This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/eLPR2xt3_0RsiIApeB-CxAAHX-E.roa
File: eLPR2xt3_0RsiIApeB-CxAAHX-E.roa (raw, json)
Hash identifier: Kh1tlq7JO+3DhDd+dYuSyDwlPe8pGbqQGLCDk0TVyHQ=
Subject key identifier: 78:B3:D1:DB:1B:77:FF:44:6C:88:80:29:78:1F:82:C4:00:07:5F:E1
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019AB4AAD098874DC7C90F11EB0B788829D0
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/eLPR2xt3_0RsiIApeB-CxAAHX-E.roa
Signing time: Mon 24 Nov 2025 07:01:24 +0000
ROA not before: Mon 24 Nov 2025 07:01:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 193.8.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:b4:aa:d0:98:87:4d:c7:c9:0f:11:eb:0b:78:88:29:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Nov 24 07:01:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78b3d1db1b77ff446c888029781f82c400075fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:69:a3:e6:f2:de:aa:97:04:51:86:d7:a2:
9c:0f:4b:31:15:11:77:7f:20:99:cf:18:43:18:85:
64:a2:87:fc:31:de:ec:27:6d:97:2f:1e:c8:f4:24:
12:22:78:25:b1:1c:5b:c2:83:4d:62:c3:f3:1a:1c:
f6:6c:34:22:fd:bb:29:6b:66:57:5f:37:93:00:f3:
2e:47:c8:af:8d:24:5b:0f:0c:35:ad:89:c2:3e:ad:
ee:30:07:65:18:57:04:1d:ed:69:db:bc:ff:58:7b:
8b:33:85:1f:f4:59:bd:05:c4:3d:19:5a:ec:a6:3e:
e9:6e:62:e0:2e:ec:1a:a6:30:02:13:63:32:c5:fa:
1b:27:8d:82:46:a8:dd:a3:c1:7a:57:a0:35:bc:b3:
bf:5d:37:42:bf:6c:b8:22:ae:b6:e1:ba:1f:24:62:
e2:6c:08:ff:0f:12:bb:29:df:4e:97:c9:0a:0a:09:
94:43:26:01:3d:4d:1a:07:b8:49:ff:25:50:21:7e:
aa:21:22:53:aa:6f:3e:89:15:65:38:2e:ee:80:37:
59:4e:8c:32:31:3e:78:5b:71:f7:a1:c6:59:10:6c:
28:8a:de:44:4b:4b:58:64:57:94:1a:c0:57:a6:a1:
99:fd:fa:b4:0c:5f:94:76:d0:f8:76:1b:30:d5:bb:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:D1:DB:1B:77:FF:44:6C:88:80:29:78:1F:82:C4:00:07:5F:E1
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/eLPR2xt3_0RsiIApeB-CxAAHX-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:78:bb:62:61:85:71:2c:f2:67:56:a2:cc:83:2e:3f:ca:14:
45:d2:8d:c1:21:38:1f:ec:17:e0:79:d3:91:2c:ff:cf:f7:93:
b0:b0:a1:e6:3e:cc:99:d8:6c:7d:71:f7:75:25:19:f5:01:6b:
32:30:08:3a:4f:3f:83:70:95:00:21:b2:79:dc:ab:7d:4b:ec:
41:d0:75:dd:13:b9:37:94:0b:ad:eb:ea:0b:45:44:51:68:cc:
04:f1:ea:b4:b7:03:4d:45:30:1e:02:53:1e:51:69:58:1c:8a:
c1:58:8f:65:0b:b0:51:18:03:a6:13:1b:57:15:fc:1e:91:ab:
55:12:11:9c:f2:53:9e:4c:fc:fb:a4:81:e9:e5:2d:90:ee:a3:
e6:59:36:2d:28:7d:73:3c:4d:27:c7:09:8d:88:60:9e:d3:e8:
33:53:74:54:d2:55:06:0f:7d:6c:6f:27:a1:44:b3:d9:f5:94:
c0:73:5e:ed:4a:e9:67:83:45:7a:e1:e4:ef:04:03:03:d2:6b:
43:76:bd:71:2f:83:79:45:45:0b:5a:fb:a8:ba:49:7d:16:23:
fb:8d:0c:ac:6a:08:99:13:49:c6:13:31:4b:b8:d7:56:68:2c:
46:e8:91:ca:13:c0:dd:fd:58:b0:52:b9:9c:0b:78:41:6c:14:
41:bd:8a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 07:32:12 2025 by rpki-client