This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/onlAbcnbzru2QDdcvoAzsi52WgM.roa File: onlAbcnbzru2QDdcvoAzsi52WgM.roa (raw, json) Hash identifier: 3I8CIQENKyHeC4X+A6ErsvYaJOVQfl5BrboyonJVQX0= Subject key identifier: A2:79:40:6D:C9:DB:CE:BB:B6:40:37:5C:BE:80:33:B2:2E:76:5A:03 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019A820CA45CA7C8E6F71AD556092E6C2AA6 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/onlAbcnbzru2QDdcvoAzsi52WgM.roa Signing time: Fri 14 Nov 2025 11:07:37 +0000 ROA not before: Fri 14 Nov 2025 11:07:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135402 IP address blocks: 212.100.171.0/24 maxlen: 24 212.100.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:0c:a4:5c:a7:c8:e6:f7:1a:d5:56:09:2e:6c:2a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Nov 14 11:07:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a279406dc9dbcebbb640375cbe8033b22e765a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:d1:1e:92:49:1e:fd:85:7b:69:f5:0f:e9: 2c:ab:a0:f8:f0:79:62:43:2e:d5:52:20:c0:af:96: 89:fc:64:8d:58:bf:3b:2d:0c:3a:c4:55:4e:dc:b0: 5b:c1:3e:8a:ca:5c:21:71:b7:1b:85:5f:7d:6f:4c: 56:c5:65:53:0a:bc:f1:58:1c:5b:09:c0:4f:5d:01: 22:30:3b:b6:1e:7a:6e:6b:ed:bc:0c:ba:56:81:f1: f4:82:1f:ff:92:89:94:ce:71:77:0b:7c:fa:d2:cb: f5:3d:f8:32:7f:40:9c:b8:8a:80:8d:a2:d4:a0:9a: 44:bf:a2:6d:14:0b:54:38:f3:f4:6b:db:7c:bf:a2: 94:36:68:79:3e:b3:13:ac:ad:c8:e0:7b:1a:58:53: 9e:69:f2:2f:ad:91:50:7b:68:13:31:8d:d7:3d:d2: 36:64:79:24:67:bf:e7:58:7f:24:4e:10:70:a8:da: 9a:5e:3d:58:13:6a:a9:d6:6d:e8:26:c6:aa:10:c2: 95:01:48:46:13:1e:71:1c:8b:b8:45:50:a4:2f:ad: 70:4b:01:99:6f:4e:95:86:95:e2:94:d5:5a:92:b0: f7:d3:76:ac:d6:89:7d:c5:7e:db:c3:56:67:4e:5d: c8:50:de:91:68:6a:f4:db:65:9e:95:3c:24:40:b6: 56:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:79:40:6D:C9:DB:CE:BB:B6:40:37:5C:BE:80:33:B2:2E:76:5A:03 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/onlAbcnbzru2QDdcvoAzsi52WgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.171.0/24 212.100.187.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:61:c7:48:44:09:a2:a3:5f:96:51:2d:bb:7b:a1:b4:ab:33: 26:10:76:95:b3:5a:75:a2:9e:2f:44:29:50:0d:99:c8:8b:1d: 7f:c3:a1:6f:33:aa:b9:e9:6b:e0:b2:c2:6c:69:be:28:72:ef: 12:00:ad:9c:a0:2f:e2:ae:a6:54:74:4b:c0:f7:a1:62:c3:66: d3:d8:f0:6b:af:b8:72:0f:1d:d4:6b:ee:d8:8f:b8:ea:2f:9d: 6b:0d:49:2f:57:52:7d:6f:0b:61:3c:da:c0:4b:14:85:6f:62: 3c:82:9d:46:0d:05:87:b1:6e:f5:ff:29:d4:f6:7a:6a:aa:2f: bc:b9:5e:0a:94:a0:b9:01:3d:26:55:a8:d3:84:ae:b7:a4:82: f3:e4:24:54:c7:6f:1e:bd:9a:43:5c:f7:c9:05:7d:32:41:bc: 6f:3e:db:80:4f:30:fa:ad:9d:ec:b2:cb:45:99:3b:13:dd:bd: 6f:02:6d:a0:a9:c9:45:0d:94:81:72:2c:8f:65:9d:a3:7f:9b: 54:6f:e8:78:87:80:ee:c2:bd:91:47:e8:69:01:78:9b:1b:f7: 1c:6a:b4:a3:65:d9:3a:6c:39:73:e5:38:1b:45:b8:84:1e:51: a0:8f:2e:4c:99:3c:98:8d:6c:b7:fa:c3:e2:17:37:cc:29:36: 5b:71:6d:e4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqCDKRcp8jm9xrVVgkubCqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjUxMTE0MTEwNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjc5NDA2ZGM5ZGJjZWJiYjY0MDM3NWNiZTgwMzNiMjJlNzY1YTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVDRHpJJHv2Fe2n1D+ksq6D48Hli Qy7VUiDAr5aJ/GSNWL87LQw6xFVO3LBbwT6KylwhcbcbhV99b0xWxWVTCrzxWBxb CcBPXQEiMDu2Hnpua+28DLpWgfH0gh//komUznF3C3z60sv1Pfgyf0CcuIqAjaLU oJpEv6JtFAtUOPP0a9t8v6KUNmh5PrMTrK3I4HsaWFOeafIvrZFQe2gTMY3XPdI2 ZHkkZ7/nWH8kThBwqNqaXj1YE2qp1m3oJsaqEMKVAUhGEx5xHIu4RVCkL61wSwGZ b06VhpXilNVakrD303as1ol9xX7bw1ZnTl3IUN6RaGr022WelTwkQLZWoQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKJ5QG3J2867tkA3XL6AM7IudloDMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvb25sQWJjbmJ6cnUyUURkY3ZvQXpzaTUyV2dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1GSrAwQA 1GS7MA0GCSqGSIb3DQEBCwUAA4IBAQCcYcdIRAmio1+WUS27e6G0qzMmEHaVs1p1 op4vRClQDZnIix1/w6FvM6q56WvgssJsab4ocu8SAK2coC/irqZUdEvA96Fiw2bT 2PBrr7hyDx3Ua+7Yj7jqL51rDUkvV1J9bwthPNrASxSFb2I8gp1GDQWHsW71/ynU 9npqqi+8uV4KlKC5AT0mVajThK63pILz5CRUx28evZpDXPfJBX0yQbxvPtuATzD6 rZ3ssstFmTsT3b1vAm2gqclFDZSBciyPZZ2jf5tUb+h4h4Duwr2RR+hpAXibG/cc arSjZdk6bDlz5TgbRbiEHlGgjy5MmTyYjWy3+sPiFzfMKTZbcW3k -----END CERTIFICATE-----Generated at Fri Dec 5 15:47:44 2025 by rpki-client