This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/C9NptZbtJFpB9evu35YBu8X91VM.roa File: C9NptZbtJFpB9evu35YBu8X91VM.roa (raw, json) Hash identifier: Jv2RsP3de5YdeDgqKkXif90pzLjYZFkeRsdZ7PHoW7Q= Subject key identifier: 0B:D3:69:B5:96:ED:24:5A:41:F5:EB:EE:DF:96:01:BB:C5:FD:D5:53 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B7BA3D4B6621024D2248561DD68247F22 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/C9NptZbtJFpB9evu35YBu8X91VM.roa Signing time: Thu 01 Jan 2026 22:18:12 +0000 ROA not before: Thu 01 Jan 2026 22:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135402 IP address blocks: 212.100.171.0/24 maxlen: 24 212.100.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d4:b6:62:10:24:d2:24:85:61:dd:68:24:7f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bd369b596ed245a41f5ebeedf9601bbc5fdd553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f2:d2:80:b4:8c:42:df:32:c5:c9:95:72:07: 9e:d1:12:82:a2:53:8a:fe:6a:cc:09:17:de:41:39: 21:3c:23:0c:00:a2:f4:c0:76:e1:5e:f6:29:e1:c9: 71:3c:ff:f7:f5:69:61:d0:8e:51:a4:6d:a0:ff:75: 7a:5d:9e:e0:53:ae:e7:73:32:24:22:2a:59:43:ee: f2:9a:2c:75:dc:98:2e:00:f9:f4:63:69:86:32:4f: 59:ed:68:00:24:4b:62:99:e0:77:d1:88:f4:9d:69: 13:7e:c1:9b:44:88:14:aa:ea:a1:f2:02:d6:07:71: 75:ab:7d:39:3b:d5:55:12:be:41:89:aa:1a:e5:cd: a3:d3:17:0a:ca:64:19:9c:9a:75:44:6e:c8:da:ea: 11:7e:00:ed:64:6e:06:8e:07:00:d8:eb:26:bc:1f: f8:2f:86:b8:ee:29:51:fb:ed:76:8f:9e:96:d6:3e: 70:d9:03:a6:58:e9:30:05:52:f7:3f:1d:8e:d1:ca: 95:60:8a:27:06:26:a4:66:95:06:8d:2a:b2:ef:2d: ea:44:4a:e3:6e:1e:31:59:be:4f:a9:98:f0:c2:e7: 39:ef:42:1c:53:8d:c1:14:cd:6b:ef:8e:85:04:73: c4:1e:7e:1d:18:0c:ed:1c:a9:d1:7f:d5:55:96:42: be:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D3:69:B5:96:ED:24:5A:41:F5:EB:EE:DF:96:01:BB:C5:FD:D5:53 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/C9NptZbtJFpB9evu35YBu8X91VM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.171.0/24 212.100.187.0/24 Signature Algorithm: sha256WithRSAEncryption 90:46:65:6d:89:6d:f6:36:45:c9:a2:d5:cf:67:67:2c:b0:e4: da:8f:d4:2e:e0:2f:1e:09:7c:dc:d8:60:19:2a:db:8b:9c:54: 1c:27:7b:5d:47:89:11:c9:33:ee:5e:11:f9:76:20:39:8d:79: 86:c9:b2:d8:0a:5d:8c:51:81:f6:41:43:32:a9:43:65:15:72: 56:e5:64:47:25:6f:39:17:d7:a8:8a:32:4e:f0:cb:36:dd:9d: 88:72:b6:44:4c:f3:b7:eb:a0:ef:2e:9d:b2:3e:98:4a:d7:be: 3f:fb:60:fc:07:77:b0:83:9e:8e:db:8b:f7:29:ba:c3:e7:a2: e6:fd:8b:83:41:15:9d:08:47:17:13:d9:15:2c:89:3f:c2:73: 55:db:fb:a6:c1:2a:36:92:79:94:d7:41:8a:62:f3:4b:d0:80: 75:fc:c3:91:09:61:c1:96:69:0d:41:bf:47:de:e7:6a:9e:62: 1e:42:b1:55:b9:02:14:30:f4:90:58:07:80:05:51:37:34:b5: bd:c1:aa:61:53:69:af:e3:6d:29:8e:3a:7f:0c:83:c4:58:56: d3:5a:c4:de:41:8e:73:41:b1:1e:c8:7d:50:ec:a7:56:d5:61: 5d:68:ba:83:cd:be:c8:1d:98:c6:65:51:e7:ad:31:e5:95:46: a8:8a:65:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o9S2YhAk0iSFYd1oJH8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmQzNjliNTk2ZWQyNDVhNDFmNWViZWVkZjk2MDFiYmM1ZmRkNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfLSgLSMQt8yxcmVcgee0RKColOK /mrMCRfeQTkhPCMMAKL0wHbhXvYp4clxPP/39Wlh0I5RpG2g/3V6XZ7gU67nczIk IipZQ+7ymix13JguAPn0Y2mGMk9Z7WgAJEtimeB30Yj0nWkTfsGbRIgUquqh8gLW B3F1q305O9VVEr5Biaoa5c2j0xcKymQZnJp1RG7I2uoRfgDtZG4GjgcA2OsmvB/4 L4a47ilR++12j56W1j5w2QOmWOkwBVL3Px2O0cqVYIonBiakZpUGjSqy7y3qRErj bh4xWb5PqZjwwuc570IcU43BFM1r746FBHPEHn4dGAztHKnRf9VVlkK+sQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAvTabWW7SRaQfXr7t+WAbvF/dVTMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvQzlOcHRaYnRKRnBCOWV2dTM1WUJ1OFg5MVZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1GSrAwQA 1GS7MA0GCSqGSIb3DQEBCwUAA4IBAQCQRmVtiW32NkXJotXPZ2cssOTaj9Qu4C8e CXzc2GAZKtuLnFQcJ3tdR4kRyTPuXhH5diA5jXmGybLYCl2MUYH2QUMyqUNlFXJW 5WRHJW85F9eoijJO8Ms23Z2IcrZETPO366DvLp2yPphK174/+2D8B3ewg56O24v3 KbrD56Lm/YuDQRWdCEcXE9kVLIk/wnNV2/umwSo2knmU10GKYvNL0IB1/MORCWHB lmkNQb9H3udqnmIeQrFVuQIUMPSQWAeABVE3NLW9waphU2mv420pjjp/DIPEWFbT WsTeQY5zQbEeyH1Q7KdW1WFdaLqDzb7IHZjGZVHnrTHllUaoimUy -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:02 2026 by rpki-client