This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/WToKy8rJrvfp8-TBSiHkACiFJsQ.roa File: WToKy8rJrvfp8-TBSiHkACiFJsQ.roa (raw, json) Hash identifier: PV5YjtO/rMXFglaUhhnfQYN+zHAXqH37jd2cH6GeN74= Subject key identifier: 59:3A:0A:CB:CA:C9:AE:F7:E9:F3:E4:C1:4A:21:E4:00:28:85:26:C4 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B7BA3D74EB4337FDC5107DDA386E57ADC Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/WToKy8rJrvfp8-TBSiHkACiFJsQ.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210495 IP address blocks: 212.100.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d7:4e:b4:33:7f:dc:51:07:dd:a3:86:e5:7a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=593a0acbcac9aef7e9f3e4c14a21e400288526c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:40:7c:ca:65:41:f3:a5:b3:19:88:b3:f3: 50:fe:38:58:23:50:a2:24:df:b6:11:91:d7:17:d1: 9e:44:2c:78:28:4a:f9:87:5f:cf:05:bd:d1:23:b0: ee:8b:5e:7b:05:41:73:70:74:32:33:8c:57:56:b4: c6:46:3a:2f:0b:4f:45:9b:06:da:64:78:7c:2b:d5: 0e:f3:00:71:ee:eb:8a:fb:73:ef:fb:4d:3b:4b:2a: f9:c9:92:cb:66:b6:68:b3:fa:bb:77:c6:4f:b8:34: 92:99:3a:fb:2e:60:dd:3d:4a:e3:30:ce:5b:37:2e: 7a:61:55:78:61:5f:f8:1d:00:b9:58:75:5d:86:e4: 53:ed:13:65:d8:cc:03:d9:10:82:57:ec:ca:16:fe: 3f:7c:05:f1:5d:ff:f0:a4:2a:ab:bd:07:b5:84:ba: 2b:d4:fc:e8:ae:ee:26:28:4e:21:86:d8:a0:a0:8f: bc:ab:e4:a1:1b:78:f7:6a:0f:e2:71:c8:4a:46:bf: 5a:b5:ec:41:03:d5:31:bb:a1:3f:fd:01:a7:78:d3: b0:1d:9c:9d:14:93:8a:b1:97:25:ef:3b:6b:00:72: 54:33:e9:e5:89:fc:1b:f7:7d:aa:40:e2:96:5b:f9: 02:78:d9:9f:41:50:04:3e:8b:62:ce:77:74:8b:fc: 34:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3A:0A:CB:CA:C9:AE:F7:E9:F3:E4:C1:4A:21:E4:00:28:85:26:C4 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/WToKy8rJrvfp8-TBSiHkACiFJsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.184.0/24 Signature Algorithm: sha256WithRSAEncryption 26:80:7d:85:30:8c:34:9e:4f:fa:fc:1a:b0:f2:4f:4c:2c:4e: 6c:ac:be:54:e8:84:d7:9a:71:83:d8:02:6b:9a:ee:be:4c:45: b0:f9:58:ca:b6:fc:89:e5:57:13:7c:2c:6b:22:5a:02:56:61: 29:10:a4:0c:fa:db:5b:2a:a8:97:43:43:c2:38:39:95:6a:29: 63:ba:33:81:f1:17:c2:dd:8d:29:4a:54:b6:f0:16:83:26:30: 99:2b:67:12:cc:ab:7d:3c:7e:27:a1:8f:fa:02:70:cd:81:b4: 1e:36:35:e7:22:4f:6b:cd:ff:5f:fc:e2:da:8d:a5:28:5c:86: c2:b0:99:0b:83:8d:6b:12:b9:f9:10:3e:4b:69:6c:52:7b:8c: 03:a7:f6:63:3d:a1:81:2c:7e:49:5b:c2:92:2b:ca:ac:b9:64: af:6b:df:0b:c6:50:b5:08:e4:3a:1a:a1:23:53:af:fb:5d:a2: a2:b6:73:40:40:9d:84:4e:a9:e0:2f:1b:10:fb:20:c0:77:24: a0:9f:28:83:40:ab:b0:ea:93:43:15:14:a8:ea:7d:01:32:88: 44:28:e3:f2:67:76:8c:9a:b3:b7:fa:3b:14:c2:d4:65:85:6e: 89:03:55:58:99:63:ce:c1:35:f4:9f:6e:a9:d4:c9:6d:c4:d9: bc:dc:1c:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9dOtDN/3FEH3aOG5XrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTNhMGFjYmNhYzlhZWY3ZTlmM2U0YzE0YTIxZTQwMDI4ODUyNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV1AfMplQfOlsxmIs/NQ/jhYI1Ci JN+2EZHXF9GeRCx4KEr5h1/PBb3RI7Dui157BUFzcHQyM4xXVrTGRjovC09Fmwba ZHh8K9UO8wBx7uuK+3Pv+007Syr5yZLLZrZos/q7d8ZPuDSSmTr7LmDdPUrjMM5b Ny56YVV4YV/4HQC5WHVdhuRT7RNl2MwD2RCCV+zKFv4/fAXxXf/wpCqrvQe1hLor 1Pzoru4mKE4hhtigoI+8q+ShG3j3ag/icchKRr9atexBA9Uxu6E//QGneNOwHZyd FJOKsZcl7ztrAHJUM+nlifwb932qQOKWW/kCeNmfQVAEPotiznd0i/w0SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFk6CsvKya736fPkwUoh5AAohSbEMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvV1RvS3k4ckpydmZwOC1UQlNpSGtBQ2lGSnNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GS4MA0G CSqGSIb3DQEBCwUAA4IBAQAmgH2FMIw0nk/6/Bqw8k9MLE5srL5U6ITXmnGD2AJr mu6+TEWw+VjKtvyJ5VcTfCxrIloCVmEpEKQM+ttbKqiXQ0PCODmVailjujOB8RfC 3Y0pSlS28BaDJjCZK2cSzKt9PH4noY/6AnDNgbQeNjXnIk9rzf9f/OLajaUoXIbC sJkLg41rErn5ED5LaWxSe4wDp/ZjPaGBLH5JW8KSK8qsuWSva98LxlC1COQ6GqEj U6/7XaKitnNAQJ2ETqngLxsQ+yDAdySgnyiDQKuw6pNDFRSo6n0BMohEKOPyZ3aM mrO3+jsUwtRlhW6JA1VYmWPOwTX0n26p1MltxNm83BxQ -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:54 2026 by rpki-client