This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/yqERyPlYcI7gwU1vTFWtgKROF4Q.roa File: yqERyPlYcI7gwU1vTFWtgKROF4Q.roa (raw, json) Hash identifier: ZOoOsoLK/kRp7KQgMGDcfDCSmXIincRW0/KQwLYz59Q= Subject key identifier: CA:A1:11:C8:F9:58:70:8E:E0:C1:4D:6F:4C:55:AD:80:A4:4E:17:84 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019ABA7D27013EEC2CF6292B33E6D3704B78 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/yqERyPlYcI7gwU1vTFWtgKROF4Q.roa Signing time: Tue 25 Nov 2025 10:09:15 +0000 ROA not before: Tue 25 Nov 2025 10:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38051 IP address blocks: 172.110.217.0/24 maxlen: 24 172.110.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:7d:27:01:3e:ec:2c:f6:29:2b:33:e6:d3:70:4b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Nov 25 10:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=caa111c8f958708ee0c14d6f4c55ad80a44e1784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:46:8b:0f:8a:14:e8:7d:29:b8:a0:e5:a2: af:b8:be:61:1d:95:4f:1a:e0:4d:d2:e0:b1:bd:eb: dd:68:cb:de:22:38:33:61:b3:6c:d2:14:4b:67:a9: de:1b:72:42:7c:78:2e:49:e3:4f:08:ff:66:06:7e: 6f:11:47:bb:74:a0:a5:f0:fa:be:3c:03:1f:79:63: 58:f4:3d:bc:51:d9:09:d5:25:a2:ae:6a:d4:ec:6d: f7:0e:8e:df:19:fd:d9:2d:e8:9e:97:33:4e:fc:57: f6:cb:94:94:ad:37:b6:4b:51:5c:2d:6d:63:72:c2: 3f:b9:aa:33:11:35:4e:eb:4a:6c:02:0f:a3:04:de: d9:ed:10:74:db:70:bb:46:66:8e:d1:6a:2d:d2:28: 35:89:75:2e:35:ff:6c:e6:71:83:e4:35:f2:d7:9c: 35:02:a2:0b:19:f1:a4:a5:fb:3f:22:5d:dd:e6:c2: 9d:07:9d:55:cb:19:ed:1f:5e:86:fc:1a:64:8d:65: cc:29:73:80:39:f7:06:d4:ae:03:78:20:e1:1d:fc: e1:22:03:48:27:5a:b7:3c:7a:b8:9c:c4:64:c8:7f: cd:ce:8b:ad:21:d2:a5:16:1d:01:6f:a2:09:a8:30: 98:9a:fb:68:83:22:56:64:6d:28:89:25:03:24:7c: f5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A1:11:C8:F9:58:70:8E:E0:C1:4D:6F:4C:55:AD:80:A4:4E:17:84 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/yqERyPlYcI7gwU1vTFWtgKROF4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.110.217.0-172.110.218.255 Signature Algorithm: sha256WithRSAEncryption 24:b4:2a:b3:d3:d9:21:10:72:1c:44:57:38:fc:db:27:24:2d: 25:93:51:a9:0c:04:c2:fc:58:61:84:a6:d3:71:ab:5f:56:ef: a7:ca:01:1e:86:32:82:22:47:9e:5d:83:f4:dd:e1:dc:13:37: 5d:99:a8:21:85:a4:f6:ba:77:93:be:1d:ca:b2:84:b9:3c:7e: 21:a5:9a:71:7c:c0:b5:d2:56:56:39:fc:d5:a5:44:98:3c:1e: 53:fb:ae:84:3e:c4:8a:dc:ce:6b:c4:b4:24:3a:6d:1f:bc:dc: 22:39:c0:f8:e3:2c:49:fe:85:d3:6f:72:70:a8:6a:3c:69:0c: 5f:d9:2f:2c:62:d9:11:1d:76:97:f9:d6:5b:40:66:2e:ac:22: b8:0a:a3:3d:27:4e:dd:0c:79:3c:25:68:5c:0e:c7:2f:9a:14: 55:1c:2a:5d:a2:f3:67:28:26:3c:e6:5f:09:7e:70:9e:21:27: d7:29:a0:7a:91:aa:61:76:cc:46:68:04:ed:63:cd:0e:5b:38: 11:fe:b1:39:b5:c5:06:d5:82:c2:59:1b:27:cc:46:54:f9:60: 45:4c:2e:bf:33:bf:87:09:11:e0:78:f1:2a:24:4b:13:1d:24: 34:8a:20:22:a0:38:44:54:13:93:fa:53:af:85:60:e7:39:0a: 9d:57:43:f4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZq6fScBPuws9ikrM+bTcEt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjUxMTI1MTAwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWExMTFjOGY5NTg3MDhlZTBjMTRkNmY0YzU1YWQ4MGE0NGUxNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn5Giw+KFOh9Kbig5aKvuL5hHZVP GuBN0uCxvevdaMveIjgzYbNs0hRLZ6neG3JCfHguSeNPCP9mBn5vEUe7dKCl8Pq+ PAMfeWNY9D28UdkJ1SWirmrU7G33Do7fGf3ZLeielzNO/Ff2y5SUrTe2S1FcLW1j csI/uaozETVO60psAg+jBN7Z7RB023C7RmaO0Wot0ig1iXUuNf9s5nGD5DXy15w1 AqILGfGkpfs/Il3d5sKdB51VyxntH16G/BpkjWXMKXOAOfcG1K4DeCDhHfzhIgNI J1q3PHq4nMRkyH/NzoutIdKlFh0Bb6IJqDCYmvtogyJWZG0oiSUDJHz1YwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMqhEcj5WHCO4MFNb0xVrYCkTheEMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEveXFFUnlQbFljSTdnd1UxdlRGV3RnS1JPRjRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACsbtkD BACsbtowDQYJKoZIhvcNAQELBQADggEBACS0KrPT2SEQchxEVzj82yckLSWTUakM BML8WGGEptNxq19W76fKAR6GMoIiR55dg/Td4dwTN12ZqCGFpPa6d5O+HcqyhLk8 fiGlmnF8wLXSVlY5/NWlRJg8HlP7roQ+xIrczmvEtCQ6bR+83CI5wPjjLEn+hdNv cnCoajxpDF/ZLyxi2REddpf51ltAZi6sIrgKoz0nTt0MeTwlaFwOxy+aFFUcKl2i 82coJjzmXwl+cJ4hJ9cpoHqRqmF2zEZoBO1jzQ5bOBH+sTm1xQbVgsJZGyfMRlT5 YEVMLr8zv4cJEeB48SokSxMdJDSKICKgOERUE5P6U6+FYOc5Cp1XQ/Q= -----END CERTIFICATE-----Generated at Sat Dec 6 18:42:22 2025 by rpki-client