This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/J3RxYtXsPYVa3XDH4q32OG5y5dg.roa File: J3RxYtXsPYVa3XDH4q32OG5y5dg.roa (raw, json) Hash identifier: 1HRhTzYjnMTo//uP+tjQuq+ctXBbL7r5+7rziSgVvFY= Subject key identifier: 27:74:71:62:D5:EC:3D:85:5A:DD:70:C7:E2:AD:F6:38:6E:72:E5:D8 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B213DA20DE1FDC01E00157E41EC8FC3FA Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/J3RxYtXsPYVa3XDH4q32OG5y5dg.roa Signing time: Mon 15 Dec 2025 09:00:45 +0000 ROA not before: Mon 15 Dec 2025 09:00:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 178.210.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:3d:a2:0d:e1:fd:c0:1e:00:15:7e:41:ec:8f:c3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Dec 15 09:00:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=27747162d5ec3d855add70c7e2adf6386e72e5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9c:e6:41:3c:f2:1c:87:b8:3c:3d:8b:16:1e: 25:37:a8:ad:de:f6:ed:3d:74:60:b5:c7:74:de:fb: 4c:93:6f:cb:14:9f:68:9c:ae:e9:dd:3e:11:c4:26: 27:98:2d:4f:cc:78:47:09:f6:d5:82:eb:87:ee:dc: f3:d2:49:f9:4b:df:42:be:12:a5:ee:76:8c:41:06: e3:fc:8b:ff:44:6a:d9:b7:ff:f7:2b:e2:40:b2:b6: c4:6c:5e:43:ad:a7:2f:dd:4f:8f:cc:6b:1f:75:d8: 8b:41:2e:7b:2b:38:3c:e3:62:5f:79:c6:04:6a:c0: 84:27:bd:8f:3a:09:ac:49:22:88:a7:9e:e7:8a:5d: 17:34:10:ef:44:a0:22:c2:ce:39:a1:0b:15:ff:88: 3a:31:fa:43:c0:a7:f4:c9:f9:d8:44:29:cb:d9:f6: f7:68:84:9d:01:04:5a:9a:fd:82:56:b2:38:1b:8c: 42:11:76:e5:c1:95:6a:6b:c3:a3:96:67:67:ca:3a: 21:85:72:1e:f6:d0:41:bf:37:a9:5f:bd:81:20:44: 81:df:a7:60:8b:4a:76:71:b0:3b:e5:5f:0c:7a:7d: 22:4a:00:c2:cd:29:7c:1a:ce:e8:32:3f:2d:66:e3: 1c:95:11:c2:e8:38:15:c4:70:c9:a2:86:24:7e:0a: 5e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:74:71:62:D5:EC:3D:85:5A:DD:70:C7:E2:AD:F6:38:6E:72:E5:D8 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/J3RxYtXsPYVa3XDH4q32OG5y5dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.250.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:b6:51:ef:82:38:14:ed:b4:c3:63:8d:ed:1d:8e:1c:2d:b7: 91:2f:06:f7:ec:9c:44:e3:90:0f:98:4e:fe:a6:11:5c:4b:70: eb:70:e7:14:b4:8d:3e:69:61:d9:38:9f:8f:e9:82:3b:11:b0: bc:6e:41:ae:5c:e7:ec:2c:48:a1:c7:21:3b:30:ec:44:2b:3d: 17:95:44:9e:7b:c6:47:89:cd:88:75:52:d1:9a:06:83:f3:5d: af:4c:ae:d5:fc:81:17:dc:d2:a2:f6:9c:b0:16:91:37:9e:ba: bb:5a:d7:3e:07:8a:24:1b:6c:01:e4:b3:ed:b1:79:32:ac:68: 48:17:2e:a8:a3:c4:d9:4d:27:ff:b8:bd:0c:33:65:3d:80:16: 6a:02:d8:01:d5:41:3c:e0:10:5b:7f:f6:4b:53:c6:94:60:ce: 57:0a:3c:05:49:69:39:a1:71:b2:7a:26:b7:57:0a:41:d7:32: 21:ae:cb:79:98:97:e9:01:6b:34:ed:7b:8e:6f:86:26:1e:5f: e0:2a:c5:bb:25:ea:24:92:7c:b5:64:e5:4b:50:1c:01:f9:b5: 3e:4d:b3:ee:78:ff:0a:a7:48:db:fe:de:77:3a:1c:57:56:3a: 48:5a:c8:0c:8d:d9:45:aa:1b:d6:a2:a5:a6:8c:d4:0b:4a:10: 2f:a3:e4:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshPaIN4f3AHgAVfkHsj8P6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUxMjE1MDkwMDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzc0NzE2MmQ1ZWMzZDg1NWFkZDcwYzdlMmFkZjYzODZlNzJlNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJzmQTzyHIe4PD2LFh4lN6it3vbt PXRgtcd03vtMk2/LFJ9onK7p3T4RxCYnmC1PzHhHCfbVguuH7tzz0kn5S99CvhKl 7naMQQbj/Iv/RGrZt//3K+JAsrbEbF5Dracv3U+PzGsfddiLQS57Kzg842JfecYE asCEJ72POgmsSSKIp57nil0XNBDvRKAiws45oQsV/4g6MfpDwKf0yfnYRCnL2fb3 aISdAQRamv2CVrI4G4xCEXblwZVqa8OjlmdnyjohhXIe9tBBvzepX72BIESB36dg i0p2cbA75V8Men0iSgDCzSl8Gs7oMj8tZuMclRHC6DgVxHDJooYkfgpeIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCd0cWLV7D2FWt1wx+Kt9jhucuXYMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvSjNSeFl0WHNQWVZhM1hESDRxMzJPRzV5NWRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstL6MA0G CSqGSIb3DQEBCwUAA4IBAQA9tlHvgjgU7bTDY43tHY4cLbeRLwb37JxE45APmE7+ phFcS3DrcOcUtI0+aWHZOJ+P6YI7EbC8bkGuXOfsLEihxyE7MOxEKz0XlUSee8ZH ic2IdVLRmgaD812vTK7V/IEX3NKi9pywFpE3nrq7Wtc+B4okG2wB5LPtsXkyrGhI Fy6oo8TZTSf/uL0MM2U9gBZqAtgB1UE84BBbf/ZLU8aUYM5XCjwFSWk5oXGyeia3 VwpB1zIhrst5mJfpAWs07XuOb4YmHl/gKsW7Jeokkny1ZOVLUBwB+bU+TbPueP8K p0jb/t53OhxXVjpIWsgMjdlFqhvWoqWmjNQLShAvo+RZ -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:17 2025 by rpki-client