This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/U8N9V5f6g17PGUfG184qCViLX5M.roa File: U8N9V5f6g17PGUfG184qCViLX5M.roa (raw, json) Hash identifier: PzBiN1lWfFbDU85F/jIvz75WIsJRfnh+fMMH8DJLyug= Subject key identifier: 53:C3:7D:57:97:FA:83:5E:CF:19:47:C6:D7:CE:2A:09:58:8B:5F:93 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B7BA3D4702EB05A3D80E46AA3408A034B Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/U8N9V5f6g17PGUfG184qCViLX5M.roa Signing time: Thu 01 Jan 2026 22:18:12 +0000 ROA not before: Thu 01 Jan 2026 22:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133398 IP address blocks: 212.100.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d4:70:2e:b0:5a:3d:80:e4:6a:a3:40:8a:03:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53c37d5797fa835ecf1947c6d7ce2a09588b5f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6c:cd:c0:b7:01:b6:f9:1b:4d:f6:b5:60:e5: 33:49:f1:67:e9:4b:cb:c9:c1:30:2f:ba:42:d2:76: 60:fd:c5:9b:99:32:ed:c4:45:b8:89:56:f2:5b:d8: 9d:d8:19:c8:47:17:bb:62:3e:fe:0a:71:98:a6:99: 5c:22:03:c8:10:e9:5b:f4:fb:cb:d8:75:5e:4b:a0: f6:0b:d7:3e:74:a6:27:42:c9:c4:b5:0c:ac:ea:3e: bc:71:79:8e:9c:a3:40:48:9b:2a:52:8a:41:10:45: b3:f7:8f:30:cd:c4:e1:2d:28:69:c6:dc:d6:58:ec: 63:65:fb:88:67:21:27:a2:d5:1e:e4:bb:0f:82:2d: 68:ca:4b:e3:1f:07:5e:d7:83:c5:d7:09:35:2f:12: f9:b5:92:ad:8d:e7:c4:8e:da:51:55:8e:67:d8:ec: 12:20:4a:fb:29:c6:fb:cf:00:98:9a:35:b8:66:93: 72:f1:24:76:4e:f2:36:70:18:ad:00:75:54:e6:9c: 97:77:d7:81:20:48:41:8c:3d:15:df:c2:44:3f:78: f6:a1:af:8c:e9:fb:58:a0:a6:86:61:68:bc:98:5d: f2:f4:c8:e9:fb:2d:7d:8b:a0:26:a1:5a:a5:07:a4: 95:de:62:a8:67:69:a4:06:dd:68:a9:ea:4d:a4:56: 45:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:7D:57:97:FA:83:5E:CF:19:47:C6:D7:CE:2A:09:58:8B:5F:93 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/U8N9V5f6g17PGUfG184qCViLX5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.169.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:1f:23:76:d1:bb:c4:a2:2c:13:cc:5c:42:84:15:12:45:72: 5f:96:6c:79:1d:28:60:6c:a2:17:82:a0:d9:c3:7d:cd:3e:ad: 2d:28:90:d6:be:1f:18:90:c3:9b:01:8f:6b:55:e7:df:a3:61: cb:71:2a:fd:13:45:44:c8:4a:26:57:76:37:66:24:ca:00:de: 66:df:c4:b1:88:93:2f:f2:9e:a5:6f:aa:cb:b5:b2:a6:0b:57: 0e:3a:f4:ff:a4:a2:51:0c:03:ed:e8:ea:47:24:37:c2:3d:33: 88:36:a6:30:c4:b2:94:0f:5f:4d:84:a6:cf:55:34:dd:29:5f: 95:90:5e:98:f5:f3:85:9a:f9:4c:cb:44:37:70:dc:d0:d6:8f: 7d:28:82:0f:86:45:8d:63:99:08:4d:b8:d8:72:2d:b0:b1:50: 29:48:4c:67:95:11:cb:1a:d1:d6:d7:ad:1e:83:82:83:89:0e: 8f:4f:18:03:83:87:04:20:ca:44:e4:ae:9b:c6:53:a2:0a:0c: 81:d5:ff:2a:85:45:92:19:d8:a2:a5:df:9c:70:30:5a:23:c6: bf:4a:19:35:bc:9d:1f:04:e1:04:da:2a:f7:56:d1:e1:d0:7f: 06:a0:92:0b:f7:4f:bd:04:60:c6:2f:cf:cd:89:31:36:e0:71: 38:1e:e8:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9RwLrBaPYDkaqNAigNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2MzN2Q1Nzk3ZmE4MzVlY2YxOTQ3YzZkN2NlMmEwOTU4OGI1ZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2zNwLcBtvkbTfa1YOUzSfFn6UvL ycEwL7pC0nZg/cWbmTLtxEW4iVbyW9id2BnIRxe7Yj7+CnGYpplcIgPIEOlb9PvL 2HVeS6D2C9c+dKYnQsnEtQys6j68cXmOnKNASJsqUopBEEWz948wzcThLShpxtzW WOxjZfuIZyEnotUe5LsPgi1oykvjHwde14PF1wk1LxL5tZKtjefEjtpRVY5n2OwS IEr7Kcb7zwCYmjW4ZpNy8SR2TvI2cBitAHVU5pyXd9eBIEhBjD0V38JEP3j2oa+M 6ftYoKaGYWi8mF3y9Mjp+y19i6AmoVqlB6SV3mKoZ2mkBt1oqepNpFZFtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFPDfVeX+oNezxlHxtfOKglYi1+TMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvVThOOVY1ZjZnMTdQR1VmRzE4NHFDVmlMWDVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSpMA0G CSqGSIb3DQEBCwUAA4IBAQBOHyN20bvEoiwTzFxChBUSRXJflmx5HShgbKIXgqDZ w33NPq0tKJDWvh8YkMObAY9rVeffo2HLcSr9E0VEyEomV3Y3ZiTKAN5m38SxiJMv 8p6lb6rLtbKmC1cOOvT/pKJRDAPt6OpHJDfCPTOINqYwxLKUD19NhKbPVTTdKV+V kF6Y9fOFmvlMy0Q3cNzQ1o99KIIPhkWNY5kITbjYci2wsVApSExnlRHLGtHW160e g4KDiQ6PTxgDg4cEIMpE5K6bxlOiCgyB1f8qhUWSGdiipd+ccDBaI8a/Shk1vJ0f BOEE2ir3VtHh0H8GoJIL90+9BGDGL8/NiTE24HE4HuhJ -----END CERTIFICATE-----Generated at Wed Jan 21 01:09:27 2026 by rpki-client