This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/elTx126yBsA7dCzExkxDADRceX0.roa File: elTx126yBsA7dCzExkxDADRceX0.roa (raw, json) Hash identifier: jjGMv6aGadJUsAbEJBuS7OfBzf4SwmuImpVeMEodGKw= Subject key identifier: 7A:54:F1:D7:6E:B2:06:C0:3B:74:2C:C4:C6:4C:43:00:34:5C:79:7D Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B3699677462B5B031BEB9D04B841FAE Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/elTx126yBsA7dCzExkxDADRceX0.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31251 IP address blocks: 85.203.0.0/22 maxlen: 22 85.203.0.0/24 maxlen: 24 85.203.2.0/24 maxlen: 24 85.203.3.0/24 maxlen: 24 85.203.5.0/24 maxlen: 24 85.203.6.0/24 maxlen: 24 85.203.12.0/24 maxlen: 24 2a02:a10::/29 maxlen: 29 2a03:60c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:99:67:74:62:b5:b0:31:be:b9:d0:4b:84:1f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a54f1d76eb206c03b742cc4c64c4300345c797d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:8a:42:cb:07:c9:00:6f:75:4c:97:e5:08: 21:ba:9a:ed:de:52:f5:9f:c2:d7:21:b0:3a:0e:2b: 7f:88:0f:0b:a3:8d:29:5f:1d:6f:74:f3:23:c3:c3: 5c:44:05:a6:5b:b8:70:59:a1:c4:01:b1:b8:7a:75: 2f:54:94:55:a8:00:f2:9c:10:aa:93:21:99:23:79: 85:6b:75:f0:e2:41:23:60:fc:31:39:a6:70:ef:d0: 3a:be:13:2a:ac:2d:1d:90:53:01:94:19:ab:e0:5a: d5:23:69:84:26:b3:7f:0c:d4:0a:5d:05:6b:e6:e6: 84:58:9b:18:76:a6:e9:51:30:0b:e7:0b:9c:a9:e8: 3e:0f:d8:1b:7c:35:30:98:63:68:63:f1:28:a5:c5: 9b:36:16:42:6b:0f:09:54:4b:21:f7:65:07:8e:1d: 46:ee:94:60:03:4e:0a:4c:0a:62:ae:61:77:02:34: e6:b4:d4:61:7f:4a:cf:95:86:6f:5e:2c:e1:ef:a2: 22:92:6c:d6:01:b2:68:ea:7c:23:91:c8:d4:f0:2b: db:a0:da:4b:ff:7e:bf:09:01:93:3b:b6:76:69:70: 8c:88:1b:30:16:e5:96:4f:ef:17:ef:5a:73:0c:96: 78:e1:b8:b7:dd:c1:70:4e:19:59:bf:ff:11:f3:f1: 29:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:54:F1:D7:6E:B2:06:C0:3B:74:2C:C4:C6:4C:43:00:34:5C:79:7D X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/elTx126yBsA7dCzExkxDADRceX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.0.0/22 85.203.5.0-85.203.6.255 85.203.12.0/24 IPv6: 2a02:a10::/29 2a03:60c0::/29 Signature Algorithm: sha256WithRSAEncryption 3f:70:90:4c:2a:e5:10:26:35:35:c7:27:ee:9d:0c:3c:fc:cd: f7:ab:87:02:a1:e2:61:53:2d:dc:3c:ff:c9:3b:23:f6:ab:97: d7:e4:ff:27:a1:ac:da:d0:b3:fd:94:fb:64:8a:e0:10:03:cb: 4b:17:ec:0c:ef:c9:0c:a0:29:65:a4:19:e9:9e:d9:48:6a:72: 5f:c7:3e:38:55:17:5d:40:42:6b:08:24:0e:a5:6c:b5:48:e6: 66:48:b4:0b:69:94:c9:53:72:c1:72:d0:f8:40:ef:ec:84:42: 05:64:ab:66:7d:ec:0b:12:c7:80:29:1f:4f:2b:1d:f9:20:a0: ff:4d:5a:fb:8e:36:86:e2:a7:90:35:2b:3a:b5:22:22:28:d3: b7:f0:5f:84:a3:53:35:54:c1:63:81:5b:ae:22:ee:35:eb:a2: 17:c6:73:d5:eb:3d:d4:34:99:d4:fa:ac:b5:88:82:1e:89:0c: c4:8c:92:58:9e:4e:6c:94:0b:3a:50:60:3b:06:dd:7a:c9:ca: b8:79:67:7f:14:9e:0d:1f:64:e4:06:e5:b3:be:05:07:9d:02: 9c:68:71:80:01:06:12:83:9c:19:83:f3:24:75:83:2f:e9:bc: f5:a9:67:3a:8c:3b:9e:2d:59:56:7e:a3:5b:52:64:d2:63:8a: eb:34:3d:1e -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt7NplndGK1sDG+udBLhB+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTU0ZjFkNzZlYjIwNmMwM2I3NDJjYzRjNjRjNDMwMDM0NWM3OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS+KQssHyQBvdUyX5Qghuprt3lL1 n8LXIbA6Dit/iA8Lo40pXx1vdPMjw8NcRAWmW7hwWaHEAbG4enUvVJRVqADynBCq kyGZI3mFa3Xw4kEjYPwxOaZw79A6vhMqrC0dkFMBlBmr4FrVI2mEJrN/DNQKXQVr 5uaEWJsYdqbpUTAL5wucqeg+D9gbfDUwmGNoY/EopcWbNhZCaw8JVEsh92UHjh1G 7pRgA04KTApirmF3AjTmtNRhf0rPlYZvXizh76IikmzWAbJo6nwjkcjU8CvboNpL /36/CQGTO7Z2aXCMiBswFuWWT+8X71pzDJZ44bi33cFwThlZv/8R8/Ep/QIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFHpU8ddusgbAO3QsxMZMQwA0XHl9MB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvZWxUeDEyNnlCc0E3ZEN6RXhreERBRFJjZVgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAgBAIAATAaAwQCVcsAMAwD BABVywUDBABVywYDBABVywwwFAQCAAIwDgMFAyoCChADBQMqA2DAMA0GCSqGSIb3 DQEBCwUAA4IBAQA/cJBMKuUQJjU1xyfunQw8/M33q4cCoeJhUy3cPP/JOyP2q5fX 5P8noaza0LP9lPtkiuAQA8tLF+wM78kMoCllpBnpntlIanJfxz44VRddQEJrCCQO pWy1SOZmSLQLaZTJU3LBctD4QO/shEIFZKtmfewLEseAKR9PKx35IKD/TVr7jjaG 4qeQNSs6tSIiKNO38F+Eo1M1VMFjgVuuIu4166IXxnPV6z3UNJnU+qy1iIIeiQzE jJJYnk5slAs6UGA7Bt16ycq4eWd/FJ4NH2TkBuWzvgUHnQKcaHGAAQYSg5wZg/Mk dYMv6bz1qWc6jDueLVlWfqNbUmTSY4rrND0e -----END CERTIFICATE-----Generated at Wed Jan 21 02:48:43 2026 by rpki-client