This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/ElmE07kq9LxUDEmmTyOo1MIpVtU.roa File: ElmE07kq9LxUDEmmTyOo1MIpVtU.roa (raw, json) Hash identifier: IMhS3Hg31zsSt4C+dpnb7kVneJ7jUTvLYNSo6j8gQwI= Subject key identifier: 12:59:84:D3:B9:2A:F4:BC:54:0C:49:A6:4F:23:A8:D4:C2:29:56:D5 Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d Certificate serial: 019B775941BB6CC1D9F9E63E128905355CF5 Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/ElmE07kq9LxUDEmmTyOo1MIpVtU.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12816 IP address blocks: 129.187.0.0/16 maxlen: 16 141.40.0.0/16 maxlen: 16 141.84.0.0/16 maxlen: 16 2001:4ca0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:41:bb:6c:c1:d9:f9:e6:3e:12:89:05:35:5c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=125984d3b92af4bc540c49a64f23a8d4c22956d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:77:09:12:38:ca:36:72:a0:bf:a3:d3:76: 75:53:39:fb:7d:cb:9e:7d:aa:11:3e:e7:19:61:01: 49:91:4f:e4:b7:fa:79:e0:3b:34:a4:94:15:be:ba: 8e:b1:b4:76:24:a5:1d:44:16:8b:da:a7:58:48:03: 97:99:e8:1b:b7:09:4a:02:80:49:ef:52:08:0d:58: 9a:69:87:35:0c:ef:6c:28:5b:38:38:79:ed:2b:f6: 25:3e:1d:d7:4b:79:ba:d5:7d:44:21:c0:6c:cc:2e: f7:a7:4d:eb:b7:cc:86:51:16:f6:fa:65:2a:a5:eb: b9:2c:72:c1:36:17:05:36:f1:c5:c7:2c:18:fe:f5: 0b:42:96:df:36:54:85:6b:f7:09:3c:aa:cc:70:95: 49:26:16:98:d0:c8:f3:c6:df:18:b5:41:5a:e9:6d: 8e:99:dc:72:bc:78:e1:d9:88:02:4e:3d:56:c5:14: b5:ac:85:36:95:aa:ee:60:aa:28:62:81:29:b2:3f: 62:9e:86:57:7d:0c:92:6d:e0:8c:65:90:5f:a5:ed: 11:90:fe:5e:b7:d1:76:30:86:c7:31:d0:1f:95:7f: d2:6e:36:d1:77:7f:06:f5:09:09:02:22:76:4c:37: 1d:fe:ee:3a:e0:8f:f3:61:71:c1:76:8d:5a:c7:8f: d6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:59:84:D3:B9:2A:F4:BC:54:0C:49:A6:4F:23:A8:D4:C2:29:56:D5 X509v3 Authority Key Identifier: keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/ElmE07kq9LxUDEmmTyOo1MIpVtU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.187.0.0/16 141.40.0.0/16 141.84.0.0/16 IPv6: 2001:4ca0::/29 Signature Algorithm: sha256WithRSAEncryption 44:fb:26:20:6c:10:5f:91:ba:42:70:39:27:b6:6b:29:a8:4e: a1:26:b2:87:bc:2f:04:7b:8f:df:9b:49:ce:22:db:16:33:3c: ad:71:ac:52:30:5a:a2:95:85:b0:dc:c1:39:1c:14:f2:ec:9e: 65:ed:3c:8b:db:78:e3:32:e2:11:f1:b6:53:0f:6c:eb:18:2b: 07:e1:92:65:b3:ea:f0:18:47:fb:78:05:6b:af:d6:b4:e4:1e: 1f:a5:d2:de:a7:47:13:f6:31:05:91:9c:2c:e6:73:ab:8e:ab: 9d:3f:7d:c4:f0:84:9d:d9:45:1d:79:8e:f1:3b:5d:19:6b:f2: 12:6b:47:de:ac:14:ad:58:06:b0:02:ef:fc:e4:a7:b3:1c:0f: 40:88:29:4e:4d:7c:0c:97:f2:3f:f3:a6:a1:8a:44:38:df:62: 78:4f:60:d8:3a:18:81:4e:53:03:1a:ae:bd:d4:6c:d2:78:b4: 58:a7:20:6e:46:41:b5:5d:c9:65:36:52:ed:86:b3:21:f5:42: a0:a4:6f:64:bf:25:50:46:f7:04:8f:53:ca:2f:a2:f6:1d:85: 00:fc:9c:98:39:cd:39:c0:81:5b:34:c7:5f:97:e1:6b:d1:7c: 41:fd:3b:68:a0:48:58:17:18:8d:69:87:96:6a:6e:75:6e:4d: f0:7d:e2:81 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3WUG7bMHZ+eY+EokFNVz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWE3OTljNmE2NjM0MzlkNzQ0NTBkZmIzODk5MzU3MWY5 OGUxNWQwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjU5ODRkM2I5MmFmNGJjNTQwYzQ5YTY0ZjIzYThkNGMyMjk1NmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygt3CRI4yjZyoL+j03Z1Uzn7fcue faoRPucZYQFJkU/kt/p54Ds0pJQVvrqOsbR2JKUdRBaL2qdYSAOXmegbtwlKAoBJ 71IIDViaaYc1DO9sKFs4OHntK/YlPh3XS3m61X1EIcBszC73p03rt8yGURb2+mUq peu5LHLBNhcFNvHFxywY/vULQpbfNlSFa/cJPKrMcJVJJhaY0Mjzxt8YtUFa6W2O mdxyvHjh2YgCTj1WxRS1rIU2laruYKooYoEpsj9inoZXfQySbeCMZZBfpe0RkP5e t9F2MIbHMdAflX/SbjbRd38G9QkJAiJ2TDcd/u464I/zYXHBdo1ax4/WEwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBJZhNO5KvS8VAxJpk8jqNTCKVbVMB8GA1UdIwQY MBaAFJcaeZxqZjQ510RQ37OJk1cfmOFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS84ZTRiZGMtZTZlYi00MjA4LTliMTMt YTJlZmFlM2Y5Y2FiLzEvRWxtRTA3a3E5THhVREVtbVR5T28xTUlwVnRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS84ZTRiZGMtZTZlYi00MjA4LTliMTMtYTJlZmFlM2Y5Y2Fi LzEvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAVBAIAATAPAwMAgbsDAwCN KAMDAI1UMA0EAgACMAcDBQMgAUygMA0GCSqGSIb3DQEBCwUAA4IBAQBE+yYgbBBf kbpCcDkntmspqE6hJrKHvC8Ee4/fm0nOItsWMzytcaxSMFqilYWw3ME5HBTy7J5l 7TyL23jjMuIR8bZTD2zrGCsH4ZJls+rwGEf7eAVrr9a05B4fpdLep0cT9jEFkZws 5nOrjqudP33E8ISd2UUdeY7xO10Za/ISa0ferBStWAawAu/85KezHA9AiClOTXwM l/I/86ahikQ432J4T2DYOhiBTlMDGq691GzSeLRYpyBuRkG1XcllNlLthrMh9UKg pG9kvyVQRvcEj1PKL6L2HYUA/JyYOc05wIFbNMdfl+Fr0XxB/TtooEhYFxiNaYeW am51bk3wfeKB -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:40 2026 by rpki-client