This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ljimio0yfAoNBs_GfjBqxUShUR0.roa File: ljimio0yfAoNBs_GfjBqxUShUR0.roa (raw, json) Hash identifier: oGMAKqjP+odUb/r9E/zYCwk+hlgLp2FpS6nliQwMO9g= Subject key identifier: 96:38:A6:8A:8D:32:7C:0A:0D:06:CF:C6:7E:30:6A:C5:44:A1:51:1D Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019A7D21C9B1B16A27DF6DA5BC408FB59056 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ljimio0yfAoNBs_GfjBqxUShUR0.roa Signing time: Thu 13 Nov 2025 12:12:37 +0000 ROA not before: Thu 13 Nov 2025 12:12:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60542 IP address blocks: 172.110.208.0/24 maxlen: 24 193.107.217.0/24 maxlen: 24 202.71.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:21:c9:b1:b1:6a:27:df:6d:a5:bc:40:8f:b5:90:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Nov 13 12:12:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9638a68a8d327c0a0d06cfc67e306ac544a1511d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:9f:0f:03:d1:de:f2:1e:e6:58:e8:0d:45: ba:a8:b6:17:4b:79:73:02:ed:20:14:90:7a:b4:76: 84:5f:cc:c1:02:e5:c5:bc:d4:4b:e6:c5:33:ed:93: 55:fb:33:29:83:3c:2a:ba:6b:a9:85:ed:37:dc:96: 5d:51:a0:d3:81:ef:27:ed:c1:03:f4:04:b8:dc:aa: c4:af:1d:60:90:cc:82:31:95:a9:fc:9e:5d:49:d3: 30:73:26:c2:97:53:23:49:cc:e2:0d:7d:bf:48:fc: c4:67:bb:e1:0a:37:46:3e:bc:00:f8:8a:b8:e1:91: e5:7e:a9:de:be:5c:97:e3:b4:a6:b8:99:fd:b5:53: df:4e:ec:07:90:26:1d:cd:2b:9e:a2:01:bd:08:68: b6:75:b1:c8:86:78:52:9d:11:a1:ad:21:c5:09:d1: 51:5a:e8:9d:4d:35:bf:85:af:d5:d9:24:21:be:5d: 80:d2:33:f1:40:ea:2e:4e:42:a8:b4:67:8d:34:c0: a7:38:49:b7:aa:73:77:1b:4d:69:9b:fc:74:90:46: cd:da:bb:78:de:77:68:ba:5b:bd:c8:49:36:e2:68: 04:54:1e:a0:e9:7f:3d:d1:33:4b:9c:18:61:5b:11: 70:4e:f6:fc:3c:bc:3d:87:98:1f:45:9e:e1:ab:8b: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:38:A6:8A:8D:32:7C:0A:0D:06:CF:C6:7E:30:6A:C5:44:A1:51:1D X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ljimio0yfAoNBs_GfjBqxUShUR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.110.208.0/24 193.107.217.0/24 202.71.8.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:63:26:47:37:b9:02:4d:1d:81:7e:ae:ca:c8:8c:1e:91:8a: e3:73:dc:73:ca:5a:3c:e6:d8:87:c9:a4:02:64:8d:1f:64:d1: 24:7c:21:86:3a:8b:c8:34:80:02:94:dd:a4:1d:94:35:f2:9a: 90:5e:e9:21:fa:29:6a:da:e2:a8:72:ac:5a:67:72:70:cc:4a: 2a:84:3a:a2:74:64:0b:eb:cc:9a:d5:d6:5f:bb:2b:09:3c:45: 73:bf:40:ee:8a:86:e7:43:cd:bd:e8:1a:3d:a1:63:d8:94:71: 2b:2b:63:72:27:92:bf:94:ed:77:49:45:50:e2:8a:1e:77:11: 01:1f:a9:9f:8f:80:aa:9b:4c:43:15:6b:af:b4:e3:f7:bd:fe: aa:1f:47:dd:9f:a5:4e:22:f4:1f:42:e7:d2:89:57:b3:47:e2: cf:5e:8d:1d:9d:0a:91:3c:98:d5:99:f2:91:2f:67:b3:34:1a: 13:54:95:ee:3c:dc:f2:b5:bc:5f:23:ae:0b:41:54:6d:d1:87: 8a:b3:2c:17:83:57:53:92:df:d7:7f:33:a8:41:5c:a8:6d:37: af:18:b0:3b:bb:e5:be:48:36:bb:68:04:a1:ec:dc:3d:b3:b1: b6:cc:ff:43:b4:eb:c8:b4:3c:a9:84:73:bf:4b:bc:70:3a:bd: e3:74:93:da -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZp9IcmxsWon322lvECPtZBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjUxMTEzMTIxMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjM4YTY4YThkMzI3YzBhMGQwNmNmYzY3ZTMwNmFjNTQ0YTE1MTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPSfDwPR3vIe5ljoDUW6qLYXS3lz Au0gFJB6tHaEX8zBAuXFvNRL5sUz7ZNV+zMpgzwqumuphe033JZdUaDTge8n7cED 9AS43KrErx1gkMyCMZWp/J5dSdMwcybCl1MjScziDX2/SPzEZ7vhCjdGPrwA+Iq4 4ZHlfqnevlyX47SmuJn9tVPfTuwHkCYdzSueogG9CGi2dbHIhnhSnRGhrSHFCdFR WuidTTW/ha/V2SQhvl2A0jPxQOouTkKotGeNNMCnOEm3qnN3G01pm/x0kEbN2rt4 3ndoulu9yEk24mgEVB6g6X890TNLnBhhWxFwTvb8PLw9h5gfRZ7hq4s7VQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJY4poqNMnwKDQbPxn4wasVEoVEdMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvbGppbWlvMHlmQW9OQnNfR2ZqQnF4VVNoVVIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArG7QAwQA wWvZAwQAykcIMA0GCSqGSIb3DQEBCwUAA4IBAQBrYyZHN7kCTR2Bfq7KyIwekYrj c9xzylo85tiHyaQCZI0fZNEkfCGGOovINIAClN2kHZQ18pqQXukh+ilq2uKocqxa Z3JwzEoqhDqidGQL68ya1dZfuysJPEVzv0DuiobnQ8296Bo9oWPYlHErK2NyJ5K/ lO13SUVQ4ooedxEBH6mfj4Cqm0xDFWuvtOP3vf6qH0fdn6VOIvQfQufSiVezR+LP Xo0dnQqRPJjVmfKRL2ezNBoTVJXuPNzytbxfI64LQVRt0YeKsywXg1dTkt/XfzOo QVyobTevGLA7u+W+SDa7aASh7Nw9s7G2zP9DtOvItDyphHO/S7xwOr3jdJPa -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:02 2025 by rpki-client