This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/Ell2jbBxfuUNrbwngWxNgyHFjL8.roa File: Ell2jbBxfuUNrbwngWxNgyHFjL8.roa (raw, json) Hash identifier: XilLO+t08Ugl+p7Ct/I8QMdcTjcfZmS0Gkb9fK8aV1k= Subject key identifier: 12:59:76:8D:B0:71:7E:E5:0D:AD:BC:27:81:6C:4D:83:21:C5:8C:BF Certificate issuer: /CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d Certificate serial: 019B0D0069DFC2538E9B8E7DA6809F6883FC Authority key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/Ell2jbBxfuUNrbwngWxNgyHFjL8.roa Signing time: Thu 11 Dec 2025 10:41:29 +0000 ROA not before: Thu 11 Dec 2025 10:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60388 IP address blocks: 185.31.108.0/22 maxlen: 22 212.73.96.0/23 maxlen: 23 212.73.98.0/24 maxlen: 24 212.73.99.0/24 maxlen: 24 212.73.100.0/23 maxlen: 23 212.73.102.0/24 maxlen: 24 212.73.103.0/24 maxlen: 24 212.73.104.0/21 maxlen: 21 212.73.105.0/24 maxlen: 24 212.73.110.0/24 maxlen: 24 212.73.112.0/20 maxlen: 20 212.73.113.0/24 maxlen: 24 2a00:b4a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:00:69:df:c2:53:8e:9b:8e:7d:a6:80:9f:68:83:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d Validity Not Before: Dec 11 10:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1259768db0717ee50dadbc27816c4d8321c58cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:31:86:55:4c:e0:f9:90:0d:80:8d:85:e6: 86:65:cd:0a:32:88:1f:27:62:cb:f4:b5:cb:2a:41: 1c:82:b3:7b:e1:fb:db:f4:a8:2e:1b:2d:f1:e2:67: 46:bb:8a:ff:46:ce:41:41:ce:c8:5a:17:86:21:f5: c8:7d:e3:d9:4f:05:fe:f7:16:b2:20:7e:ff:43:a1: 3b:50:66:bc:d6:3a:d6:7e:91:06:ea:89:cf:fe:e9: fe:d1:1a:40:bd:94:01:25:ea:c9:29:d1:36:b0:84: d5:35:1f:c9:ad:37:43:e7:5e:25:eb:8f:5e:1d:6d: e2:40:c1:82:7e:e7:66:de:8a:41:d0:b2:78:1d:3c: 0f:c4:c6:5b:70:7f:30:98:84:fb:fd:3b:e6:0b:50: 34:a5:83:3e:c1:a4:70:44:00:95:eb:8a:ff:da:5e: f0:9e:d7:97:ae:9c:88:0f:d5:49:9f:af:5a:c2:bd: f2:af:c1:aa:7d:e4:e0:bb:f1:b6:c0:d2:86:7f:1b: b7:67:b9:2f:8d:24:65:7f:77:0c:76:0c:f4:5f:34: aa:0e:db:8a:96:08:bb:4f:dc:33:9f:af:1d:a9:e4: 05:dd:fe:3a:a3:25:ca:2e:25:e6:50:ba:7d:dc:e8: 73:e4:04:b6:11:4e:98:cb:b6:5b:3f:37:fe:56:6e: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:59:76:8D:B0:71:7E:E5:0D:AD:BC:27:81:6C:4D:83:21:C5:8C:BF X509v3 Authority Key Identifier: keyid:24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/Ell2jbBxfuUNrbwngWxNgyHFjL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.108.0/22 