This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/EliSXZrgR1c36J3q5HEwgdzaHX0.roa File: EliSXZrgR1c36J3q5HEwgdzaHX0.roa (raw, json) Hash identifier: FZup8urDRjoh+LhoPd+RJukJeWSAFbFgyU+lJveq7KY= Subject key identifier: 12:58:92:5D:9A:E0:47:57:37:E8:9D:EA:E4:71:30:81:DC:DA:1D:7D Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac Certificate serial: 019B7FF205C328466E763584D7ACA3486FEE Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/EliSXZrgR1c36J3q5HEwgdzaHX0.roa Signing time: Fri 02 Jan 2026 18:22:06 +0000 ROA not before: Fri 02 Jan 2026 18:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 46.29.36.0/24 maxlen: 24 2a13:d040:1::/48 maxlen: 48 2a13:d040:2::/48 maxlen: 48 2a13:d040:3::/48 maxlen: 48 2a13:d040:10::/48 maxlen: 48 2a13:d040:11::/48 maxlen: 48 2a13:d040:12::/48 maxlen: 48 2a13:d040:13::/48 maxlen: 48 2a13:d040:14::/48 maxlen: 48 2a13:d040:15::/48 maxlen: 48 2a13:d040:16::/48 maxlen: 48 2a13:d040:17::/48 maxlen: 48 2a13:d040:18::/48 maxlen: 48 2a13:d040:19::/48 maxlen: 48 2a13:d040:1a::/48 maxlen: 48 2a13:d040:1b::/48 maxlen: 48 2a13:d040:1c::/48 maxlen: 48 2a13:d040:1d::/48 maxlen: 48 2a13:d040:1e::/48 maxlen: 48 2a13:d040:1f::/48 maxlen: 48 2a13:d040:20::/48 maxlen: 48 2a13:d040:21::/48 maxlen: 48 2a13:d040:22::/48 maxlen: 48 2a13:d040:23::/48 maxlen: 48 2a13:d040:24::/48 maxlen: 48 2a13:d040:25::/48 maxlen: 48 2a13:d040:26::/48 maxlen: 48 2a13:d040:27::/48 maxlen: 48 2a13:d040:28::/48 maxlen: 48 2a13:d040:29::/48 maxlen: 48 2a13:d040:2a::/48 maxlen: 48 2a13:d040:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:05:c3:28:46:6e:76:35:84:d7:ac:a3:48:6f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac Validity Not Before: Jan 2 18:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1258925d9ae0475737e89deae4713081dcda1d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:98:29:18:14:4e:09:04:d6:42:44:4e:fd: 31:32:04:f2:37:6c:25:89:82:eb:53:0f:a4:1c:a3: 1a:4f:9f:6f:c0:f4:7a:d5:b2:7c:b8:8d:af:54:8d: d9:c8:74:b6:b4:0e:e9:1a:ea:f0:f3:a3:dd:79:6a: b5:c0:93:f3:76:16:56:ae:f3:8d:9c:78:be:fd:38: c2:0c:4b:58:25:2a:61:2e:63:f9:b8:42:98:d3:93: 48:d4:dd:18:c7:60:51:78:b7:ad:68:de:57:98:06: d8:ad:33:ae:0b:02:c8:28:48:6a:6e:15:9c:48:82: d7:10:0b:d4:ce:c8:f0:88:08:3b:ef:d6:3e:5a:e4: b7:41:37:11:3b:6c:d6:82:2e:18:72:5b:c2:e6:29: 45:5d:bf:24:b4:88:91:2c:61:ab:db:f2:45:a9:d9: 82:ec:0f:6e:94:15:2b:ea:af:07:d7:40:93:96:b8: 6e:8a:97:7b:56:6a:95:54:c3:b1:c0:ec:1e:be:cb: 31:6e:8a:9e:5c:35:ee:85:92:8c:f3:ca:00:6c:fb: ed:69:2d:10:9c:0f:a9:2b:b3:d6:8d:c9:08:37:02: a7:88:d7:97:a1:10:6c:d1:78:ed:9e:8a:bf:69:ce: 9c:65:e9:c7:75:32:7d:f9:c5:98:05:72:58:90:11: 23:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:58:92:5D:9A:E0:47:57:37:E8:9D:EA:E4:71:30:81:DC:DA:1D:7D