This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/1-ASpO_8hZ5V-Ic4Aeg3nVe_uCoo.roa File: 1-ASpO_8hZ5V-Ic4Aeg3nVe_uCoo.roa (raw, json) Hash identifier: wogB5Zle9ac2g7KYp6EyaKF99ndjJco7ApxVo0RaiP4= Subject key identifier: F8:04:A9:3B:FF:21:67:95:7E:21:CE:00:7A:0D:E7:55:EF:EE:0A:8A Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA31A68756A2CF7D6106B7E45F90D21 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/1-ASpO_8hZ5V-Ic4Aeg3nVe_uCoo.roa Signing time: Thu 01 Jan 2026 22:17:25 +0000 ROA not before: Thu 01 Jan 2026 22:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 178.210.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1a:68:75:6a:2c:f7:d6:10:6b:7e:45:f9:0d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f804a93bff2167957e21ce007a0de755efee0a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:8f:f8:c9:f5:16:97:78:6a:6a:ad:56:19: b4:ae:61:c1:5c:91:5d:58:b1:7d:af:0e:9e:be:c7: d0:50:05:9d:68:fa:ce:4a:02:fa:60:f2:33:0c:79: 57:88:55:c1:b6:a7:87:6c:3d:97:35:18:72:c6:9c: 2c:64:29:d9:21:fb:42:48:9c:4a:bf:9f:60:77:6e: 24:8f:19:51:b9:05:d1:49:64:60:32:7f:58:1a:2a: 5a:75:32:dd:4b:cd:9c:66:5c:8b:76:67:23:e4:4c: fe:25:fa:56:a5:e5:d1:76:ae:25:fd:f4:02:5e:67: 91:59:ff:dd:3a:1a:69:d3:b1:53:74:e2:81:b5:50: f4:8f:fa:de:7a:2d:db:11:cb:97:1f:f5:e1:d9:fe: 92:68:f5:39:90:8a:d8:c8:6d:bb:d2:07:c1:a3:85: a0:0f:b5:75:2c:d6:b9:60:42:38:27:3f:39:63:4b: 34:0b:a4:ef:16:15:51:17:26:1f:dc:0e:a8:ac:d3: fe:0d:47:3a:6b:f5:bd:f0:77:7d:b0:ea:ba:30:b2: fe:b4:c2:94:ff:4c:b2:38:66:c3:69:f0:8a:2d:5c: 4f:2d:17:83:45:96:59:86:17:31:0e:ae:43:02:f3: c2:08:94:cc:14:77:e7:cc:0c:d1:8d:26:1d:70:10: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:04:A9:3B:FF:21:67:95:7E:21:CE:00:7A:0D:E7:55:EF:EE:0A:8A X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/1-ASpO_8hZ5V-Ic4Aeg3nVe_uCoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.250.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:12:69:1f:87:e6:97:ac:6d:2a:6d:73:3e:7f:ff:dd:b0:0a: 58:ce:f9:39:bb:5f:f4:aa:d4:f9:45:f2:c0:21:40:7f:30:1d: 99:7f:d8:4c:db:f0:67:f3:02:64:19:f4:e1:b7:c5:63:48:b2: 92:16:07:ad:21:e0:41:57:54:b5:52:61:78:cd:fe:22:a2:f8: 0e:c4:e5:38:a2:b0:d5:05:73:40:9a:74:09:23:2c:e2:a1:6d: 6d:e0:bd:c4:23:6b:c9:49:3a:13:2e:7c:2e:48:5a:ff:9f:cd: 57:f9:34:74:38:1e:e6:51:10:a1:3a:44:cc:4a:1b:27:3b:5a: 06:e9:89:7e:17:1b:e5:db:c7:76:b3:c3:12:2e:22:12:da:ae: 9d:6a:7c:20:2b:ad:f1:60:24:ba:7d:71:5a:01:e6:31:06:8d: aa:3c:e4:cc:97:9e:c6:d6:71:da:7a:43:82:e3:7e:14:ea:b1: 15:ba:ab:e5:03:99:d8:c0:ae:ae:a9:bc:97:33:0d:e3:8a:cf: fe:f9:74:e2:1f:41:ef:4a:ad:be:42:f6:a6:66:29:cb:0e:50: 7e:d7:08:1d:ae:09:4d:35:5a:d8:95:6c:40:51:06:0d:92:56: 36:d7:97:16:b5:1d:81:87:f7:95:25:e7:5d:85:ba:92:54:0a: e9:68:a3:7c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7oxpodWos99YQa35F+Q0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODA0YTkzYmZmMjE2Nzk1N2UyMWNlMDA3YTBkZTc1NWVmZWUwYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv6P+Mn1Fpd4amqtVhm0rmHBXJFd WLF9rw6evsfQUAWdaPrOSgL6YPIzDHlXiFXBtqeHbD2XNRhyxpwsZCnZIftCSJxK v59gd24kjxlRuQXRSWRgMn9YGipadTLdS82cZlyLdmcj5Ez+JfpWpeXRdq4l/fQC XmeRWf/dOhpp07FTdOKBtVD0j/reei3bEcuXH/Xh2f6SaPU5kIrYyG270gfBo4Wg D7V1LNa5YEI4Jz85Y0s0C6TvFhVRFyYf3A6orNP+DUc6a/W98Hd9sOq6MLL+tMKU /0yyOGbDafCKLVxPLReDRZZZhhcxDq5DAvPCCJTMFHfnzAzRjSYdcBBSGQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPgEqTv/IWeVfiHOAHoN51Xv7gqKMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvMS1BU3BPXzhoWjVWLUljNEFlZzNuVmVfdUNvby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTMvODhjNDU0LWNiYWEtNDNmZC1iM2MxLTEzYjkxMTBjZTIw Yy8xL0ZtcjhVY2tpX1lRdjdGc011OUp1dmIwYUZoNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLS+jAN BgkqhkiG9w0BAQsFAAOCAQEAPhJpH4fml6xtKm1zPn//3bAKWM75Obtf9KrU+UXy wCFAfzAdmX/YTNvwZ/MCZBn04bfFY0iykhYHrSHgQVdUtVJheM3+IqL4DsTlOKKw 1QVzQJp0CSMs4qFtbeC9xCNryUk6Ey58Lkha/5/NV/k0dDge5lEQoTpEzEobJzta BumJfhcb5dvHdrPDEi4iEtqunWp8ICut8WAkun1xWgHmMQaNqjzkzJeextZx2npD guN+FOqxFbqr5QOZ2MCurqm8lzMN44rP/vl04h9B70qtvkL2pmYpyw5QftcIHa4J TTVa2JVsQFEGDZJWNteXFrUdgYf3lSXnXYW6klQK6WijfA== -----END CERTIFICATE-----Generated at Fri Jan 9 21:27:44 2026 by rpki-client