This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/6H0bt81fSCMUa1Rqop4uz2xs5ts.roa File: 6H0bt81fSCMUa1Rqop4uz2xs5ts.roa (raw, json) Hash identifier: OtthW9vol72RloxMpLf9wrA/SRkZxJ6yGQfVx0FhFTc= Subject key identifier: E8:7D:1B:B7:CD:5F:48:23:14:6B:54:6A:A2:9E:2E:CF:6C:6C:E6:DB Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019AE73C53C6ACED82D07571010D488C8B2C Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/6H0bt81fSCMUa1Rqop4uz2xs5ts.roa Signing time: Thu 04 Dec 2025 02:41:21 +0000 ROA not before: Thu 04 Dec 2025 02:41:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 212.100.164.0/22 maxlen: 22 212.100.172.0/22 maxlen: 22 212.100.176.0/22 maxlen: 24 212.100.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:3c:53:c6:ac:ed:82:d0:75:71:01:0d:48:8c:8b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Dec 4 02:41:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e87d1bb7cd5f4823146b546aa29e2ecf6c6ce6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:4d:67:b6:6c:c6:cd:64:65:d2:8a:e3:eb: d1:21:7d:28:ae:3d:1f:00:56:73:06:c7:ca:9b:fb: 36:ee:2d:50:cb:0a:39:ce:43:68:e2:49:d3:f0:d8: 52:2a:ed:08:a2:6a:e1:05:ed:df:be:d9:59:de:a6: f1:81:2c:26:d9:fa:86:e4:3b:40:de:e5:f7:b3:95: 5c:eb:2a:a3:95:26:18:6a:cd:9c:0f:a5:c3:dd:e5: 50:f1:d1:72:92:83:22:de:a0:1e:57:0f:8c:48:d5: 9e:b4:c6:f9:3c:b4:b6:c5:c8:e1:44:35:ef:60:79: 46:44:89:58:13:4c:52:47:e6:a5:ba:04:17:66:2b: 6a:88:79:b6:00:89:bc:17:0a:cf:9b:24:6c:e8:3c: 73:35:e8:11:e4:37:ce:b0:41:85:fd:0a:a7:52:8c: d4:25:dc:a0:30:60:25:42:81:98:a6:b7:3d:53:83: ea:76:a0:7f:27:a5:18:c7:e8:73:49:18:8f:fa:cf: 1c:67:1f:14:72:15:eb:8b:14:12:07:59:cc:d9:6b: 08:cc:bc:26:31:c1:ba:33:f5:5c:1e:f6:4d:f7:63: e7:ce:81:36:1a:7e:b0:e9:50:11:be:a5:10:59:19: 9d:89:7c:07:a6:76:a3:d7:7c:32:07:f9:ec:97:38: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7D:1B:B7:CD:5F:48:23:14:6B:54:6A:A2:9E:2E:CF:6C:6C:E6:DB X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/6H0bt81fSCMUa1Rqop4uz2xs5ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.164.0/22 212.100.172.0-212.100.179.255 212.100.184.0/22 Signature Algorithm: sha256WithRSAEncryption 28:eb:96:7d:5f:95:06:01:31:a1:6a:1c:a7:b6:1c:1f:cd:7f: 43:c4:98:63:64:f3:87:ef:04:fb:5c:af:03:e5:7a:d9:f7:bb: dc:07:ef:f9:76:1f:34:f3:d4:46:34:f8:09:7a:5d:fa:31:eb: 20:27:f5:48:11:65:56:a1:07:e8:9b:7c:f1:a9:99:aa:4c:0f: 06:cd:85:3c:da:dc:5b:0b:0e:00:d0:a8:36:31:1b:51:00:a7: 92:0f:23:98:c8:b3:05:fa:f0:03:56:b0:7c:fb:7f:3a:19:32: 99:30:fc:5b:06:c7:e2:31:7a:44:74:f3:55:9b:6a:10:68:6c: 72:03:a7:10:0c:53:a1:0f:99:3f:34:13:a4:51:fd:66:0b:ec: 67:ee:50:62:c4:90:85:22:0f:70:90:b9:59:df:9d:0a:08:ba: ea:c0:67:3f:16:4c:69:71:70:ab:1b:ae:a4:d4:a7:e9:01:da: e9:06:7d:d9:f6:8a:7b:2a:e2:64:83:26:65:cf:6e:79:4a:14: 45:82:1b:88:4f:8d:a5:59:82:f2:55:b7:45:66:1f:6b:32:7a: 88:f0:56:3e:31:72:5e:d5:68:78:34:25:d2:c3:5b:55:e9:97: 6a:13:9c:3c:ce:3c:20:86:6e:45:7d:45:a8:cc:72:46:3f:0f: e8:2a:1f:9c -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZrnPFPGrO2C0HVxAQ1IjIssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjUxMjA0MDI0MTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODdkMWJiN2NkNWY0ODIzMTQ2YjU0NmFhMjllMmVjZjZjNmNlNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRxNZ7Zsxs1kZdKK4+vRIX0orj0f AFZzBsfKm/s27i1Qywo5zkNo4knT8NhSKu0IomrhBe3fvtlZ3qbxgSwm2fqG5DtA 3uX3s5Vc6yqjlSYYas2cD6XD3eVQ8dFykoMi3qAeVw+MSNWetMb5PLS2xcjhRDXv YHlGRIlYE0xSR+alugQXZitqiHm2AIm8FwrPmyRs6DxzNegR5DfOsEGF/QqnUozU JdygMGAlQoGYprc9U4PqdqB/J6UYx+hzSRiP+s8cZx8UchXrixQSB1nM2WsIzLwm McG6M/VcHvZN92PnzoE2Gn6w6VARvqUQWRmdiXwHpnaj13wyB/nslzjJHQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFOh9G7fNX0gjFGtUaqKeLs9sbObbMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvNkgwYnQ4MWZTQ01VYTFScW9wNHV6MnhzNXRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQC1GSkMAwD BALUZKwDBALUZLADBALUZLgwDQYJKoZIhvcNAQELBQADggEBACjrln1flQYBMaFq HKe2HB/Nf0PEmGNk84fvBPtcrwPletn3u9wH7/l2HzTz1EY0+Al6Xfox6yAn9UgR ZVahB+ibfPGpmapMDwbNhTza3FsLDgDQqDYxG1EAp5IPI5jIswX68ANWsHz7fzoZ Mpkw/FsGx+IxekR081WbahBobHIDpxAMU6EPmT80E6RR/WYL7GfuUGLEkIUiD3CQ uVnfnQoIuurAZz8WTGlxcKsbrqTUp+kB2ukGfdn2insq4mSDJmXPbnlKFEWCG4hP jaVZgvJVt0VmH2syeojwVj4xcl7VaHg0JdLDW1Xpl2oTnDzOPCCGbkV9RajMckY/ D+gqH5w= -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:33 2025 by rpki-client