This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Yi1aaKV--Ft5FHEg_qo0n4PwG8M.roa File: Yi1aaKV--Ft5FHEg_qo0n4PwG8M.roa (raw, json) Hash identifier: wa6m8y9TLptAA6kEXSjmRxoc6mRj+CTH3xrXy9JLq+8= Subject key identifier: 62:2D:5A:68:A5:7E:F8:5B:79:14:71:20:FE:AA:34:9F:83:F0:1B:C3 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019A9F32C355C1A118C19B79A668D790B7E2 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Yi1aaKV--Ft5FHEg_qo0n4PwG8M.roa Signing time: Thu 20 Nov 2025 02:58:15 +0000 ROA not before: Thu 20 Nov 2025 02:58:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206264 IP address blocks: 45.155.91.0/24 maxlen: 24 172.110.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9f:32:c3:55:c1:a1:18:c1:9b:79:a6:68:d7:90:b7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Nov 20 02:58:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=622d5a68a57ef85b79147120feaa349f83f01bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:96:d7:e3:0c:c5:b7:f1:ab:7f:2e:1f:5b: 70:51:56:9e:b1:e2:68:a4:fb:75:8f:c6:7d:d7:ac: 8e:80:f2:88:27:f5:c7:55:55:14:fa:69:64:79:ed: ba:86:17:85:ba:14:74:6d:98:42:10:76:a4:ea:2c: 20:4a:7d:87:f5:93:14:e3:fb:85:0d:c4:c6:5c:13: 3b:73:92:91:f1:c0:78:8b:fd:7a:db:25:b9:e8:b9: 37:43:ab:08:b3:da:83:9b:11:82:bd:55:be:5e:56: a0:c2:86:71:b2:19:df:35:61:92:c7:a9:ee:13:78: 50:c0:f4:f9:e2:ca:7b:37:39:4c:96:ec:ba:d1:e7: 51:1d:31:dc:57:f1:e3:ee:7e:cb:62:a4:42:6e:a7: f2:45:60:f1:e5:56:cd:99:2c:0e:7d:d4:84:b9:52: 66:93:fa:e7:d3:be:a3:3c:4b:3b:3e:c9:28:86:94: bf:7e:a6:55:ae:6c:4f:dc:02:b5:04:bc:04:64:d3: e2:d8:23:74:c0:c8:15:b6:42:00:5e:19:41:8c:b0: 2f:15:6e:ab:08:dc:56:2a:05:a3:eb:68:ad:db:c3: 31:5a:70:ec:c6:2d:20:f6:17:29:2e:4e:fd:13:e9: 5f:42:1f:dd:4b:61:24:1d:c1:90:28:16:20:07:01: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2D:5A:68:A5:7E:F8:5B:79:14:71:20:FE:AA:34:9F:83:F0:1B:C3 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Yi1aaKV--Ft5FHEg_qo0n4PwG8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.91.0/24 172.110.216.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:9a:31:5c:5c:6a:e5:44:8d:c7:8e:6c:9a:cf:80:92:76:86: 99:bf:03:66:49:a0:b5:e8:46:e0:0b:50:70:31:06:80:c0:3e: d9:d0:88:8d:18:08:2b:14:8a:4e:f3:ce:3b:82:e6:e8:80:5c: 6a:ea:2d:85:f1:f7:ec:b5:05:f1:8b:bd:51:da:1a:cb:5a:dd: 0f:f4:29:f2:dc:6a:4b:f9:8a:5c:4e:49:da:6f:0a:d5:cc:63: d3:fc:58:44:b4:bf:89:73:27:6a:ca:7e:c8:b9:bf:9f:26:73: f2:a8:8f:8d:6a:2c:10:a7:b4:9f:7d:70:d2:92:73:86:ad:dc: 82:f0:24:d0:68:c6:ba:bd:4e:bc:7e:52:7b:37:ef:e2:fe:f6: 81:8d:12:3c:70:49:09:64:12:47:d1:56:51:60:19:4e:fe:e5: 37:cb:66:81:8d:e5:fb:1d:57:76:89:3b:2f:b3:02:4d:fc:e5: be:0c:78:79:c9:6b:37:66:59:12:b4:7b:b3:75:cb:4f:ce:3b: 3c:7d:7b:2a:d2:ca:92:a1:b9:fa:af:87:57:c8:99:3e:84:15: fc:b5:27:cd:bf:1c:2a:f1:82:01:47:d8:8e:89:0a:13:12:7c: 0f:4e:6b:2c:e3:fe:27:b7:08:5d:9f:b7:99:8c:a6:03:3e:6f: 6d:94:83:14 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqfMsNVwaEYwZt5pmjXkLfiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjUxMTIwMDI1ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjJkNWE2OGE1N2VmODViNzkxNDcxMjBmZWFhMzQ5ZjgzZjAxYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEiW1+MMxbfxq38uH1twUVaeseJo pPt1j8Z916yOgPKIJ/XHVVUU+mlkee26hheFuhR0bZhCEHak6iwgSn2H9ZMU4/uF DcTGXBM7c5KR8cB4i/162yW56Lk3Q6sIs9qDmxGCvVW+XlagwoZxshnfNWGSx6nu E3hQwPT54sp7NzlMluy60edRHTHcV/Hj7n7LYqRCbqfyRWDx5VbNmSwOfdSEuVJm k/rn076jPEs7PskohpS/fqZVrmxP3AK1BLwEZNPi2CN0wMgVtkIAXhlBjLAvFW6r CNxWKgWj62it28MxWnDsxi0g9hcpLk79E+lfQh/dS2EkHcGQKBYgBwGqDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGItWmilfvhbeRRxIP6qNJ+D8BvDMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvWWkxYWFLVi0tRnQ1RkhFZ19xbzBuNFB3RzhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZtbAwQA rG7YMA0GCSqGSIb3DQEBCwUAA4IBAQBtmjFcXGrlRI3Hjmyaz4CSdoaZvwNmSaC1 6EbgC1BwMQaAwD7Z0IiNGAgrFIpO8847gubogFxq6i2F8ffstQXxi71R2hrLWt0P 9Cny3GpL+YpcTknabwrVzGPT/FhEtL+Jcydqyn7Iub+fJnPyqI+NaiwQp7SffXDS knOGrdyC8CTQaMa6vU68flJ7N+/i/vaBjRI8cEkJZBJH0VZRYBlO/uU3y2aBjeX7 HVd2iTsvswJN/OW+DHh5yWs3ZlkStHuzdctPzjs8fXsq0sqSobn6r4dXyJk+hBX8 tSfNvxwq8YIBR9iOiQoTEnwPTmss4/4ntwhdn7eZjKYDPm9tlIMU -----END CERTIFICATE-----Generated at Sat Dec 6 18:40:04 2025 by rpki-client