This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Nw9oUx1P_ZziFM706koS9GS7FJw.roa
File: Nw9oUx1P_ZziFM706koS9GS7FJw.roa (raw, json)
Hash identifier: LBN1Ui1EWKIEFENTjLzYQ+tIWeEdr58O2UDEZN8eSZs=
Subject key identifier: 37:0F:68:53:1D:4F:FD:9C:E2:14:CE:F4:EA:4A:12:F4:64:BB:14:9C
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019B7BA3DBFF9D0B4FBC230CB6A4C9A02177
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Nw9oUx1P_ZziFM706koS9GS7FJw.roa
Signing time: Thu 01 Jan 2026 22:18:14 +0000
ROA not before: Thu 01 Jan 2026 22:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 212.100.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:db:ff:9d:0b:4f:bc:23:0c:b6:a4:c9:a0:21:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jan 1 22:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=370f68531d4ffd9ce214cef4ea4a12f464bb149c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:34:76:96:d8:18:6b:3b:4e:5e:a3:43:16:
aa:f6:67:1f:dd:72:46:8e:80:c3:45:f4:7c:2a:f7:
8c:60:f2:49:06:c5:fe:6e:eb:1a:ed:ae:87:55:03:
97:50:e6:e7:95:94:96:6c:47:98:18:12:67:38:de:
c7:fb:5e:3a:17:c3:e3:eb:a4:e9:d4:6f:de:29:f8:
39:41:9c:2b:e1:56:58:9e:22:a3:0a:be:9f:1e:d0:
bc:8f:0f:e8:cb:24:82:3b:15:a4:02:5f:ff:47:7b:
b5:e8:be:96:8e:3d:35:ab:50:75:0a:32:2d:04:0a:
70:40:2a:4f:e6:10:99:f4:31:e3:90:10:a1:66:94:
f8:51:bb:a4:da:61:f1:38:1c:b9:61:83:19:59:11:
82:62:5a:a3:fe:e6:43:7c:ae:fc:f5:d1:34:1a:87:
7b:93:16:f5:70:96:0c:69:3c:9c:cc:33:f2:dd:0a:
a0:c8:10:49:43:5b:0d:20:bf:07:cf:65:79:9b:90:
ae:20:7d:a1:20:14:4b:20:df:11:8e:4d:24:6d:80:
2f:7a:7e:d8:fa:f2:37:a9:d6:38:9a:fc:77:da:14:
66:69:e6:07:c3:dd:94:e0:1a:ea:8d:0b:cd:30:53:
01:c7:c5:9e:a0:f8:1c:e3:1b:6c:a6:4d:99:55:03:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:68:53:1D:4F:FD:9C:E2:14:CE:F4:EA:4A:12:F4:64:BB:14:9C
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Nw9oUx1P_ZziFM706koS9GS7FJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.190.0/24
Signature Algorithm: sha256WithRSAEncryption
01:15:bb:62:45:87:c1:b9:6a:d3:c6:0f:7c:99:96:b5:d0:b8:
74:4c:a9:8d:ed:a6:50:6d:ff:09:64:2a:8f:4c:c3:77:8b:9b:
fe:a2:29:ba:21:8c:ac:5c:c1:31:32:e2:82:b1:97:5c:c5:b0:
d5:27:58:d5:52:fa:90:8e:bd:8f:3a:77:45:f3:e0:08:b6:22:
a4:2a:38:3e:c0:26:3c:3b:33:ea:09:d2:7a:a0:ea:da:30:39:
ed:99:79:29:b1:06:0e:79:00:8a:59:68:d3:ad:9b:59:9e:16:
a5:a2:90:31:15:27:14:d8:cc:4c:9e:97:81:60:09:c5:f7:4f:
28:c8:2a:e2:5f:0c:22:af:40:10:46:6c:4e:a2:a2:7c:39:1d:
99:9f:0b:92:83:a4:b1:85:cc:fc:54:35:3e:30:8a:0a:d4:1e:
89:ee:9e:a4:db:b9:2d:96:11:a2:18:8b:a4:eb:5a:48:33:47:
d8:eb:08:3f:1d:90:99:57:88:9e:5b:13:16:0e:85:8d:51:50:
7a:83:c2:63:03:45:f5:28:87:26:a4:e4:68:8c:62:64:55:e0:
46:ce:55:0a:44:b2:b7:e2:29:b9:28:d3:31:85:91:04:4e:00:
80:63:a4:40:6f:40:d9:61:ce:98:1d:5d:99:7e:c7:19:4a:6c:
60:b8:92:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:55 2026 by rpki-client