This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/tro6X7iK51XkgaSmWZxLK58RXTg.roa
File: tro6X7iK51XkgaSmWZxLK58RXTg.roa (raw, json)
Hash identifier: +pwaDz9z8O9fqdmWMuriQ57/jbWFBhz44aGxqAFwVXQ=
Subject key identifier: B6:BA:3A:5F:B8:8A:E7:55:E4:81:A4:A6:59:9C:4B:2B:9F:11:5D:38
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019AA691AA429FCF2BC5D20B3A241357665C
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/tro6X7iK51XkgaSmWZxLK58RXTg.roa
Signing time: Fri 21 Nov 2025 13:19:15 +0000
ROA not before: Fri 21 Nov 2025 13:19:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 212.100.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:a6:91:aa:42:9f:cf:2b:c5:d2:0b:3a:24:13:57:66:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Nov 21 13:19:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6ba3a5fb88ae755e481a4a6599c4b2b9f115d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:b5:80:9a:24:c8:da:de:4e:26:07:e7:1b:
c3:40:1f:10:1e:c9:f4:ed:24:d0:b1:75:cc:a0:59:
7c:2c:4c:9f:cd:87:85:e9:c3:80:91:31:17:d0:84:
85:91:a6:99:a0:5d:2c:3c:dc:4b:cc:72:d9:7e:70:
e1:59:64:a8:0c:2f:1c:9e:1e:81:e6:ee:13:9a:11:
ec:28:3d:16:34:fb:25:9d:fa:c3:6d:41:3e:ea:13:
27:3c:b2:d2:c1:3e:5d:3d:27:e8:c0:32:46:7c:fe:
c4:4e:53:e7:19:bd:ce:54:49:27:40:88:4b:b0:9d:
68:c0:08:9c:61:33:53:03:9f:50:dc:cf:e5:6e:00:
e6:14:17:ef:14:8a:c0:76:b0:43:91:2c:fd:4d:18:
ff:5b:79:98:11:16:53:81:a2:cb:26:e0:1f:25:c6:
0a:42:1d:5d:7d:91:c2:87:c3:88:40:61:15:ec:9f:
02:70:27:48:4d:05:8d:ae:44:ea:75:aa:43:2c:0d:
e1:66:d3:89:e8:9e:d3:7d:17:7b:7a:e2:08:d0:5e:
eb:95:62:39:a9:da:bb:4e:10:72:0b:8d:2f:92:8e:
8d:e4:95:7b:8a:4b:2b:73:b0:1a:d0:29:fd:09:f1:
a6:9e:1d:03:be:64:93:ec:b0:ff:ab:fe:ae:b0:42:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BA:3A:5F:B8:8A:E7:55:E4:81:A4:A6:59:9C:4B:2B:9F:11:5D:38
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/tro6X7iK51XkgaSmWZxLK58RXTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:76:39:d9:04:d7:5f:9c:20:f7:6c:67:bb:9e:b2:68:aa:1f:
53:2d:e4:ab:d1:f1:ee:17:4d:21:0a:d7:11:af:20:67:3c:3e:
51:4d:63:15:d3:98:13:b2:30:c6:63:42:d2:ca:45:1f:55:d2:
e3:65:34:fc:5d:b3:0a:0a:e6:28:16:39:11:d9:98:a3:05:bc:
17:7d:b0:38:5a:22:2e:ad:32:f2:b1:6c:85:28:66:68:8b:3d:
a6:03:f0:3b:78:c3:af:dc:7d:11:2e:df:0e:8c:fe:0a:a1:e1:
bf:0a:8b:2d:27:c3:1a:07:e2:40:fd:05:b4:7d:d6:41:fe:86:
63:c0:84:e7:34:87:54:35:3c:cd:a8:ca:1f:e8:36:20:15:cf:
ec:47:ff:9d:ed:81:40:16:17:6b:5d:48:78:a0:81:da:1e:15:
e3:ba:9f:1d:4d:7c:2f:8a:ea:bc:e8:11:08:53:52:0c:26:6c:
91:87:3d:9d:11:1b:a9:89:16:a3:d6:a0:5a:8f:57:8d:42:e3:
82:77:39:3a:02:32:53:3e:21:8d:5a:45:c6:68:09:a4:d7:14:
53:dc:85:04:cd:a7:ae:02:05:14:95:63:0f:5c:23:de:5e:59:
79:33:33:d7:56:53:45:1d:80:61:a5:40:70:4a:e0:c4:30:b6:
65:99:5f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:08 2025 by rpki-client