This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ELne4r21-y1k-vJttnjlClRxMQ8.roa File: ELne4r21-y1k-vJttnjlClRxMQ8.roa (raw, json) Hash identifier: r7rTly5a3GZJZO7av6SlZMvOb6TpXcHgxsD9Arlkw60= Subject key identifier: 10:B9:DE:E2:BD:B5:FB:2D:64:FA:F2:6D:B6:78:E5:0A:54:71:31:0F Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA40779594D7D7B4AD6594C26AD0CE3 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ELne4r21-y1k-vJttnjlClRxMQ8.roa Signing time: Thu 01 Jan 2026 22:18:25 +0000 ROA not before: Thu 01 Jan 2026 22:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199961 IP address blocks: 45.132.254.0/24 maxlen: 24 194.67.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:07:79:59:4d:7d:7b:4a:d6:59:4c:26:ad:0c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10b9dee2bdb5fb2d64faf26db678e50a5471310f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:ba:1e:6b:b9:be:11:83:59:a8:49:b1:93: 0a:f8:88:eb:4a:ae:52:44:73:bf:29:d5:fd:7c:76: 57:3e:29:e5:4c:35:df:b1:b8:a8:ca:e6:a3:a6:34: 4c:4d:43:98:38:26:ee:b7:88:98:9b:0c:4c:48:13: 3d:f1:d7:88:e3:cc:48:56:d6:03:89:f1:4d:2e:bb: 1a:b6:8e:db:fb:40:23:a0:d6:ca:a9:f9:9b:60:25: a4:f2:2f:a6:a3:8b:00:8c:8f:99:62:ab:76:9b:74: 67:43:2f:50:65:20:53:68:55:50:88:2a:8c:56:0a: 7d:27:08:f5:4a:7b:67:69:35:a1:74:e3:2c:e9:b5: bb:33:be:45:b7:85:05:da:de:9f:c6:2b:b3:62:1c: 8c:cd:80:0e:fa:2c:4c:b0:23:0e:fa:52:8e:66:2b: c7:70:94:af:dc:bc:b5:61:54:af:83:fd:5e:cc:90: c9:ec:ec:a2:83:12:a0:f3:f4:04:7f:06:52:90:cc: 2b:a2:cf:4e:93:ff:f8:fb:c4:f8:14:c1:76:af:1b: b0:4c:d0:b6:96:85:2b:fd:3e:dd:5c:8c:8b:7c:4f: 37:a1:bb:3b:a8:16:58:8d:69:a0:af:13:d6:29:72: e7:12:10:aa:01:49:f1:0f:3e:fe:7b:96:c1:7c:48: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B9:DE:E2:BD:B5:FB:2D:64:FA:F2:6D:B6:78:E5:0A:54:71:31:0F X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ELne4r21-y1k-vJttnjlClRxMQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.254.0/24 194.67.194.0/24 Signature Algorithm: sha256WithRSAEncryption 96:75:c6:e0:88:54:e1:00:a5:19:7c:e6:ce:c8:69:50:b0:eb: 64:17:af:dd:0a:72:20:79:2b:f3:5c:25:e1:c0:c1:a9:a2:b9: bc:8b:dd:22:d9:16:b9:63:de:25:6a:db:bc:62:7f:73:b0:95: cf:f7:a8:a7:5f:70:eb:02:c1:f4:c7:4f:83:6a:88:7c:18:36: a2:ed:0b:06:76:47:ba:88:c0:77:aa:3d:47:f3:48:1e:4e:c9: bb:02:77:42:0f:c0:3c:07:50:ad:e1:89:27:3f:54:74:2a:b2: 8a:d2:4f:9e:55:ea:85:fb:0d:71:d2:26:1d:ad:e0:0c:45:b9: 5d:f8:1a:19:02:44:78:49:d5:c8:57:39:99:8a:5d:75:c3:a9: d5:b8:4e:68:0b:d7:ca:c7:99:60:57:bf:28:f3:53:cf:87:8d: c1:4e:5d:4f:b4:16:88:73:c3:70:61:78:76:90:ab:ff:2c:61: c8:aa:a0:5c:6a:ac:36:c4:a4:f2:1b:14:48:71:4b:43:8a:ca: 56:98:90:5a:b7:d0:61:ff:84:73:2e:a9:19:09:aa:14:86:d1: 01:4c:a6:a1:b4:21:55:e8:a0:cc:f5:09:d4:69:0b:28:48:34: 9d:d2:36:6d:0a:48:37:e7:6e:3a:14:8f:16:e1:33:a4:40:37: a4:90:22:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pAd5WU19e0rWWUwmrQzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGI5ZGVlMmJkYjVmYjJkNjRmYWYyNmRiNjc4ZTUwYTU0NzEzMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4y6Hmu5vhGDWahJsZMK+IjrSq5S RHO/KdX9fHZXPinlTDXfsbioyuajpjRMTUOYOCbut4iYmwxMSBM98deI48xIVtYD ifFNLrsato7b+0AjoNbKqfmbYCWk8i+mo4sAjI+ZYqt2m3RnQy9QZSBTaFVQiCqM Vgp9Jwj1SntnaTWhdOMs6bW7M75Ft4UF2t6fxiuzYhyMzYAO+ixMsCMO+lKOZivH cJSv3Ly1YVSvg/1ezJDJ7OyigxKg8/QEfwZSkMwros9Ok//4+8T4FMF2rxuwTNC2 loUr/T7dXIyLfE83obs7qBZYjWmgrxPWKXLnEhCqAUnxDz7+e5bBfEgl8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBC53uK9tfstZPrybbZ45QpUcTEPMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvRUxuZTRyMjEteTFrLXZKdHRuamxDbFJ4TVE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYT+AwQA wkPCMA0GCSqGSIb3DQEBCwUAA4IBAQCWdcbgiFThAKUZfObOyGlQsOtkF6/dCnIg eSvzXCXhwMGporm8i90i2Ra5Y94latu8Yn9zsJXP96inX3DrAsH0x0+Daoh8GDai 7QsGdke6iMB3qj1H80geTsm7AndCD8A8B1Ct4YknP1R0KrKK0k+eVeqF+w1x0iYd reAMRbld+BoZAkR4SdXIVzmZil11w6nVuE5oC9fKx5lgV78o81PPh43BTl1PtBaI c8NwYXh2kKv/LGHIqqBcaqw2xKTyGxRIcUtDispWmJBat9Bh/4RzLqkZCaoUhtEB TKahtCFV6KDM9QnUaQsoSDSd0jZtCkg35246FI8W4TOkQDekkCLi -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:01 2026 by rpki-client