This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/SLYUwO3J4rsVEUzX-9Z5gjstFj8.roa File: SLYUwO3J4rsVEUzX-9Z5gjstFj8.roa (raw, json) Hash identifier: iE2V/BLoA+FD6FJ4WYIJ+odemMmGAkDqx+9OPfE/i9I= Subject key identifier: 48:B6:14:C0:ED:C9:E2:BB:15:11:4C:D7:FB:D6:79:82:3B:2D:16:3F Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019AE755C54CB05C37D705E792B8FEE3588F Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/SLYUwO3J4rsVEUzX-9Z5gjstFj8.roa Signing time: Thu 04 Dec 2025 03:09:09 +0000 ROA not before: Thu 04 Dec 2025 03:09:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214432 IP address blocks: 212.100.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:55:c5:4c:b0:5c:37:d7:05:e7:92:b8:fe:e3:58:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Dec 4 03:09:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=48b614c0edc9e2bb15114cd7fbd679823b2d163f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:4d:13:36:1b:93:dc:14:12:16:79:27:af: 6e:c3:ac:82:f2:47:f1:25:b4:3a:e3:41:f2:e8:7e: b5:32:13:97:14:33:57:cc:ef:37:f5:fc:21:53:85: 33:7c:62:5d:0b:d2:0f:9f:e5:a3:54:0e:54:5c:ab: 67:a7:e9:be:36:59:25:0d:ee:db:46:e5:fa:41:cb: b4:14:70:ea:61:d8:10:f2:f7:2b:6e:23:88:77:95: 9b:4f:ac:95:24:1f:2f:5a:c8:2f:be:11:70:7f:05: f1:25:78:d2:07:a3:0e:b0:78:e3:11:ad:8a:6f:40: 12:1c:81:95:d4:fb:3e:c0:a1:7d:fa:8c:3f:10:0b: bb:96:c5:b4:46:de:1e:63:6d:b7:e2:88:38:64:c9: 3b:48:45:57:40:c0:d0:7c:3e:c8:9a:99:35:69:28: fc:2c:36:46:ea:6f:c5:5c:60:72:d4:cd:f5:1d:8b: d7:4c:46:e8:63:d0:6a:87:55:46:55:ed:76:7d:52: af:3f:cb:f2:ba:3a:0d:29:60:43:4b:ba:88:db:9b: d2:a7:7a:21:f4:3a:fb:56:1c:18:23:3b:87:3c:3f: 85:57:eb:46:3f:79:78:81:bf:50:4f:e6:4f:39:93: 02:43:7d:69:d5:1d:fc:40:1f:1d:11:ef:8c:a3:7a: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B6:14:C0:ED:C9:E2:BB:15:11:4C:D7:FB:D6:79:82:3B:2D:16:3F X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/SLYUwO3J4rsVEUzX-9Z5gjstFj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.170.0/24 Signature Algorithm: sha256WithRSAEncryption 31:95:86:74:81:5a:79:cf:65:90:41:38:ad:f4:d2:19:08:21: 0e:86:9e:ab:1e:1c:b0:26:9e:05:92:6b:67:c5:03:56:2d:af: 47:23:4c:36:14:7d:83:2d:c6:2e:ad:fb:c4:86:aa:31:78:eb: af:4c:5c:a2:b6:20:05:8b:1e:55:cd:88:40:e3:a8:3b:4b:1a: e1:8d:b8:7e:35:88:b0:e5:ad:ba:f4:7c:6d:12:3e:09:67:1d: a8:06:95:52:b7:85:76:4c:68:e5:8a:a1:99:c1:df:33:f4:09: 9f:eb:34:c3:59:1c:f3:a6:3b:a5:72:d6:fa:8c:ae:fc:93:82: e5:6b:61:5d:ff:27:bc:42:4b:10:e9:14:37:e3:94:23:03:8e: 9c:ed:b7:45:51:20:be:7e:ea:9b:20:69:c0:08:4a:d0:30:9d: 68:af:7f:10:07:3e:ac:52:19:20:1d:af:62:76:9a:3d:77:0d: 31:98:62:3f:d6:c1:43:fd:2e:bd:f8:5a:a7:6f:15:f1:4d:35: 39:7e:3d:65:5d:a1:af:1d:68:7d:00:69:a7:2a:cc:a6:ff:8f: ef:77:d2:7f:ed:48:ef:90:5e:65:63:a0:24:94:41:8c:02:f3: bd:54:ee:c6:35:4b:cf:2c:b9:56:52:f1:a6:d4:2b:b9:69:16: fc:08:4e:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrnVcVMsFw31wXnkrj+41iPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjUxMjA0MDMwOTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGI2MTRjMGVkYzllMmJiMTUxMTRjZDdmYmQ2Nzk4MjNiMmQxNjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt5NEzYbk9wUEhZ5J69uw6yC8kfx JbQ640Hy6H61MhOXFDNXzO839fwhU4UzfGJdC9IPn+WjVA5UXKtnp+m+NlklDe7b RuX6Qcu0FHDqYdgQ8vcrbiOId5WbT6yVJB8vWsgvvhFwfwXxJXjSB6MOsHjjEa2K b0ASHIGV1Ps+wKF9+ow/EAu7lsW0Rt4eY2234og4ZMk7SEVXQMDQfD7Impk1aSj8 LDZG6m/FXGBy1M31HYvXTEboY9Bqh1VGVe12fVKvP8vyujoNKWBDS7qI25vSp3oh 9Dr7VhwYIzuHPD+FV+tGP3l4gb9QT+ZPOZMCQ31p1R38QB8dEe+Mo3phcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEi2FMDtyeK7FRFM1/vWeYI7LRY/MB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvU0xZVXdPM0o0cnNWRVV6WC05WjVnanN0Rmo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSqMA0G CSqGSIb3DQEBCwUAA4IBAQAxlYZ0gVp5z2WQQTit9NIZCCEOhp6rHhywJp4Fkmtn xQNWLa9HI0w2FH2DLcYurfvEhqoxeOuvTFyitiAFix5VzYhA46g7Sxrhjbh+NYiw 5a269HxtEj4JZx2oBpVSt4V2TGjliqGZwd8z9Amf6zTDWRzzpjulctb6jK78k4Ll a2Fd/ye8QksQ6RQ345QjA46c7bdFUSC+fuqbIGnACErQMJ1or38QBz6sUhkgHa9i dpo9dw0xmGI/1sFD/S69+FqnbxXxTTU5fj1lXaGvHWh9AGmnKsym/4/vd9J/7Ujv kF5lY6AklEGMAvO9VO7GNUvPLLlWUvGm1Cu5aRb8CE6E -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:55 2025 by rpki-client