This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/9AxK7OO4YfzRxmWp_9RiQJJsVGI.roa File: 9AxK7OO4YfzRxmWp_9RiQJJsVGI.roa (raw, json) Hash identifier: k3Wn4Ngu6VZ6x53OC5uuiqkLRFsNOuW5Egiz4aBcqRc= Subject key identifier: F4:0C:4A:EC:E3:B8:61:FC:D1:C6:65:A9:FF:D4:62:40:92:6C:54:62 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B4F5A3266A13DF224696A2123366087E2 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/9AxK7OO4YfzRxmWp_9RiQJJsVGI.roa Signing time: Wed 24 Dec 2025 07:54:29 +0000 ROA not before: Wed 24 Dec 2025 07:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141718 IP address blocks: 45.155.90.0/24 maxlen: 24 45.155.226.0/24 maxlen: 24 45.156.222.0/24 maxlen: 24 45.156.223.0/24 maxlen: 24 103.100.169.0/24 maxlen: 24 103.211.103.0/24 maxlen: 24 172.110.220.0/24 maxlen: 24 172.110.221.0/24 maxlen: 24 185.233.17.0/24 maxlen: 24 202.71.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5a:32:66:a1:3d:f2:24:69:6a:21:23:36:60:87:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Dec 24 07:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f40c4aece3b861fcd1c665a9ffd46240926c5462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:57:6f:f9:d0:e1:4d:84:b2:9f:86:c1:b9: 29:f1:4f:a7:10:34:30:0c:a5:53:98:be:b4:11:98: a2:da:68:ff:38:7e:fa:21:3f:3e:ac:dd:bf:f6:f4: 1c:f3:1a:f0:7a:c4:4a:6a:35:7d:58:a5:99:fb:e9: bc:9f:55:86:48:94:b0:6c:ef:21:3c:3f:52:bd:3f: 01:d9:fc:d2:60:a3:c9:05:cd:ae:53:2d:b6:8d:56: 70:a3:4f:0d:55:08:36:05:39:44:f0:20:37:4e:db: 3a:95:74:be:f9:df:d2:3a:38:d2:e7:c8:d4:80:5c: 8f:ea:18:b7:7d:a3:93:1c:e4:97:61:89:5b:a5:9a: ab:a7:42:0a:98:f7:91:16:19:1b:7e:dc:cb:43:b4: be:47:46:3f:55:db:38:93:2f:15:d7:78:de:26:ce: 9b:6d:7f:bd:52:27:b2:c1:e7:f9:95:83:49:dd:a4: 17:fb:72:42:5b:99:9d:f2:05:6b:d1:43:93:f0:54: 89:b0:7a:a3:5b:0a:0a:e0:66:0b:dc:40:63:84:b9: 0a:4c:d8:e0:a4:ed:94:9a:7e:5c:35:17:2d:42:64: 83:8f:c0:46:0b:27:d3:c0:8c:1e:44:34:1f:99:8c: 4c:6d:8c:cb:97:86:f3:78:f6:62:ad:54:ab:46:1f: f5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0C:4A:EC:E3:B8:61:FC:D1:C6:65:A9:FF:D4:62:40:92:6C:54:62 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/9AxK7OO4YfzRxmWp_9RiQJJsVGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.90.0/24 45.155.226.0/24 45.156.222.0/23 103.100.169.0/24 103.211.103.0/24 172.110.220.0/23 185.233.17.0/24 202.71.10.0/24 Signature Algorithm: sha256WithRSAEncryption a5:cb:10:9e:f1:72:ca:ac:0f:b9:08:cf:61:26:60:51:fc:07: ef:73:bf:1b:31:ef:cb:42:57:39:9d:a9:ee:f6:8d:2e:9e:db: db:fd:1e:9d:a4:5d:a7:d1:3a:8a:d7:14:f1:da:b1:ff:0b:b7: db:56:5f:11:78:c7:22:dc:ab:30:51:f6:53:f6:0a:41:0f:c9: 18:10:d3:3d:ff:91:ea:f4:9d:84:1c:e1:cc:a7:03:bc:ab:9a: 5c:cf:03:13:de:a4:42:ed:19:c8:e4:bd:61:a5:75:d2:f1:ed: f2:3b:07:46:96:59:37:09:73:76:38:2c:7f:4a:01:3d:f3:ed: 01:5a:70:4c:0a:a6:d3:44:80:ab:9c:05:f2:dc:f8:3c:5a:7e: e1:85:6c:92:f7:06:5e:b7:a2:16:57:1c:c9:d6:ff:e6:d7:af: cf:db:66:02:15:b9:fc:27:2f:6b:57:7b:d3:80:42:9d:86:84: 9b:22:5a:aa:dd:ba:79:09:c2:f0:f4:4b:fb:c1:a3:c6:b5:6c: 9a:f8:94:6a:d7:95:76:bb:0b:b9:1e:a7:6c:85:68:79:2b:93: af:b4:cb:16:c9:c2:07:6d:76:ff:54:70:76:bf:2b:b2:65:d3: 94:b2:67:fb:e1:c3:7f:d4:af:62:1e:83:a8:07:15:30:b2:fc: 06:09:03:94 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZtPWjJmoT3yJGlqISM2YIfiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjUxMjI0MDc1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDBjNGFlY2UzYjg2MWZjZDFjNjY1YTlmZmQ0NjI0MDkyNmM1NDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt29Xb/nQ4U2Esp+Gwbkp8U+nEDQw DKVTmL60EZii2mj/OH76IT8+rN2/9vQc8xrwesRKajV9WKWZ++m8n1WGSJSwbO8h PD9SvT8B2fzSYKPJBc2uUy22jVZwo08NVQg2BTlE8CA3Tts6lXS++d/SOjjS58jU gFyP6hi3faOTHOSXYYlbpZqrp0IKmPeRFhkbftzLQ7S+R0Y/Vds4ky8V13jeJs6b bX+9Uieywef5lYNJ3aQX+3JCW5md8gVr0UOT8FSJsHqjWwoK4GYL3EBjhLkKTNjg pO2Umn5cNRctQmSDj8BGCyfTwIweRDQfmYxMbYzLl4bzePZirVSrRh/1OwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFPQMSuzjuGH80cZlqf/UYkCSbFRiMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvOUF4SzdPTzRZZnpSeG1XcF85UmlRSkpzVkdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALZtaAwQA LZviAwQBLZzeAwQAZ2SpAwQAZ9NnAwQBrG7cAwQAuekRAwQAykcKMA0GCSqGSIb3 DQEBCwUAA4IBAQClyxCe8XLKrA+5CM9hJmBR/Afvc78bMe/LQlc5nanu9o0untvb /R6dpF2n0TqK1xTx2rH/C7fbVl8ReMci3KswUfZT9gpBD8kYENM9/5Hq9J2EHOHM pwO8q5pczwMT3qRC7RnI5L1hpXXS8e3yOwdGllk3CXN2OCx/SgE98+0BWnBMCqbT RICrnAXy3Pg8Wn7hhWyS9wZet6IWVxzJ1v/m16/P22YCFbn8Jy9rV3vTgEKdhoSb Ilqq3bp5CcLw9Ev7waPGtWya+JRq15V2uwu5HqdshWh5K5OvtMsWycIHbXb/VHB2 vyuyZdOUsmf74cN/1K9iHoOoBxUwsvwGCQOU -----END CERTIFICATE-----Generated at Tue Dec 30 07:55:18 2025 by rpki-client