This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/bUm9zhBDDheeAjH1Phzh6QeVwx0.roa File: bUm9zhBDDheeAjH1Phzh6QeVwx0.roa (raw, json) Hash identifier: nX9HfLwNd8RrklBkKB4N/M+Uec4jgpinRrWvqTbblWw= Subject key identifier: 6D:49:BD:CE:10:43:0E:17:9E:02:31:F5:3E:1C:E1:E9:07:95:C3:1D Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA31E0D0F7F5943FAAC07A313214542 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/bUm9zhBDDheeAjH1Phzh6QeVwx0.roa Signing time: Thu 01 Jan 2026 22:17:26 +0000 ROA not before: Thu 01 Jan 2026 22:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 178.210.248.0/24 maxlen: 24 178.210.249.0/24 maxlen: 24 178.210.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1e:0d:0f:7f:59:43:fa:ac:07:a3:13:21:45:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d49bdce10430e179e0231f53e1ce1e90795c31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:83:fd:51:da:8e:a1:77:1d:27:ca:f0:cf: 14:40:c9:95:d7:5f:b0:57:46:43:9b:5b:39:2f:35: 08:43:f1:f9:b2:99:d1:91:29:b3:8d:7f:5c:0e:35: 1f:36:da:44:34:7c:7f:35:fd:af:49:91:5c:21:83: 09:ed:b8:5e:cd:4d:e1:82:bb:dc:c4:6f:d9:87:48: cc:54:bb:a5:eb:51:45:4d:09:82:5f:50:87:88:2f: e7:bd:16:a5:12:73:54:e6:b7:5d:14:5c:83:1e:62: e5:d2:a6:51:04:a0:33:99:a4:a0:fe:87:44:ef:1f: 1d:28:77:85:d7:66:e2:9c:6d:d3:d2:2f:35:d1:fb: 71:86:57:09:90:6f:5f:0b:9c:21:b3:9f:cf:b3:12: 64:3c:bc:b5:17:5e:c6:ef:e8:f0:0b:c5:51:40:24: d3:92:9d:25:f1:b6:34:a0:89:c3:80:18:ec:aa:1f: ee:01:27:5c:74:d3:11:71:85:4f:26:f0:b9:9a:c1: ea:38:a4:10:55:6f:26:d5:9a:fd:66:7e:21:e7:7a: 85:ca:5c:e4:a0:fc:f7:e5:23:de:da:11:2a:89:7e: c7:b6:e7:ad:66:e7:52:14:9c:29:be:6a:ca:31:88: 94:95:bc:8a:d8:1f:73:8e:22:a6:fc:c4:a0:28:d9: 78:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:49:BD:CE:10:43:0E:17:9E:02:31:F5:3E:1C:E1:E9:07:95:C3:1D X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/bUm9zhBDDheeAjH1Phzh6QeVwx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.248.0/23 178.210.251.0/24 Signature Algorithm: sha256WithRSAEncryption 97:87:65:0c:a4:d8:af:bf:e2:af:27:bd:ec:fa:59:f2:fa:44: a1:d9:49:6b:02:d8:f7:40:99:6c:65:22:76:09:53:9b:75:5f: f8:92:53:00:25:ef:01:de:60:21:1e:ac:49:a0:25:8b:00:e1: 67:60:3f:63:8c:64:a1:ae:ef:85:80:33:6f:64:3c:e6:5c:41: 66:e5:36:98:b4:a7:62:70:48:ac:58:1b:eb:03:dc:9d:49:dd: 3e:d4:e3:13:f7:96:37:7a:67:b2:3a:88:84:b5:45:d4:97:b7: d2:94:2a:d3:be:a9:94:9a:3e:92:7f:88:47:1d:d0:23:a7:c1: 08:05:c4:a2:63:27:61:20:6d:6f:17:66:0c:14:a8:ff:11:df: cc:a1:7c:1e:48:22:7b:bc:4f:09:fd:9f:bf:92:d4:43:6e:ed: f4:53:5d:30:4b:3e:01:1d:7b:79:db:62:18:a4:39:a4:97:06: 45:6a:3c:77:df:75:e6:b2:30:f8:4e:53:f7:41:94:aa:25:f8: e1:5c:0f:d9:aa:a4:0f:f0:6d:13:e7:39:22:62:b7:e6:a7:8a: f7:68:56:c7:d7:58:79:cf:d2:50:7e:8b:94:26:de:9e:0f:2e: 5f:40:88:77:f3:57:df:b9:50:40:37:37:c5:ab:9a:92:21:20: 34:89:6f:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7ox4ND39ZQ/qsB6MTIUVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDQ5YmRjZTEwNDMwZTE3OWUwMjMxZjUzZTFjZTFlOTA3OTVjMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFWD/VHajqF3HSfK8M8UQMmV11+w V0ZDm1s5LzUIQ/H5spnRkSmzjX9cDjUfNtpENHx/Nf2vSZFcIYMJ7bhezU3hgrvc xG/Zh0jMVLul61FFTQmCX1CHiC/nvRalEnNU5rddFFyDHmLl0qZRBKAzmaSg/odE 7x8dKHeF12binG3T0i810ftxhlcJkG9fC5whs5/PsxJkPLy1F17G7+jwC8VRQCTT kp0l8bY0oInDgBjsqh/uASdcdNMRcYVPJvC5msHqOKQQVW8m1Zr9Zn4h53qFylzk oPz35SPe2hEqiX7HtuetZudSFJwpvmrKMYiUlbyK2B9zjiKm/MSgKNl4/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG1Jvc4QQw4XngIx9T4c4ekHlcMdMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvYlVtOXpoQkREaGVlQWpIMVBoemg2UWVWd3gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBstL4AwQA stL7MA0GCSqGSIb3DQEBCwUAA4IBAQCXh2UMpNivv+KvJ73s+lny+kSh2UlrAtj3 QJlsZSJ2CVObdV/4klMAJe8B3mAhHqxJoCWLAOFnYD9jjGShru+FgDNvZDzmXEFm 5TaYtKdicEisWBvrA9ydSd0+1OMT95Y3emeyOoiEtUXUl7fSlCrTvqmUmj6Sf4hH HdAjp8EIBcSiYydhIG1vF2YMFKj/Ed/MoXweSCJ7vE8J/Z+/ktRDbu30U10wSz4B HXt522IYpDmklwZFajx333XmsjD4TlP3QZSqJfjhXA/ZqqQP8G0T5zkiYrfmp4r3 aFbH11h5z9JQfouUJt6eDy5fQIh381ffuVBANzfFq5qSISA0iW/d -----END CERTIFICATE-----Generated at Fri Jan 9 21:26:43 2026 by rpki-client