This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/elVY3vqQhqwXbGtUDC6eCusDZg4.roa File: elVY3vqQhqwXbGtUDC6eCusDZg4.roa (raw, json) Hash identifier: /YmMz1Uwy7zMCN1Of52sW1YGZKU0QEfD3dwCbGK6wnY= Subject key identifier: 7A:55:58:DE:FA:90:86:AC:17:6C:6B:54:0C:2E:9E:0A:EB:03:66:0E Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269 Certificate serial: 019B7DCA54061DB2534649AB975FE6F45BF8 Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/elVY3vqQhqwXbGtUDC6eCusDZg4.roa Signing time: Fri 02 Jan 2026 08:19:30 +0000 ROA not before: Fri 02 Jan 2026 08:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 87.236.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:54:06:1d:b2:53:46:49:ab:97:5f:e6:f4:5b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269 Validity Not Before: Jan 2 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a5558defa9086ac176c6b540c2e9e0aeb03660e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:d6:b5:a7:51:e7:c3:05:5a:c0:57:06:07: 0e:00:ef:10:f6:d9:17:36:94:bc:06:49:83:74:82: 2a:50:f0:f0:e3:34:9f:19:38:1b:3f:d3:c4:2d:00: 17:e0:e5:87:14:c3:de:d6:9b:1c:d9:db:03:ac:75: ee:b6:a6:1e:00:61:4c:97:b0:00:cc:8b:89:b9:95: e1:f4:62:6e:b3:4e:58:bc:c6:4f:94:31:33:f2:4e: c1:d9:2c:d3:27:03:2d:33:42:6a:8a:89:4b:18:5b: 44:5f:c9:7e:89:93:3a:26:59:61:01:67:3c:23:55: 85:6c:04:fa:bb:67:8a:53:62:30:12:82:9f:eb:b5: b2:5f:fc:20:2e:3a:74:32:df:c8:28:fe:98:f6:8f: 43:38:64:50:a3:be:18:a0:f5:be:48:0d:c9:78:87: 5e:8f:80:ee:e9:4a:50:15:92:31:38:9f:f6:48:c2: 27:a9:29:9c:72:ff:9a:65:2d:50:9f:f2:3e:00:b4: 55:74:ce:29:f6:7b:14:86:f5:20:d1:3d:cc:9c:a6: 59:01:b7:8b:5a:37:85:cb:93:60:bd:c8:d1:c4:ca: 15:b9:c8:a3:17:1b:b4:bf:c3:b0:02:0d:67:d3:bf: 67:b5:60:1e:95:68:90:b8:4d:89:75:a6:bd:a9:72: ae:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:55:58:DE:FA:90:86:AC:17:6C:6B:54:0C:2E:9E:0A:EB:03:66:0E X509v3 Authority Key Identifier: keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/elVY3vqQhqwXbGtUDC6eCusDZg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.147.0/24 Signature Algorithm: sha256WithRSAEncryption 54:ae:1a:09:dd:bf:2c:42:32:aa:86:38:63:fd:10:d1:af:05: 94:4d:8f:3a:20:a8:15:83:c6:79:f3:34:3e:fb:2f:98:ab:a3: a4:d5:43:7b:74:27:71:2e:52:84:f6:11:d0:34:8c:1f:56:bb: 53:8c:57:7b:b2:59:d3:d1:d5:be:26:6a:a1:2e:57:48:a0:b3: 20:61:4d:ca:aa:a8:ad:4f:39:f2:c6:33:6c:56:72:3b:47:51: 7b:99:5a:f2:cf:6c:30:85:58:47:fb:ec:02:ce:8a:2c:7d:8c: 22:6d:50:71:c2:fe:3f:ab:0e:4d:e5:7b:1b:df:ed:4a:c6:f1: 1f:f8:74:d4:57:77:72:fc:59:81:67:8a:f0:f0:52:7c:2b:22: f0:bb:43:d9:66:7e:ad:d8:c0:6a:65:e3:71:18:88:64:05:c5: c2:c8:8b:c4:aa:6a:dd:1d:59:8e:00:fe:ee:2f:bb:3b:5c:9e: f2:31:59:c4:e1:fc:d1:d9:86:30:97:7f:53:38:9d:75:7b:45: d5:0a:7a:a7:93:eb:51:86:cc:8a:41:f9:be:39:18:1e:6d:53: a7:27:15:35:25:5f:81:1e:f9:f0:60:cd:80:d7:ea:36:29:97: 70:5b:ec:29:ee:b6:74:e0:89:0e:e1:24:e6:88:e3:5c:0f:a0: cc:8e:1d:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ylQGHbJTRkmrl1/m9Fv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmEwMDM3NTZkMTAxM2I5NDNlYjRmNTA3ZmI0ZTdjNzQ3 NzgyNjkwHhcNMjYwMTAyMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTU1NThkZWZhOTA4NmFjMTc2YzZiNTQwYzJlOWUwYWViMDM2NjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ObWtadR58MFWsBXBgcOAO8Q9tkX NpS8BkmDdIIqUPDw4zSfGTgbP9PELQAX4OWHFMPe1psc2dsDrHXutqYeAGFMl7AA zIuJuZXh9GJus05YvMZPlDEz8k7B2SzTJwMtM0JqiolLGFtEX8l+iZM6JllhAWc8 I1WFbAT6u2eKU2IwEoKf67WyX/wgLjp0Mt/IKP6Y9o9DOGRQo74YoPW+SA3JeIde j4Du6UpQFZIxOJ/2SMInqSmccv+aZS1Qn/I+ALRVdM4p9nsUhvUg0T3MnKZZAbeL WjeFy5NgvcjRxMoVucijFxu0v8OwAg1n079ntWAelWiQuE2Jdaa9qXKuLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHpVWN76kIasF2xrVAwungrrA2YOMB8GA1UdIwQY MBaAFC+6ADdW0QE7lD609Qf7Tnx0d4JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmIt YjMxZjI1MmYxOTY5LzEvZWxWWTN2cVFocXdYYkd0VURDNmVDdXNEWmc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmItYjMxZjI1MmYxOTY5 LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+yTMA0G CSqGSIb3DQEBCwUAA4IBAQBUrhoJ3b8sQjKqhjhj/RDRrwWUTY86IKgVg8Z58zQ+ +y+Yq6Ok1UN7dCdxLlKE9hHQNIwfVrtTjFd7slnT0dW+JmqhLldIoLMgYU3Kqqit TznyxjNsVnI7R1F7mVryz2wwhVhH++wCzoosfYwibVBxwv4/qw5N5Xsb3+1KxvEf +HTUV3dy/FmBZ4rw8FJ8KyLwu0PZZn6t2MBqZeNxGIhkBcXCyIvEqmrdHVmOAP7u L7s7XJ7yMVnE4fzR2YYwl39TOJ11e0XVCnqnk+tRhsyKQfm+ORgebVOnJxU1JV+B HvnwYM2A1+o2KZdwW+wp7rZ04IkO4STmiONcD6DMjh0a -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:04 2026 by rpki-client