This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/sKa8KGSQMDeu4xjp-76scAkNmoM.roa File: sKa8KGSQMDeu4xjp-76scAkNmoM.roa (raw, json) Hash identifier: BDhEXOrhFxU6yRZ6pUCYht36ar+0175olhnKUrOoWm8= Subject key identifier: B0:A6:BC:28:64:90:30:37:AE:E3:18:E9:FB:BE:AC:70:09:0D:9A:83 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA31AB65C0EC5E8D88E14AAD0732800 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/sKa8KGSQMDeu4xjp-76scAkNmoM.roa Signing time: Thu 01 Jan 2026 22:17:25 +0000 ROA not before: Thu 01 Jan 2026 22:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 178.210.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1a:b6:5c:0e:c5:e8:d8:8e:14:aa:d0:73:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0a6bc2864903037aee318e9fbbeac70090d9a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:2e:a7:6f:3d:8f:fd:f9:f8:0c:10:bf:1e: ae:0c:e7:60:80:e6:f4:24:86:03:8d:dd:f5:53:da: 44:be:9e:cd:cb:2d:e3:9b:25:4e:8c:47:18:07:e8: 0e:2a:16:27:af:9e:98:e3:6c:95:97:c4:87:d3:46: 16:24:d2:89:33:a1:19:bf:de:e2:b0:df:b1:11:43: 1b:b4:36:77:d7:68:e0:03:5b:7d:b1:af:33:c4:18: d2:72:28:0b:2e:41:8f:25:68:2e:c5:8d:37:74:a7: de:c9:6b:fa:93:24:4f:dc:bf:33:b0:9f:5e:ec:14: 0c:54:f8:10:0d:cb:59:b6:42:2d:ff:80:61:0b:dc: ce:32:34:1d:fd:5d:c4:64:c7:fe:55:f7:0e:ee:cf: 5a:6e:3a:16:03:83:a1:8b:e8:1c:05:4d:60:8a:a1: cd:27:c4:9c:77:9d:c6:9a:15:22:d9:31:62:b5:1b: 69:35:78:5f:1d:9d:ce:f0:d0:6c:fb:d7:6a:21:ed: 9d:34:96:31:a8:40:a4:6e:9e:c6:56:41:87:96:d7: 87:e5:9a:36:f6:d6:6a:95:2e:0f:f5:0d:5f:b3:1f: aa:63:fa:90:da:6e:ab:e6:e8:7a:73:21:48:da:a6: f0:3c:a4:ad:46:b8:cb:60:4c:dd:4b:eb:4e:cc:1b: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A6:BC:28:64:90:30:37:AE:E3:18:E9:FB:BE:AC:70:09:0D:9A:83 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/sKa8KGSQMDeu4xjp-76scAkNmoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.247.0/24 Signature Algorithm: sha256WithRSAEncryption d0:49:c8:08:45:83:aa:30:6c:d0:cc:43:5f:57:1d:03:fa:27: aa:38:fb:7e:47:f6:fa:3f:9b:03:00:ea:21:8c:ea:f1:5b:73: a7:6f:be:6a:2a:e7:ec:2c:62:64:c6:23:6c:c9:6a:29:8a:2e: 05:35:67:40:f6:ad:05:6c:73:16:81:6f:aa:29:d6:c8:e2:d3: 8c:03:55:6e:ae:d9:f6:7d:c4:9e:30:3c:3d:aa:d6:5e:71:ce: 68:0c:94:df:0d:cb:6d:5b:36:ce:73:30:14:a2:3b:c2:c9:2f: 7c:8c:e5:c4:53:f1:a1:f7:9e:8e:44:8f:a5:80:7d:be:0e:3f: 29:ba:90:d6:96:99:38:91:4a:e0:cd:eb:70:61:fe:5a:7c:84: 64:45:24:bb:5f:64:6a:22:7a:1a:00:f3:f0:43:f5:6b:33:48: ca:f0:36:e6:3a:9f:84:30:e0:72:91:6d:2a:13:a1:b4:bd:3f: 70:d3:43:a1:91:ab:eb:d6:24:90:fc:12:4e:1b:a9:fb:8f:76: d4:94:fb:fa:20:18:97:70:c5:96:bf:97:39:32:48:59:e8:1e: ee:79:3b:e7:07:5f:73:84:eb:ae:3a:58:16:45:33:f8:a8:6b: 2c:5e:57:b8:c9:de:74:72:fb:05:fd:c5:16:2d:89:b1:ab:26: 4b:d5:43:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oxq2XA7F6NiOFKrQcygAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGE2YmMyODY0OTAzMDM3YWVlMzE4ZTlmYmJlYWM3MDA5MGQ5YTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUMup289j/35+AwQvx6uDOdggOb0 JIYDjd31U9pEvp7Nyy3jmyVOjEcYB+gOKhYnr56Y42yVl8SH00YWJNKJM6EZv97i sN+xEUMbtDZ312jgA1t9sa8zxBjScigLLkGPJWguxY03dKfeyWv6kyRP3L8zsJ9e 7BQMVPgQDctZtkIt/4BhC9zOMjQd/V3EZMf+VfcO7s9abjoWA4Ohi+gcBU1giqHN J8Scd53GmhUi2TFitRtpNXhfHZ3O8NBs+9dqIe2dNJYxqECkbp7GVkGHlteH5Zo2 9tZqlS4P9Q1fsx+qY/qQ2m6r5uh6cyFI2qbwPKStRrjLYEzdS+tOzBskywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLCmvChkkDA3ruMY6fu+rHAJDZqDMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvc0thOEtHU1FNRGV1NHhqcC03NnNjQWtObW9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstL3MA0G CSqGSIb3DQEBCwUAA4IBAQDQScgIRYOqMGzQzENfVx0D+ieqOPt+R/b6P5sDAOoh jOrxW3Onb75qKufsLGJkxiNsyWopii4FNWdA9q0FbHMWgW+qKdbI4tOMA1Vurtn2 fcSeMDw9qtZecc5oDJTfDcttWzbOczAUojvCyS98jOXEU/Gh956ORI+lgH2+Dj8p upDWlpk4kUrgzetwYf5afIRkRSS7X2RqInoaAPPwQ/VrM0jK8DbmOp+EMOBykW0q E6G0vT9w00Ohkavr1iSQ/BJOG6n7j3bUlPv6IBiXcMWWv5c5MkhZ6B7ueTvnB19z hOuuOlgWRTP4qGssXle4yd50cvsF/cUWLYmxqyZL1UOP -----END CERTIFICATE-----Generated at Fri Jan 9 21:26:43 2026 by rpki-client