This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/f0B3MgXGlqLEfyor4GSGExZTVJ4.roa File: f0B3MgXGlqLEfyor4GSGExZTVJ4.roa (raw, json) Hash identifier: GDscvk0i60nD5lnQdIjm8L9vXbQTY0TlzuMcrui2UII= Subject key identifier: 7F:40:77:32:05:C6:96:A2:C4:7F:2A:2B:E0:64:86:13:16:53:54:9E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA3216E88419BF2F39636D0D4980A62 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/f0B3MgXGlqLEfyor4GSGExZTVJ4.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 178.210.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:21:6e:88:41:9b:f2:f3:96:36:d0:d4:98:0a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f40773205c696a2c47f2a2be06486131653549e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:64:26:02:98:f1:ef:89:a2:2c:13:a9:62: f2:58:f9:cc:a9:7b:28:5a:d8:f6:59:76:83:af:01: 84:3a:26:41:0a:a6:9e:04:3f:ed:3f:06:9f:dd:44: 1b:42:8a:73:8c:7e:6f:79:fa:3f:5c:d2:d1:b2:59: 3c:a3:dd:83:77:78:4c:31:e4:93:2d:4f:84:c3:91: bc:81:df:26:6d:8a:b1:44:bf:b0:5d:c4:ae:49:dd: 0c:d8:12:eb:0f:2a:95:e7:a6:45:b3:b3:e8:d9:ab: 52:bc:41:7e:86:ed:86:3d:8e:ce:9b:f9:d9:e6:34: b0:bc:08:82:77:d7:5a:60:df:aa:3f:39:0d:31:a1: 09:50:dc:b1:0e:3d:ee:71:1f:0f:5d:65:78:a3:68: bc:56:2e:fe:61:f1:cc:10:71:c7:be:e6:25:bb:aa: d7:12:e7:20:85:5a:9d:11:bc:81:ab:b1:3f:9d:98: cd:3d:83:0f:27:24:cb:58:50:40:88:d4:17:01:21: eb:03:d9:36:16:56:21:4b:b3:44:38:6b:f3:fa:1a: 41:95:46:80:8a:94:dd:dd:48:b9:55:cc:b7:8e:b6: 9d:c4:f3:37:99:5c:8e:29:d2:2b:a7:4d:55:2c:0d: f0:56:00:db:b7:d8:7e:90:0a:1a:10:24:29:01:e7: a9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:40:77:32:05:C6:96:A2:C4:7F:2A:2B:E0:64:86:13:16:53:54:9E X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/f0B3MgXGlqLEfyor4GSGExZTVJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.250.0/24 Signature Algorithm: sha256WithRSAEncryption 82:c0:d6:b5:9b:b5:6e:43:08:d2:f1:1d:7e:7b:f4:45:76:05: db:cd:b3:5a:57:93:51:36:29:9c:47:41:e9:7f:dc:74:ec:31: 49:e3:7f:9f:f4:5b:2c:54:53:c7:25:5f:fa:c3:bc:11:89:7f: 99:f2:3c:00:4a:77:90:31:54:13:77:62:bc:bf:6d:a0:90:26: 61:43:d8:86:c4:c3:b4:62:68:62:50:13:6f:50:16:84:f5:dd: 75:da:ec:f1:d7:45:09:6c:36:c3:7f:28:64:30:42:a2:7f:95: f7:63:fe:58:89:63:b7:a8:e0:21:aa:e8:a9:fb:12:2a:62:69: 6e:dd:33:56:ab:e8:2b:23:de:aa:47:7e:b9:29:df:17:22:0e: 64:30:ea:17:8f:b1:d4:df:ef:c1:e3:ee:3a:86:d2:fe:20:2f: dd:12:c7:ff:9d:29:e8:94:ec:c3:74:f3:0b:94:53:be:93:13: 26:70:f4:2e:9e:c8:97:d8:1b:b2:21:c9:17:cb:c0:d7:ad:6c: a6:15:0b:46:cd:9d:12:de:e8:67:f2:ce:07:1e:73:0c:0b:8c: a0:2f:33:1c:e7:99:f4:65:82:b2:37:8b:5f:c9:0d:95:99:1f: 7c:00:3e:93:31:48:f5:00:fb:37:d7:44:66:c5:99:a4:ca:ed: a2:41:22:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyFuiEGb8vOWNtDUmApiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjQwNzczMjA1YzY5NmEyYzQ3ZjJhMmJlMDY0ODYxMzE2NTM1NDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps5kJgKY8e+JoiwTqWLyWPnMqXso Wtj2WXaDrwGEOiZBCqaeBD/tPwaf3UQbQopzjH5vefo/XNLRslk8o92Dd3hMMeST LU+Ew5G8gd8mbYqxRL+wXcSuSd0M2BLrDyqV56ZFs7Po2atSvEF+hu2GPY7Om/nZ 5jSwvAiCd9daYN+qPzkNMaEJUNyxDj3ucR8PXWV4o2i8Vi7+YfHMEHHHvuYlu6rX EucghVqdEbyBq7E/nZjNPYMPJyTLWFBAiNQXASHrA9k2FlYhS7NEOGvz+hpBlUaA ipTd3Ui5Vcy3jradxPM3mVyOKdIrp01VLA3wVgDbt9h+kAoaECQpAeepZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH9AdzIFxpaixH8qK+BkhhMWU1SeMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvZjBCM01nWEdscUxFZnlvcjRHU0dFeFpUVko0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstL6MA0G CSqGSIb3DQEBCwUAA4IBAQCCwNa1m7VuQwjS8R1+e/RFdgXbzbNaV5NRNimcR0Hp f9x07DFJ43+f9FssVFPHJV/6w7wRiX+Z8jwASneQMVQTd2K8v22gkCZhQ9iGxMO0 YmhiUBNvUBaE9d112uzx10UJbDbDfyhkMEKif5X3Y/5YiWO3qOAhquip+xIqYmlu 3TNWq+grI96qR365Kd8XIg5kMOoXj7HU3+/B4+46htL+IC/dEsf/nSnolOzDdPML lFO+kxMmcPQunsiX2BuyIckXy8DXrWymFQtGzZ0S3uhn8s4HHnMMC4ygLzMc55n0 ZYKyN4tfyQ2VmR98AD6TMUj1APs310RmxZmkyu2iQSJR -----END CERTIFICATE-----Generated at Fri Jan 9 21:27:44 2026 by rpki-client