This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/H996rzI3T6vBboiLyrd4IqoSErc.roa File: H996rzI3T6vBboiLyrd4IqoSErc.roa (raw, json) Hash identifier: 43PMo2/7mkEgmqs+Ko4gcTZrFwtuziQyirh6UgJdF9w= Subject key identifier: 1F:DF:7A:AF:32:37:4F:AB:C1:6E:88:8B:CA:B7:78:22:AA:12:12:B7 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019C0E6203E779E5FD146FBDBAE8C23F26DE Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/H996rzI3T6vBboiLyrd4IqoSErc.roa Signing time: Fri 30 Jan 2026 10:10:30 +0000 ROA not before: Fri 30 Jan 2026 10:10:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17497 IP address blocks: 212.100.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:62:03:e7:79:e5:fd:14:6f:bd:ba:e8:c2:3f:26:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jan 30 10:10:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fdf7aaf32374fabc16e888bcab77822aa1212b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:46:21:b7:8a:bf:b0:0e:86:40:01:32:5c: c5:70:1c:73:5a:d6:fd:b9:d1:c0:81:32:bd:10:11: 08:8d:a3:89:61:33:52:ad:12:74:39:bf:e7:65:7a: 4f:ac:f7:ff:44:2f:f0:4e:f5:58:5f:07:4a:c6:79: 58:e3:7b:27:60:b1:ed:64:f4:74:9a:46:20:d0:4f: 3c:b6:3b:48:53:44:7d:0f:c2:e5:fe:17:ad:0f:52: 7b:0a:21:1d:cf:70:2c:dc:ca:5f:f4:3a:5e:15:27: 8e:ad:5c:85:1f:7f:f2:72:dd:f7:1f:af:1d:6f:20: 17:89:26:47:d3:fd:68:c2:0a:02:7c:75:31:b7:76: 8f:e7:cf:61:c2:f5:1d:c5:af:d7:46:ac:c5:78:d7: 5c:74:ea:b4:93:e8:36:73:7c:53:4d:8d:ed:81:cc: 87:a1:f6:aa:ef:c7:56:1d:51:cd:48:e5:90:66:81: fa:d3:a5:7c:c9:51:9e:9f:61:45:fe:7f:68:d2:75: 41:cf:3a:55:e0:ae:bb:d9:36:4d:d4:b8:f8:b3:66: 8e:cf:d9:85:9d:77:87:ea:a0:5d:f2:00:de:30:4d: dd:c0:cf:78:c7:cf:91:b8:64:85:a7:8c:b3:67:7d: 28:be:5a:75:90:73:3c:87:3d:69:18:71:e0:65:7c: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DF:7A:AF:32:37:4F:AB:C1:6E:88:8B:CA:B7:78:22:AA:12:12:B7 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/H996rzI3T6vBboiLyrd4IqoSErc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.100.191.0/24 Signature Algorithm: sha256WithRSAEncryption 20:72:af:0b:5d:00:89:76:06:88:5c:15:b5:e1:50:31:ac:77: a0:27:9b:c8:f3:86:9c:9e:40:96:b3:f8:36:94:3b:8d:94:dc: cf:62:b4:d6:35:5f:d7:65:f6:14:43:f3:b5:2c:65:65:10:05: 0c:c0:fa:7b:dd:a7:35:c9:4f:66:39:b5:46:d1:37:04:08:eb: 98:d1:06:d7:43:d8:e4:34:5b:72:dc:a3:5a:61:95:07:fc:52: a6:96:7c:b8:ba:09:b8:d6:db:2d:50:9e:a3:b9:f0:ce:e1:bd: f8:69:53:bd:7e:98:1d:89:a5:e7:be:eb:21:6e:84:e9:b9:1d: 14:5f:d2:a4:e1:2b:a3:c9:cc:20:c3:5e:62:2e:f5:d4:b8:6b: 9d:ac:57:aa:04:8e:ad:32:fc:28:8a:28:c7:86:59:2a:02:e4: b8:f1:9e:fb:bc:74:1f:aa:7f:b9:03:07:7e:34:0b:b8:da:03: a6:c0:74:6c:77:3e:9a:a5:2d:f4:28:ea:2a:3c:b3:7a:ca:0f: f3:38:96:02:f4:62:df:ad:9b:a0:85:ed:29:b9:2a:7d:af:4b: 26:93:72:13:23:aa:95:31:fe:f6:08:de:c9:26:99:ff:9e:04: 9d:19:7f:43:b9:b0:0d:20:f7:b7:04:53:d6:27:c3:03:b0:f2: c6:72:88:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwOYgPneeX9FG+9uujCPybeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjYwMTMwMTAxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmRmN2FhZjMyMzc0ZmFiYzE2ZTg4OGJjYWI3NzgyMmFhMTIxMmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTJGIbeKv7AOhkABMlzFcBxzWtb9 udHAgTK9EBEIjaOJYTNSrRJ0Ob/nZXpPrPf/RC/wTvVYXwdKxnlY43snYLHtZPR0 mkYg0E88tjtIU0R9D8Ll/hetD1J7CiEdz3As3Mpf9DpeFSeOrVyFH3/yct33H68d byAXiSZH0/1owgoCfHUxt3aP589hwvUdxa/XRqzFeNdcdOq0k+g2c3xTTY3tgcyH ofaq78dWHVHNSOWQZoH606V8yVGen2FF/n9o0nVBzzpV4K672TZN1Lj4s2aOz9mF nXeH6qBd8gDeME3dwM94x8+RuGSFp4yzZ30ovlp1kHM8hz1pGHHgZXxJzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/feq8yN0+rwW6Ii8q3eCKqEhK3MB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvSDk5NnJ6STNUNnZCYm9pTHlyZDRJcW9TRXJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GS/MA0G CSqGSIb3DQEBCwUAA4IBAQAgcq8LXQCJdgaIXBW14VAxrHegJ5vI84acnkCWs/g2 lDuNlNzPYrTWNV/XZfYUQ/O1LGVlEAUMwPp73ac1yU9mObVG0TcECOuY0QbXQ9jk NFty3KNaYZUH/FKmlny4ugm41tstUJ6jufDO4b34aVO9fpgdiaXnvushboTpuR0U X9Kk4Sujycwgw15iLvXUuGudrFeqBI6tMvwoiijHhlkqAuS48Z77vHQfqn+5Awd+ NAu42gOmwHRsdz6apS30KOoqPLN6yg/zOJYC9GLfrZughe0puSp9r0smk3ITI6qV Mf72CN7JJpn/ngSdGX9DubANIPe3BFPWJ8MDsPLGcojO -----END CERTIFICATE-----Generated at Wed Feb 4 09:55:22 2026 by rpki-client