This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/33OVwX2pT3VPaCBvQ2G9DJnFoKM.roa File: 33OVwX2pT3VPaCBvQ2G9DJnFoKM.roa (raw, json) Hash identifier: 6vWTvNFTUA08d2LtoNTk3ps/UbU5Y8kLLkpyjjsv7aA= Subject key identifier: DF:73:95:C1:7D:A9:4F:75:4F:68:20:6F:43:61:BD:0C:99:C5:A0:A3 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019A9FF21BBC8F5718BDFA05C75A62DC481E Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/33OVwX2pT3VPaCBvQ2G9DJnFoKM.roa Signing time: Thu 20 Nov 2025 06:27:15 +0000 ROA not before: Thu 20 Nov 2025 06:27:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 212.100.176.0/24 maxlen: 24 212.100.177.0/24 maxlen: 24 212.100.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9f:f2:1b:bc:8f:57:18:bd:fa:05:c7:5a:62:dc:48:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Nov 20 06:27:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=df7395c17da94f754f68206f4361bd0c99c5a0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:f0:9f:76:aa:86:82:7c:51:cf:b6:16:29: 28:52:56:c7:d5:06:89:cd:77:1d:b8:38:e6:63:0f: 3a:30:07:9a:ba:61:98:f6:4c:e7:a3:9f:e5:41:ee: 79:d7:32:e6:e6:50:3f:91:79:c7:ce:94:09:9c:44: 91:89:03:26:b3:de:d1:de:86:1f:8d:f2:a5:88:58: cb:90:aa:16:6e:42:6a:19:a4:f3:db:fa:bf:99:9b: 2d:13:5b:bf:d1:58:71:2f:4a:d3:ab:ab:9c:87:8f: f5:57:85:1d:80:07:6f:af:af:ad:27:bc:ee:f0:05: ee:cc:6e:b0:57:57:e8:fc:e2:36:97:a6:dd:86:10: ab:71:98:19:89:51:45:9d:b4:da:94:3a:ec:cd:97: 3e:5e:19:ac:22:51:35:b8:6e:8b:f9:c3:aa:75:75: 09:34:59:9e:79:79:46:e2:8b:86:0f:f4:10:2c:59: 77:fe:19:f8:c5:98:84:0f:76:9d:c0:4e:0f:4e:54: ce:e2:54:9a:a0:50:2a:3c:28:88:29:63:3e:60:39: c2:27:af:2d:c9:f3:14:5b:7a:6d:ca:84:77:a4:d9: 49:fe:22:4a:f8:3b:a1:bf:69:8f:74:85:7e:ca:04: 87:4f:aa:4c:c7:be:dc:bf:33:2a:f9:77:aa:86:7c: 54:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:73:95:C1:7D:A9:4F:75:4F:68:20:6F:43:61:BD:0C:99:C5:A0:A3 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/33OVwX2pT3VPaCBvQ2G9DJnFoKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.176.0-212.100.178.255 Signature Algorithm: sha256WithRSAEncryption b4:90:0a:4c:1f:85:55:61:56:55:7d:f4:5d:82:c9:f1:8d:dc: 31:15:8c:7f:bb:e6:0e:c4:01:c7:fd:49:27:23:28:c5:e0:9e: b7:3f:d5:af:4e:77:e3:7c:76:0a:05:5c:28:98:0f:8a:8b:72: 75:78:2e:81:2f:ac:0c:52:0d:b3:b5:79:36:66:87:6d:d4:a0: cb:bb:ae:39:f2:ea:e1:5b:4d:a9:c2:33:6d:b7:d9:5d:a8:89: 13:6f:1d:34:2a:2e:b7:c8:38:2d:c2:a1:09:f9:93:a1:ab:ec: 85:74:32:94:b1:39:09:c2:4d:52:1d:6a:29:3a:5d:5a:9b:83: d2:39:d2:47:8c:05:7f:24:86:9e:f5:32:2d:b2:a3:71:17:87: b6:b9:90:bd:e3:6f:5b:af:3e:01:d3:99:82:1b:bb:0a:6b:06: 28:53:74:e4:0e:e7:36:2e:94:8b:db:52:f6:52:f3:f0:e8:03: 27:43:c9:89:28:13:b4:2f:19:35:20:5c:5a:c4:cf:e5:5d:6c: 9c:05:21:cd:20:ab:06:73:fb:a6:50:a1:94:39:b8:1b:ac:f0: 5a:fa:b5:a7:86:02:1a:41:c3:90:49:72:1c:3c:42:fe:8a:a1: a5:4c:e0:d4:7f:61:e6:aa:c8:d8:9e:b6:26:d7:1f:40:b3:f0: 84:ed:c7:84 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZqf8hu8j1cYvfoFx1pi3EgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjUxMTIwMDYyNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjczOTVjMTdkYTk0Zjc1NGY2ODIwNmY0MzYxYmQwYzk5YzVhMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWLwn3aqhoJ8Uc+2FikoUlbH1QaJ zXcduDjmYw86MAeaumGY9kzno5/lQe551zLm5lA/kXnHzpQJnESRiQMms97R3oYf jfKliFjLkKoWbkJqGaTz2/q/mZstE1u/0VhxL0rTq6uch4/1V4UdgAdvr6+tJ7zu 8AXuzG6wV1fo/OI2l6bdhhCrcZgZiVFFnbTalDrszZc+XhmsIlE1uG6L+cOqdXUJ NFmeeXlG4ouGD/QQLFl3/hn4xZiED3adwE4PTlTO4lSaoFAqPCiIKWM+YDnCJ68t yfMUW3ptyoR3pNlJ/iJK+Duhv2mPdIV+ygSHT6pMx77cvzMq+XeqhnxU7QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFN9zlcF9qU91T2ggb0NhvQyZxaCjMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvMzNPVndYMnBUM1ZQYUNCdlEyRzlESm5Gb0tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATUZLAD BADUZLIwDQYJKoZIhvcNAQELBQADggEBALSQCkwfhVVhVlV99F2CyfGN3DEVjH+7 5g7EAcf9SScjKMXgnrc/1a9Od+N8dgoFXCiYD4qLcnV4LoEvrAxSDbO1eTZmh23U oMu7rjny6uFbTanCM2232V2oiRNvHTQqLrfIOC3CoQn5k6Gr7IV0MpSxOQnCTVId aik6XVqbg9I50keMBX8khp71Mi2yo3EXh7a5kL3jb1uvPgHTmYIbuwprBihTdOQO 5zYulIvbUvZS8/DoAydDyYkoE7QvGTUgXFrEz+VdbJwFIc0gqwZz+6ZQoZQ5uBus 8Fr6taeGAhpBw5BJchw8Qv6KoaVM4NR/YeaqyNietibXH0Cz8ITtx4Q= -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:28 2025 by rpki-client