This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ElgFDiuFJ69k81EViaoKdimWii0.roa
File: ElgFDiuFJ69k81EViaoKdimWii0.roa (raw, json)
Hash identifier: vH/Gl8FmnuQcMuHJNXm7DwH6UJxli5lPah4lngAmhDk=
Subject key identifier: 12:58:05:0E:2B:85:27:AF:64:F3:51:15:89:AA:0A:76:29:96:8A:2D
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019B7DCA27FCE88F24129EFAF10A75BF4B17
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ElgFDiuFJ69k81EViaoKdimWii0.roa
Signing time: Fri 02 Jan 2026 08:19:18 +0000
ROA not before: Fri 02 Jan 2026 08:19:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 45.130.187.0/24 maxlen: 24
45.140.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:27:fc:e8:8f:24:12:9e:fa:f1:0a:75:bf:4b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 08:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1258050e2b8527af64f3511589aa0a7629968a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:8c:a4:bd:ba:82:72:f4:88:df:ae:16:1c:
77:ec:75:ce:a0:fd:73:c3:ed:9d:cc:25:fd:ce:dc:
a7:7a:59:17:2d:cc:93:6c:ca:ad:f6:31:b1:11:da:
16:4b:fb:97:c7:b7:86:36:ba:eb:73:54:44:a6:d2:
c3:46:09:30:9b:c4:fe:51:d0:0e:f5:99:0e:67:d7:
b2:8a:91:eb:f1:96:bb:f2:5f:4e:f3:c9:b2:ca:40:
62:a9:28:a2:9a:c6:e7:f0:56:60:5c:82:fc:90:85:
8a:3c:af:ac:d0:3c:d5:c1:5e:da:e0:c3:5c:8c:e1:
e5:c9:89:bd:71:cc:e0:c0:05:60:b7:32:bc:7d:30:
7b:6e:0b:7d:aa:50:84:b0:73:17:96:ac:65:4d:ea:
b5:3c:10:fe:ac:4d:b6:6f:17:b9:fa:9a:c5:a4:05:
03:c1:e0:07:a1:43:dd:ec:61:d4:74:9c:bb:54:96:
e1:2b:4e:fc:06:eb:61:ea:0e:3c:5e:9f:b1:35:32:
52:49:cc:be:c3:00:70:7d:ff:25:de:63:b9:74:eb:
3b:d1:b6:dc:03:bf:91:26:05:fc:d4:24:4e:a7:36:
41:53:03:8f:68:b8:37:1b:ac:37:4e:db:f8:d5:60:
79:48:04:bf:2a:3d:e9:a4:fb:e6:7e:8d:15:a2:0d:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:58:05:0E:2B:85:27:AF:64:F3:51:15:89:AA:0A:76:29:96:8A:2D
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ElgFDiuFJ69k81EViaoKdimWii0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.187.0/24
45.140.6.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:53:b6:00:de:06:81:21:64:59:51:f3:f9:92:aa:74:d4:7f:
13:91:c9:51:fe:0b:b9:a9:c3:83:b8:48:d6:a6:d5:d0:49:c6:
09:59:fd:48:c1:50:58:97:e0:2e:14:92:29:5b:a2:08:d0:b0:
0f:90:75:f2:54:ae:c4:ac:41:f8:09:d6:21:3f:62:04:03:04:
13:32:52:f9:12:4a:a0:24:be:88:1c:f1:8e:6a:1d:a4:98:d6:
4c:ed:71:da:f7:77:f4:72:11:68:41:a0:70:9f:8a:a8:b4:17:
ad:9a:5a:1a:18:23:84:4d:90:8c:22:14:59:fe:2a:a0:4a:b4:
4a:a4:60:80:2f:ea:b6:28:a0:7c:e6:07:a5:1d:2e:19:54:7a:
86:2a:df:50:a2:a6:4e:96:86:5d:17:0a:0a:2a:42:24:dc:31:
d7:8e:38:ad:1b:d8:b3:66:f6:8c:07:e7:23:e4:98:ae:f5:ce:
94:30:7d:c2:8b:63:f9:7c:04:07:51:c9:88:e8:ee:c8:1e:e4:
cf:4e:a0:ff:e7:07:6a:9c:dd:b3:9d:1a:5d:9e:cf:ae:30:c8:
75:23:50:36:46:0e:5d:56:16:14:94:26:40:77:f4:9f:e0:33:
05:d4:16:41:c2:fb:79:7f:26:98:1a:27:af:3b:ed:54:39:95:
c3:b7:41:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:24:32 2026 by rpki-client