This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/ElYKGJbVCeO4nsMvf9tBERFCNgM.roa
File: ElYKGJbVCeO4nsMvf9tBERFCNgM.roa (raw, json)
Hash identifier: cWN/smFbi1ZXWCehyRRWo6Eskyvhd6DZroKP2osgc5k=
Subject key identifier: 12:56:0A:18:96:D5:09:E3:B8:9E:C3:2F:7F:DB:41:11:11:42:36:03
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 019B7FF05B83B637D769A59257F7C5C0838A
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/ElYKGJbVCeO4nsMvf9tBERFCNgM.roa
Signing time: Fri 02 Jan 2026 18:20:17 +0000
ROA not before: Fri 02 Jan 2026 18:20:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197916
IP address blocks: 91.228.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f0:5b:83:b6:37:d7:69:a5:92:57:f7:c5:c0:83:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Jan 2 18:20:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12560a1896d509e3b89ec32f7fdb411111423603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:26:bb:34:a5:c6:e1:32:c0:a3:c1:7b:4c:f5:
a4:4e:2c:d0:b9:00:6a:83:9e:87:bf:d7:ad:66:43:
90:f3:46:d4:c4:68:70:a7:1f:37:b5:58:8a:43:95:
0b:c8:9a:37:a9:75:0b:4b:98:c5:5a:50:cf:4d:ff:
4a:0e:57:5a:c0:fe:1d:4b:6b:07:10:30:39:b8:61:
ed:4f:12:6e:be:32:23:5a:41:8e:e1:c9:70:cd:cc:
f8:4b:2c:c1:bb:78:40:bd:92:af:dc:5c:8d:a6:9c:
22:83:da:ea:f3:1e:d6:ee:f1:42:ed:d5:05:05:d0:
21:51:4b:02:40:e2:a7:a8:58:13:3f:32:a5:30:c9:
f2:a9:b7:8b:08:c4:0b:0a:35:b7:0f:c5:0d:fc:5b:
12:51:dd:53:d0:2f:28:12:af:7a:0a:de:cc:dd:9d:
2f:b1:20:f9:28:23:7a:68:0d:03:c0:6f:fe:05:cb:
53:65:a3:55:b4:29:53:52:1c:88:92:2d:54:e8:5e:
f4:c4:4c:2f:b2:af:90:7c:4f:1e:a5:60:0d:26:cb:
ad:9d:40:8e:c0:54:9f:42:28:fa:f3:f8:bc:fb:41:
a6:20:86:d8:96:71:0d:52:5f:2c:9c:7d:9d:e0:f8:
a2:3e:e0:47:18:fe:dd:4a:5d:c3:70:0a:5d:7f:fd:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:56:0A:18:96:D5:09:E3:B8:9E:C3:2F:7F:DB:41:11:11:42:36:03
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/ElYKGJbVCeO4nsMvf9tBERFCNgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.169.0/24
Signature Algorithm: sha256WithRSAEncryption
98:7d:6b:4a:84:79:eb:d8:bd:f7:7b:43:0f:6e:90:dc:db:ab:
8b:ec:f4:83:54:ee:6d:3c:2a:bc:e7:de:07:58:46:39:08:84:
21:25:a1:1a:20:f1:90:57:a8:b2:8c:b8:07:e0:5e:41:e4:b8:
46:fb:c2:b1:be:fe:83:1f:1a:05:22:da:ff:db:89:a9:ba:b1:
75:65:c6:28:3b:81:de:d6:a3:05:53:11:c5:86:97:25:39:fa:
36:8a:da:37:f6:e7:1a:36:bb:00:02:4a:7d:7e:c3:b4:58:7b:
f5:73:dd:b3:7b:1e:66:9e:c9:73:52:7e:d6:a0:b5:eb:23:4a:
8a:63:e5:7c:e2:07:1d:3b:99:6b:38:d3:b3:61:57:e9:9b:90:
d2:4f:a6:fc:a9:78:6d:f9:ce:4c:0f:37:d8:6d:34:36:f4:5d:
3e:93:39:2d:f2:b2:04:5d:a0:ae:37:f1:7b:a9:da:df:f0:3f:
45:c0:6d:41:58:6d:b2:f6:e2:8c:fd:30:ee:fd:73:c6:82:53:
8a:05:1b:b8:86:3a:1c:e7:47:e7:04:d1:90:46:60:a4:17:08:
f0:d6:72:5e:6b:3d:0d:08:d5:ec:62:fa:84:f6:99:f7:4a:8d:
0c:47:c0:79:db:cc:eb:c3:75:d1:74:45:e9:ae:0b:22:5e:bc:
99:03:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:51 2026 by rpki-client