This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/UbwmYN_7VGXpskD9Uehvmfj4m7k.roa File: UbwmYN_7VGXpskD9Uehvmfj4m7k.roa (raw, json) Hash identifier: wZZxZglOL46ueaasSteZJLhof87WholdlVWWmKbJolQ= Subject key identifier: 51:BC:26:60:DF:FB:54:65:E9:B2:40:FD:51:E8:6F:99:F8:F8:9B:B9 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A273B6E4801555F1BD6B6A353884CF Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/UbwmYN_7VGXpskD9Uehvmfj4m7k.roa Signing time: Thu 01 Jan 2026 08:17:50 +0000 ROA not before: Thu 01 Jan 2026 08:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7922 IP address blocks: 103.130.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:73:b6:e4:80:15:55:f1:bd:6b:6a:35:38:84:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51bc2660dffb5465e9b240fd51e86f99f8f89bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:a5:ae:52:5e:c8:a4:ad:28:28:73:f3:07: fc:0c:aa:ba:19:2c:6c:0f:9c:48:6d:50:fd:cb:a0: f9:7c:85:55:99:38:b4:57:c3:2a:35:55:78:6c:98: 23:cf:00:c2:ba:70:94:df:13:f3:4f:a1:56:d5:6a: 91:da:6e:d7:f5:ea:d5:a5:01:13:f2:64:52:34:17: 71:27:cf:aa:43:10:81:d9:25:51:51:96:5a:0c:0e: cc:88:c7:19:0b:d8:43:85:c0:cd:4f:b3:88:9e:c3: 33:c9:85:5e:27:fb:a9:b2:82:ba:f3:e5:d3:f6:80: e0:9a:2e:c2:12:df:7b:a2:57:e6:6c:b7:c9:2d:8a: 3c:c5:ba:c6:33:55:fb:5e:c9:96:a3:97:af:1c:9f: 35:9d:60:e8:3d:72:14:bb:35:1d:57:26:f3:51:c1: ed:37:51:65:c1:20:3e:5b:fd:75:bf:56:88:af:9a: 57:14:a4:ab:e2:43:9a:4d:49:8e:ac:cb:c5:f6:7c: ad:09:39:01:c7:b0:8a:14:fa:a4:ad:43:33:86:20: f6:fb:d4:ec:3b:bd:55:a3:e5:cb:c1:69:f8:a2:9b: 26:eb:18:ea:c8:ce:19:d2:7b:2c:77:c6:3d:dc:86: 80:fe:ae:1e:4d:eb:e6:07:18:92:73:7b:53:35:a1: d3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BC:26:60:DF:FB:54:65:E9:B2:40:FD:51:E8:6F:99:F8:F8:9B:B9 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/UbwmYN_7VGXpskD9Uehvmfj4m7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.178.0/24 Signature Algorithm: sha256WithRSAEncryption 66:4a:bc:3b:e8:f0:c0:b9:e9:57:83:ef:61:29:c6:4b:f4:e4: 62:5d:64:8b:85:ec:40:66:b7:c2:10:69:bc:1d:8d:b7:88:7a: ea:49:13:6f:9e:6e:27:4f:79:eb:fb:80:87:93:b1:0a:7d:aa: 2c:56:73:9b:bc:27:0d:87:2c:02:94:ad:ec:f0:44:d6:c0:16: 12:06:0a:79:53:66:94:c0:7d:c8:2c:35:96:85:e6:45:8f:b5: 80:24:87:e8:54:89:12:7c:d4:f0:ef:cb:15:cd:ec:a3:c5:c6: b5:d0:04:26:cc:2b:36:69:c5:4a:f0:ae:93:89:cb:08:6d:66: 2a:41:44:ee:ec:d0:ed:c5:28:d2:2c:91:97:0c:a9:4c:7f:9b: 65:7e:84:25:ac:1f:9b:4d:88:98:3c:7c:33:5c:ea:04:eb:76: 5b:c9:60:ec:bc:74:42:20:16:29:05:a9:a7:fd:2a:49:53:fd: ee:f5:ce:ab:e3:ff:54:71:b4:93:ef:0a:ec:86:f8:cb:87:60: c7:6e:2c:3b:d1:b6:68:c0:7e:a6:c1:61:4a:40:a1:17:91:33: 41:d2:63:87:de:5a:f8:43:f2:bc:1f:cf:7c:8a:80:4c:6f:1d: e0:a4:78:af:85:b8:9a:15:da:6e:cb:1a:61:1b:8b:a9:3e:17: 10:ed:d5:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4onO25IAVVfG9a2o1OITPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWJjMjY2MGRmZmI1NDY1ZTliMjQwZmQ1MWU4NmY5OWY4Zjg5YmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSulrlJeyKStKChz8wf8DKq6GSxs D5xIbVD9y6D5fIVVmTi0V8MqNVV4bJgjzwDCunCU3xPzT6FW1WqR2m7X9erVpQET 8mRSNBdxJ8+qQxCB2SVRUZZaDA7MiMcZC9hDhcDNT7OInsMzyYVeJ/upsoK68+XT 9oDgmi7CEt97olfmbLfJLYo8xbrGM1X7XsmWo5evHJ81nWDoPXIUuzUdVybzUcHt N1FlwSA+W/11v1aIr5pXFKSr4kOaTUmOrMvF9nytCTkBx7CKFPqkrUMzhiD2+9Ts O71Vo+XLwWn4opsm6xjqyM4Z0nssd8Y93IaA/q4eTevmBxiSc3tTNaHT7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFG8JmDf+1Rl6bJA/VHob5n4+Ju5MB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvVWJ3bVlOXzdWR1hwc2tEOVVlaHZtZmo0bTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4KyMA0G CSqGSIb3DQEBCwUAA4IBAQBmSrw76PDAuelXg+9hKcZL9ORiXWSLhexAZrfCEGm8 HY23iHrqSRNvnm4nT3nr+4CHk7EKfaosVnObvCcNhywClK3s8ETWwBYSBgp5U2aU wH3ILDWWheZFj7WAJIfoVIkSfNTw78sVzeyjxca10AQmzCs2acVK8K6TicsIbWYq QUTu7NDtxSjSLJGXDKlMf5tlfoQlrB+bTYiYPHwzXOoE63ZbyWDsvHRCIBYpBamn /SpJU/3u9c6r4/9UcbST7wrshvjLh2DHbiw70bZowH6mwWFKQKEXkTNB0mOH3lr4 Q/K8H898ioBMbx3gpHivhbiaFdpuyxphG4upPhcQ7dV0 -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:15 2026 by rpki-client