This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/pM5HyRJ0tXqa3u3HJO4MenSMSKA.roa File: pM5HyRJ0tXqa3u3HJO4MenSMSKA.roa (raw, json) Hash identifier: eDbwn0mnmgvF86dDy5bv6IYDjmTGECKb7lV458qQ5XM= Subject key identifier: A4:CE:47:C9:12:74:B5:7A:9A:DE:ED:C7:24:EE:0C:7A:74:8C:48:A0 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA31CB29F735FA566868AF281928071 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/pM5HyRJ0tXqa3u3HJO4MenSMSKA.roa Signing time: Thu 01 Jan 2026 22:17:25 +0000 ROA not before: Thu 01 Jan 2026 22:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 178.210.244.0/24 maxlen: 24 178.210.254.0/24 maxlen: 24 178.210.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1c:b2:9f:73:5f:a5:66:86:8a:f2:81:92:80:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4ce47c91274b57a9adeedc724ee0c7a748c48a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ae:05:0f:10:e5:53:f5:d2:1c:72:06:1c:64: 70:fa:5e:42:cf:d2:f2:3b:ed:df:6e:a1:9e:04:2e: b6:25:1e:5b:2c:08:3e:9b:dd:44:bb:10:f9:c5:dd: 4a:20:02:87:42:3d:a4:ac:e3:8a:f9:31:c8:78:e5: 54:21:48:a8:f9:19:02:03:ba:03:d8:c6:42:52:16: 0c:07:3f:ee:a0:78:e2:a1:01:83:34:e9:6b:fc:a8: e3:84:7a:90:cd:80:f5:8d:a8:14:23:6a:a3:72:bd: cb:76:b2:b7:c3:4d:12:13:c8:d3:2f:68:f1:88:2f: af:7e:a8:11:fb:a8:bc:d1:4d:b7:9a:18:44:65:59: 02:12:ee:a8:fc:cd:c0:16:da:53:9d:3e:f0:25:0f: fe:4a:ec:2a:2f:06:80:b1:ef:7f:e7:4d:d9:cc:98: 4f:e8:2d:2b:11:7f:6b:fd:9d:c0:41:e7:35:fc:f8: ab:ae:96:b9:8f:5e:d1:ab:a5:81:ac:4a:8c:d0:a2: 02:68:5c:a6:ff:f4:3a:e6:2a:be:fe:8b:78:00:7c: 74:9b:ca:6b:37:e0:fc:54:53:46:00:7d:87:a1:7c: f2:91:c2:48:62:56:6b:8f:2f:ba:65:a9:43:e2:67: c6:6b:ec:76:ca:16:60:9e:ea:4b:0b:15:53:59:0d: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CE:47:C9:12:74:B5:7A:9A:DE:ED:C7:24:EE:0C:7A:74:8C:48:A0 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/pM5HyRJ0tXqa3u3HJO4MenSMSKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.244.0/24 178.210.254.0/23 Signature Algorithm: sha256WithRSAEncryption a3:0c:d4:db:36:4d:81:af:7d:2f:4a:e3:d4:cf:84:4c:32:0f: df:10:59:d7:1e:c9:30:11:42:e2:af:f2:29:0c:aa:e5:17:73: 5a:a5:6b:30:cd:a2:b9:10:77:d1:44:93:17:9f:55:fd:60:f7: a6:64:b0:fe:e2:cc:d7:ef:16:bd:b1:ac:72:d0:ee:23:58:76: 26:bc:dc:bc:83:6a:01:a0:4e:ae:65:82:79:d0:f9:87:f8:77: a5:ab:69:d7:84:6f:a6:6f:b3:70:c7:be:b3:06:b7:ef:6c:a9: 53:1f:cd:c3:ed:57:97:4d:bd:59:2c:cc:58:b7:61:12:f6:74: 9e:97:b9:21:3d:bf:e2:12:48:48:be:3a:0a:13:61:df:48:1a: be:b9:7f:61:9e:98:a3:f4:4d:6b:a5:91:eb:67:c1:0d:a1:d6: ed:68:1f:2c:b5:5e:d0:61:a0:69:1c:17:7e:55:9e:92:29:27: 1a:8b:95:89:1a:1f:15:7b:ba:57:2e:f1:7c:21:e6:6d:be:2d: ad:e6:da:7d:00:f3:3e:86:2e:68:bd:47:48:0f:75:c5:0a:67: 9a:c1:04:9e:55:20:23:e3:37:21:40:f5:6b:cf:f3:c6:c5:09: e2:4f:30:7d:04:06:72:65:1a:7c:63:a2:a4:f3:4b:0e:ab:78: 9a:8f:1b:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7oxyyn3NfpWaGivKBkoBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGNlNDdjOTEyNzRiNTdhOWFkZWVkYzcyNGVlMGM3YTc0OGM0OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq64FDxDlU/XSHHIGHGRw+l5Cz9Ly O+3fbqGeBC62JR5bLAg+m91EuxD5xd1KIAKHQj2krOOK+THIeOVUIUio+RkCA7oD 2MZCUhYMBz/uoHjioQGDNOlr/KjjhHqQzYD1jagUI2qjcr3LdrK3w00SE8jTL2jx iC+vfqgR+6i80U23mhhEZVkCEu6o/M3AFtpTnT7wJQ/+SuwqLwaAse9/503ZzJhP 6C0rEX9r/Z3AQec1/Pirrpa5j17Rq6WBrEqM0KICaFym//Q65iq+/ot4AHx0m8pr N+D8VFNGAH2HoXzykcJIYlZrjy+6ZalD4mfGa+x2yhZgnupLCxVTWQ2AFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKTOR8kSdLV6mt7txyTuDHp0jEigMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvcE01SHlSSjB0WHFhM3UzSEpPNE1lblNNU0tBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstL0AwQB stL+MA0GCSqGSIb3DQEBCwUAA4IBAQCjDNTbNk2Br30vSuPUz4RMMg/fEFnXHskw EULir/IpDKrlF3NapWswzaK5EHfRRJMXn1X9YPemZLD+4szX7xa9saxy0O4jWHYm vNy8g2oBoE6uZYJ50PmH+Helq2nXhG+mb7Nwx76zBrfvbKlTH83D7VeXTb1ZLMxY t2ES9nSel7khPb/iEkhIvjoKE2HfSBq+uX9hnpij9E1rpZHrZ8ENodbtaB8stV7Q YaBpHBd+VZ6SKScai5WJGh8Ve7pXLvF8IeZtvi2t5tp9APM+hi5ovUdID3XFCmea wQSeVSAj4zchQPVrz/PGxQniTzB9BAZyZRp8Y6Kk80sOq3iajxvG -----END CERTIFICATE-----Generated at Fri Jan 9 21:26:43 2026 by rpki-client