:36:4e:be:9b: fc:db:d1:1e:67:01:09:78:69:e5:37:7e:97:a4:24:dd:fa:a1: 34:7d:a3:e8:be:4d:91:e1:cb:bb:23:83:04:10:98:73:25:d5: e5:a3:59:ed:86:71:a7:16:bd:cd:c4:ef:52:4c:27:59:5f:62: d1:ec:4f:53:d6:9b:0d:1d:0a:b2:39:f9:04:79:f1:33:c8:24: 8c:1c:85:72:89:6c:0a:89:c4:25:b6:a8:57:5d:5b:c9:c8:09: e3:53:ae:35:53:83:c2:b8:ed:81:fb:b6:62:94:c8:50:3b:6a: 3d:1c:f2:9b:21:90:22:d5:73:0a:5d:58:7a:14:0c:50:95:39: 5b:78:64:ab:29:03:9e:97:0d:60:79:75:88:33:1a:1d:5b:58: 29:b4:eb:2c:e7:d2:58:b3:31:ed:34:d2:60:f0:bc:52:e0:31: 83:ec:5f:0d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NgAn1e2zfKXM2Ff5kPmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmNhNmYzOTZjOWEwM2MxODUwODBkNWYyN2I4YzI1YzNlZWQyMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/NMyJUySyfOn36sGlFtOjLxJO7ve l7MMB6gHketC+ynGr2SEvy3mWdzYF82zD2uXNAh6ihRsMk43oXZ8aNHuqRcpBbpy llyIyuVdBPN7/T5Ghozha7tnWW9GC7AmQ5j7ny2/HEIYIAbcKmdbM5IyGjhh3PqR e/8FBKXNqsfMtytxtMOlWKVbbdtmlZiU5Sg/j7riTJM5FS4i2hTHwwIVTDC7Si6V i23KWqq6do7G7/+DROBECOqSH0RcTR6JVsRLVdwHFeKXpYf37YnDEuK4nusCSOo+ pI9pIfJa8ZSFjzTz8gDbe3GEf/AHxTtkTkYw9krDQ6agYhMwqWN6fZjMHwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAbKbzlsmgPBhQgNXye4wlw+7SI4MB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvQnNwdk9XeWFBOEdGQ0ExZko3akNYRDd0SWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACsbtkD BACsbtowDQYJKoZIhvcNAQELBQADggEBACmpJklyYNpIvIlvGpm4M50gDVFnSi/T UU8kQu5C6tZm3kNJ8Gl3HBnZoz0LzMveKdfee2spViA3EMajUFeAgD7Qyc4c9mUO La46M3jlxPKIcrmX2NGvNk6+m/zb0R5nAQl4aeU3fpekJN36oTR9o+i+TZHhy7sj gwQQmHMl1eWjWe2GcacWvc3E71JMJ1lfYtHsT1PWmw0dCrI5+QR58TPIJIwchXKJ bAqJxCW2qFddW8nICeNTrjVTg8K47YH7tmKUyFA7aj0c8pshkCLVcwpdWHoUDFCV OVt4ZKspA56XDWB5dYgzGh1bWCm06yzn0lizMe000mDwvFLgMYPsXw0= -----END CERTIFICATE-----Generated at Wed Jan 21 09:23:03 2026 by rpki-client