This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/dA33_XtJFILspndoUVbmhq6cetE.roa File: dA33_XtJFILspndoUVbmhq6cetE.roa (raw, json) Hash identifier: E+I1B1oVN9sljJqRNtt6wq3uPChs0BZBmrrLJeCfQoo= Subject key identifier: 74:0D:F7:FD:7B:49:14:82:EC:A6:77:68:51:56:E6:86:AE:9C:7A:D1 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B360E628D879E42908777F6F4DA4442 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/dA33_XtJFILspndoUVbmhq6cetE.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206264 IP address blocks: 45.155.91.0/24 maxlen: 24 172.110.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0e:62:8d:87:9e:42:90:87:77:f6:f4:da:44:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=740df7fd7b491482eca677685156e686ae9c7ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:88:85:d0:98:8d:8c:84:2a:27:13:99:2e: 35:d3:b4:1e:f6:50:ec:27:d1:c0:30:d1:10:20:f7: aa:2f:a0:b8:22:64:7d:55:05:2b:e5:fc:20:5d:d2: ba:cf:4b:54:b0:6e:cd:59:fc:30:cb:66:7f:2c:8b: ab:9e:4b:6f:31:3d:d2:ec:d7:c7:7d:17:7c:f1:44: 59:c4:4f:7d:ba:e6:af:46:07:a2:70:01:9b:0a:50: 0a:7e:56:3a:3d:aa:27:a4:4c:9b:6c:41:c6:27:ce: 98:7b:80:4a:85:1a:7d:b3:62:0b:21:86:0a:b4:02: 34:5b:49:8f:8d:0b:47:23:1b:b8:e1:9a:98:a8:ad: bd:d9:e9:16:47:44:b6:25:0c:69:03:60:f7:71:b0: 59:58:32:9a:e8:e6:97:6d:36:71:34:2c:16:98:53: 79:36:7c:8b:80:63:d2:8d:bb:73:cb:01:11:0a:c9: cd:48:84:af:8d:b3:b4:a9:9b:cc:14:8e:53:ae:e3: 92:f2:82:61:6d:fe:37:a2:ce:f6:e5:35:68:9c:f2: 59:e2:1b:53:aa:70:ae:dd:33:c5:ac:c3:ee:8e:75: 20:96:ba:bf:45:b3:88:05:ab:8b:5a:72:5a:b9:3b: b8:0e:c8:b5:5c:9f:bf:85:88:b4:31:1c:1e:18:bf: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0D:F7:FD:7B:49:14:82:EC:A6:77:68:51:56:E6:86:AE:9C:7A:D1 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/dA33_XtJFILspndoUVbmhq6cetE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.91.0/24 172.110.216.0/24 Signature Algorithm: sha256WithRSAEncryption 03:16:d9:2f:1b:60:87:5f:6b:c4:67:99:45:97:2e:d3:ec:2a: 3b:5a:18:96:c0:82:8a:40:80:52:7e:4d:2a:91:01:34:63:d1: ca:84:ba:98:1a:77:d3:1a:5c:19:c5:85:c1:ee:7f:e9:0d:14: c6:7f:7a:a2:01:23:bd:54:a3:d6:d5:f1:3f:66:49:46:97:aa: 83:aa:65:27:b1:4a:a1:7e:41:57:1e:36:fa:c5:e9:74:4e:5e: a7:95:2e:48:55:e6:65:97:e3:2d:b8:ef:86:ce:8a:7b:c8:c9: 6a:4d:04:55:e8:59:18:b7:00:50:db:4a:e4:f2:f3:3b:a2:cd: d0:10:41:f3:62:00:2d:13:e8:86:86:38:97:d2:d3:d7:12:de: 5a:97:13:d8:c2:12:05:b1:e5:91:5e:69:29:11:12:70:1e:7f: 68:b3:26:9d:48:88:6a:7f:4a:4e:81:7e:81:67:b0:12:ca:9c: 5e:21:55:a4:59:20:e2:4e:f5:ce:ae:87:ad:d7:12:8e:22:8f: 91:a2:a0:b6:40:23:d1:8c:99:64:aa:8a:b4:5d:7a:88:cb:c5: 37:93:c0:41:e0:8d:57:e7:0c:da:e7:da:48:d4:2d:61:a3:bb: 10:f6:4d:41:b5:eb:23:ff:26:c6:d8:75:84:40:1e:55:6f:35: 81:e4:d6:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Ng5ijYeeQpCHd/b02kRCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDBkZjdmZDdiNDkxNDgyZWNhNjc3Njg1MTU2ZTY4NmFlOWM3YWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9uIhdCYjYyEKicTmS4107Qe9lDs J9HAMNEQIPeqL6C4ImR9VQUr5fwgXdK6z0tUsG7NWfwwy2Z/LIurnktvMT3S7NfH fRd88URZxE99uuavRgeicAGbClAKflY6PaonpEybbEHGJ86Ye4BKhRp9s2ILIYYK tAI0W0mPjQtHIxu44ZqYqK292ekWR0S2JQxpA2D3cbBZWDKa6OaXbTZxNCwWmFN5 NnyLgGPSjbtzywERCsnNSISvjbO0qZvMFI5TruOS8oJhbf43os725TVonPJZ4htT qnCu3TPFrMPujnUglrq/RbOIBauLWnJauTu4Dsi1XJ+/hYi0MRweGL/z2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHQN9/17SRSC7KZ3aFFW5oaunHrRMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvZEEzM19YdEpGSUxzcG5kb1VWYm1ocTZjZXRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZtbAwQA rG7YMA0GCSqGSIb3DQEBCwUAA4IBAQADFtkvG2CHX2vEZ5lFly7T7Co7WhiWwIKK QIBSfk0qkQE0Y9HKhLqYGnfTGlwZxYXB7n/pDRTGf3qiASO9VKPW1fE/ZklGl6qD qmUnsUqhfkFXHjb6xel0Tl6nlS5IVeZll+MtuO+Gzop7yMlqTQRV6FkYtwBQ20rk 8vM7os3QEEHzYgAtE+iGhjiX0tPXEt5alxPYwhIFseWRXmkpERJwHn9osyadSIhq f0pOgX6BZ7ASypxeIVWkWSDiTvXOroet1xKOIo+RoqC2QCPRjJlkqoq0XXqIy8U3 k8BB4I1X5wza59pI1C1ho7sQ9k1Btesj/ybG2HWEQB5VbzWB5NaL -----END CERTIFICATE-----Generated at Wed Jan 21 09:24:15 2026 by rpki-client