This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/tqLA3niYgXo7rtb9KpiVm9YQRsI.roa File: tqLA3niYgXo7rtb9KpiVm9YQRsI.roa (raw, json) Hash identifier: JApSiGrHRmdCS2s34nRBKnv5Jb7erd5zPvaQUBbAO4U= Subject key identifier: B6:A2:C0:DE:78:98:81:7A:3B:AE:D6:FD:2A:98:95:9B:D6:10:46:C2 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA31F086B501266AAF4FC4BE96E5FCA Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/tqLA3niYgXo7rtb9KpiVm9YQRsI.roa Signing time: Thu 01 Jan 2026 22:17:26 +0000 ROA not before: Thu 01 Jan 2026 22:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 178.210.245.0/24 maxlen: 24 178.210.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1f:08:6b:50:12:66:aa:f4:fc:4b:e9:6e:5f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6a2c0de7898817a3baed6fd2a98959bd61046c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:d8:cb:3b:0b:5b:ce:de:31:ea:c3:0d:0e: 08:ca:c5:1e:f1:7e:b7:84:39:3f:6e:41:07:72:b5: be:78:ad:75:a4:ce:d7:db:c4:3e:35:4d:15:11:9d: 0e:27:1a:ba:f1:d1:0c:ee:97:78:ac:53:08:c3:39: db:a7:90:ae:c4:4d:60:4f:1a:f3:d0:fa:fc:31:21: cb:78:78:21:09:49:86:15:8a:d8:03:64:1c:67:7e: 28:70:54:00:e3:65:42:92:b1:57:ff:ad:3b:07:f7: 7a:1e:d4:8d:dd:25:f5:4f:1d:9e:f5:76:8f:1b:ae: 88:3c:66:61:f1:8b:63:5f:81:c3:7f:63:f7:c3:33: 1e:99:89:02:29:78:58:79:27:c8:77:c1:5e:78:de: f1:52:88:10:9f:e6:f6:09:05:8e:f0:30:c2:59:a1: a2:80:7c:05:5d:8c:44:1f:8f:09:6f:8c:c0:c2:a6: cd:94:78:c1:28:bc:70:d0:f8:48:ee:69:7c:50:aa: 38:f7:4c:a7:79:da:b2:3d:1b:06:81:2e:ba:b4:d7: 3a:53:19:0a:a6:8d:d2:c8:d2:d4:b9:72:d1:c3:6b: 40:62:51:37:21:c5:42:8c:be:a3:49:76:b1:cd:a1: 3c:20:50:f6:6e:ee:2c:16:94:3c:f9:86:8e:31:5b: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A2:C0:DE:78:98:81:7A:3B:AE:D6:FD:2A:98:95:9B:D6:10:46:C2 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/tqLA3niYgXo7rtb9KpiVm9YQRsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.245.0-178.210.246.255 Signature Algorithm: sha256WithRSAEncryption a8:cf:45:f9:62:1e:f0:2f:2c:58:23:5f:03:5e:38:1e:d2:50: 9f:52:46:6d:80:e0:03:f1:de:aa:da:f8:3d:f6:ea:34:34:e4: e6:b5:90:bd:16:ab:e3:71:53:3e:a6:dd:1e:2e:d2:05:68:e5: cf:c3:58:82:00:e1:55:a0:fd:ba:cc:b6:e0:c1:68:02:06:53: 28:ad:36:cc:ab:d0:4e:94:80:10:6f:df:b2:97:6d:90:85:62: 45:e2:9b:6e:1c:b4:5e:dd:74:c1:41:38:fc:cf:8d:dd:fe:6d: 62:85:ff:11:13:37:11:b1:d1:17:e8:29:44:0f:84:00:10:8b: 16:f1:9c:1a:60:b7:61:4a:ec:cb:19:3f:58:a3:7d:5e:0c:19: ff:9f:fe:ba:3e:0a:ad:98:65:1f:bc:d7:24:55:ad:40:17:cb: d1:1a:2d:69:5f:92:86:57:ac:d4:90:da:5e:51:f0:84:ee:bf: 88:f1:62:60:dd:5f:ee:16:04:f5:4d:8f:ab:89:2b:16:6e:0a: f4:f3:59:95:11:79:21:70:de:cb:1d:07:1b:cf:d7:74:ea:3f: 64:46:74:54:dd:8e:cc:21:9c:36:cf:f9:6a:24:eb:1a:88:7e: 54:46:cc:2c:74:c0:0a:98:60:76:91:20:95:79:2f:04:96:c7: ff:c4:68:a0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7ox8Ia1ASZqr0/Evpbl/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmEyYzBkZTc4OTg4MTdhM2JhZWQ2ZmQyYTk4OTU5YmQ2MTA0NmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSLYyzsLW87eMerDDQ4IysUe8X63 hDk/bkEHcrW+eK11pM7X28Q+NU0VEZ0OJxq68dEM7pd4rFMIwznbp5CuxE1gTxrz 0Pr8MSHLeHghCUmGFYrYA2QcZ34ocFQA42VCkrFX/607B/d6HtSN3SX1Tx2e9XaP G66IPGZh8YtjX4HDf2P3wzMemYkCKXhYeSfId8FeeN7xUogQn+b2CQWO8DDCWaGi gHwFXYxEH48Jb4zAwqbNlHjBKLxw0PhI7ml8UKo490ynedqyPRsGgS66tNc6UxkK po3SyNLUuXLRw2tAYlE3IcVCjL6jSXaxzaE8IFD2bu4sFpQ8+YaOMVsiZQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLaiwN54mIF6O67W/SqYlZvWEEbCMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvdHFMQTNuaVlnWG83cnRiOUtwaVZtOVlRUnNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACy0vUD BACy0vYwDQYJKoZIhvcNAQELBQADggEBAKjPRfliHvAvLFgjXwNeOB7SUJ9SRm2A 4APx3qra+D326jQ05Oa1kL0Wq+NxUz6m3R4u0gVo5c/DWIIA4VWg/brMtuDBaAIG UyitNsyr0E6UgBBv37KXbZCFYkXim24ctF7ddMFBOPzPjd3+bWKF/xETNxGx0Rfo KUQPhAAQixbxnBpgt2FK7MsZP1ijfV4MGf+f/ro+Cq2YZR+81yRVrUAXy9EaLWlf koZXrNSQ2l5R8ITuv4jxYmDdX+4WBPVNj6uJKxZuCvTzWZUReSFw3ssdBxvP13Tq P2RGdFTdjswhnDbP+Wok6xqIflRGzCx0wAqYYHaRIJV5LwSWx//EaKA= -----END CERTIFICATE-----Generated at Fri Jan 9 21:26:43 2026 by rpki-client