This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/sQ8Q9JbQaoeHKywiLJo-bvW4TFM.roa File: sQ8Q9JbQaoeHKywiLJo-bvW4TFM.roa (raw, json) Hash identifier: /IXlZY/hi3esdJuWdO3U7HevNnK2FSj61hj5YPxercA= Subject key identifier: B1:0F:10:F4:96:D0:6A:87:87:2B:2C:22:2C:9A:3E:6E:F5:B8:4C:53 Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d Certificate serial: 019AA5D4FFE74094107A657589B33F2A32E2 Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/sQ8Q9JbQaoeHKywiLJo-bvW4TFM.roa Signing time: Fri 21 Nov 2025 09:53:10 +0000 ROA not before: Fri 21 Nov 2025 09:53:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56582 IP address blocks: 178.210.160.0/24 maxlen: 24 178.210.161.0/24 maxlen: 24 178.210.162.0/24 maxlen: 24 178.210.165.0/24 maxlen: 24 178.210.166.0/24 maxlen: 24 178.210.168.0/24 maxlen: 24 178.210.170.0/24 maxlen: 24 178.210.171.0/24 maxlen: 24 178.210.172.0/24 maxlen: 24 178.210.173.0/24 maxlen: 24 178.210.174.0/24 maxlen: 24 178.210.175.0/24 maxlen: 24 178.210.176.0/24 maxlen: 24 178.210.177.0/24 maxlen: 24 178.210.178.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:d4:ff:e7:40:94:10:7a:65:75:89:b3:3f:2a:32:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d Validity Not Before: Nov 21 09:53:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b10f10f496d06a87872b2c222c9a3e6ef5b84c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:18:7b:bd:4c:52:8f:24:79:41:96:10:81:be: a5:5b:bc:63:a7:87:d4:34:d5:39:71:f9:82:c1:37: de:e5:34:ba:d0:05:3f:bb:f6:67:d2:11:fc:d3:98: 38:95:52:64:f5:0b:5d:32:22:bb:f2:4e:f8:84:8b: a8:3c:1d:c8:d1:c9:e0:dd:bb:a9:6f:cf:49:1a:5b: 7c:b7:9b:e0:a4:23:f4:62:76:ad:ff:b5:d6:79:44: ce:a8:39:4a:32:82:88:df:23:ad:c0:6f:57:7d:5f: e1:30:e0:9b:47:a6:7b:3e:6e:d9:4f:3c:89:2b:18: a6:61:2e:2d:4c:4b:b4:f2:80:f0:5e:3c:ae:75:1a: 99:92:4d:c3:28:94:8e:34:a0:5c:db:7a:62:47:45: 8d:21:1d:b1:24:66:d9:1b:f5:f0:60:18:55:91:05: 5c:9a:73:54:07:1e:b4:91:15:43:68:b8:d3:58:1e: bf:78:a0:6e:f7:c8:37:4b:d6:2c:43:1c:a2:18:45: e6:65:e8:fa:c4:31:42:03:c4:45:a6:92:c6:80:2d: db:33:2d:91:fd:dc:fe:07:c3:3a:dc:88:3c:85:b1: 54:2f:9a:4b:67:e0:32:d1:12:6b:c4:ee:04:cc:93: 16:98:a2:de:bb:71:0d:c6:f9:1e:62:fc:87:97:5e: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0F:10:F4:96:D0:6A:87:87:2B:2C:22:2C:9A:3E:6E:F5:B8:4C:53 X509v3 Authority Key Identifier: keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/sQ8Q9JbQaoeHKywiLJo-bvW4TFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.160.0-178.210.162.255 