This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/0MBpQPEKGvXQ3va6N5gfPn3IfNo.roa File: 0MBpQPEKGvXQ3va6N5gfPn3IfNo.roa (raw, json) Hash identifier: txPni1Y/igapIzsvZ8KJhSMD62XHH8vc9Res8zUGcVw= Subject key identifier: D0:C0:69:40:F1:0A:1A:F5:D0:DE:F6:BA:37:98:1F:3E:7D:C8:7C:DA Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019A820CA49841983BF538DCB317C4A08E25 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/0MBpQPEKGvXQ3va6N5gfPn3IfNo.roa Signing time: Fri 14 Nov 2025 11:07:37 +0000 ROA not before: Fri 14 Nov 2025 11:07:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137517 IP address blocks: 212.100.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:0c:a4:98:41:98:3b:f5:38:dc:b3:17:c4:a0:8e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Nov 14 11:07:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d0c06940f10a1af5d0def6ba37981f3e7dc87cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2f:d4:a7:cb:30:ab:60:58:58:83:81:66:27: 87:68:d4:36:18:8a:16:47:f7:b4:ba:ea:d8:62:a3: 9d:4e:07:c8:d5:55:f8:a2:04:a9:3c:4a:e5:0c:68: 4d:a5:0f:7d:84:ba:80:29:f3:3d:55:f5:00:1c:e3: 7c:94:5e:5c:3c:a8:be:57:a4:18:6b:78:48:78:d2: fb:d5:a7:c7:bb:25:a3:ed:9d:7a:6c:69:aa:f0:15: 52:ad:ff:3e:25:88:aa:65:bb:68:ca:d8:66:a9:ae: e4:7f:12:49:56:d0:ee:0a:58:5f:78:0c:f3:b2:5f: fc:83:03:05:96:b9:90:5a:aa:59:2e:98:3d:0c:df: 01:e8:a2:c0:06:2d:25:49:8c:f5:c4:9f:ba:ce:ac: a7:76:67:52:d5:63:d1:e4:54:28:13:63:90:a2:60: f6:63:68:95:67:21:47:6e:66:11:bd:a3:95:c6:ba: e2:f8:f1:7d:a2:36:7e:0e:90:40:58:33:5d:31:5d: 31:c9:17:b7:f5:98:eb:a3:ec:76:c5:df:42:ba:f9: 1e:64:5a:7a:2f:41:a3:36:2d:49:43:6f:28:27:0e: 9d:d4:fc:73:cf:84:f7:6b:62:6a:32:fa:c6:4d:3a: 39:e1:c4:6d:f1:e8:97:1c:6f:f3:9f:51:3d:84:b7: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C0:69:40:F1:0A:1A:F5:D0:DE:F6:BA:37:98:1F:3E:7D:C8:7C:DA X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/0MBpQPEKGvXQ3va6N5gfPn3IfNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.175.0/24 Signature Algorithm: sha256WithRSAEncryption ad:0a:a2:c9:14:35:df:e7:17:ee:cd:0d:a6:6d:8e:c5:a9:a5: 7f:11:e5:4d:ac:6f:e1:55:a8:3d:6a:e3:e7:8f:3e:66:2d:29: b9:75:f2:8c:52:1d:a4:88:66:2d:b1:7e:8a:72:d7:95:d2:38: 9b:4a:76:e0:b5:7b:23:fb:e2:fc:62:b4:19:d5:6b:84:8d:2c: f2:8d:d4:7b:4e:15:22:d8:78:c9:4e:72:3f:b0:aa:68:18:24: 0f:bf:6c:8e:bb:c0:90:74:ff:bc:bd:5a:fc:50:c6:36:44:9c: 0e:12:3e:d3:97:21:24:24:f3:69:ea:3d:96:fd:17:f2:b1:12: 39:6a:64:93:cc:6e:4a:04:ab:ee:56:5b:11:00:29:ca:c8:2f: ab:db:ca:e3:75:9a:ff:2e:42:16:e6:06:fd:97:41:41:5c:bd: b7:fa:d9:8c:39:c6:12:4b:a6:b7:a2:16:ba:bf:91:07:53:77: c1:3a:d1:9a:71:4c:19:65:20:c6:52:b3:6e:0d:95:04:f8:76: 8b:8e:04:86:a2:25:b4:43:47:93:d8:4d:16:f6:1c:d8:0a:ea: 16:f0:f6:92:f6:d7:dc:d0:21:90:a3:10:10:ef:b1:93:2b:9a: 7b:b4:ae:b8:f7:63:cf:e6:3a:9b:96:03:a5:b5:fd:31:bc:04: 8a:aa:9f:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqCDKSYQZg79TjcsxfEoI4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjUxMTE0MTEwNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGMwNjk0MGYxMGExYWY1ZDBkZWY2YmEzNzk4MWYzZTdkYzg3Y2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S/Up8swq2BYWIOBZieHaNQ2GIoW R/e0uurYYqOdTgfI1VX4ogSpPErlDGhNpQ99hLqAKfM9VfUAHON8lF5cPKi+V6QY a3hIeNL71afHuyWj7Z16bGmq8BVSrf8+JYiqZbtoythmqa7kfxJJVtDuClhfeAzz sl/8gwMFlrmQWqpZLpg9DN8B6KLABi0lSYz1xJ+6zqyndmdS1WPR5FQoE2OQomD2 Y2iVZyFHbmYRvaOVxrri+PF9ojZ+DpBAWDNdMV0xyRe39Zjro+x2xd9CuvkeZFp6 L0GjNi1JQ28oJw6d1Pxzz4T3a2JqMvrGTTo54cRt8eiXHG/zn1E9hLdooQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNDAaUDxChr10N72ujeYHz59yHzaMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvME1CcFFQRUtHdlhRM3ZhNk41Z2ZQbjNJZk5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSvMA0G CSqGSIb3DQEBCwUAA4IBAQCtCqLJFDXf5xfuzQ2mbY7FqaV/EeVNrG/hVag9auPn jz5mLSm5dfKMUh2kiGYtsX6KcteV0jibSnbgtXsj++L8YrQZ1WuEjSzyjdR7ThUi 2HjJTnI/sKpoGCQPv2yOu8CQdP+8vVr8UMY2RJwOEj7TlyEkJPNp6j2W/RfysRI5 amSTzG5KBKvuVlsRACnKyC+r28rjdZr/LkIW5gb9l0FBXL23+tmMOcYSS6a3oha6 v5EHU3fBOtGacUwZZSDGUrNuDZUE+HaLjgSGoiW0Q0eT2E0W9hzYCuoW8PaS9tfc 0CGQoxAQ77GTK5p7tK6492PP5jqblgOltf0xvASKqp/3 -----END CERTIFICATE-----Generated at Fri Dec 5 15:38:09 2025 by rpki-client