This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/l5FsdF5ltlnzCJFQw66i1Wx5dVk.roa
File: l5FsdF5ltlnzCJFQw66i1Wx5dVk.roa (raw, json)
Hash identifier: 1vjLXbXJeHjyPVPTIlG6LhU7p6dLJ3W78nJja3sBFRA=
Subject key identifier: 97:91:6C:74:5E:65:B6:59:F3:08:91:50:C3:AE:A2:D5:6C:79:75:59
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019BC632D6948A42A0DD3EF77F5F566AA11D
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/l5FsdF5ltlnzCJFQw66i1Wx5dVk.roa
Signing time: Fri 16 Jan 2026 09:46:19 +0000
ROA not before: Fri 16 Jan 2026 09:46:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:c6:32:d6:94:8a:42:a0:dd:3e:f7:7f:5f:56:6a:a1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jan 16 09:46:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97916c745e65b659f3089150c3aea2d56c797559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:42:5f:dc:14:ad:0d:ba:45:39:68:ea:4f:
c5:3f:b9:fd:c4:15:ec:c1:9f:aa:b4:e3:1d:be:b5:
10:72:61:d6:68:cc:e9:a3:74:86:35:94:9f:f4:fb:
63:76:c0:c1:b5:d5:a9:f0:4f:7a:5f:e6:06:5b:85:
db:94:1c:74:3c:69:d4:44:9f:fc:55:85:94:1d:61:
f1:9c:37:94:78:13:e7:dd:bf:30:9d:00:fa:d3:25:
43:ef:6d:f5:8f:64:82:22:98:ad:6f:3c:01:a7:45:
70:7f:34:a7:2c:6d:5d:ea:fc:d5:7f:89:b3:3c:9e:
1b:29:dc:18:5d:c0:f7:08:07:21:ea:9a:e7:27:c2:
f9:53:dd:97:83:e2:43:69:fc:8f:7e:4b:9a:fd:9c:
60:1f:20:0d:69:b0:da:df:38:24:89:0f:a8:0d:5e:
c8:4d:97:4b:e4:1a:24:e6:72:db:27:65:15:d4:99:
e5:d0:92:2d:73:2d:f7:60:d8:29:1f:df:1f:f5:75:
dc:e5:e0:bf:12:7b:0b:27:c3:a3:06:79:bd:cf:3b:
14:aa:25:ea:b0:52:04:d4:9f:ce:13:96:8a:81:74:
f9:40:e6:f8:35:24:36:ad:85:d0:ed:80:44:f1:23:
55:7a:1c:aa:84:f8:4a:46:a1:b8:0b:14:8c:3a:14:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:91:6C:74:5E:65:B6:59:F3:08:91:50:C3:AE:A2:D5:6C:79:75:59
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/l5FsdF5ltlnzCJFQw66i1Wx5dVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.160.0/23
178.210.165.0-178.210.166.255
178.210.168.0/24
178.210.170.0-178.210.178.255
Signature Algorithm: sha256WithRSAEncryption
8e:09:e9:c5:53:4a:76:f6:cd:21:3d:64:c2:eb:8c:c5:f2:77:
6a:28:73:db:b3:26:33:27:a3:3e:d4:dd:cb:8d:cd:8d:ff:05:
b8:08:e5:43:f6:ce:cf:cf:f6:fb:81:67:89:a6:95:86:0e:df:
8c:3b:c1:e2:5f:56:54:6f:29:e7:0b:bb:e6:b2:97:8b:d3:10:
ce:bb:25:59:77:b3:35:30:d7:ff:85:05:7c:4c:17:27:ee:41:
9f:51:11:e7:73:e9:45:a7:47:59:96:dc:99:e8:a3:18:35:56:
98:8b:c4:ab:f9:65:3c:4c:79:ad:60:74:3d:4a:a9:19:5d:b4:
fc:f9:8e:dd:e9:d0:8c:fe:2a:57:64:b6:6a:0e:24:df:14:da:
45:4f:62:c0:15:e3:8d:73:73:d7:4c:2c:5b:c8:26:57:0d:a5:
82:f3:50:e8:95:12:88:17:17:3b:09:65:45:fd:2f:63:03:a7:
0b:67:2a:ff:7e:0f:66:41:14:c9:9e:18:76:10:36:7f:94:08:
a5:b2:35:e1:34:bd:54:06:52:08:d5:ea:d7:6d:dd:43:b2:6f:
cd:bf:65:2d:a0:1b:02:49:d7:d3:90:21:e8:7c:56:c4:50:a7:
7a:a7:12:bf:72:48:a1:d1:e1:cd:47:73:87:1c:ed:79:0b:15:
0e:a8:f0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:50 2026 by rpki-client