This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/lGHRzlMOjQ0FGsLJ4DXCt4KlRZo.roa File: lGHRzlMOjQ0FGsLJ4DXCt4KlRZo.roa (raw, json) Hash identifier: H9EU/SdTascT7WG21eyoMBcQ0cKXY0LuF/YjRLl8vKA= Subject key identifier: 94:61:D1:CE:53:0E:8D:0D:05:1A:C2:C9:E0:35:C2:B7:82:A5:45:9A Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019AE755C4F6815B08CCCF0ABFAC227BFA7A Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/lGHRzlMOjQ0FGsLJ4DXCt4KlRZo.roa Signing time: Thu 04 Dec 2025 03:09:09 +0000 ROA not before: Thu 04 Dec 2025 03:09:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9318 IP address blocks: 212.100.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:55:c4:f6:81:5b:08:cc:cf:0a:bf:ac:22:7b:fa:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Dec 4 03:09:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9461d1ce530e8d0d051ac2c9e035c2b782a5459a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:46:f8:5c:8e:4f:57:05:45:1c:3d:a8:9f:26: 8f:e0:3a:08:18:19:68:3f:d7:7e:eb:4e:fb:99:67: e4:32:d0:1b:8b:77:70:bd:dd:b8:47:6e:b0:c3:f1: a4:c0:cf:01:09:c8:1b:fa:34:2b:c6:2d:eb:d6:a9: be:cd:f3:dd:b1:37:bd:ee:48:37:c5:e6:8a:d7:f4: 4f:5c:17:6d:e6:d5:16:70:e1:84:ed:db:83:42:10: 7b:43:13:16:d4:8a:57:44:e7:69:d6:1f:91:a0:0e: 6a:c8:fd:e1:4f:2d:ae:a4:aa:3a:6f:3d:79:33:ff: 68:4d:7a:4c:59:52:15:27:44:42:3f:bb:19:15:2a: ac:b5:1a:7f:7e:7a:b3:e1:06:bf:cf:f6:23:59:6d: 43:c1:cd:11:20:e9:84:4d:0e:83:f4:1a:a8:10:6e: 72:67:96:cf:b8:7b:cd:86:9a:83:79:d5:1f:c2:7e: 29:7d:c6:7c:e6:63:28:2e:20:57:ea:10:56:d9:fe: 9a:fa:7f:46:2b:84:b5:bc:d2:49:b3:c6:fc:c6:f9: 01:13:67:93:85:b2:54:1b:57:ef:c4:fd:14:b3:40: 73:cf:41:a8:78:44:fc:6e:2c:e6:25:ef:10:3f:45: 6a:fc:0d:77:71:1f:68:17:83:7b:1e:64:f3:e0:8e: dc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:61:D1:CE:53:0E:8D:0D:05:1A:C2:C9:E0:35:C2:B7:82:A5:45:9A X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/lGHRzlMOjQ0FGsLJ4DXCt4KlRZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.167.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:6c:e0:39:f9:04:fa:71:35:39:fc:fd:ad:fc:e6:c1:72:e0: 5f:64:0e:d1:df:d3:49:4f:7c:e5:a5:8f:41:73:15:3b:e3:48: 6b:a3:6b:fd:57:a5:ec:23:24:ad:62:56:2d:33:4c:37:11:bf: c2:7c:b3:25:c5:74:38:e3:e2:da:8a:d9:68:d4:1e:de:36:6a: 06:cf:78:f7:af:33:9d:59:86:38:8f:5b:9b:fb:61:6b:b1:55: 76:f1:5e:72:d7:1e:43:75:b7:dc:77:96:85:d1:b3:dc:8f:02: 05:42:c4:81:56:72:2d:61:0f:4f:03:ec:9a:79:52:77:db:a1: fd:cd:6e:34:73:60:cc:c1:15:2d:16:30:00:e0:1c:21:ff:1f: d3:66:07:c2:80:97:b7:da:1f:85:fc:b5:5a:3a:97:fd:62:bf: 64:93:05:33:f6:c1:28:6b:09:60:26:67:2d:bb:61:97:8d:4e: a7:da:fc:20:b5:db:99:6c:12:75:38:d4:6f:62:0e:f7:06:1d: 80:be:c2:08:18:9e:c9:c1:64:95:73:ed:09:c5:64:a0:35:af: 4f:00:55:18:8f:10:d2:af:2e:04:96:4d:8c:06:e9:e5:65:8c: 9f:5d:26:4a:36:08:af:ef:16:b6:ce:41:f9:da:92:76:f5:b0: 27:ea:3c:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrnVcT2gVsIzM8Kv6wie/p6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjUxMjA0MDMwOTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDYxZDFjZTUzMGU4ZDBkMDUxYWMyYzllMDM1YzJiNzgyYTU0NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kb4XI5PVwVFHD2onyaP4DoIGBlo P9d+6077mWfkMtAbi3dwvd24R26ww/GkwM8BCcgb+jQrxi3r1qm+zfPdsTe97kg3 xeaK1/RPXBdt5tUWcOGE7duDQhB7QxMW1IpXROdp1h+RoA5qyP3hTy2upKo6bz15 M/9oTXpMWVIVJ0RCP7sZFSqstRp/fnqz4Qa/z/YjWW1Dwc0RIOmETQ6D9BqoEG5y Z5bPuHvNhpqDedUfwn4pfcZ85mMoLiBX6hBW2f6a+n9GK4S1vNJJs8b8xvkBE2eT hbJUG1fvxP0Us0Bzz0GoeET8bizmJe8QP0Vq/A13cR9oF4N7HmTz4I7c8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJRh0c5TDo0NBRrCyeA1wreCpUWaMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvbEdIUnpsTU9qUTBGR3NMSjREWEN0NEtsUlpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSnMA0G CSqGSIb3DQEBCwUAA4IBAQB7bOA5+QT6cTU5/P2t/ObBcuBfZA7R39NJT3zlpY9B cxU740hro2v9V6XsIyStYlYtM0w3Eb/CfLMlxXQ44+Laitlo1B7eNmoGz3j3rzOd WYY4j1ub+2FrsVV28V5y1x5Ddbfcd5aF0bPcjwIFQsSBVnItYQ9PA+yaeVJ326H9 zW40c2DMwRUtFjAA4Bwh/x/TZgfCgJe32h+F/LVaOpf9Yr9kkwUz9sEoawlgJmct u2GXjU6n2vwgtduZbBJ1ONRvYg73Bh2AvsIIGJ7JwWSVc+0JxWSgNa9PAFUYjxDS ry4Elk2MBunlZYyfXSZKNgiv7xa2zkH52pJ29bAn6jzR -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:01 2025 by rpki-client