This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tQaIukIBL8Y1HAk3m4jndw2T7EE.roa File: tQaIukIBL8Y1HAk3m4jndw2T7EE.roa (raw, json) Hash identifier: GsTYSJ6bVT61wfy5fWIo0YkPt1obKdhYV9/osJYdamY= Subject key identifier: B5:06:88:BA:42:01:2F:C6:35:1C:09:37:9B:88:E7:77:0D:93:EC:41 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B3603F1CC9682B9913D59AD80C61BCA Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tQaIukIBL8Y1HAk3m4jndw2T7EE.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60542 IP address blocks: 172.110.208.0/24 maxlen: 24 193.107.217.0/24 maxlen: 24 202.71.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:03:f1:cc:96:82:b9:91:3d:59:ad:80:c6:1b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b50688ba42012fc6351c09379b88e7770d93ec41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e2:b3:65:90:fe:cd:bb:4b:1a:46:4f:e6:67: 17:2d:0a:a6:ce:7b:82:bc:8c:79:02:d3:0b:38:9a: 22:54:ab:f4:eb:73:4a:9d:cf:53:80:a9:9d:72:1b: 47:97:7d:b3:52:69:e3:92:84:7b:0f:9b:3b:9b:6a: d0:f8:36:6e:6e:b6:a0:6e:bb:b7:75:fb:eb:1b:d6: 67:86:63:5c:10:e7:03:30:db:84:32:1a:f7:82:a7: 0e:5d:8a:39:8a:66:89:41:0e:dc:b0:e9:97:9a:99: 59:3d:6f:87:13:79:8a:02:60:0a:6e:30:0c:33:3c: 44:8a:2a:95:88:2f:28:b4:62:55:78:5e:41:f4:80: a7:21:fe:86:36:31:9d:74:61:4c:08:df:ce:18:44: cf:4b:ce:c5:30:db:75:b3:a5:e6:49:b1:5e:f8:ed: d2:32:d1:b0:06:90:c9:a4:d6:10:34:9b:cf:54:1c: 70:a0:b5:50:4a:ce:03:94:61:66:08:15:25:21:0e: c0:f3:9f:63:70:56:e4:c0:85:d7:07:52:32:8e:c2: 4b:4a:ea:64:34:8a:dd:fd:02:36:54:b6:47:f9:3d: cc:d8:ee:59:f6:08:bf:14:1c:f6:f7:52:34:db:41: 1e:45:91:df:c5:54:7a:17:75:ce:91:80:f9:3c:5b: 3c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:06:88:BA:42:01:2F:C6:35:1C:09:37:9B:88:E7:77:0D:93:EC:41 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tQaIukIBL8Y1HAk3m4jndw2T7EE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.110.208.0/24 193.107.217.0/24 202.71.8.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:35:a1:33:34:10:3f:a8:66:51:49:62:08:5a:13:e9:6f:27: 09:bf:1f:70:a6:9d:40:a4:d3:33:47:f2:0f:c2:77:39:87:91: 99:62:5c:c1:3b:8c:df:df:1c:6a:11:12:63:fb:a2:26:58:28: d5:74:2c:23:84:6c:bd:92:b7:91:1b:6d:cc:59:62:36:a7:c7: d8:83:f0:15:48:b6:9b:2d:34:30:3d:7b:af:50:c8:42:a6:cd: e1:a2:76:67:da:c7:0f:84:32:fc:46:e6:05:51:b8:7d:d3:1d: 5f:83:8a:b1:3d:58:5e:f2:c3:44:55:08:d4:3a:6d:7e:93:43: af:9c:07:dc:a5:d3:c7:f8:fe:f0:37:3c:de:6b:cc:c7:13:34: c9:c1:48:d3:42:38:be:39:b8:e7:7e:97:a2:c8:af:ac:6c:6a: 76:bd:b3:da:38:f8:28:29:2e:1d:d4:0e:80:b6:41:ee:29:de: 67:90:8b:c2:33:1e:40:f2:a8:61:68:a2:28:27:01:10:ed:d5: 74:b8:9f:2a:5a:b4:b8:4c:07:4f:9a:80:b5:28:79:31:bf:1b: 4d:c5:f1:40:13:f6:e0:49:fe:13:03:7b:22:83:b1:d6:81:7c: 90:72:fe:b2:bd:1c:fd:70:30:e4:d9:b1:51:e0:fa:c5:58:fb: d4:be:a7:95 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NgPxzJaCuZE9Wa2AxhvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTA2ODhiYTQyMDEyZmM2MzUxYzA5Mzc5Yjg4ZTc3NzBkOTNlYzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+KzZZD+zbtLGkZP5mcXLQqmznuC vIx5AtMLOJoiVKv063NKnc9TgKmdchtHl32zUmnjkoR7D5s7m2rQ+DZubragbru3 dfvrG9ZnhmNcEOcDMNuEMhr3gqcOXYo5imaJQQ7csOmXmplZPW+HE3mKAmAKbjAM MzxEiiqViC8otGJVeF5B9ICnIf6GNjGddGFMCN/OGETPS87FMNt1s6XmSbFe+O3S MtGwBpDJpNYQNJvPVBxwoLVQSs4DlGFmCBUlIQ7A859jcFbkwIXXB1IyjsJLSupk NIrd/QI2VLZH+T3M2O5Z9gi/FBz291I020EeRZHfxVR6F3XOkYD5PFs82QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLUGiLpCAS/GNRwJN5uI53cNk+xBMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvdFFhSXVrSUJMOFkxSEFrM200am5kdzJUN0VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArG7QAwQA wWvZAwQAykcIMA0GCSqGSIb3DQEBCwUAA4IBAQBNNaEzNBA/qGZRSWIIWhPpbycJ vx9wpp1ApNMzR/IPwnc5h5GZYlzBO4zf3xxqERJj+6ImWCjVdCwjhGy9kreRG23M WWI2p8fYg/AVSLabLTQwPXuvUMhCps3honZn2scPhDL8RuYFUbh90x1fg4qxPVhe 8sNEVQjUOm1+k0OvnAfcpdPH+P7wNzzea8zHEzTJwUjTQji+ObjnfpeiyK+sbGp2 vbPaOPgoKS4d1A6AtkHuKd5nkIvCMx5A8qhhaKIoJwEQ7dV0uJ8qWrS4TAdPmoC1 KHkxvxtNxfFAE/bgSf4TA3sig7HWgXyQcv6yvRz9cDDk2bFR4PrFWPvUvqeV -----END CERTIFICATE-----Generated at Wed Jan 21 09:23:04 2026 by rpki-client