This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/X-Q41gqlyKp4za2e1qcGXN9bmuU.roa File: X-Q41gqlyKp4za2e1qcGXN9bmuU.roa (raw, json) Hash identifier: gx+B7/gZYkitU+NxHVbHVLXPXkx4B2/aXajETAf7WGQ= Subject key identifier: 5F:E4:38:D6:0A:A5:C8:AA:78:CD:AD:9E:D6:A7:06:5C:DF:5B:9A:E5 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B7BA3D634D205AA37EC4358112F285FC7 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/X-Q41gqlyKp4za2e1qcGXN9bmuU.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203710 IP address blocks: 212.100.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d6:34:d2:05:aa:37:ec:43:58:11:2f:28:5f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fe438d60aa5c8aa78cdad9ed6a7065cdf5b9ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:2d:8a:67:6f:10:dc:a1:e2:62:46:95:5d: 4b:80:b3:b1:b9:62:3b:3b:2b:91:ec:f7:cc:3e:7d: 3e:fc:8b:98:53:e8:78:6d:dc:0b:87:fc:a9:3e:3b: 2c:89:8b:91:e7:c2:42:9b:f8:a8:57:f7:a8:86:ca: 79:15:43:47:53:e1:fb:b5:ee:44:be:5e:7c:b1:34: d5:45:aa:bf:0a:2c:9b:20:55:83:a5:2a:31:d8:ee: f6:ad:e6:7e:f4:52:f2:14:7e:50:b8:51:3a:a3:29: 3f:53:69:4b:e1:cd:a6:66:30:ca:62:7e:83:97:a5: 0e:9b:66:8d:c2:2b:3d:43:b6:ea:d0:be:d1:ff:0b: 12:c1:e2:7e:67:18:4e:ff:ef:29:0d:87:1c:13:87: 17:17:9b:24:c8:87:d5:6d:8c:9d:1a:d4:6e:7a:e2: 3b:21:ae:a9:8a:fb:2f:d1:80:c0:f3:25:95:5d:38: b0:fc:69:cc:3f:63:4f:a4:1d:a7:f2:78:e2:af:f0: 72:c0:19:1f:50:45:89:02:b8:0e:f4:8d:48:4a:62: f5:90:b6:79:2c:5b:c0:12:b1:0b:27:83:d1:0f:0d: 29:11:c6:3a:f1:d1:20:6e:40:34:36:ec:63:63:47: 38:f7:52:27:35:f4:df:d5:bc:d6:61:57:a1:7d:82: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E4:38:D6:0A:A5:C8:AA:78:CD:AD:9E:D6:A7:06:5C:DF:5B:9A:E5 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/X-Q41gqlyKp4za2e1qcGXN9bmuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.179.0/24 Signature Algorithm: sha256WithRSAEncryption 89:b0:fa:82:71:90:9b:36:c9:0d:f3:ec:98:11:cc:bc:9f:73: 5a:fa:50:cb:dd:68:61:b4:54:29:06:d3:9d:d5:10:f3:e4:8b: ca:59:11:83:bd:f7:2a:31:40:4c:15:60:6d:04:77:84:4e:97: af:30:1b:c1:dc:e9:99:0f:01:fb:6a:48:6f:cf:3f:68:99:73: 66:57:84:8c:9b:b7:09:9a:b5:3b:3c:e1:2e:a4:11:ef:27:68: 89:e9:c1:e9:e0:02:0a:a7:97:9c:ff:db:d8:cb:59:fd:2a:2e: 61:0d:81:4c:c4:02:0e:8c:3f:55:aa:40:f3:75:4f:8e:7e:a9: e7:d9:73:3f:c5:14:2c:e5:1b:78:f8:6d:e8:15:21:1e:05:e8: 41:03:e1:a4:a9:74:66:8f:f4:ec:66:78:96:26:b4:64:56:be: 3a:59:49:34:5a:0f:ea:be:a7:19:10:cc:43:03:ea:aa:62:c9: b0:fb:be:f7:2a:a9:89:a9:7b:04:23:48:69:0e:c0:d0:2a:3a: b8:d0:97:76:e1:f8:f4:e9:ef:49:46:ee:91:b6:8c:65:55:f9: 1b:8c:6b:27:74:46:96:2f:a2:12:06:c6:07:f4:4c:8c:d8:c1: 73:a8:02:ce:3c:da:7f:48:59:56:e6:07:61:8c:bf:4c:ca:cc: 85:f0:64:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9Y00gWqN+xDWBEvKF/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmU0MzhkNjBhYTVjOGFhNzhjZGFkOWVkNmE3MDY1Y2RmNWI5YWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ustimdvENyh4mJGlV1LgLOxuWI7 OyuR7PfMPn0+/IuYU+h4bdwLh/ypPjssiYuR58JCm/ioV/eohsp5FUNHU+H7te5E vl58sTTVRaq/CiybIFWDpSox2O72reZ+9FLyFH5QuFE6oyk/U2lL4c2mZjDKYn6D l6UOm2aNwis9Q7bq0L7R/wsSweJ+ZxhO/+8pDYccE4cXF5skyIfVbYydGtRueuI7 Ia6pivsv0YDA8yWVXTiw/GnMP2NPpB2n8njir/BywBkfUEWJArgO9I1ISmL1kLZ5 LFvAErELJ4PRDw0pEcY68dEgbkA0NuxjY0c491InNfTf1bzWYVehfYIyBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/kONYKpciqeM2tntanBlzfW5rlMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvWC1RNDFncWx5S3A0emEyZTFxY0dYTjlibXVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSzMA0G CSqGSIb3DQEBCwUAA4IBAQCJsPqCcZCbNskN8+yYEcy8n3Na+lDL3WhhtFQpBtOd 1RDz5IvKWRGDvfcqMUBMFWBtBHeETpevMBvB3OmZDwH7akhvzz9omXNmV4SMm7cJ mrU7POEupBHvJ2iJ6cHp4AIKp5ec/9vYy1n9Ki5hDYFMxAIOjD9VqkDzdU+Ofqnn 2XM/xRQs5Rt4+G3oFSEeBehBA+GkqXRmj/TsZniWJrRkVr46WUk0Wg/qvqcZEMxD A+qqYsmw+773KqmJqXsEI0hpDsDQKjq40Jd24fj06e9JRu6RtoxlVfkbjGsndEaW L6ISBsYH9EyM2MFzqALOPNp/SFlW5gdhjL9MysyF8GRl -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:31 2026 by rpki-client