This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/FH7sO2w4buuUxe4Xni3YZHcOAgs.roa File: FH7sO2w4buuUxe4Xni3YZHcOAgs.roa (raw, json) Hash identifier: kJoB+cGjyVW2fni2uIlOIfUSADoKT5LoOeBxc8WKnUY= Subject key identifier: 14:7E:EC:3B:6C:38:6E:EB:94:C5:EE:17:9E:2D:D8:64:77:0E:02:0B Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362 Certificate serial: 019ADED0AA332C2A0330D67BF149F39D2DFD Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/FH7sO2w4buuUxe4Xni3YZHcOAgs.roa Signing time: Tue 02 Dec 2025 11:26:48 +0000 ROA not before: Tue 02 Dec 2025 11:26:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136907 IP address blocks: 178.210.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:d0:aa:33:2c:2a:03:30:d6:7b:f1:49:f3:9d:2d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362 Validity Not Before: Dec 2 11:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=147eec3b6c386eeb94c5ee179e2dd864770e020b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:49:e8:1c:4e:39:bd:6c:d0:32:76:81:ae: 0b:74:2e:4c:26:db:6a:8c:a7:9e:36:29:b7:77:ef: ed:42:c7:ec:19:ce:69:09:72:06:bb:e2:22:b4:33: 99:4e:cc:40:d7:d7:a6:05:93:64:e4:ed:2b:ee:da: f4:b0:4a:ad:dd:38:af:ec:8e:22:3c:53:b6:76:ea: b7:b6:9d:14:03:6c:79:87:20:21:5c:f4:fe:5b:03: 71:a3:56:11:51:a9:42:77:42:8e:8d:cf:18:35:c9: 41:b4:4a:1e:8b:54:27:f9:2c:23:eb:bf:03:5b:5a: 94:45:0f:a8:3c:ef:0a:8d:71:2c:8a:94:6f:fd:f3: e1:0d:cb:ab:4e:e5:4a:3b:7c:70:7d:cb:cc:fd:90: b1:6f:00:94:e8:16:f8:50:71:39:07:2b:45:de:66: f8:1e:4d:3d:a3:4f:e7:8e:3b:58:dc:e0:e3:24:cc: a5:80:c3:36:c8:57:b4:38:56:29:6f:8b:05:b9:eb: 7b:2c:7d:03:7f:a1:e8:29:ba:05:9a:01:9d:77:e6: 1f:85:86:e2:99:95:0f:8e:9f:c1:66:71:58:b3:af: 32:0e:6a:94:60:43:5c:2d:83:5f:fb:31:1b:68:ca: 17:ed:48:57:cd:5f:21:3d:4b:6b:f2:b7:29:b8:15: 62:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7E:EC:3B:6C:38:6E:EB:94:C5:EE:17:9E:2D:D8:64:77:0E:02:0B X509v3 Authority Key Identifier: keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/FH7sO2w4buuUxe4Xni3YZHcOAgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.163.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:43:88:de:3b:d8:11:bf:8b:27:64:05:31:21:aa:d4:92:27: 43:94:28:2a:88:e7:0f:22:b9:e9:6e:1b:18:9e:ba:48:cf:6d: 6a:f2:1c:3c:2e:34:b2:4e:c5:6b:da:62:23:76:4b:ba:a5:91: 7c:aa:5a:2d:38:1d:cd:6a:34:01:5a:bc:1b:54:37:07:3a:b9: ba:71:31:16:39:38:17:42:2b:f9:d9:3d:c9:76:74:4a:2c:61: fa:ce:e1:c9:2b:6d:6f:dd:2a:2f:f3:a3:a1:42:e7:ec:45:d8: 92:a1:46:2f:35:c9:1e:2f:72:46:64:49:24:1a:6e:10:40:1c: 13:fa:a4:f4:ff:1a:b8:f8:79:6c:d9:4f:42:d1:f4:30:4c:94: ff:6a:bc:97:17:ed:c7:e1:86:dc:20:70:51:af:a8:b9:1f:49: ee:e0:d4:90:a7:7e:0c:fe:96:73:80:5f:a9:19:fb:30:52:72: 47:78:54:94:5f:77:14:eb:ee:49:80:8c:8b:c3:08:42:ac:ae: a6:6b:e5:2e:67:e7:a3:96:31:19:79:6a:e7:86:25:54:62:77: 7a:d4:bf:da:d8:fa:7a:39:df:db:65:0b:b2:af:3f:63:51:55: 09:97:20:78:41:5a:c0:ee:7a:a9:e6:d1:70:ac:bf:5f:a6:6c: f4:27:56:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZre0KozLCoDMNZ78UnznS39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYjdjZGIwNTI4MmIwODliNDc2NzU5ZjY5ZWQ0YTQzNmI0 NTYzNjIwHhcNMjUxMjAyMTEyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDdlZWMzYjZjMzg2ZWViOTRjNWVlMTc5ZTJkZDg2NDc3MGUwMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvchJ6BxOOb1s0DJ2ga4LdC5MJttq jKeeNim3d+/tQsfsGc5pCXIGu+IitDOZTsxA19emBZNk5O0r7tr0sEqt3Tiv7I4i PFO2duq3tp0UA2x5hyAhXPT+WwNxo1YRUalCd0KOjc8YNclBtEoei1Qn+Swj678D W1qURQ+oPO8KjXEsipRv/fPhDcurTuVKO3xwfcvM/ZCxbwCU6Bb4UHE5BytF3mb4 Hk09o0/njjtY3ODjJMylgMM2yFe0OFYpb4sFuet7LH0Df6HoKboFmgGdd+YfhYbi mZUPjp/BZnFYs68yDmqUYENcLYNf+zEbaMoX7UhXzV8hPUtr8rcpuBViKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBR+7DtsOG7rlMXuF54t2GR3DgILMB8GA1UdIwQY MBaAFA+3zbBSgrCJtHZ1n2ntSkNrRWNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzkt MDE4MzYwY2MwYmE5LzEvRkg3c08ydzRidXVVeGU0WG5pM1laSGNPQWdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzktMDE4MzYwY2MwYmE5 LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstKjMA0G CSqGSIb3DQEBCwUAA4IBAQBeQ4jeO9gRv4snZAUxIarUkidDlCgqiOcPIrnpbhsY nrpIz21q8hw8LjSyTsVr2mIjdku6pZF8qlotOB3NajQBWrwbVDcHOrm6cTEWOTgX Qiv52T3JdnRKLGH6zuHJK21v3Sov86OhQufsRdiSoUYvNckeL3JGZEkkGm4QQBwT +qT0/xq4+Hls2U9C0fQwTJT/aryXF+3H4YbcIHBRr6i5H0nu4NSQp34M/pZzgF+p GfswUnJHeFSUX3cU6+5JgIyLwwhCrK6ma+UuZ+ejljEZeWrnhiVUYnd61L/a2Pp6 Od/bZQuyrz9jUVUJlyB4QVrA7nqp5tFwrL9fpmz0J1bl -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:07 2025 by rpki-client