212.73.96.0/19 IPv6: 2a00:b4a0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:4d:72:52:15:58:18:83:0a:3a:38:59:20:bc:0c:e8:a1:f2: c0:fa:74:81:81:2c:08:d5:c8:ba:f3:69:ee:19:e2:17:a9:0c: 8a:4d:ee:54:e3:b0:18:0a:bf:51:56:58:b4:24:a1:d9:33:e2: c4:e6:31:1f:49:73:65:52:6c:82:13:69:da:36:f7:39:82:f1: ab:2d:11:21:3b:0a:d9:10:88:b9:e7:26:b7:47:a8:08:ac:2e: 47:06:4c:f0:75:ec:7e:2c:fd:de:d5:e6:95:82:06:80:9a:4c: 30:b7:8d:87:ee:35:3c:e3:25:99:91:1b:23:a0:38:14:9f:02: 21:e0:42:2a:4a:b9:88:b7:d4:e4:97:58:fa:b9:f6:66:a2:0e: 4d:5e:b3:d9:2f:20:14:0e:48:b4:fe:bd:c6:11:fd:5a:1b:79: c4:d5:5b:09:4f:b1:af:3b:2f:cd:e7:ef:e8:81:56:7f:04:d1: 92:99:be:2a:7a:26:d5:e5:11:ac:88:35:9d:b4:16:35:10:e2: a2:4d:1f:b2:45:3a:ce:2f:cb:bc:1a:a6:6c:00:77:09:40:2a: f1:1f:b4:ef:ef:d0:c1:3b:b3:23:04:d5:74:5c:a6:28:86:fe: 72:df:2b:71:7b:19:c9:8b:25:8b:b9:8a:4d:e7:c8:75:7c:ac: 55:ff:3f:a2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZsNAGnfwlOOm459poCfaIP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ODcxOTQzNGI2ZTNiNjA3ZjY0N2JiMGQ1OGE4MWRjMWVi ZmRkNGQwHhcNMjUxMjExMTA0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjU5NzY4ZGIwNzE3ZWU1MGRhZGJjMjc4MTZjNGQ4MzIxYzU4Y2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp14xhlVM4PmQDYCNheaGZc0KMogf J2LL9LXLKkEcgrN74fvb9KguGy3x4mdGu4r/Rs5BQc7IWheGIfXIfePZTwX+9xay IH7/Q6E7UGa81jrWfpEG6onP/un+0RpAvZQBJerJKdE2sITVNR/JrTdD514l649e HW3iQMGCfudm3opB0LJ4HTwPxMZbcH8wmIT7/TvmC1A0pYM+waRwRACV64r/2l7w nteXrpyID9VJn69awr3yr8GqfeTgu/G2wNKGfxu3Z7kvjSRlf3cMdgz0XzSqDtuK lgi7T9wzn68dqeQF3f46oyXKLiXmULp93Ohz5AS2EU6Yy7ZbPzf+Vm4pNQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBJZdo2wcX7lDa28J4FsTYMhxYy/MB8GA1UdIwQY MBaAFCSHGUNLbjtgf2R7sNWKgdwev91NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAt ZjMwMjhhZWE5OTc3LzEvRWxsMmpiQnhmdVVOcmJ3bmdXeE5neUhGakw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAtZjMwMjhhZWE5OTc3 LzEvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuR9sAwQF 1ElgMA0EAgACMAcDBQAqALSgMA0GCSqGSIb3DQEBCwUAA4IBAQA8TXJSFVgYgwo6 OFkgvAzoofLA+nSBgSwI1ci682nuGeIXqQyKTe5U47AYCr9RVli0JKHZM+LE5jEf SXNlUmyCE2naNvc5gvGrLREhOwrZEIi55ya3R6gIrC5HBkzwdex+LP3e1eaVggaA mkwwt42H7jU84yWZkRsjoDgUnwIh4EIqSrmIt9Tkl1j6ufZmog5NXrPZLyAUDki0 /r3GEf1aG3nE1VsJT7GvOy/N5+/ogVZ/BNGSmb4qeibV5RGsiDWdtBY1EOKiTR+y RTrOL8u8GqZsAHcJQCrxH7Tv79DBO7MjBNV0XKYohv5y3ytxexnJiyWLuYpN58h1 fKxV/z+i -----END CERTIFICATE-----Generated at Mon Dec 15 13:33:54 2025 by rpki-client