This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/ebW6fP07GSExHXJnIRkPI1CffRo.roa
File: ebW6fP07GSExHXJnIRkPI1CffRo.roa (raw, json)
Hash identifier: wesCxXzhjpD69gFx3Itq09Mse/YEDloriSNJY1Xbmi4=
Subject key identifier: 79:B5:BA:7C:FD:3B:19:21:31:1D:72:67:21:19:0F:23:50:9F:7D:1A
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 019C267CABF6173489B92FBB89ABFA2AC6C6
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/ebW6fP07GSExHXJnIRkPI1CffRo.roa
Signing time: Wed 04 Feb 2026 02:30:30 +0000
ROA not before: Wed 04 Feb 2026 02:30:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.100.164.0/22 maxlen: 22
212.100.166.0/24 maxlen: 24
212.100.167.0/24 maxlen: 24
212.100.172.0/22 maxlen: 22
212.100.176.0/22 maxlen: 24
212.100.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:26:7c:ab:f6:17:34:89:b9:2f:bb:89:ab:fa:2a:c6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Feb 4 02:30:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79b5ba7cfd3b1921311d726721190f23509f7d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:46:6e:2c:fc:9f:4d:38:12:2d:d1:25:78:
5e:16:c7:20:a7:37:8c:2c:eb:10:12:7f:d7:f9:e1:
fc:ae:e4:d9:fb:cb:d2:cb:a6:1e:4c:d1:31:15:ec:
9d:8b:11:1e:4a:51:5d:24:0b:9b:e9:9a:60:da:69:
eb:b2:5d:05:65:fc:37:b7:9b:45:62:b2:c7:cc:97:
88:f9:92:e8:a2:59:c9:ee:07:15:74:b0:bc:8a:c6:
9f:67:13:5c:6b:9c:26:89:67:23:7d:b9:97:c3:1f:
9f:60:c1:0f:ef:93:04:4e:6c:92:d5:8a:1c:d2:c6:
17:84:f4:0a:98:51:55:96:04:c8:56:fb:ac:a6:7f:
6f:59:4a:80:7c:50:b4:45:5a:27:2d:13:81:52:ca:
d8:f1:a9:62:4a:d9:d8:48:51:f9:74:37:fe:01:a7:
c8:74:db:00:f5:f1:34:31:2a:e9:73:b4:a5:7f:1e:
88:23:73:ec:6e:d0:e2:ad:eb:2a:6f:4d:09:ba:51:
09:a5:d4:c3:40:27:9f:ee:b9:e5:ff:0f:8b:d6:d1:
9a:92:5c:97:81:fa:42:36:fc:22:8f:6b:64:32:1c:
34:89:ff:0e:6b:b8:7f:c1:d2:1d:85:04:b7:57:eb:
8a:3e:24:32:10:61:62:ad:b3:7e:71:a7:13:fc:85:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B5:BA:7C:FD:3B:19:21:31:1D:72:67:21:19:0F:23:50:9F:7D:1A
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/ebW6fP07GSExHXJnIRkPI1CffRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.164.0/22
212.100.172.0-212.100.179.255
212.100.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:88:8d:95:a1:fc:25:bd:9e:da:da:44:31:d2:a5:40:a2:58:
68:6c:d7:a1:30:92:d3:e8:ec:74:83:84:62:93:cf:45:a6:8f:
85:e8:b3:08:4d:6f:8d:db:ff:f6:3a:56:95:84:98:b0:42:8b:
76:8d:3e:77:fb:07:ba:a5:16:f5:38:f7:db:8d:30:ed:7f:bc:
ce:e9:bd:a3:4e:bf:f3:03:df:12:36:eb:fb:8c:bc:bc:d3:a3:
d8:61:fc:ab:07:0c:55:8e:da:d6:6a:5a:bd:bb:98:b2:56:53:
30:6a:67:c7:69:8b:6e:cc:ff:5d:2d:7a:09:8b:a4:67:34:c1:
10:7b:85:45:8f:99:56:2a:30:c8:da:48:48:9a:3c:1b:fd:44:
45:9b:04:57:0d:f3:11:68:4c:6a:31:48:bf:5f:8a:46:1c:65:
db:0b:df:2e:ab:c9:2a:9a:e8:79:c9:32:28:57:02:a6:ba:3b:
b3:c6:61:01:eb:70:cd:7c:16:18:85:7c:f9:6a:da:c6:4a:d4:
87:c9:66:52:2b:18:84:68:d0:eb:ca:49:31:23:9e:73:b9:28:
36:9e:fd:29:d5:ab:c8:58:c6:45:31:6f:0e:7b:f6:22:3e:27:
5e:d1:0f:4a:65:a3:c7:88:b2:b4:0f:f9:2c:70:6e:46:34:f7:
1f:26:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 09:48:18 2026 by rpki-client