This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ELaAgM2knDc-wRI-RBNYNjat4aU.roa File: ELaAgM2knDc-wRI-RBNYNjat4aU.roa (raw, json) Hash identifier: UOcEfDTR3LTc0cJaw2nY5Wsjm79qLete59lA0pgmcDA= Subject key identifier: 10:B6:80:80:CD:A4:9C:37:3E:C1:12:3E:44:13:58:36:36:AD:E1:A5 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B9D0343F9C24915B623FF6543894E1B14 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ELaAgM2knDc-wRI-RBNYNjat4aU.roa Signing time: Thu 08 Jan 2026 09:49:55 +0000 ROA not before: Thu 08 Jan 2026 09:49:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 402047 IP address blocks: 185.49.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:03:43:f9:c2:49:15:b6:23:ff:65:43:89:4e:1b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 8 09:49:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10b68080cda49c373ec1123e4413583636ade1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:60:91:24:c3:d4:e7:6e:dc:2c:e8:95:cc: ba:82:ce:73:80:ff:9f:16:94:cf:6e:44:4b:3d:69: f5:0b:f6:2b:35:ab:ad:de:78:f4:ab:4a:8d:08:13: ce:c2:3b:2a:74:9c:cd:89:a4:f8:7a:bc:3b:ed:18: 90:47:59:50:0e:b7:8e:07:95:51:67:95:f9:2f:f4: 5c:d3:83:38:98:d9:2f:6a:6e:0d:08:48:98:15:02: 7e:5d:04:60:8c:fd:42:62:d6:2e:34:ad:38:af:4c: d9:1d:29:28:aa:a1:41:dd:7c:ad:e0:97:0c:23:ee: 64:e5:09:83:94:55:12:1d:42:1b:18:05:97:3a:ba: bc:12:6b:55:cf:c6:8b:fb:a9:cd:9f:32:17:3b:a2: 63:e4:6c:42:2a:ba:40:e6:5e:26:72:a1:c5:c6:51: 97:12:ff:bc:00:e2:cb:9b:35:0c:e0:c3:b3:1f:8a: 6a:f9:e7:ed:50:9f:4e:82:1e:48:56:f4:40:bc:48: 27:fd:06:11:e0:0e:2f:e1:b6:65:d7:c2:af:26:ee: 80:45:57:86:5c:d3:1d:b0:4f:35:41:a7:73:8a:81: 6f:d0:c4:4f:df:97:28:b5:e8:19:de:51:4a:80:36: e6:a0:35:4d:1f:33:6e:40:44:85:db:8d:1a:6c:1f: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B6:80:80:CD:A4:9C:37:3E:C1:12:3E:44:13:58:36:36:AD:E1:A5 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ELaAgM2knDc-wRI-RBNYNjat4aU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.125.0/24 Signature Algorithm: sha256WithRSAEncryption aa:c3:fe:5b:3a:7a:b4:d0:de:63:81:d3:57:d1:67:67:ae:4e: b4:bb:38:2b:bd:b4:55:0e:82:b3:6c:ed:22:e6:ca:2d:e8:30: df:fb:07:34:ad:ac:92:fb:c3:2f:0e:1a:9e:66:7d:a0:3a:4e: 51:93:71:28:9a:91:ef:4a:26:44:9b:25:1a:9f:28:18:ad:47: 28:86:92:c0:64:9c:ba:bb:43:e9:a4:d7:07:2a:bd:02:23:9a: 62:99:6b:43:33:f0:e4:61:1a:b6:6d:71:82:a6:40:ff:64:ba: 5f:03:37:d9:57:7a:16:c7:5a:19:4d:2f:f1:0d:f6:03:bc:42: d7:2a:ea:37:ae:f4:e6:00:ab:c6:60:0c:77:2c:91:c8:d5:66: 93:3a:11:8a:88:54:f5:9d:97:77:ba:45:dc:ee:86:e8:79:81: 21:8b:05:99:38:47:01:b7:2e:69:08:4f:36:20:53:e8:20:c3: 1e:f8:54:36:1c:04:9a:4f:20:c8:58:90:93:7c:6a:e2:06:27: 5d:85:32:e8:e4:b8:2b:95:a2:45:ed:8d:df:7f:ed:16:db:b8: f0:1a:04:4c:8c:2a:a8:8d:b0:00:fa:87:0d:d7:da:77:ca:b3: a8:f5:2c:04:fb:37:05:b1:bf:17:ba:b5:57:4b:70:f6:6f:7f: ff:8a:a8:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZudA0P5wkkVtiP/ZUOJThsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTA4MDk0OTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGI2ODA4MGNkYTQ5YzM3M2VjMTEyM2U0NDEzNTgzNjM2YWRlMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk5gkSTD1Odu3Czolcy6gs5zgP+f FpTPbkRLPWn1C/YrNaut3nj0q0qNCBPOwjsqdJzNiaT4erw77RiQR1lQDreOB5VR Z5X5L/Rc04M4mNkvam4NCEiYFQJ+XQRgjP1CYtYuNK04r0zZHSkoqqFB3Xyt4JcM I+5k5QmDlFUSHUIbGAWXOrq8EmtVz8aL+6nNnzIXO6Jj5GxCKrpA5l4mcqHFxlGX Ev+8AOLLmzUM4MOzH4pq+eftUJ9Ogh5IVvRAvEgn/QYR4A4v4bZl18KvJu6ARVeG XNMdsE81QadzioFv0MRP35cotegZ3lFKgDbmoDVNHzNuQESF240abB/wvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBC2gIDNpJw3PsESPkQTWDY2reGlMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvRUxhQWdNMmtuRGMtd1JJLVJCTllOamF0NGFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTF9MA0G CSqGSIb3DQEBCwUAA4IBAQCqw/5bOnq00N5jgdNX0Wdnrk60uzgrvbRVDoKzbO0i 5sot6DDf+wc0rayS+8MvDhqeZn2gOk5Rk3EompHvSiZEmyUanygYrUcohpLAZJy6 u0PppNcHKr0CI5pimWtDM/DkYRq2bXGCpkD/ZLpfAzfZV3oWx1oZTS/xDfYDvELX Kuo3rvTmAKvGYAx3LJHI1WaTOhGKiFT1nZd3ukXc7oboeYEhiwWZOEcBty5pCE82 IFPoIMMe+FQ2HASaTyDIWJCTfGriBiddhTLo5LgrlaJF7Y3ff+0W27jwGgRMjCqo jbAA+ocN19p3yrOo9SwE+zcFsb8XurVXS3D2b3//iqio -----END CERTIFICATE-----Generated at Wed Jan 21 13:56:20 2026 by rpki-client