This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/5p2aHwzMk-WKPqbEYPmTVeyaFz8.roa
File: 5p2aHwzMk-WKPqbEYPmTVeyaFz8.roa (raw, json)
Hash identifier: dXwTJ57WUmfvolezC+8tQF/dtDddp7UWvZtKPASf84o=
Subject key identifier: E6:9D:9A:1F:0C:CC:93:E5:8A:3E:A6:C4:60:F9:93:55:EC:9A:17:3F
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019B7BA3D6739347B9D71629CF935F25C024
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/5p2aHwzMk-WKPqbEYPmTVeyaFz8.roa
Signing time: Thu 01 Jan 2026 22:18:13 +0000
ROA not before: Thu 01 Jan 2026 22:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205886
IP address blocks: 212.100.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:d6:73:93:47:b9:d7:16:29:cf:93:5f:25:c0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jan 1 22:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e69d9a1f0ccc93e58a3ea6c460f99355ec9a173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:29:99:48:6d:f3:71:3f:4e:38:7a:18:fd:
27:f0:18:2e:92:d7:df:85:48:e2:26:db:a1:fd:85:
f7:73:8f:09:fa:ab:14:73:df:88:b0:c9:28:02:a1:
33:84:b5:92:4d:0f:4f:9d:f6:ce:6e:9b:ac:78:12:
05:4f:43:ac:00:36:f4:9a:30:1c:54:c1:28:e3:5f:
5b:a2:b4:9c:4c:22:49:13:06:8c:00:0c:d1:72:3e:
b1:7e:e2:1e:58:82:54:07:18:96:54:81:3f:41:a1:
25:e2:9b:a3:53:0f:84:7b:a6:5b:92:31:50:1a:5e:
32:b2:ff:90:e3:9c:2d:77:76:3c:ca:f2:09:cc:9d:
32:7b:f8:f2:a5:97:a0:74:94:26:ef:58:3c:74:ec:
41:f1:f3:b8:98:cb:1e:18:f2:59:9d:5e:d0:8b:bd:
51:d9:f4:dc:c6:0f:30:3f:de:94:cf:3c:a2:41:9a:
5e:c5:16:de:7f:25:59:6b:5e:08:7b:38:72:b7:91:
7b:ca:c9:4c:34:88:76:76:b1:ef:7c:7c:69:61:bf:
b6:9e:d3:39:7a:06:78:b6:9a:96:9f:73:4b:f9:2f:
b9:bd:21:da:e8:b4:08:4e:4f:2d:09:f8:2f:fe:ac:
d5:92:60:ef:90:d7:ff:59:75:a5:e3:d7:43:70:9c:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:9A:1F:0C:CC:93:E5:8A:3E:A6:C4:60:F9:93:55:EC:9A:17:3F
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/5p2aHwzMk-WKPqbEYPmTVeyaFz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:13:5e:3f:8d:e5:8d:a2:56:f9:2e:92:21:e9:77:5b:3e:50:
c7:c7:eb:83:45:63:e2:aa:24:6a:46:c6:17:02:1b:fd:53:89:
03:76:d9:ff:8b:fa:e2:ce:e4:30:c9:48:67:32:7c:cb:fa:ed:
46:c5:29:3c:21:be:3a:4f:26:d0:15:7d:8e:c0:b0:07:f1:0f:
1e:67:3a:f8:96:f0:03:90:96:3d:c6:62:bf:97:af:73:89:3e:
ee:08:86:5a:14:98:f5:cc:4f:9f:10:f5:34:d5:b7:8d:b6:02:
c5:f3:41:a6:77:87:a9:92:4e:a7:ab:fc:9c:6e:a6:e7:eb:a6:
01:71:ff:60:9d:81:9e:91:74:68:72:90:f7:19:fe:b2:1e:13:
d8:3c:9e:f0:d6:25:db:b2:59:94:a1:ff:68:9f:d9:08:ad:49:
d3:20:9f:9c:5d:33:65:99:ad:de:37:fb:98:46:a0:3a:b1:8b:
35:c4:36:25:50:fb:4b:a4:cd:43:67:dc:0d:bb:7b:83:52:76:
e6:77:15:67:60:31:2a:6c:5b:42:46:e9:a5:13:f7:cf:f1:43:
ae:9e:ba:2a:54:3a:df:ed:01:79:a4:74:f6:61:bc:2b:dd:18:
eb:97:07:0d:79:72:0e:a4:bf:1e:14:7c:5a:fb:dd:d5:57:74:
7c:95:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:16:16 2026 by rpki-client