This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ElLXqm-nvCj3u872-g9yEnxtGdk.roa File: ElLXqm-nvCj3u872-g9yEnxtGdk.roa (raw, json) Hash identifier: 2pJx1JJeK1hYFECvR28LLNHsJ3NvvHeYbSZFCVrSjyA= Subject key identifier: 12:52:D7:AA:6F:A7:BC:28:F7:BB:CE:F6:FA:0F:72:12:7C:6D:19:D9 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2ECCDCA45B57AA4D885F7FCABEE2D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ElLXqm-nvCj3u872-g9yEnxtGdk.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31404 IP address blocks: 79.110.51.0/24 maxlen: 24 87.120.112.0/22 maxlen: 24 87.120.116.0/23 maxlen: 24 87.120.120.0/23 maxlen: 24 94.154.162.0/23 maxlen: 24 94.156.69.0/24 maxlen: 24 193.148.48.0/22 maxlen: 24 194.11.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ec:cd:ca:45:b5:7a:a4:d8:85:f7:fc:ab:ee:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1252d7aa6fa7bc28f7bbcef6fa0f72127c6d19d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:55:4d:f0:c9:4d:4e:64:69:38:6c:ef:cd: 06:e2:4a:ec:eb:73:7c:4e:cc:0a:c3:51:6c:81:98: c7:49:b0:77:5e:0c:ac:54:ba:82:5f:99:15:5a:b7: eb:0d:86:75:14:1b:b3:f1:e6:5d:07:0a:92:ce:16: c9:24:22:14:c9:9e:cd:9a:c5:ca:e3:a5:42:68:f9: 36:85:47:f6:29:d1:c2:99:dc:19:b7:76:50:8f:80: 1c:64:4b:cf:56:4e:b1:d2:db:1c:c1:ed:3a:01:da: c8:8f:90:45:8e:b0:c0:4e:a0:3b:17:cd:99:41:92: 10:79:0b:f9:c7:6a:a6:f2:e6:c5:c4:7f:aa:91:ee: 24:5b:37:54:74:43:fe:74:fa:cc:d1:f6:6d:3f:43: ee:e2:55:50:97:61:13:1d:50:f9:7c:9b:fc:67:05: 65:1b:f1:e9:52:53:e5:94:9f:1e:a6:93:b9:a0:42: eb:10:9f:24:90:4c:54:27:4a:d8:54:0c:e3:7a:23: 35:07:1b:48:32:e5:eb:53:15:40:67:63:e2:10:86: 49:21:c7:a1:44:5a:19:c9:03:5d:6e:37:ab:44:7e: 71:35:bf:e7:10:d9:57:9b:51:dd:a8:3b:04:2b:84: 4e:c5:bd:e9:b9:13:75:f7:52:a0:8e:1b:64:e0:28: 0a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:52:D7:AA:6F:A7:BC:28:F7:BB:CE:F6:FA:0F:72:12:7C:6D:19:D9 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ElLXqm-nvCj3u872-g9yEnxtGdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.51.0/24 87.120.112.0-87.120.117.255 87.120.120.0/23 94.154.162.0/23 94.156.69.0/24 193.148.48.0/22 194.11.196.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:c0:02:57:48:82:71:d9:c3:3a:04:40:1f:a8:17:f4:56:25: cb:ba:a5:f0:57:5b:85:27:e2:a1:3a:80:e7:28:04:9e:d4:b1: 76:bc:c9:c0:ad:0a:33:f6:58:51:19:55:ee:81:8f:8b:0d:d2: 1f:a0:03:bf:d8:dd:ba:e0:a6:e8:7d:ce:87:ef:a9:27:a2:ec: f5:23:68:d4:7c:20:d0:2e:25:41:15:5f:6d:c6:76:e0:cf:24: d8:3a:53:ce:43:ab:7e:f7:33:79:4e:bb:19:d7:b4:a2:7c:1c: 8b:6f:4d:58:16:80:36:99:9f:5a:92:81:7a:ba:c5:3c:09:08: 4e:e2:1e:47:e8:82:81:b8:96:05:82:5f:07:da:0e:f7:10:f0: f6:a7:fd:cd:33:dc:8d:09:62:27:f0:36:1a:bb:02:fc:0c:44: e3:c9:35:04:f4:11:6f:23:56:ca:3b:10:fb:a9:3c:4e:0a:28: 0b:02:ae:7d:e7:3a:b0:00:90:8b:99:ae:5c:ae:3e:24:51:c0: 85:e3:2c:e0:7b:6c:0f:7d:1b:ce:f3:41:41:da:2c:1e:53:42: 28:5d:4c:18:d3:a2:eb:8c:2e:80:e8:42:79:c9:3e:d3:1e:bb: 70:27:cb:60:1a:e8:99:77:43:61:88:91:3d:56:bb:30:62:c7: 6a:55:a4:87 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt4ouzNykW1eqTYhff8q+4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjUyZDdhYTZmYTdiYzI4ZjdiYmNlZjZmYTBmNzIxMjdjNmQxOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpJVTfDJTU5kaThs780G4krs63N8 TswKw1FsgZjHSbB3XgysVLqCX5kVWrfrDYZ1FBuz8eZdBwqSzhbJJCIUyZ7NmsXK 46VCaPk2hUf2KdHCmdwZt3ZQj4AcZEvPVk6x0tscwe06AdrIj5BFjrDATqA7F82Z QZIQeQv5x2qm8ubFxH+qke4kWzdUdEP+dPrM0fZtP0Pu4lVQl2ETHVD5fJv8ZwVl G/HpUlPllJ8eppO5oELrEJ8kkExUJ0rYVAzjeiM1BxtIMuXrUxVAZ2PiEIZJIceh RFoZyQNdbjerRH5xNb/nENlXm1HdqDsEK4ROxb3puRN191Kgjhtk4CgKgwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFBJS16pvp7wo97vO9voPchJ8bRnZMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRWxMWHFtLW52Q2ozdTg3Mi1nOXlFbnh0R2RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAT24zMAwD BARXeHADBAFXeHQDBAFXeHgDBAFemqIDBABenEUDBALBlDADBALCC8QwDQYJKoZI hvcNAQELBQADggEBAH7AAldIgnHZwzoEQB+oF/RWJcu6pfBXW4Un4qE6gOcoBJ7U sXa8ycCtCjP2WFEZVe6Bj4sN0h+gA7/Y3brgpuh9zofvqSei7PUjaNR8INAuJUEV X23GduDPJNg6U85Dq373M3lOuxnXtKJ8HItvTVgWgDaZn1qSgXq6xTwJCE7iHkfo goG4lgWCXwfaDvcQ8Pan/c0z3I0JYifwNhq7AvwMROPJNQT0EW8jVso7EPupPE4K KAsCrn3nOrAAkIuZrlyuPiRRwIXjLOB7bA99G87zQUHaLB5TQihdTBjTouuMLoDo QnnJPtMeu3Any2Aa6Jl3Q2GIkT1WuzBix2pVpIc= -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:24 2026 by rpki-client