This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ElHRjNHLvj_IBp_H__e2SFZ7To0.roa
File: ElHRjNHLvj_IBp_H__e2SFZ7To0.roa (raw, json)
Hash identifier: W4VhGaIv4epwxdpQAWD3kLxvibxaUkEfqyYEPkfyoG8=
Subject key identifier: 12:51:D1:8C:D1:CB:BE:3F:C8:06:9F:C7:FF:F7:B6:48:56:7B:4E:8D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019B7F15F85B3B78D7DE196543673AA20B94
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ElHRjNHLvj_IBp_H__e2SFZ7To0.roa
Signing time: Fri 02 Jan 2026 14:21:44 +0000
ROA not before: Fri 02 Jan 2026 14:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215413
IP address blocks: 45.138.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Jan 2026 14:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:f8:5b:3b:78:d7:de:19:65:43:67:3a:a2:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 14:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1251d18cd1cbbe3fc8069fc7fff7b648567b4e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:92:1b:88:ae:8a:15:f4:c5:e7:4d:21:4b:
99:a5:2b:c0:d6:69:c7:9e:9e:da:17:ee:c9:b3:e0:
1b:08:a7:db:ae:7d:c2:04:23:6d:b2:90:de:1d:76:
20:cd:0e:62:e1:ef:ad:12:59:28:c9:24:35:2e:7b:
31:a1:dd:93:f1:de:0d:af:6f:c0:30:a9:76:b3:04:
ca:12:29:70:e7:b9:b4:88:03:db:98:0b:8b:69:95:
2c:5a:ee:12:60:b0:08:02:db:ae:e0:15:12:3e:49:
d5:01:99:85:47:d3:71:f2:05:0a:26:48:98:8f:5a:
ca:1f:f4:b9:3b:61:d1:c9:b3:f8:46:0b:7d:bf:ab:
4f:dd:1b:95:ed:be:dd:c4:c5:39:dc:81:44:a5:91:
55:5d:99:99:b1:dd:1f:b8:2d:75:ed:84:00:bd:cb:
69:dd:85:43:64:92:9c:e6:2e:77:5c:23:64:71:e3:
c2:8b:d9:24:c4:ef:af:a5:de:b1:7a:c6:a9:37:c4:
05:f6:d4:bd:84:29:51:63:53:75:39:50:5b:b9:c6:
31:e8:a4:bb:c0:41:80:d5:18:1b:84:3c:5a:be:23:
2a:6e:a9:69:1a:2e:50:59:7c:3a:67:08:a9:9b:8b:
72:99:59:49:3a:c3:aa:3f:11:6c:b0:f3:6d:f2:73:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:51:D1:8C:D1:CB:BE:3F:C8:06:9F:C7:FF:F7:B6:48:56:7B:4E:8D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ElHRjNHLvj_IBp_H__e2SFZ7To0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:3b:99:e4:9b:90:8d:12:d8:d3:dd:14:6f:45:5e:0d:12:0a:
93:b2:f2:36:28:91:54:03:26:70:1c:f8:99:bc:5b:78:23:71:
23:51:23:c4:68:ee:0a:4e:ab:3b:8a:01:48:73:40:86:08:67:
90:1d:18:e5:37:f9:57:ae:f0:81:ec:69:9e:e0:70:74:9b:c8:
6e:2b:66:b4:4d:88:02:81:d6:5f:16:83:89:d6:23:5c:b8:c0:
db:4d:5f:37:34:60:8e:71:82:68:a1:2c:ce:ae:79:95:68:71:
fd:59:62:c3:73:01:5e:a1:e6:ec:fa:58:cd:c8:fa:d1:77:e1:
62:ba:84:3d:48:11:04:4c:fe:22:c7:a6:26:c7:23:b2:39:db:
2c:0f:65:5c:cc:40:b5:cf:49:36:b9:3f:64:ed:63:2f:8a:18:
81:37:27:d5:93:43:e8:6e:4e:98:ab:53:d6:a1:5a:ab:43:67:
4d:ab:bc:ef:a8:4b:b1:df:e6:60:3a:c1:f7:76:71:6d:0e:44:
2e:dc:6b:41:cf:b1:67:7a:7b:8e:ff:52:62:0f:a9:7b:53:a4:
6f:f6:20:cc:55:55:54:24:f5:bc:14:7a:35:89:e5:6f:8c:08:
0e:c4:43:34:37:36:2f:9e:2d:ac:e5:b9:43:1f:a7:e2:af:3b:
bc:ff:18:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FfhbO3jX3hllQ2c6oguUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjUxZDE4Y2QxY2JiZTNmYzgwNjlmYzdmZmY3YjY0ODU2N2I0ZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4geSG4iuihX0xedNIUuZpSvA1mnH
np7aF+7Js+AbCKfbrn3CBCNtspDeHXYgzQ5i4e+tElkoySQ1Lnsxod2T8d4Nr2/A
MKl2swTKEilw57m0iAPbmAuLaZUsWu4SYLAIAtuu4BUSPknVAZmFR9Nx8gUKJkiY
j1rKH/S5O2HRybP4Rgt9v6tP3RuV7b7dxMU53IFEpZFVXZmZsd0fuC117YQAvctp
3YVDZJKc5i53XCNkcePCi9kkxO+vpd6xesapN8QF9tS9hClRY1N1OVBbucYx6KS7
wEGA1RgbhDxaviMqbqlpGi5QWXw6Zwipm4tymVlJOsOqPxFssPNt8nOPlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJR0YzRy74/yAafx//3tkhWe06NMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvRWxIUmpOSEx2al9JQnBfSF9fZTJTRlo3VG8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYq2MA0G
CSqGSIb3DQEBCwUAA4IBAQCaO5nkm5CNEtjT3RRvRV4NEgqTsvI2KJFUAyZwHPiZ
vFt4I3EjUSPEaO4KTqs7igFIc0CGCGeQHRjlN/lXrvCB7Gme4HB0m8huK2a0TYgC
gdZfFoOJ1iNcuMDbTV83NGCOcYJooSzOrnmVaHH9WWLDcwFeoebs+ljNyPrRd+Fi
uoQ9SBEETP4ix6YmxyOyOdssD2VczEC1z0k2uT9k7WMvihiBNyfVk0Pobk6Yq1PW
oVqrQ2dNq7zvqEux3+ZgOsH3dnFtDkQu3GtBz7FnenuO/1JiD6l7U6Rv9iDMVVVU
JPW8FHo1ieVvjAgOxEM0NzYvni2s5blDH6firzu8/xiF
-----END CERTIFICATE-----
Generated at Tue Jan 6 20:49:59 2026 by rpki-client