This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1L_PGpkLE370rzDZR1_gIfYc36c.roa File: 1L_PGpkLE370rzDZR1_gIfYc36c.roa (raw, json) Hash identifier: W2owTRMa79lZoz+om2EO8lpznVhx3/0xumHZKFEcgB4= Subject key identifier: D4:BF:CF:1A:99:0B:13:7E:F4:AF:30:D9:47:5F:E0:21:F6:1C:DF:A7 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019C0EAEEC3F672C5266551340F5CB305AB0 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1L_PGpkLE370rzDZR1_gIfYc36c.roa Signing time: Fri 30 Jan 2026 11:34:30 +0000 ROA not before: Fri 30 Jan 2026 11:34:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 212.100.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:ae:ec:3f:67:2c:52:66:55:13:40:f5:cb:30:5a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 30 11:34:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4bfcf1a990b137ef4af30d9475fe021f61cdfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:04:d3:98:fa:d4:c2:4c:e5:d5:ee:71:6a:a3: 0d:1f:fc:9d:1a:02:f6:fa:13:0a:a5:93:09:69:3c: 57:fa:9e:5c:06:fe:8c:b7:8d:00:0b:0f:a8:37:36: 00:67:33:60:68:78:e5:d8:0a:55:d2:b1:e1:e2:6c: 20:53:bf:13:8e:37:43:b3:e3:7a:ca:12:b6:b4:05: 21:a8:4f:d8:b3:2a:c2:a3:b6:8c:b1:aa:1e:cc:f4: 22:7a:f2:4d:a5:3f:8c:01:5b:7b:05:81:b4:50:32: d0:ff:d8:7a:dc:bc:c4:75:90:3b:65:c2:5c:dc:1d: 21:26:04:3e:84:34:44:87:ba:44:ae:ea:3a:83:fb: 31:44:68:89:12:16:7c:c3:01:d8:b0:58:36:72:d0: 31:0a:87:46:47:13:2a:e5:2d:e8:fb:db:a8:64:48: 06:3e:36:29:91:4e:0e:38:5d:93:e0:7e:3c:2a:8f: 83:a6:fe:30:96:24:a4:15:37:c0:8c:fa:49:7c:44: 00:02:88:f6:42:3d:66:49:21:d7:d7:01:38:85:4e: b9:62:b1:6e:db:02:5f:c0:50:5e:d1:b5:8f:fa:56: ab:21:ce:75:94:a1:a7:f8:ba:36:2c:0d:37:01:4c: 4a:5e:9d:f9:a6:17:52:7c:cf:6f:43:55:ab:13:c0: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BF:CF:1A:99:0B:13:7E:F4:AF:30:D9:47:5F:E0:21:F6:1C:DF:A7 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/1L_PGpkLE370rzDZR1_gIfYc36c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.191.0/24 Signature Algorithm: sha256WithRSAEncryption 88:da:68:a8:e7:bf:5e:8c:d0:a6:66:e5:f5:da:32:61:ea:0b: bb:79:9f:1c:0b:f7:62:3c:9a:7b:6a:70:65:e3:09:fe:f9:0f: 84:03:6c:0d:47:df:8b:ed:65:d6:1f:45:6e:55:c7:12:b2:bd: 99:e8:0e:a6:4c:a4:ef:83:4c:0f:41:6c:67:7c:67:4e:1e:d0: 08:1b:81:83:16:81:2a:66:07:b7:4e:22:1d:19:0f:95:10:c5: 78:dd:e1:f9:96:96:5f:33:e0:d0:4b:d1:97:eb:e7:57:91:6f: a9:4a:cb:a2:f5:65:aa:3e:2d:cc:85:2f:8a:36:ef:af:86:49: 3f:47:6e:69:a5:14:06:06:4e:25:91:8b:83:65:db:39:18:f3: 9a:76:2f:b1:77:b9:3c:4d:df:f4:31:96:fc:02:06:31:98:30: 6b:a6:e3:95:c6:5b:db:83:ab:ea:93:72:05:06:02:69:5b:9d: cc:55:b9:f8:81:1d:c6:4e:85:76:b6:b0:d1:29:cf:7e:5d:f8: 21:76:ee:e3:28:d8:f7:54:c5:6e:7b:29:54:5b:7c:3a:e0:98: 3c:17:ac:c8:fc:8b:6a:e0:4a:1b:6b:62:bc:59:4b:68:17:a9: 01:7e:11:1a:44:14:87:ca:51:f3:c4:e3:e9:e5:0c:35:6e:e7: 55:94:cb:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwOruw/ZyxSZlUTQPXLMFqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTMwMTEzNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGJmY2YxYTk5MGIxMzdlZjRhZjMwZDk0NzVmZTAyMWY2MWNkZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ATTmPrUwkzl1e5xaqMNH/ydGgL2 +hMKpZMJaTxX+p5cBv6Mt40ACw+oNzYAZzNgaHjl2ApV0rHh4mwgU78TjjdDs+N6 yhK2tAUhqE/YsyrCo7aMsaoezPQievJNpT+MAVt7BYG0UDLQ/9h63LzEdZA7ZcJc 3B0hJgQ+hDREh7pEruo6g/sxRGiJEhZ8wwHYsFg2ctAxCodGRxMq5S3o+9uoZEgG PjYpkU4OOF2T4H48Ko+Dpv4wliSkFTfAjPpJfEQAAoj2Qj1mSSHX1wE4hU65YrFu 2wJfwFBe0bWP+larIc51lKGn+Lo2LA03AUxKXp35phdSfM9vQ1WrE8By/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNS/zxqZCxN+9K8w2Udf4CH2HN+nMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvMUxfUEdwa0xFMzcwcnpEWlIxX2dJZlljMzZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GS/MA0G CSqGSIb3DQEBCwUAA4IBAQCI2mio579ejNCmZuX12jJh6gu7eZ8cC/diPJp7anBl 4wn++Q+EA2wNR9+L7WXWH0VuVccSsr2Z6A6mTKTvg0wPQWxnfGdOHtAIG4GDFoEq Zge3TiIdGQ+VEMV43eH5lpZfM+DQS9GX6+dXkW+pSsui9WWqPi3MhS+KNu+vhkk/ R25ppRQGBk4lkYuDZds5GPOadi+xd7k8Td/0MZb8AgYxmDBrpuOVxlvbg6vqk3IF BgJpW53MVbn4gR3GToV2trDRKc9+Xfghdu7jKNj3VMVueylUW3w64Jg8F6zI/Itq 4Eoba2K8WUtoF6kBfhEaRBSHylHzxOPp5Qw1budVlMu/ -----END CERTIFICATE-----Generated at Wed Feb 4 09:54:33 2026 by rpki-client