This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1g_zPblSh4Um3gz4f7JLNaV0gtw.roa File: 1g_zPblSh4Um3gz4f7JLNaV0gtw.roa (raw, json) Hash identifier: lU0C4R6x+G+jhcFEO1MZCH7QibdJ7/Cw0IKE20h/69A= Subject key identifier: D6:0F:F3:3D:B9:52:87:85:26:DE:0C:F8:7F:B2:4B:35:A5:74:82:DC Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B7BA3D00AAF3BBF08CAD23F36BC8CDB64 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1g_zPblSh4Um3gz4f7JLNaV0gtw.roa Signing time: Thu 01 Jan 2026 22:18:11 +0000 ROA not before: Thu 01 Jan 2026 22:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 212.100.176.0/24 maxlen: 24 212.100.177.0/24 maxlen: 24 212.100.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d0:0a:af:3b:bf:08:ca:d2:3f:36:bc:8c:db:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d60ff33db952878526de0cf87fb24b35a57482dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f6:a8:a8:ef:48:d0:59:c9:17:81:6f:20:43: 38:5b:3b:7e:c9:1d:40:53:12:d6:67:4d:1a:17:d5: c7:48:60:36:7f:94:71:3f:b4:e9:25:be:52:b9:03: 7d:dc:1c:65:4e:65:97:61:9c:0e:2a:f9:8c:1a:79: ed:30:9f:bc:df:ac:80:48:d0:3d:05:57:b7:72:a6: 05:7d:85:ea:51:ae:96:b4:40:ee:bb:de:8a:37:1d: 7c:72:ee:81:fc:b0:ce:3e:37:ea:e8:49:bf:ac:90: cb:72:d2:be:ee:7c:f5:b5:c8:42:5a:ed:d2:37:3a: c8:6d:38:f6:8a:46:db:a5:d7:c2:22:b8:f5:35:ab: fe:68:d1:8f:af:cd:85:c2:f3:c7:e8:69:cb:dd:05: cd:d9:a9:f4:86:0b:ff:17:34:b8:36:4f:4d:7b:64: ea:19:4e:e4:c3:f7:37:ee:72:94:7b:38:4a:5d:18: 8d:de:4f:19:ac:80:ce:2b:61:ba:bc:d7:9e:a5:15: 42:4b:4d:a7:a5:30:43:4e:49:00:e1:de:a8:b5:21: d6:88:32:d8:40:5c:40:b1:52:1f:26:6e:79:61:48: 87:e9:78:29:f5:db:40:bd:da:ea:67:3c:0a:51:ee: d2:45:fb:41:94:15:da:12:da:3d:3b:11:65:33:ba: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0F:F3:3D:B9:52:87:85:26:DE:0C:F8:7F:B2:4B:35:A5:74:82:DC X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1g_zPblSh4Um3gz4f7JLNaV0gtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.176.0-212.100.178.255 Signature Algorithm: sha256WithRSAEncryption 9d:7a:d9:db:d0:5f:b9:f4:70:96:a8:06:e2:9e:2e:14:38:b1: 22:4a:4c:3c:c1:ba:27:0e:ef:c8:07:66:c6:b6:b2:1d:e6:61: ec:9a:a6:b9:26:90:31:2a:c7:b2:c6:b7:02:28:8e:41:07:b6: 27:31:cc:41:ee:4f:ea:29:5a:08:ad:ad:07:6a:eb:36:25:dd: 34:c2:6a:ee:bc:26:c6:78:6e:fb:08:e0:78:29:66:8b:38:93: 5e:af:66:ce:79:c8:8c:8d:f7:2f:ec:7c:2c:f1:d2:0a:26:f7: f7:29:ad:35:15:b7:65:fe:e4:c6:19:e9:25:b2:12:5d:14:6c: 25:36:80:8b:14:cc:18:ca:06:2e:7b:28:c7:b8:c9:6e:ed:0a: cb:3e:c6:58:02:c1:a6:df:c2:71:91:24:e5:05:b0:94:41:be: 15:fe:6b:4b:c0:3c:fa:a9:ab:ec:7d:42:57:22:20:69:ff:46: b0:03:6b:cd:e2:e1:52:32:0f:da:c6:16:60:55:14:78:d4:0b: eb:bb:75:62:94:bb:e9:00:28:95:88:11:24:2f:af:9a:58:de: dc:6e:b5:c6:e8:24:06:79:cb:4d:18:f6:db:e7:f7:db:cc:2f: 45:2d:1e:c3:84:f6:8c:f5:c6:3a:7d:c3:7e:11:90:ff:08:04: 49:f2:4b:04 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7o9AKrzu/CMrSPza8jNtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjBmZjMzZGI5NTI4Nzg1MjZkZTBjZjg3ZmIyNGIzNWE1NzQ4MmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/aoqO9I0FnJF4FvIEM4Wzt+yR1A UxLWZ00aF9XHSGA2f5RxP7TpJb5SuQN93BxlTmWXYZwOKvmMGnntMJ+836yASNA9 BVe3cqYFfYXqUa6WtEDuu96KNx18cu6B/LDOPjfq6Em/rJDLctK+7nz1tchCWu3S NzrIbTj2ikbbpdfCIrj1Nav+aNGPr82FwvPH6GnL3QXN2an0hgv/FzS4Nk9Ne2Tq GU7kw/c37nKUezhKXRiN3k8ZrIDOK2G6vNeepRVCS02npTBDTkkA4d6otSHWiDLY QFxAsVIfJm55YUiH6Xgp9dtAvdrqZzwKUe7SRftBlBXaEto9OxFlM7qVlQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNYP8z25UoeFJt4M+H+ySzWldILcMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvMWdfelBibFNoNFVtM2d6NGY3SkxOYVYwZ3R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATUZLAD BADUZLIwDQYJKoZIhvcNAQELBQADggEBAJ162dvQX7n0cJaoBuKeLhQ4sSJKTDzB uicO78gHZsa2sh3mYeyaprkmkDEqx7LGtwIojkEHticxzEHuT+opWgitrQdq6zYl 3TTCau68JsZ4bvsI4HgpZos4k16vZs55yIyN9y/sfCzx0gom9/cprTUVt2X+5MYZ 6SWyEl0UbCU2gIsUzBjKBi57KMe4yW7tCss+xlgCwabfwnGRJOUFsJRBvhX+a0vA PPqpq+x9QlciIGn/RrADa83i4VIyD9rGFmBVFHjUC+u7dWKUu+kAKJWIESQvr5pY 3txutcboJAZ5y00Y9tvn99vML0UtHsOE9oz1xjp9w34RkP8IBEnySwQ= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:44 2026 by rpki-client