178.210.165.0-178.210.166.255 178.210.168.0/24 178.210.170.0-178.210.178.255 Signature Algorithm: sha256WithRSAEncryption bb:69:0e:eb:cd:2f:0a:34:9b:b0:ad:56:36:e2:0c:95:1b:db: 13:02:be:0c:36:e0:ca:a9:34:0b:80:7f:ae:59:e4:01:1a:7b: a9:7f:c8:5f:23:d4:52:2d:60:0b:72:0f:78:f2:4e:3b:5a:5d: 4b:0f:c1:ec:f7:ee:7f:98:90:bf:92:8a:3d:a4:10:bb:6a:64: 15:fa:40:f4:87:aa:df:38:00:63:f6:4e:ae:d5:10:b9:a8:67: 96:a0:2d:e0:3b:14:df:33:b7:10:44:25:37:58:fe:7e:84:6e: fc:55:eb:3c:8f:5b:e4:56:2d:91:01:6b:79:47:1d:fb:36:15: 06:dd:10:77:a3:a1:aa:ef:ff:f2:69:e1:37:b6:be:3f:db:86: 8f:56:cf:9e:65:60:91:dd:48:66:2f:04:97:49:98:2f:ff:fe: 93:ba:1d:bd:26:2d:ce:32:02:c0:09:1f:55:92:a6:51:e5:23: c1:8b:c6:20:15:37:a3:62:ea:82:49:0a:b6:fa:5f:47:1a:55: f2:3f:aa:23:5d:f0:d4:8b:92:87:3a:54:9e:61:26:4b:07:fb: 7b:b6:3c:dc:b4:62:08:85:f6:b8:84:97:9e:77:3f:a4:d3:50: 8f:fd:9a:9d:e3:f1:de:de:46:db:d3:83:ca:c5:b4:33:5c:68: c3:34:15:fd -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZql1P/nQJQQemV1ibM/KjLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz NTQzNWQwHhcNMjUxMTIxMDk1MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTBmMTBmNDk2ZDA2YTg3ODcyYjJjMjIyYzlhM2U2ZWY1Yjg0YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xh7vUxSjyR5QZYQgb6lW7xjp4fU NNU5cfmCwTfe5TS60AU/u/Zn0hH805g4lVJk9QtdMiK78k74hIuoPB3I0cng3bup b89JGlt8t5vgpCP0Ynat/7XWeUTOqDlKMoKI3yOtwG9XfV/hMOCbR6Z7Pm7ZTzyJ KximYS4tTEu08oDwXjyudRqZkk3DKJSONKBc23piR0WNIR2xJGbZG/XwYBhVkQVc mnNUBx60kRVDaLjTWB6/eKBu98g3S9YsQxyiGEXmZej6xDFCA8RFppLGgC3bMy2R /dz+B8M63Ig8hbFUL5pLZ+Ay0RJrxO4EzJMWmKLeu3ENxvkeYvyHl14AwwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFLEPEPSW0GqHhyssIiyaPm71uExTMB8GA1UdIwQY MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct NTA3MDExNTcwZWU2LzEvc1E4UTlKYlFhb2VIS3l3aUxKby1idlc0VEZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2 LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAWy0qAD BACy0qIwDAMEALLSpQMEALLSpgMEALLSqDAMAwQBstKqAwQAstKyMA0GCSqGSIb3 DQEBCwUAA4IBAQC7aQ7rzS8KNJuwrVY24gyVG9sTAr4MNuDKqTQLgH+uWeQBGnup f8hfI9RSLWALcg948k47Wl1LD8Hs9+5/mJC/koo9pBC7amQV+kD0h6rfOABj9k6u 1RC5qGeWoC3gOxTfM7cQRCU3WP5+hG78Ves8j1vkVi2RAWt5Rx37NhUG3RB3o6Gq 7//yaeE3tr4/24aPVs+eZWCR3UhmLwSXSZgv//6Tuh29Ji3OMgLACR9VkqZR5SPB i8YgFTejYuqCSQq2+l9HGlXyP6ojXfDUi5KHOlSeYSZLB/t7tjzctGIIhfa4hJee dz+k01CP/Zqd4/He3kbb04PKxbQzXGjDNBX9 -----END CERTIFICATE-----Generated at Mon Dec 8 09:09:50 2025 by rpki-client