X509v3 Authority Key Identifier: keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/EliSXZrgR1c36J3q5HEwgdzaHX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.36.0/24 IPv6: 2a13:d040:1::-2a13:d040:3:ffff:ffff:ffff:ffff:ffff 2a13:d040:10::-2a13:d040:2b:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 31:e5:00:fd:14:2c:ea:8d:c7:f4:ba:bf:95:d6:2f:b9:43:84: ff:99:2d:6b:72:d0:5f:14:f5:fd:e7:ba:01:95:93:50:42:9f: 95:68:ee:68:30:00:3e:e4:39:00:26:e3:ea:e9:b1:88:be:3e: 13:fe:80:1c:ca:61:be:84:df:85:35:b3:f0:86:cd:11:b8:e0: a5:5c:52:52:9f:e2:a8:da:db:6a:70:6b:f4:ef:9d:2e:0a:9c: 61:76:32:06:c8:f9:cd:81:df:6b:29:50:57:28:ad:74:29:6f: fc:d5:da:b1:38:5c:57:e7:3d:99:03:48:63:9a:38:57:c8:db: ff:ec:06:e2:92:dc:f1:7f:f4:2b:c4:ee:ef:48:e1:ce:2b:dd: 7c:e4:08:3e:9d:c1:d5:46:86:28:f9:80:dd:ef:e1:ca:cd:27: ee:90:91:98:3d:16:65:e3:42:7a:63:0c:50:45:74:b5:4f:00: 4a:a7:69:0a:61:47:44:de:3b:85:0c:16:11:d7:27:97:1f:32: c7:93:15:23:eb:2e:b2:f8:e1:88:74:68:58:7a:92:8c:86:c9: 7a:70:c8:6f:30:50:29:b1:62:98:81:91:e2:f5:c9:29:ed:1e: a9:8a:7a:ba:35:b4:c8:89:15:a8:40:e4:46:64:60:43:60:28: 15:7c:80:09 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/8gXDKEZudjWE16yjSG/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYThmYTc1YzUwMjBjZDYyMThjZjdmMTA5ZGU0MjAyNjUy MDRiYWMwHhcNMjYwMTAyMTgyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjU4OTI1ZDlhZTA0NzU3MzdlODlkZWFlNDcxMzA4MWRjZGExZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArveYKRgUTgkE1kJETv0xMgTyN2wl iYLrUw+kHKMaT59vwPR61bJ8uI2vVI3ZyHS2tA7pGurw86PdeWq1wJPzdhZWrvON nHi+/TjCDEtYJSphLmP5uEKY05NI1N0Yx2BReLetaN5XmAbYrTOuCwLIKEhqbhWc SILXEAvUzsjwiAg779Y+WuS3QTcRO2zWgi4YclvC5ilFXb8ktIiRLGGr2/JFqdmC 7A9ulBUr6q8H10CTlrhuipd7VmqVVMOxwOwevssxboqeXDXuhZKM88oAbPvtaS0Q nA+pK7PWjckINwKniNeXoRBs0Xjtnoq/ac6cZenHdTJ9+cWYBXJYkBEjIQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFBJYkl2a4EdXN+id6uRxMIHc2h19MB8GA1UdIwQY MBaAFGqo+nXFAgzWIYz38QneQgJlIEusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAt MzVjNjNmYTc2NWEyLzEvRWxpU1hacmdSMWMzNkozcTVIRXdnZHphSFgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAtMzVjNjNmYTc2NWEy LzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAMBAIAATAGAwQALh0kMC4E AgACMCgwEgMHACoT0EAAAQMHAioT0EAAADASAwcEKhPQQAAQAwcCKhPQQAAoMA0G CSqGSIb3DQEBCwUAA4IBAQAx5QD9FCzqjcf0ur+V1i+5Q4T/mS1rctBfFPX957oB lZNQQp+VaO5oMAA+5DkAJuPq6bGIvj4T/oAcymG+hN+FNbPwhs0RuOClXFJSn+Ko 2ttqcGv0750uCpxhdjIGyPnNgd9rKVBXKK10KW/81dqxOFxX5z2ZA0hjmjhXyNv/ 7Abiktzxf/QrxO7vSOHOK9185Ag+ncHVRoYo+YDd7+HKzSfukJGYPRZl40J6YwxQ RXS1TwBKp2kKYUdE3juFDBYR1yeXHzLHkxUj6y6y+OGIdGhYepKMhsl6cMhvMFAp sWKYgZHi9ckp7R6pinq6NbTIiRWoQORGZGBDYCgVfIAJ -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:29 2026 by rpki-client