This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/YtYh52858tvFRXRrF4Yoq2mt-1U.roa File: YtYh52858tvFRXRrF4Yoq2mt-1U.roa (raw, json) Hash identifier: IooLs7GIFuYVqgToYsrqhBFdbWxeSAM2xbljnr1et+8= Subject key identifier: 62:D6:21:E7:6F:39:F2:DB:C5:45:74:6B:17:86:28:AB:69:AD:FB:55 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B7BA3DC403E274B8EE5DD8112B4CD4690 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/YtYh52858tvFRXRrF4Yoq2mt-1U.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401476 IP address blocks: 212.100.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:dc:40:3e:27:4b:8e:e5:dd:81:12:b4:cd:46:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62d621e76f39f2dbc545746b178628ab69adfb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:52:ad:9f:30:cf:25:7c:58:42:08:40:e9: a4:48:bd:9f:03:ff:29:85:e9:96:1e:40:fe:55:5a: 8f:a0:5c:97:7c:71:b0:60:df:e9:f1:95:14:b8:b9: 4d:e1:f1:04:6b:fe:79:a1:ac:e9:55:84:ca:22:22: a3:df:52:26:b2:2e:63:18:02:c6:59:41:ae:63:1f: 44:b5:3b:ba:60:6b:3a:59:e3:a7:20:4b:84:53:78: d6:6f:d1:d4:5b:52:16:64:c3:29:16:0d:ca:49:3a: b5:ec:44:a6:01:c7:2a:e7:b0:ef:58:2d:79:76:7f: c4:58:ab:3f:ba:eb:c2:21:20:75:d5:f2:ca:5a:2a: cf:c8:e8:12:9c:0a:90:6d:22:14:21:71:6f:f3:db: 6d:0c:09:19:59:11:2b:99:f2:2c:f8:0a:dd:7d:b9: b7:b0:f6:22:9b:08:1f:06:a9:c6:6f:06:43:26:7c: df:31:36:1f:7a:d9:11:74:f8:f0:89:76:7e:57:ab: 73:cf:5b:4f:af:f8:92:6e:40:26:7b:f0:e1:0d:89: 85:42:81:76:cd:d8:b6:99:26:cf:ec:e2:17:6a:aa: e5:c7:c6:2d:58:13:15:c9:54:68:76:29:fb:67:ae: c7:6a:21:34:a9:2c:14:6e:29:31:24:70:d6:ae:6b: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D6:21:E7:6F:39:F2:DB:C5:45:74:6B:17:86:28:AB:69:AD:FB:55 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/YtYh52858tvFRXRrF4Yoq2mt-1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.164.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:ab:b8:9f:41:bb:ba:da:6a:af:64:96:ad:20:d9:9a:15:fc: ef:ad:4d:ad:a9:4f:eb:8d:cf:a2:3a:b0:d9:14:5a:6e:46:89: 40:f0:00:b6:5d:c8:0b:dd:81:a1:06:bb:75:08:33:ca:68:bd: ac:5c:9c:90:a6:3b:10:09:2e:7c:fe:07:f5:5f:d5:ce:47:10: e4:66:5d:89:32:63:d1:4f:97:4d:c5:df:e2:a3:dd:da:5b:27: 77:bc:d6:e5:06:0c:c6:95:f0:b0:9e:f4:14:19:fd:cd:0c:a1: cc:b7:be:53:5a:b7:3e:dd:6e:4a:ff:2c:44:00:71:e9:b9:34: 88:a9:c1:82:2f:fc:22:36:cf:97:0f:a4:25:43:26:6c:3e:8f: 6f:3d:8e:9c:47:fc:a2:ec:a1:b2:46:a5:fc:c6:f3:ad:b1:53: 7d:bf:16:44:5a:c6:4a:c7:cd:09:93:3e:53:ee:b3:f4:76:2d: ff:da:e7:ee:30:c3:91:b2:71:a1:47:31:54:42:a0:0a:81:a7: 07:60:e2:d1:83:3e:9c:f5:a1:ee:83:c2:27:b0:35:22:b8:fd: 7b:c0:6a:93:97:09:34:58:ec:80:ba:f6:7a:58:f7:18:a6:9f: 45:97:75:37:b1:3f:a7:3f:64:10:5a:24:3f:8c:07:86:e3:c3: 53:af:50:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9xAPidLjuXdgRK0zUaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmQ2MjFlNzZmMzlmMmRiYzU0NTc0NmIxNzg2MjhhYjY5YWRmYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpJSrZ8wzyV8WEIIQOmkSL2fA/8p hemWHkD+VVqPoFyXfHGwYN/p8ZUUuLlN4fEEa/55oazpVYTKIiKj31Imsi5jGALG WUGuYx9EtTu6YGs6WeOnIEuEU3jWb9HUW1IWZMMpFg3KSTq17ESmAccq57DvWC15 dn/EWKs/uuvCISB11fLKWirPyOgSnAqQbSIUIXFv89ttDAkZWRErmfIs+Ardfbm3 sPYimwgfBqnGbwZDJnzfMTYfetkRdPjwiXZ+V6tzz1tPr/iSbkAme/DhDYmFQoF2 zdi2mSbP7OIXaqrlx8YtWBMVyVRodin7Z67HaiE0qSwUbikxJHDWrmtd0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGLWIedvOfLbxUV0axeGKKtprftVMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvWXRZaDUyODU4dHZGUlhSckY0WW9xMm10LTFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSkMA0G CSqGSIb3DQEBCwUAA4IBAQCPq7ifQbu62mqvZJatINmaFfzvrU2tqU/rjc+iOrDZ FFpuRolA8AC2XcgL3YGhBrt1CDPKaL2sXJyQpjsQCS58/gf1X9XORxDkZl2JMmPR T5dNxd/io93aWyd3vNblBgzGlfCwnvQUGf3NDKHMt75TWrc+3W5K/yxEAHHpuTSI qcGCL/wiNs+XD6QlQyZsPo9vPY6cR/yi7KGyRqX8xvOtsVN9vxZEWsZKx80Jkz5T 7rP0di3/2ufuMMORsnGhRzFUQqAKgacHYOLRgz6c9aHug8InsDUiuP17wGqTlwk0 WOyAuvZ6WPcYpp9Fl3U3sT+nP2QQWiQ/jAeG48NTr1AY -----END CERTIFICATE-----Generated at Sun Jan 25 13:08:06 2026 by rpki-client