This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ogGjBXxXETAXn_SWysZLSIXlzgw.roa
File: ogGjBXxXETAXn_SWysZLSIXlzgw.roa (raw, json)
Hash identifier: OhDv3nNKAjKm8OE9tBfPAqcATubsrufJ5O98V91J7Nc=
Subject key identifier: A2:01:A3:05:7C:57:11:30:17:9F:F4:96:CA:C6:4B:48:85:E5:CE:0C
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019A8BF3BBBAC16031E492548D789A0EBBB9
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ogGjBXxXETAXn_SWysZLSIXlzgw.roa
Signing time: Sun 16 Nov 2025 09:16:37 +0000
ROA not before: Sun 16 Nov 2025 09:16:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134989
IP address blocks: 172.110.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:8b:f3:bb:ba:c1:60:31:e4:92:54:8d:78:9a:0e:bb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Nov 16 09:16:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a201a3057c571130179ff496cac64b4885e5ce0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:ae:51:5a:77:f5:a2:b9:2f:4a:74:d3:d8:
df:4e:00:11:2b:b2:9b:95:c8:56:81:54:57:36:a6:
16:fd:9a:e4:6c:24:4f:e3:5d:d1:18:ac:ce:c4:cf:
ac:e6:45:4c:32:40:c5:b7:57:8f:2d:59:7c:c4:7d:
94:c6:7c:a0:d7:23:e9:ac:16:9c:53:f0:62:ec:01:
51:35:88:c9:93:34:eb:fd:ee:2a:f6:b2:66:88:eb:
7d:9a:6a:61:9b:da:60:49:51:f1:e7:70:f2:76:ab:
46:ef:cb:37:db:4e:e9:57:76:67:b2:72:e9:ca:0b:
3f:9d:db:6c:40:f1:32:0d:69:d3:b2:3f:a9:a7:ff:
8d:a8:cc:c4:6f:5b:28:9c:cd:1b:bd:6d:7e:c7:b5:
28:30:2e:64:f9:ec:24:4f:92:37:5e:38:73:4b:a9:
1c:13:19:90:f4:2d:66:fd:74:8a:b5:2b:d4:4e:16:
fa:06:1e:49:5b:ff:a5:89:19:f2:cd:e1:de:10:b1:
e0:b7:95:dd:24:54:a0:f8:48:b7:67:0c:e7:20:e6:
46:d4:47:cc:b7:15:5e:2c:c5:4e:5c:ba:20:d1:20:
0d:e6:7d:18:5c:04:e0:1a:df:6f:f8:97:39:ae:34:
f9:b7:6f:dd:70:ad:7b:93:0a:ec:e3:25:ec:90:70:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:A3:05:7C:57:11:30:17:9F:F4:96:CA:C6:4B:48:85:E5:CE:0C
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ogGjBXxXETAXn_SWysZLSIXlzgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.110.215.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b3:1a:ef:e6:92:f2:6a:30:ce:32:23:83:9e:df:36:e8:b2:
d3:53:57:8c:b3:66:9d:93:a7:27:70:73:5a:74:03:45:df:27:
9e:95:73:a4:10:5a:a2:c0:30:20:6e:6f:19:ef:4c:41:12:df:
76:19:62:69:ee:0c:d6:7b:eb:aa:4b:fd:7e:ce:98:a6:17:08:
e9:d4:15:3d:a0:99:71:8f:36:bc:46:5e:e1:c9:fe:cd:0e:0c:
0e:85:b6:3d:dd:ad:a5:e1:00:e1:c4:e8:d2:cb:32:37:b9:7a:
4f:8b:58:73:ce:c7:d6:a9:ac:fe:41:84:6f:c7:39:67:56:38:
77:34:c8:3f:9c:a6:58:2a:13:b3:ba:02:cd:28:c6:b5:aa:1a:
56:78:1f:45:b1:ca:bc:c3:74:ba:8c:19:09:95:54:a2:aa:51:
be:50:7c:b0:5a:3b:3c:24:15:a0:49:fd:89:bd:ad:69:ba:77:
10:75:87:8f:53:17:98:52:90:31:9f:d3:18:ef:8d:ef:8b:0b:
33:7e:9c:cc:5f:4c:10:08:74:e9:22:0b:b3:ba:f0:5f:c9:cf:
f2:6a:48:63:a9:aa:c5:55:9b:8c:4c:83:23:4c:3b:c4:3b:48:
34:9c:a7:7e:0a:6f:5a:69:c7:89:c0:c4:e9:92:49:b0:8d:dd:
d0:55:16:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZqL87u6wWAx5JJUjXiaDru5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUxMTE2MDkxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjAxYTMwNTdjNTcxMTMwMTc5ZmY0OTZjYWM2NGI0ODg1ZTVjZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyquUVp39aK5L0p009jfTgARK7Kb
lchWgVRXNqYW/ZrkbCRP413RGKzOxM+s5kVMMkDFt1ePLVl8xH2Uxnyg1yPprBac
U/Bi7AFRNYjJkzTr/e4q9rJmiOt9mmphm9pgSVHx53DydqtG78s3207pV3ZnsnLp
ygs/ndtsQPEyDWnTsj+pp/+NqMzEb1sonM0bvW1+x7UoMC5k+ewkT5I3XjhzS6kc
ExmQ9C1m/XSKtSvUThb6Bh5JW/+liRnyzeHeELHgt5XdJFSg+Ei3ZwznIOZG1EfM
txVeLMVOXLog0SAN5n0YXATgGt9v+Jc5rjT5t2/dcK17kwrs4yXskHB98wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKIBowV8VxEwF5/0lsrGS0iF5c4MMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvb2dHakJYeFhFVEFYbl9TV3lzWkxTSVhsemd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG7XMA0G
CSqGSIb3DQEBCwUAA4IBAQAlsxrv5pLyajDOMiODnt826LLTU1eMs2adk6cncHNa
dANF3yeelXOkEFqiwDAgbm8Z70xBEt92GWJp7gzWe+uqS/1+zpimFwjp1BU9oJlx
jza8Rl7hyf7NDgwOhbY93a2l4QDhxOjSyzI3uXpPi1hzzsfWqaz+QYRvxzlnVjh3
NMg/nKZYKhOzugLNKMa1qhpWeB9Fscq8w3S6jBkJlVSiqlG+UHywWjs8JBWgSf2J
va1puncQdYePUxeYUpAxn9MY743viwszfpzMX0wQCHTpIguzuvBfyc/yakhjqarF
VZuMTIMjTDvEO0g0nKd+Cm9aaceJwMTpkkmwjd3QVRau
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:48:03 2025 by rpki-client