This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/v0XLaX14wzlEmstmZpQMOEW1bJo.roa File: v0XLaX14wzlEmstmZpQMOEW1bJo.roa (raw, json) Hash identifier: kiDc5xCqbCgS7fCuVPWcn6PAy8fq4kO+rQuk6zPAjeo= Subject key identifier: BF:45:CB:69:7D:78:C3:39:44:9A:CB:66:66:94:0C:38:45:B5:6C:9A Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019B7BA3D97F8D26E0CAB8D551370DED5B55 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/v0XLaX14wzlEmstmZpQMOEW1bJo.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214654 IP address blocks: 212.100.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d9:7f:8d:26:e0:ca:b8:d5:51:37:0d:ed:5b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf45cb697d78c339449acb6666940c3845b56c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:2f:70:58:46:1f:a8:25:95:a3:aa:83:ec: b6:4a:63:04:fe:ce:c2:2b:ba:78:f7:57:48:d2:90: a8:13:36:49:19:a7:47:b3:94:fc:e0:de:6a:9a:f1: 86:4a:6b:55:e0:55:50:e2:aa:a3:26:f4:21:d5:45: f0:e7:e8:80:bd:fd:3c:6d:16:c1:01:47:87:61:16: 3e:c8:be:92:3e:c1:14:85:2d:b2:fb:54:7e:8c:9c: 56:ce:28:af:dc:33:79:36:97:ff:62:e1:a2:08:74: ed:a5:0d:47:6e:db:a7:96:80:f9:de:61:61:e5:d5: 92:bc:90:09:a6:d7:de:08:05:77:1e:a0:27:cb:45: 2c:9e:67:b5:8d:b1:b9:f5:b6:85:3f:d1:30:bb:ce: 3a:bf:4b:78:d1:db:10:60:cb:0e:8c:9d:f7:29:f6: bf:3a:66:67:a2:41:47:62:72:bc:fb:0c:6b:8c:ea: 7a:c4:7a:cd:de:7a:b5:28:c7:8b:b2:30:4f:46:2b: e6:c2:81:7a:fd:91:76:44:9a:33:7b:40:d1:97:00: f9:1e:0a:21:4a:c8:80:42:77:f7:48:92:3c:ec:b8: 30:19:65:b1:7a:98:81:49:ba:77:0f:5a:25:46:78: be:82:f4:9c:00:74:06:3b:71:aa:e8:93:4a:bc:82: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:45:CB:69:7D:78:C3:39:44:9A:CB:66:66:94:0C:38:45:B5:6C:9A X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/v0XLaX14wzlEmstmZpQMOEW1bJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.174.0/24 Signature Algorithm: sha256WithRSAEncryption 12:16:e0:5a:b1:ea:18:21:32:3c:ad:5b:e8:60:6a:7e:1a:74: 74:f4:0f:eb:1c:6d:b2:4a:cc:e5:70:03:72:97:21:bf:9d:1c: 7b:97:70:a7:15:41:bd:43:3b:32:ae:1e:62:2e:4b:71:48:18: 6e:f3:d4:a8:12:95:1f:67:49:87:d8:5e:75:5a:f5:4b:98:a4: 42:45:c5:3a:54:12:66:33:41:11:43:d3:82:4f:32:12:34:af: 7b:d4:8e:c6:ee:33:4a:b1:bb:61:90:7a:bc:9d:c2:46:3d:bd: 91:a1:8c:69:79:48:c7:62:54:b9:7f:eb:8d:09:0f:a0:39:82: 9f:71:69:a7:c5:a6:a9:e3:2d:2b:6f:c4:4d:20:f5:16:76:43: ca:9c:8e:d4:3d:16:29:5a:7d:0e:95:28:15:9f:9d:4a:1a:22: 6f:c6:57:bb:9e:ef:16:4e:20:13:a0:9d:9c:bc:29:2a:10:ef: 7d:4e:4d:57:60:22:c5:dc:7e:30:6b:ea:99:61:1e:4e:86:ff: 8b:fc:72:92:6f:ad:1a:00:7b:ff:1d:7e:b9:0e:59:5e:85:d7: 28:ab:fd:a8:2c:53:65:bf:d6:1c:6d:58:c6:c0:b3:ce:53:4b: 50:22:33:66:7f:24:eb:a6:0e:57:a6:3a:b1:4d:cc:92:de:2b: 65:e2:bf:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9l/jSbgyrjVUTcN7VtVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjQ1Y2I2OTdkNzhjMzM5NDQ5YWNiNjY2Njk0MGMzODQ1YjU2YzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulgvcFhGH6gllaOqg+y2SmME/s7C K7p491dI0pCoEzZJGadHs5T84N5qmvGGSmtV4FVQ4qqjJvQh1UXw5+iAvf08bRbB AUeHYRY+yL6SPsEUhS2y+1R+jJxWziiv3DN5Npf/YuGiCHTtpQ1HbtunloD53mFh 5dWSvJAJptfeCAV3HqAny0Usnme1jbG59baFP9Ewu846v0t40dsQYMsOjJ33Kfa/ OmZnokFHYnK8+wxrjOp6xHrN3nq1KMeLsjBPRivmwoF6/ZF2RJoze0DRlwD5Hgoh SsiAQnf3SJI87LgwGWWxepiBSbp3D1olRni+gvScAHQGO3Gq6JNKvIJUkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL9Fy2l9eMM5RJrLZmaUDDhFtWyaMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvdjBYTGFYMTR3emxFbXN0bVpwUU1PRVcxYkpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSuMA0G CSqGSIb3DQEBCwUAA4IBAQASFuBaseoYITI8rVvoYGp+GnR09A/rHG2ySszlcANy lyG/nRx7l3CnFUG9Qzsyrh5iLktxSBhu89SoEpUfZ0mH2F51WvVLmKRCRcU6VBJm M0ERQ9OCTzISNK971I7G7jNKsbthkHq8ncJGPb2RoYxpeUjHYlS5f+uNCQ+gOYKf cWmnxaap4y0rb8RNIPUWdkPKnI7UPRYpWn0OlSgVn51KGiJvxle7nu8WTiAToJ2c vCkqEO99Tk1XYCLF3H4wa+qZYR5Ohv+L/HKSb60aAHv/HX65Dllehdcoq/2oLFNl v9YcbVjGwLPOU0tQIjNmfyTrpg5XpjqxTcyS3itl4r/Z -----END CERTIFICATE-----Generated at Sun Jan 25 17:49:17 2026 by rpki-client