This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/0Sfjt7O5Fe9HYi-Dn5qQ_6mjL5E.roa File: 0Sfjt7O5Fe9HYi-Dn5qQ_6mjL5E.roa (raw, json) Hash identifier: Ee+XCyH69OFsAMgMMf0B5FwjXfE/UPHRmvlOeJLDAcs= Subject key identifier: D1:27:E3:B7:B3:B9:15:EF:47:62:2F:83:9F:9A:90:FF:A9:A3:2F:91 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B5BE1497FA6628298E52BF639D391CE1D Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/0Sfjt7O5Fe9HYi-Dn5qQ_6mjL5E.roa Signing time: Fri 26 Dec 2025 18:17:29 +0000 ROA not before: Fri 26 Dec 2025 18:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 212.100.164.0/22 maxlen: 22 212.100.172.0/22 maxlen: 22 212.100.176.0/22 maxlen: 24 212.100.184.0/22 maxlen: 22 212.100.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:e1:49:7f:a6:62:82:98:e5:2b:f6:39:d3:91:ce:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Dec 26 18:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d127e3b7b3b915ef47622f839f9a90ffa9a32f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:24:6c:41:91:59:c8:12:b9:d3:ba:d3:0f:f8: be:4c:12:b8:7a:56:cc:0b:42:d1:8b:0f:df:b1:ed: 6d:36:be:b4:95:16:01:78:6d:c7:ae:e0:c0:81:d4: 49:ca:39:c7:4e:60:a8:c8:0b:1a:4b:b7:38:bd:cc: e8:ba:9a:84:5c:bd:79:9a:85:dd:4a:03:7d:18:9b: 5d:da:6d:8f:aa:ff:37:43:2a:1b:9f:ca:f6:07:ce: 9d:d6:1b:91:51:95:95:86:1e:5f:db:fa:f5:bf:cc: f0:ed:db:82:3d:e6:90:92:75:62:91:e7:6b:ea:78: d9:2f:2a:1c:94:80:79:87:79:f0:67:00:62:4b:7f: ff:11:f7:18:11:4f:01:a9:3b:65:cf:a4:09:48:be: f1:9e:d5:e2:60:4f:c2:18:e4:a9:d5:b9:78:b1:b3: 73:cc:f6:f6:2d:f8:9b:5b:2c:7b:04:87:6a:a0:ce: 5a:d2:81:0e:d8:16:ea:d6:cf:3b:06:ec:9e:68:1a: e0:08:d1:dd:07:84:ac:ce:ec:ec:e6:14:13:b6:60: e3:07:bd:f1:fa:91:35:cf:4e:cd:1a:ca:d1:ac:a5: 68:05:a8:27:16:73:5e:54:86:90:bb:74:46:db:f0: fb:17:b4:51:d4:19:45:c3:99:58:12:a4:86:bd:bb: e3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:27:E3:B7:B3:B9:15:EF:47:62:2F:83:9F:9A:90:FF:A9:A3:2F:91 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/0Sfjt7O5Fe9HYi-Dn5qQ_6mjL5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.164.0/22 212.100.172.0-212.100.179.255 212.100.184.0/22 212.100.189.0/24 Signature Algorithm: sha256WithRSAEncryption b4:bb:88:19:8a:ed:a0:67:6d:32:60:c5:b1:c4:cf:b1:08:30: 6b:81:d7:58:a7:c5:cb:67:4f:13:23:9c:78:d7:4e:b0:6b:d1: eb:c0:4a:aa:e4:50:36:94:88:ea:6c:19:99:d7:57:68:f1:f3: 1f:9e:90:96:e7:96:84:5c:f0:3a:bd:ee:10:ce:9e:3f:3a:ff: 91:59:f1:3a:16:75:de:e7:c8:03:1c:c0:49:43:1a:b0:6f:78: ef:c0:ea:05:54:f4:e2:03:ae:50:bc:34:4d:df:3c:4d:ca:12: 74:46:9b:fb:62:9f:a0:04:a1:c0:23:2b:b8:2c:91:93:c8:23: 8d:d3:5f:f3:b4:02:ec:8a:3a:41:1e:69:8e:ae:a8:bb:94:e9: d1:f4:30:f4:a9:f0:8c:f0:56:28:08:2f:28:ac:f3:cd:7f:ab: 42:3c:9d:37:0c:7d:0a:66:c4:d9:84:71:df:c2:63:9f:9d:f1: d2:ec:33:a0:ff:cb:58:68:da:a4:20:1f:e8:7b:dc:0a:f3:1d: 29:2d:69:97:b9:df:31:b6:6d:8c:c8:1a:e7:ac:ee:08:d4:6a: bb:42:74:02:0e:83:0d:7f:fe:10:d1:a7:e8:19:b0:f3:bd:2a: 84:e0:a9:8c:8a:99:d8:d0:ec:58:eb:63:f4:18:88:5e:3e:11: de:d7:15:21 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZtb4Ul/pmKCmOUr9jnTkc4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjUxMjI2MTgxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTI3ZTNiN2IzYjkxNWVmNDc2MjJmODM5ZjlhOTBmZmE5YTMyZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSRsQZFZyBK507rTD/i+TBK4elbM C0LRiw/fse1tNr60lRYBeG3HruDAgdRJyjnHTmCoyAsaS7c4vczoupqEXL15moXd SgN9GJtd2m2Pqv83Qyobn8r2B86d1huRUZWVhh5f2/r1v8zw7duCPeaQknVikedr 6njZLyoclIB5h3nwZwBiS3//EfcYEU8BqTtlz6QJSL7xntXiYE/CGOSp1bl4sbNz zPb2LfibWyx7BIdqoM5a0oEO2Bbq1s87BuyeaBrgCNHdB4Sszuzs5hQTtmDjB73x +pE1z07NGsrRrKVoBagnFnNeVIaQu3RG2/D7F7RR1BlFw5lYEqSGvbvjCQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNEn47ezuRXvR2Ivg5+akP+poy+RMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvMFNmanQ3TzVGZTlIWWktRG41cVFfNm1qTDVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQC1GSkMAwD BALUZKwDBALUZLADBALUZLgDBADUZL0wDQYJKoZIhvcNAQELBQADggEBALS7iBmK 7aBnbTJgxbHEz7EIMGuB11inxctnTxMjnHjXTrBr0evASqrkUDaUiOpsGZnXV2jx 8x+ekJbnloRc8Dq97hDOnj86/5FZ8ToWdd7nyAMcwElDGrBveO/A6gVU9OIDrlC8 NE3fPE3KEnRGm/tin6AEocAjK7gskZPII43TX/O0AuyKOkEeaY6uqLuU6dH0MPSp 8IzwVigILyis881/q0I8nTcMfQpmxNmEcd/CY5+d8dLsM6D/y1ho2qQgH+h73Arz HSktaZe53zG2bYzIGues7gjUartCdAIOgw1//hDRp+gZsPO9KoTgqYyKmdjQ7Fjr Y/QYiF4+Ed7XFSE= -----END CERTIFICATE-----Generated at Tue Dec 30 21:09:26 2025 by rpki-client