This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/AsE6RIV7PI3dakO5jLFRsIqBaDo.roa File: AsE6RIV7PI3dakO5jLFRsIqBaDo.roa (raw, json) Hash identifier: uYofbkZ6QkUrXvbZAd3fnCBHZx2Z0CiZ9avMFBZMvV4= Subject key identifier: 02:C1:3A:44:85:7B:3C:8D:DD:6A:43:B9:8C:B1:51:B0:8A:81:68:3A Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B7BA3DB55D5D7421BBAFC4DA1FC6DC79C Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/AsE6RIV7PI3dakO5jLFRsIqBaDo.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215304 IP address blocks: 212.100.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:db:55:d5:d7:42:1b:ba:fc:4d:a1:fc:6d:c7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02c13a44857b3c8ddd6a43b98cb151b08a81683a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:82:8c:6d:4e:03:dc:98:e1:4f:d1:db:7d: 4c:41:7b:ea:a8:4d:ca:d6:b7:b3:c2:18:97:0c:6c: 88:0d:18:d3:ce:fd:d0:39:23:fb:97:bd:ab:9b:93: 08:79:58:6e:e5:28:b8:5e:fa:4f:8b:d5:30:5c:76: ee:85:f9:95:eb:b0:01:f9:7c:9a:92:1b:93:71:c5: 1c:d0:12:e9:29:d1:03:73:65:0f:26:12:bb:93:6a: 8f:d4:3f:bd:9d:ae:45:69:c3:a8:54:c3:c3:06:d4: 48:6e:58:5b:f7:e7:f5:c3:16:79:cb:c7:b2:78:75: 85:bd:c1:58:80:db:33:a2:e5:47:93:b9:a5:ff:f1: 35:68:85:97:cd:f6:75:0b:c6:a7:60:d4:f6:72:c7: cb:42:cb:a9:63:16:ad:de:3f:7c:42:4b:d8:8c:d9: 63:8f:a6:f7:61:72:31:dd:17:e2:06:4d:04:ed:76: c6:1d:b3:8c:3f:95:1e:7b:74:d8:5f:94:8a:99:18: ea:ce:94:88:83:47:01:1c:ba:ee:72:4c:7a:84:e4: 62:f3:ad:e7:61:97:7d:7b:dd:2f:16:f4:a3:56:25: 3e:dd:3d:95:fd:81:d8:12:75:d8:24:14:66:ca:4d: 31:fc:e4:8b:b8:92:14:ad:41:3a:1c:23:38:06:46: b4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C1:3A:44:85:7B:3C:8D:DD:6A:43:B9:8C:B1:51:B0:8A:81:68:3A X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/AsE6RIV7PI3dakO5jLFRsIqBaDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.174.0/24 Signature Algorithm: sha256WithRSAEncryption b6:71:5f:2c:02:b0:5a:1f:dd:d1:5b:3c:57:e5:2e:2c:18:a8: fa:80:fc:f7:7d:ba:90:53:4b:ac:0d:c3:6a:4b:8b:d6:cc:49: 02:68:ce:42:a9:79:96:3a:31:76:d9:35:fe:c5:17:5d:47:c6: 30:b7:22:14:3f:5c:9a:56:56:5a:73:9a:bf:db:be:1b:ea:52: be:f3:ae:5a:01:43:b1:89:e9:ba:a2:2a:7c:53:de:3f:a5:bb: b6:f9:d9:c5:91:17:07:f5:9f:6b:3e:d1:f0:90:5e:5c:cd:f0: a5:9b:ce:20:5d:ca:83:1e:d4:0a:c6:0e:4a:99:6d:69:ed:6a: 21:71:7e:4e:47:12:3a:48:d5:a5:17:e4:66:5b:6b:02:99:8c: 34:c0:f9:99:dd:51:4b:2f:5c:de:ae:ba:88:e6:56:d8:77:14: 3b:82:a7:3b:9f:ee:87:12:61:d6:09:97:f6:3d:da:2f:96:2d: 0f:c3:ed:be:da:d1:b3:1b:44:fe:ea:af:1b:6f:01:cb:da:8f: b9:6f:4b:03:52:8e:4e:52:57:90:72:4c:86:ae:01:d3:2f:70: 58:ef:3a:fc:30:1a:3c:8e:61:82:ad:b0:65:ce:ca:b1:5b:62: fd:60:73:2b:ae:5a:44:9d:90:52:91:3c:d7:e0:bd:8b:60:f2: 2b:e3:cf:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9tV1ddCG7r8TaH8bcecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmMxM2E0NDg1N2IzYzhkZGQ2YTQzYjk4Y2IxNTFiMDhhODE2ODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nuCjG1OA9yY4U/R231MQXvqqE3K 1rezwhiXDGyIDRjTzv3QOSP7l72rm5MIeVhu5Si4XvpPi9UwXHbuhfmV67AB+Xya khuTccUc0BLpKdEDc2UPJhK7k2qP1D+9na5FacOoVMPDBtRIblhb9+f1wxZ5y8ey eHWFvcFYgNszouVHk7ml//E1aIWXzfZ1C8anYNT2csfLQsupYxat3j98QkvYjNlj j6b3YXIx3RfiBk0E7XbGHbOMP5Uee3TYX5SKmRjqzpSIg0cBHLruckx6hORi863n YZd9e90vFvSjViU+3T2V/YHYEnXYJBRmyk0x/OSLuJIUrUE6HCM4Bka0FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFALBOkSFezyN3WpDuYyxUbCKgWg6MB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvQXNFNlJJVjdQSTNkYWtPNWpMRlJzSXFCYURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSuMA0G CSqGSIb3DQEBCwUAA4IBAQC2cV8sArBaH93RWzxX5S4sGKj6gPz3fbqQU0usDcNq S4vWzEkCaM5CqXmWOjF22TX+xRddR8YwtyIUP1yaVlZac5q/274b6lK+865aAUOx iem6oip8U94/pbu2+dnFkRcH9Z9rPtHwkF5czfClm84gXcqDHtQKxg5KmW1p7Woh cX5ORxI6SNWlF+RmW2sCmYw0wPmZ3VFLL1zerrqI5lbYdxQ7gqc7n+6HEmHWCZf2 Pdovli0Pw+2+2tGzG0T+6q8bbwHL2o+5b0sDUo5OUleQckyGrgHTL3BY7zr8MBo8 jmGCrbBlzsqxW2L9YHMrrlpEnZBSkTzX4L2LYPIr488m -----END CERTIFICATE-----Generated at Wed Jan 21 00:39:00 2026 by rpki-client