This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/elreK20YpaSo7u9v55jxGF5rHO4.roa File: elreK20YpaSo7u9v55jxGF5rHO4.roa (raw, json) Hash identifier: lrIYGG9SdGCcfazBvX7lzn+XdBdxuXWCr/oHZ+PyxD4= Subject key identifier: 7A:5A:DE:2B:6D:18:A5:A4:A8:EE:EF:6F:E7:98:F1:18:5E:6B:1C:EE Certificate issuer: /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa Certificate serial: 019B797E6CCC08032FEDABF3A8E13FA5F5EB Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/elreK20YpaSo7u9v55jxGF5rHO4.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47374 IP address blocks: 185.219.68.0/22 maxlen: 22 185.219.68.0/24 maxlen: 24 185.219.69.0/24 maxlen: 24 185.219.70.0/24 maxlen: 24 185.219.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6c:cc:08:03:2f:ed:ab:f3:a8:e1:3f:a5:f5:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a5ade2b6d18a5a4a8eeef6fe798f1185e6b1cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:f0:84:a0:5e:6b:96:23:71:01:7a:01:36: eb:84:c1:49:9b:27:3c:db:3c:e4:09:9f:06:25:33: b8:cc:40:78:b7:e8:10:2b:1f:b3:73:f1:98:4f:64: bc:61:b9:99:d7:42:95:30:9a:99:0c:e6:a2:e9:e6: 0c:4a:2d:04:40:70:94:b7:4c:44:25:52:49:21:bb: 46:cb:3c:c9:d7:88:79:87:74:9d:37:09:3b:ac:8b: d0:ed:36:38:2c:35:9b:1b:6a:1b:ea:98:b9:a2:a0: 73:89:97:38:5f:bc:ae:93:a7:29:2a:f8:c6:d6:b4: 45:d7:5e:a3:d4:c2:b0:c6:5a:bb:8d:fa:59:2b:30: 72:74:0d:52:cc:f1:a8:15:8d:7c:c7:22:0a:24:67: a2:5b:88:f8:ec:cf:41:3b:bb:02:4f:b9:2b:97:42: 64:d2:40:b8:32:54:e9:df:6e:6d:a6:3f:f4:98:59: 11:db:da:ca:61:99:27:67:8d:42:4e:b3:17:6d:dd: 68:cf:fa:18:6e:8a:c8:09:60:10:45:81:06:8f:82: ed:d5:6e:45:99:f2:23:3c:3b:d6:ed:fa:d0:6f:65: 48:1c:0c:30:a8:b4:67:5c:22:51:90:af:02:c4:77: dd:35:bd:70:a2:1c:ab:94:c2:45:2c:86:1d:3d:99: e6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5A:DE:2B:6D:18:A5:A4:A8:EE:EF:6F:E7:98:F1:18:5E:6B:1C:EE X509v3 Authority Key Identifier: keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/elreK20YpaSo7u9v55jxGF5rHO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.68.0/22 Signature Algorithm: sha256WithRSAEncryption a1:87:1c:53:d7:75:d1:dd:34:e7:7b:bb:8c:7d:a4:bb:e0:94: 75:21:7b:e0:f5:5b:19:2a:93:80:3d:bb:e1:21:e5:3a:d5:bc: a0:c2:43:d4:ce:47:72:83:82:8c:f1:73:6c:15:88:01:d0:7a: cd:6c:c1:68:ca:d9:3c:86:be:74:98:2f:13:36:4c:18:4f:3f: 0d:d2:eb:a8:b3:34:5c:7b:4e:15:77:ce:a6:45:82:b5:2d:c3: b4:c7:68:e2:14:1d:62:1d:d2:af:cc:a4:c5:90:19:5c:07:09: e5:78:bc:6b:14:73:88:a7:6a:75:8e:ae:c8:8d:1d:72:9e:d9: a2:63:81:e5:1b:4e:f5:fa:56:0e:72:1d:1e:63:21:28:d9:41: f9:5a:27:00:13:f4:c1:f3:c5:3e:bf:68:13:aa:19:ab:04:ee: 9a:0e:62:71:ab:0b:4c:23:5c:22:b9:30:7c:13:10:50:e7:7d: 59:23:53:79:01:1d:26:33:09:f9:94:3b:f6:07:38:a0:24:41: 8d:54:ef:e0:ae:b8:25:07:3a:7a:b8:b9:5d:81:4f:bc:cf:40: d5:6e:54:d2:2c:eb:cc:81:a6:1f:d5:3b:7e:53:7d:46:9f:ba: b8:77:bc:92:da:67:fb:e7:79:5a:5b:b1:93:8b:48:65:91:cd: f1:9d:48:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmzMCAMv7avzqOE/pfXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTQyMjMzZWQ2MzBiMGI4OWY1MmMwNzdmZjBkNWMyYjM3 ZDRkZmEwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTVhZGUyYjZkMThhNWE0YThlZWVmNmZlNzk4ZjExODVlNmIxY2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobPwhKBea5YjcQF6ATbrhMFJmyc8 2zzkCZ8GJTO4zEB4t+gQKx+zc/GYT2S8YbmZ10KVMJqZDOai6eYMSi0EQHCUt0xE JVJJIbtGyzzJ14h5h3SdNwk7rIvQ7TY4LDWbG2ob6pi5oqBziZc4X7yuk6cpKvjG 1rRF116j1MKwxlq7jfpZKzBydA1SzPGoFY18xyIKJGeiW4j47M9BO7sCT7krl0Jk 0kC4MlTp325tpj/0mFkR29rKYZknZ41CTrMXbd1oz/oYborICWAQRYEGj4Lt1W5F mfIjPDvW7frQb2VIHAwwqLRnXCJRkK8CxHfdNb1wohyrlMJFLIYdPZnmgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHpa3ittGKWkqO7vb+eY8RheaxzuMB8GA1UdIwQY MBaAFEfkIjPtYwsLifUsB3/w1cKzfU36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lOTQ4MTctZjI1OS00ZmZhLTliYTMt N2ViOTVjYzBmNzQ5LzEvZWxyZUsyMFlwYVNvN3U5djU1anhHRjVySE80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lOTQ4MTctZjI1OS00ZmZhLTliYTMtN2ViOTVjYzBmNzQ5 LzEvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudtEMA0G CSqGSIb3DQEBCwUAA4IBAQChhxxT13XR3TTne7uMfaS74JR1IXvg9VsZKpOAPbvh IeU61bygwkPUzkdyg4KM8XNsFYgB0HrNbMFoytk8hr50mC8TNkwYTz8N0uuoszRc e04Vd86mRYK1LcO0x2jiFB1iHdKvzKTFkBlcBwnleLxrFHOIp2p1jq7IjR1yntmi Y4HlG071+lYOch0eYyEo2UH5WicAE/TB88U+v2gTqhmrBO6aDmJxqwtMI1wiuTB8 ExBQ531ZI1N5AR0mMwn5lDv2BzigJEGNVO/grrglBzp6uLldgU+8z0DVblTSLOvM gaYf1Tt+U31Gn7q4d7yS2mf753laW7GTi0hlkc3xnUiF -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:03 2026 by rpki-client