This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/sp4eXDrFmErVZ6Dk1aXUWw9GmSw.roa File: sp4eXDrFmErVZ6Dk1aXUWw9GmSw.roa (raw, json) Hash identifier: LanOB0N6OiW0u1qpF+oiRub4pPCTxR2tdcMDM8mFHK0= Subject key identifier: B2:9E:1E:5C:3A:C5:98:4A:D5:67:A0:E4:D5:A5:D4:5B:0F:46:99:2C Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B7BA3D24CAD68FD541EBFC2E90D541A92 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/sp4eXDrFmErVZ6Dk1aXUWw9GmSw.roa Signing time: Thu 01 Jan 2026 22:18:12 +0000 ROA not before: Thu 01 Jan 2026 22:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 212.100.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d2:4c:ad:68:fd:54:1e:bf:c2:e9:0d:54:1a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b29e1e5c3ac5984ad567a0e4d5a5d45b0f46992c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:10:f5:e5:82:68:5a:89:2b:11:24:fc:08: a6:af:86:c6:67:c9:05:9b:17:29:ec:ae:4e:e6:0c: 8b:a5:ed:f2:13:f4:33:30:5c:48:25:98:b9:8b:c9: 94:73:85:3a:6c:61:cb:6d:3a:f1:82:c6:c9:94:52: cd:c0:b4:fd:4c:7a:56:d8:b4:94:ef:84:9a:cb:22: a1:d0:42:96:24:38:59:41:c9:de:fd:7e:4d:0e:83: 39:d6:f6:01:e3:16:45:28:43:c6:69:40:4b:da:f8: b8:70:de:34:81:62:a4:8d:2d:f9:41:96:17:22:03: 2c:11:3d:46:02:a3:3c:ff:f6:69:9e:22:e0:ea:62: f6:16:9e:7c:83:c6:fa:db:4b:6c:9c:63:51:f4:3f: 91:5a:dd:c9:03:e5:b5:2f:93:e2:6e:67:87:01:82: bc:32:6f:fa:78:28:74:54:e2:a4:c4:ea:d9:3a:c5: 7e:66:00:1b:a3:78:70:42:1d:85:3d:8b:63:c0:90: c3:78:12:80:6d:cf:01:76:7e:d0:e5:f9:9c:be:b9: 90:ac:f6:84:80:0c:b3:3d:5c:e2:fd:67:85:d8:6c: c2:02:6c:8c:9e:b2:00:e9:64:de:5e:61:43:6e:aa: 59:42:24:e7:5d:70:78:66:af:74:db:60:c5:ee:74: d0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9E:1E:5C:3A:C5:98:4A:D5:67:A0:E4:D5:A5:D4:5B:0F:46:99:2C X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/sp4eXDrFmErVZ6Dk1aXUWw9GmSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.168.0/24 Signature Algorithm: sha256WithRSAEncryption b9:9d:13:87:e4:8c:c1:75:95:1e:22:79:c5:a2:56:58:8b:94: 77:64:54:46:ff:66:4d:06:5b:95:c8:3c:86:32:15:b1:ad:a5: 71:cb:7e:e1:09:22:4c:bf:f3:b9:0f:65:e4:95:99:30:0d:3b: 66:73:89:34:fc:80:30:48:a1:21:4e:58:3d:4b:d8:12:d4:df: 92:7f:da:de:f5:bf:26:d6:44:3f:b3:1b:29:48:7d:61:ee:ff: 9c:f4:11:e7:2d:1e:36:71:e8:48:92:f1:51:8d:33:a1:a4:5f: b1:31:93:b9:a8:ee:c5:1a:9a:42:64:95:be:06:1f:1c:5f:be: fc:d1:5d:3c:e9:fd:93:ae:ba:2e:6f:6e:68:ad:ee:05:c3:b7: 79:36:66:11:33:9e:08:8c:9a:c7:03:64:cf:8c:70:01:93:10: 14:b1:2f:5f:78:45:3f:1f:66:6c:5e:a4:82:8c:3f:0a:dc:f5: 33:16:6a:d9:05:42:59:33:c7:15:29:2b:ce:f9:f0:5a:00:a6: d0:92:c5:0e:23:43:84:db:2f:d1:6a:3b:6a:8e:e0:1a:b1:9c: 92:52:06:eb:cd:5c:c8:b7:3a:ab:73:8e:74:90:73:85:b4:64: 59:a2:f6:34:c6:2c:7e:31:5b:7a:46:61:63:5e:d4:b6:97:15: 63:02:5d:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9JMrWj9VB6/wukNVBqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjllMWU1YzNhYzU5ODRhZDU2N2EwZTRkNWE1ZDQ1YjBmNDY5OTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQsQ9eWCaFqJKxEk/Aimr4bGZ8kF mxcp7K5O5gyLpe3yE/QzMFxIJZi5i8mUc4U6bGHLbTrxgsbJlFLNwLT9THpW2LSU 74SayyKh0EKWJDhZQcne/X5NDoM51vYB4xZFKEPGaUBL2vi4cN40gWKkjS35QZYX IgMsET1GAqM8//ZpniLg6mL2Fp58g8b620tsnGNR9D+RWt3JA+W1L5PibmeHAYK8 Mm/6eCh0VOKkxOrZOsV+ZgAbo3hwQh2FPYtjwJDDeBKAbc8Bdn7Q5fmcvrmQrPaE gAyzPVzi/WeF2GzCAmyMnrIA6WTeXmFDbqpZQiTnXXB4Zq9022DF7nTQRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLKeHlw6xZhK1Weg5NWl1FsPRpksMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvc3A0ZVhEckZtRXJWWjZEazFhWFVXdzlHbVN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSoMA0G CSqGSIb3DQEBCwUAA4IBAQC5nROH5IzBdZUeInnFolZYi5R3ZFRG/2ZNBluVyDyG MhWxraVxy37hCSJMv/O5D2XklZkwDTtmc4k0/IAwSKEhTlg9S9gS1N+Sf9re9b8m 1kQ/sxspSH1h7v+c9BHnLR42cehIkvFRjTOhpF+xMZO5qO7FGppCZJW+Bh8cX778 0V086f2Trroub25ore4Fw7d5NmYRM54IjJrHA2TPjHABkxAUsS9feEU/H2ZsXqSC jD8K3PUzFmrZBUJZM8cVKSvO+fBaAKbQksUOI0OE2y/RajtqjuAasZySUgbrzVzI tzqrc450kHOFtGRZovY0xix+MVt6RmFjXtS2lxVjAl1X -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:05 2026 by rpki-client