This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/RNXrQdlRFEsYspN65SDyIUg32Wc.roa File: RNXrQdlRFEsYspN65SDyIUg32Wc.roa (raw, json) Hash identifier: 9cC9EK68jMT2svrATtO+3QtQ1eW/IUeA812wyGXe6GM= Subject key identifier: 44:D5:EB:41:D9:51:14:4B:18:B2:93:7A:E5:20:F2:21:48:37:D9:67 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA321CA9AB37AD892FBADF666FF91CD Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/RNXrQdlRFEsYspN65SDyIUg32Wc.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215152 IP address blocks: 178.210.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:21:ca:9a:b3:7a:d8:92:fb:ad:f6:66:ff:91:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44d5eb41d951144b18b2937ae520f2214837d967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:9a:66:bd:0a:0b:7a:f1:81:0e:f2:8d:be: 8d:f7:97:14:98:04:7f:03:f1:29:18:f0:85:96:0a: f5:8a:5a:0a:94:72:63:33:14:2d:78:41:b9:4d:e5: f7:d6:aa:ac:b5:c4:87:e0:09:37:fc:0c:99:c2:db: d6:98:96:14:81:c0:99:3f:3b:19:10:18:8d:98:5d: 58:9d:40:8f:66:37:36:c0:cb:18:9c:65:32:9e:72: 88:cf:41:08:f7:1f:1b:9b:ef:88:cd:88:4d:1b:6a: b2:3f:77:42:db:52:07:0b:72:2d:f9:da:71:6d:48: 16:f7:9a:74:27:2a:20:90:6b:c8:f0:19:67:20:be: 79:fc:6d:ec:7a:c3:5d:5d:d8:e6:ee:93:63:e4:a8: c4:51:79:05:56:b5:0b:e4:7e:d8:8a:4e:c9:ec:4d: 52:4b:39:c4:40:08:24:9e:ea:41:0c:17:57:af:5b: b0:36:f1:a7:13:ce:9a:a1:ec:ec:fa:33:42:07:8b: 2b:b0:1b:7d:54:79:23:3b:6b:28:eb:5e:39:3b:ca: b8:84:c9:93:8d:77:c8:cf:88:9c:04:cc:ad:31:7d: 5c:5f:27:9b:e3:e2:7c:17:7e:06:8d:4d:47:00:20: 1a:3d:9b:78:fb:81:19:24:9e:cd:3a:00:4c:ca:46: 96:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D5:EB:41:D9:51:14:4B:18:B2:93:7A:E5:20:F2:21:48:37:D9:67 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/RNXrQdlRFEsYspN65SDyIUg32Wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.250.0/24 Signature Algorithm: sha256WithRSAEncryption d6:f7:d1:34:b8:9c:69:40:06:8b:95:79:ec:14:d5:0c:9b:fe: 70:eb:01:7d:a7:71:14:93:1a:95:a2:f4:25:0a:a9:73:1d:8a: 27:3c:62:2f:ca:e3:e9:4c:c0:b9:ef:0f:ef:e7:13:df:b7:26: 58:5d:45:e8:39:f0:54:66:5e:6d:a7:a1:36:51:69:cb:a4:10: a6:86:84:4d:3f:c7:86:85:f2:56:b0:eb:a8:51:84:98:77:a1: af:14:72:de:29:8a:2b:cb:d4:04:44:14:bb:df:63:44:4c:2d: 56:4b:21:19:ed:d2:36:e6:70:17:58:68:61:39:96:bb:d6:34: 01:f2:f9:52:35:b8:30:7e:0b:34:02:3e:3c:5b:cd:e0:ef:04: 2e:32:bf:f3:67:7e:92:df:fd:e6:87:0b:3b:6a:97:52:ad:61: 2d:eb:ac:d0:c2:b3:ea:9d:01:32:de:05:31:46:7c:87:31:a3: d8:3a:21:7d:73:b2:e3:1e:9e:df:e2:68:68:06:c2:74:53:39: eb:2f:16:a8:12:50:85:d8:e7:2c:b2:fb:32:f1:19:02:1d:a3: a9:0c:ad:fa:32:20:14:9c:48:bf:67:70:72:e6:61:a0:20:96: e8:9f:7c:c7:71:e1:4d:d2:fb:9d:89:1a:07:cf:9a:0e:97:59: 83:5f:f3:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyHKmrN62JL7rfZm/5HNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGQ1ZWI0MWQ5NTExNDRiMThiMjkzN2FlNTIwZjIyMTQ4MzdkOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAWaZr0KC3rxgQ7yjb6N95cUmAR/ A/EpGPCFlgr1iloKlHJjMxQteEG5TeX31qqstcSH4Ak3/AyZwtvWmJYUgcCZPzsZ EBiNmF1YnUCPZjc2wMsYnGUynnKIz0EI9x8bm++IzYhNG2qyP3dC21IHC3It+dpx bUgW95p0JyogkGvI8BlnIL55/G3sesNdXdjm7pNj5KjEUXkFVrUL5H7Yik7J7E1S SznEQAgknupBDBdXr1uwNvGnE86aoezs+jNCB4srsBt9VHkjO2so6145O8q4hMmT jXfIz4icBMytMX1cXyeb4+J8F34GjU1HACAaPZt4+4EZJJ7NOgBMykaWowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFETV60HZURRLGLKTeuUg8iFIN9lnMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvUk5YclFkbFJGRXNZc3BONjVTRHlJVWczMldjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstL6MA0G CSqGSIb3DQEBCwUAA4IBAQDW99E0uJxpQAaLlXnsFNUMm/5w6wF9p3EUkxqVovQl CqlzHYonPGIvyuPpTMC57w/v5xPftyZYXUXoOfBUZl5tp6E2UWnLpBCmhoRNP8eG hfJWsOuoUYSYd6GvFHLeKYory9QERBS732NETC1WSyEZ7dI25nAXWGhhOZa71jQB 8vlSNbgwfgs0Aj48W83g7wQuMr/zZ36S3/3mhws7apdSrWEt66zQwrPqnQEy3gUx RnyHMaPYOiF9c7LjHp7f4mhoBsJ0UznrLxaoElCF2Ocssvsy8RkCHaOpDK36MiAU nEi/Z3By5mGgIJbon3zHceFN0vudiRoHz5oOl1mDX/NP -----END CERTIFICATE-----Generated at Fri Jan 9 21:26:42 2026 by rpki-client