This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa File: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (raw, json) Hash identifier: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso= Subject key identifier: 12:57:DB:5D:21:88:0E:24:8C:4C:F3:E5:6E:8E:95:FA:8D:12:46:E6 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B7C8035FE11E8A2239511275FFEDCE698 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 152.89.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:35:fe:11:e8:a2:23:95:11:27:5f:fe:dc:e6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1257db5d21880e248c4cf3e56e8e95fa8d1246e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:c3:0a:af:7d:ec:ef:d2:a3:68:75:40:88: a2:84:0a:8a:94:5c:25:e3:81:24:67:83:f1:e1:cd: e3:ab:59:da:85:f3:74:55:54:4c:d6:e5:16:04:9a: a0:15:68:03:67:13:82:13:89:b3:d3:3d:5a:71:ca: 84:2b:58:9f:02:d8:9f:db:5e:53:ec:5e:84:bd:42: 72:7b:d4:83:80:7a:04:2e:a4:cb:88:31:e5:bf:60: d8:51:63:9d:17:78:79:0d:04:a6:73:3a:64:2f:fb: 03:e6:05:2d:3d:31:1e:57:4e:78:ea:7a:4d:d4:97: d6:0c:4a:dd:31:dd:e0:c7:d6:8e:c2:01:90:be:2b: b9:32:49:ca:ed:20:66:4c:0b:2a:9f:bd:4e:7e:dd: 97:99:c9:73:78:f5:54:d3:29:37:65:fa:25:02:d1: 37:51:38:40:96:49:6a:b5:ed:0c:b7:73:ae:cc:a2: fc:32:d3:bd:be:39:e0:e4:95:85:ff:d4:0f:61:2c: aa:03:5f:f5:b3:23:4d:b9:8d:b4:42:bc:b9:69:69: b1:ce:11:23:a6:ab:20:0d:ad:42:3d:cc:4c:48:42: cf:06:b3:6d:15:77:01:66:5f:99:f3:89:91:44:ed: 68:fd:b7:9c:1e:e0:4e:f4:d6:2b:d0:4e:be:a9:60: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:57:DB:5D:21:88:0E:24:8C:4C:F3:E5:6E:8E:95:FA:8D:12:46:E6 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.86.0/24 Signature Algorithm: sha256WithRSAEncryption 94:e9:7b:ed:0c:40:35:b7:03:75:46:7e:8d:22:2f:ba:8d:93: a1:64:69:ed:05:7b:02:20:94:10:ae:c5:6c:e9:30:da:9b:e7: d6:84:2a:af:a6:ff:c8:b7:0b:b4:13:60:af:05:98:2a:e1:b6: 76:3b:0e:b8:17:07:95:2b:15:56:bc:be:7e:b9:6d:2f:d6:c6: 10:f4:d7:84:de:1a:12:aa:81:2a:24:ff:10:2c:6c:e8:df:7b: 56:e0:7d:d3:00:3b:9d:54:95:00:d4:64:d4:67:6e:58:ff:c9: b2:78:6f:4f:b2:f3:7d:7d:56:ed:5d:78:ec:26:8e:56:11:59: 39:f3:a6:d1:94:cd:e7:bf:40:16:ce:82:67:7c:0d:ba:3a:50: 3f:f8:ff:72:bd:45:d6:15:3a:f0:d6:a2:27:fa:73:5a:de:f0: 51:9d:6b:95:23:57:62:70:c2:f7:b4:48:1d:f4:10:91:62:a6: 68:3d:7a:f1:f4:b8:5f:80:65:fa:87:89:4a:0a:f9:cb:21:c7: 7f:86:5d:e9:a3:2c:c4:c9:29:8d:69:60:e8:59:99:e9:0f:de: 7c:c3:6c:08:8a:94:9e:ec:0c:b7:7f:03:eb:c6:91:3b:58:56: 84:b3:58:b5:28:b4:c8:45:eb:88:67:43:1a:f7:e2:67:38:8a: fd:5f:dc:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDX+EeiiI5URJ1/+3OaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjU3ZGI1ZDIxODgwZTI0OGM0Y2YzZTU2ZThlOTVmYThkMTI0NmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5LDCq997O/So2h1QIiihAqKlFwl 44EkZ4Px4c3jq1nahfN0VVRM1uUWBJqgFWgDZxOCE4mz0z1accqEK1ifAtif215T 7F6EvUJye9SDgHoELqTLiDHlv2DYUWOdF3h5DQSmczpkL/sD5gUtPTEeV0546npN 1JfWDErdMd3gx9aOwgGQviu5MknK7SBmTAsqn71Oft2XmclzePVU0yk3ZfolAtE3 UThAlklqte0Mt3OuzKL8MtO9vjng5JWF/9QPYSyqA1/1syNNuY20Qry5aWmxzhEj pqsgDa1CPcxMSELPBrNtFXcBZl+Z84mRRO1o/becHuBO9NYr0E6+qWAG3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBJX210hiA4kjEzz5W6OlfqNEkbmMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvRWxmYlhTR0lEaVNNVFBQbGJvNlYtbzBTUnVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFlWMA0G CSqGSIb3DQEBCwUAA4IBAQCU6XvtDEA1twN1Rn6NIi+6jZOhZGntBXsCIJQQrsVs 6TDam+fWhCqvpv/Itwu0E2CvBZgq4bZ2Ow64FweVKxVWvL5+uW0v1sYQ9NeE3hoS qoEqJP8QLGzo33tW4H3TADudVJUA1GTUZ25Y/8myeG9PsvN9fVbtXXjsJo5WEVk5 86bRlM3nv0AWzoJnfA26OlA/+P9yvUXWFTrw1qIn+nNa3vBRnWuVI1dicML3tEgd 9BCRYqZoPXrx9LhfgGX6h4lKCvnLIcd/hl3poyzEySmNaWDoWZnpD958w2wIipSe 7Ay3fwPrxpE7WFaEs1i1KLTIReuIZ0Ma9+JnOIr9X9yw -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:25 2026 by rpki-client