This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ElqWHsgulPCtwxkKCi13E5O-q-M.roa File: ElqWHsgulPCtwxkKCi13E5O-q-M.roa (raw, json) Hash identifier: 0ttWHxC564v5KUPQUbyvqBZhXYXlb4jA7+8ydHemHPI= Subject key identifier: 12:5A:96:1E:C8:2E:94:F0:AD:C3:19:0A:0A:2D:77:13:93:BE:AB:E3 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13685DE60091287FDDBDA285DE485D Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ElqWHsgulPCtwxkKCi13E5O-q-M.roa Signing time: Fri 02 Jan 2026 00:20:05 +0000 ROA not before: Fri 02 Jan 2026 00:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26042 IP address blocks: 185.230.67.0/24 maxlen: 24 194.76.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:68:5d:e6:00:91:28:7f:dd:bd:a2:85:de:48:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=125a961ec82e94f0adc3190a0a2d771393beabe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:d3:82:80:b9:9a:76:c5:63:32:f8:1a:ec: c9:52:6c:86:d3:eb:8b:84:64:ca:be:8e:71:10:75: 9f:b7:61:81:98:df:8f:5c:9c:9a:cb:e9:66:f5:e9: b7:77:43:13:c7:ba:e7:52:61:e5:ad:3e:04:74:48: 79:a3:1f:81:08:9a:c7:37:e9:74:ff:ea:48:db:6e: 50:fa:26:f8:99:4b:68:99:a7:52:6f:49:cd:24:01: 7a:87:c7:80:3a:89:94:84:38:fb:f2:97:05:ed:27: af:35:4b:93:7b:46:a2:2c:ec:5e:f4:c9:49:c7:59: 86:00:62:27:4c:8b:45:89:43:de:1d:22:f1:3a:b5: 90:7e:b9:2e:0d:4b:6e:b4:66:00:5d:db:16:28:1a: ee:76:8b:86:91:b9:e9:97:e4:b3:dd:c6:a2:01:c2: 97:7a:26:19:02:6c:71:ff:fc:93:32:3e:45:dc:c9: 95:a0:8d:da:83:98:71:0f:35:8c:25:ce:bf:8c:81: 04:4f:72:93:3b:a0:07:60:c5:46:c9:bd:fa:56:43: 90:a8:48:40:81:ac:f4:9d:b6:7d:f3:c2:08:dd:fc: 02:ee:17:c7:80:dc:d3:35:58:63:fc:fa:18:22:7b: e6:ab:8e:3f:84:f9:dd:1b:31:20:80:8a:38:db:4f: ae:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5A:96:1E:C8:2E:94:F0:AD:C3:19:0A:0A:2D:77:13:93:BE:AB:E3 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ElqWHsgulPCtwxkKCi13E5O-q-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.67.0/24 194.76.168.0/24 Signature Algorithm: sha256WithRSAEncryption 56:69:c2:bd:ca:11:05:cd:4f:97:80:5c:c8:31:0f:40:04:22: f0:5c:14:58:74:43:13:70:0d:71:a1:cb:86:a2:60:8d:df:32: 71:5d:e6:d2:30:75:f1:f4:ff:c4:cd:39:0a:4e:da:46:0c:68: 52:ed:2b:d8:25:7d:36:d6:24:a5:f3:f4:23:e0:15:c1:7a:21: ec:c7:ae:4e:b3:a7:8f:a3:10:4f:d9:57:20:56:af:29:2b:fd: cd:74:01:04:cb:34:3a:cc:4c:09:6b:99:09:58:4d:36:e3:f1: 23:0d:e8:ec:b0:b2:c5:98:c5:39:2b:49:77:86:15:ab:db:d0: 6b:22:b5:53:5e:7c:23:b4:84:cf:d8:01:8b:e8:6b:74:ae:e4: 16:8f:5c:35:91:a7:18:b4:0b:12:ba:e0:5f:19:23:73:ea:e6: 51:2f:51:d6:c7:46:a2:db:c7:49:eb:0b:25:ea:0b:16:a1:62: 3d:bf:41:88:c5:db:63:bc:0c:c2:60:67:c1:4e:f2:37:4b:55: 65:9e:11:b6:96:ce:94:ca:8e:eb:9d:2f:f7:3f:6f:5a:d5:9f: 88:83:a7:04:5d:ab:95:a6:83:19:96:e9:1a:3b:5f:c8:c0:16: 8b:4d:23:d0:e2:46:b5:07:75:c7:b4:8d:c6:70:eb:67:9a:96: 41:bd:3f:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E2hd5gCRKH/dvaKF3khdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjVhOTYxZWM4MmU5NGYwYWRjMzE5MGEwYTJkNzcxMzkzYmVhYmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXHTgoC5mnbFYzL4GuzJUmyG0+uL hGTKvo5xEHWft2GBmN+PXJyay+lm9em3d0MTx7rnUmHlrT4EdEh5ox+BCJrHN+l0 /+pI225Q+ib4mUtomadSb0nNJAF6h8eAOomUhDj78pcF7SevNUuTe0aiLOxe9MlJ x1mGAGInTItFiUPeHSLxOrWQfrkuDUtutGYAXdsWKBrudouGkbnpl+Sz3caiAcKX eiYZAmxx//yTMj5F3MmVoI3ag5hxDzWMJc6/jIEET3KTO6AHYMVGyb36VkOQqEhA gaz0nbZ988II3fwC7hfHgNzTNVhj/PoYInvmq44/hPndGzEggIo420+ujwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBJalh7ILpTwrcMZCgotdxOTvqvjMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvRWxxV0hzZ3VsUEN0d3hrS0NpMTNFNU8tcS1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueZDAwQA wkyoMA0GCSqGSIb3DQEBCwUAA4IBAQBWacK9yhEFzU+XgFzIMQ9ABCLwXBRYdEMT cA1xocuGomCN3zJxXebSMHXx9P/EzTkKTtpGDGhS7SvYJX021iSl8/Qj4BXBeiHs x65Os6ePoxBP2VcgVq8pK/3NdAEEyzQ6zEwJa5kJWE024/EjDejssLLFmMU5K0l3 hhWr29BrIrVTXnwjtITP2AGL6Gt0ruQWj1w1kacYtAsSuuBfGSNz6uZRL1HWx0ai 28dJ6wsl6gsWoWI9v0GIxdtjvAzCYGfBTvI3S1VlnhG2ls6Uyo7rnS/3P29a1Z+I g6cEXauVpoMZlukaO1/IwBaLTSPQ4ka1B3XHtI3GcOtnmpZBvT/T -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:27 2026 by rpki-client