This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/BEddXZGbSyR38Gc_ku5YRLATNWk.roa File: BEddXZGbSyR38Gc_ku5YRLATNWk.roa (raw, json) Hash identifier: 1W+cZr74n5E23JnM83bo4L0IxTSCZ7GOPOc0uOjgh3o= Subject key identifier: 04:47:5D:5D:91:9B:4B:24:77:F0:67:3F:92:EE:58:44:B0:13:35:69 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B7BA3D1747B756AB7E5E54D2C7DA47F98 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/BEddXZGbSyR38Gc_ku5YRLATNWk.roa Signing time: Thu 01 Jan 2026 22:18:12 +0000 ROA not before: Thu 01 Jan 2026 22:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36530 IP address blocks: 212.100.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d1:74:7b:75:6a:b7:e5:e5:4d:2c:7d:a4:7f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04475d5d919b4b2477f0673f92ee5844b0133569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:49:c4:e9:83:38:e4:71:27:ad:1c:b2:2c: 1d:87:a8:04:22:f5:97:53:70:a8:c8:6d:c1:e7:a9: be:b4:c8:c8:5d:de:08:c5:50:4d:4d:0a:b1:ba:d7: 53:30:3b:09:f7:4e:3e:3d:39:c6:7a:8d:62:67:8f: 68:11:bb:1a:cf:f1:f8:d6:2c:b4:6e:91:09:2f:a4: e8:56:ff:62:63:3e:61:ad:0f:64:d3:be:e5:f4:b6: 35:dc:7a:bb:43:c3:70:53:07:21:4e:5c:f8:c7:2f: 9b:10:f4:25:5a:af:bb:d6:4c:8a:6b:30:ed:b0:6e: d5:12:21:db:22:92:08:27:7c:6a:2c:5f:2e:16:3e: 96:40:e8:5b:16:cc:76:8e:e2:b0:10:1c:f4:a2:83: 0b:9b:8a:8c:48:e4:56:f0:27:b2:da:33:44:54:99: dc:1d:d7:be:a0:51:7d:a5:22:b8:44:ed:ec:28:20: 17:0f:17:49:19:d7:33:1b:8d:d5:b7:44:f1:56:07: b1:3f:d3:07:bf:88:aa:4e:9f:00:60:ea:d6:91:5a: 25:15:f7:31:7a:ce:34:66:60:c8:d3:1c:29:06:b7: 8f:3b:43:23:0c:bb:54:e8:80:3b:32:83:8c:ff:5d: a7:ad:67:84:d9:1c:7e:5d:f4:69:3b:a4:54:bf:85: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:47:5D:5D:91:9B:4B:24:77:F0:67:3F:92:EE:58:44:B0:13:35:69 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/BEddXZGbSyR38Gc_ku5YRLATNWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.174.0/24 Signature Algorithm: sha256WithRSAEncryption 32:90:9e:5b:49:a3:b0:65:09:5d:c0:34:7b:17:0d:38:2b:a2: b3:17:5d:5e:7b:e6:73:fe:ac:77:7f:c5:78:4c:28:74:3d:1e: 60:41:96:13:9d:e5:07:2c:9c:1f:58:9a:46:67:da:36:ea:7d: de:42:8b:df:b9:9f:2a:3c:96:78:29:20:75:a5:66:43:0f:e0: fc:6a:dd:70:06:55:5c:75:51:53:13:85:60:03:f9:c2:5b:c4: d4:b0:0b:6d:3b:6e:87:c3:94:ef:32:e7:c7:43:00:4c:8e:b3: fe:94:f3:c6:a8:c7:5a:af:b4:38:3e:79:a4:03:eb:9b:d8:2f: 39:13:f6:9c:13:ee:ec:9b:b2:ce:44:64:6a:7f:5d:d9:11:06: 3b:c3:2e:4f:a7:9e:a7:71:ac:39:08:3d:cf:45:02:7d:f2:7a: 3a:15:e3:da:62:13:dc:a5:58:76:fd:e3:9c:e9:01:01:6b:37: 46:68:91:9f:cb:2e:d2:03:6b:0b:b1:24:27:b6:21:88:1c:ce: 79:79:35:1e:58:89:c3:e5:af:19:9b:2e:ed:54:ff:b7:cd:43: 59:d1:48:26:56:e0:76:f0:c9:6d:27:97:88:a9:a2:f7:87:43: a0:f5:13:9b:13:31:51:23:74:50:73:6e:14:c2:37:94:50:fc: dc:ef:87:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9F0e3Vqt+XlTSx9pH+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDQ3NWQ1ZDkxOWI0YjI0NzdmMDY3M2Y5MmVlNTg0NGIwMTMzNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQRJxOmDOORxJ60csiwdh6gEIvWX U3CoyG3B56m+tMjIXd4IxVBNTQqxutdTMDsJ904+PTnGeo1iZ49oEbsaz/H41iy0 bpEJL6ToVv9iYz5hrQ9k077l9LY13Hq7Q8NwUwchTlz4xy+bEPQlWq+71kyKazDt sG7VEiHbIpIIJ3xqLF8uFj6WQOhbFsx2juKwEBz0ooMLm4qMSORW8Cey2jNEVJnc Hde+oFF9pSK4RO3sKCAXDxdJGdczG43Vt0TxVgexP9MHv4iqTp8AYOrWkVolFfcx es40ZmDI0xwpBrePO0MjDLtU6IA7MoOM/12nrWeE2Rx+XfRpO6RUv4XMxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFARHXV2Rm0skd/BnP5LuWESwEzVpMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvQkVkZFhaR2JTeVIzOEdjX2t1NVlSTEFUTldrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSuMA0G CSqGSIb3DQEBCwUAA4IBAQAykJ5bSaOwZQldwDR7Fw04K6KzF11ee+Zz/qx3f8V4 TCh0PR5gQZYTneUHLJwfWJpGZ9o26n3eQovfuZ8qPJZ4KSB1pWZDD+D8at1wBlVc dVFTE4VgA/nCW8TUsAttO26Hw5TvMufHQwBMjrP+lPPGqMdar7Q4PnmkA+ub2C85 E/acE+7sm7LORGRqf13ZEQY7wy5Pp56ncaw5CD3PRQJ98no6FePaYhPcpVh2/eOc 6QEBazdGaJGfyy7SA2sLsSQntiGIHM55eTUeWInD5a8Zmy7tVP+3zUNZ0UgmVuB2 8MltJ5eIqaL3h0Og9RObEzFRI3RQc24UwjeUUPzc74eF -----END CERTIFICATE-----Generated at Wed Jan 21 00:39:31 2026 by rpki-client