This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ELrAXgv2ltqw0av4IzAfebF5ASk.roa File: ELrAXgv2ltqw0av4IzAfebF5ASk.roa (raw, json) Hash identifier: ItJ6W6+WiYVxb5MBXgYcBOSSJyeXlDd0KFQmPRDZ+0w= Subject key identifier: 10:BA:C0:5E:0B:F6:96:DA:B0:D1:AB:F8:23:30:1F:79:B1:79:01:29 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F594120BB984C5A24214340892BCE Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ELrAXgv2ltqw0av4IzAfebF5ASk.roa Signing time: Fri 02 Jan 2026 02:17:59 +0000 ROA not before: Fri 02 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197142 IP address blocks: 213.189.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:59:41:20:bb:98:4c:5a:24:21:43:40:89:2b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10bac05e0bf696dab0d1abf823301f79b1790129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:93:87:00:fb:4d:ab:7d:04:62:a3:fa:6b:87: 15:8e:1e:f9:68:86:04:df:20:80:25:c9:07:b5:c2: 03:a4:b0:12:bd:15:c6:63:06:25:8c:63:17:d1:3b: 46:24:86:ff:a8:b4:83:08:89:c1:72:7d:87:8c:dd: c8:85:64:91:40:a5:f8:a4:40:e4:f6:3c:d2:cb:d2: f7:78:0f:ae:5e:3e:18:da:a3:bc:19:9e:fb:09:af: 8a:8e:95:a8:32:75:15:f3:a2:27:d2:83:a4:04:d9: e6:c3:4d:71:07:ca:76:5b:d7:75:f3:27:3b:a5:0c: 37:15:dd:64:36:5a:7b:ea:e4:96:82:ce:00:ef:b2: 11:36:87:7e:c3:9a:8c:b8:df:1d:b7:07:ae:06:fe: 5b:d5:a5:01:40:66:47:e8:0c:ce:6e:7b:b8:bc:fa: 65:04:d9:89:0e:11:37:ca:59:ae:13:0f:99:45:bf: b1:10:4f:d8:14:ad:4f:51:1e:b9:ab:98:45:17:87: e9:82:f7:58:73:35:d6:ca:20:92:92:37:73:7c:92: ba:72:29:d6:95:26:08:3b:69:05:d6:f5:ca:68:db: 8c:f8:66:b4:36:91:86:be:96:82:74:d3:5d:87:3b: 19:2e:b6:b7:a8:37:33:38:ef:7f:23:2d:7f:7a:b5: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BA:C0:5E:0B:F6:96:DA:B0:D1:AB:F8:23:30:1F:79:B1:79:01:29 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ELrAXgv2ltqw0av4IzAfebF5ASk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.189.42.0/24 Signature Algorithm: sha256WithRSAEncryption 40:38:5f:12:06:e2:dd:32:9c:93:fe:12:b3:c1:a3:02:d2:c2: 42:a2:79:fb:8a:c4:7d:da:5a:a0:84:89:e8:08:a0:a7:5d:96: 63:fb:17:19:09:f1:13:5c:04:92:b7:51:72:57:91:87:02:45: 9d:c6:10:44:14:e2:93:a8:a9:b5:32:07:7c:9a:4e:6d:07:2a: c4:88:c5:d2:90:15:4c:82:c0:74:7d:1b:3d:66:d3:f0:7b:0b: d0:59:d8:c9:c2:de:d5:0b:ab:a2:69:68:86:8d:52:49:33:49: eb:82:a7:6d:b6:48:43:52:6a:95:cc:a2:e3:e1:a2:43:9a:3f: 9c:11:dc:a0:3b:4f:43:a9:e7:a1:14:44:50:75:a1:cc:65:ca: 87:4c:b4:de:03:4a:ac:9f:c0:49:be:1a:13:52:9d:19:ef:5a: 14:e7:0a:58:f4:cd:99:ea:ee:c0:f4:65:28:75:67:33:a8:24: f4:4e:13:69:68:33:eb:ba:e8:a3:03:71:6c:f1:4c:bf:55:04: 74:1e:ff:db:1e:cb:62:26:64:ec:7c:1b:30:32:ce:e7:cb:31: 0b:f0:af:af:41:e2:90:00:47:34:8a:ef:8c:56:d4:8d:9b:ec: 9d:23:e1:4e:2e:bb:83:32:28:e4:21:21:78:ca:5c:a7:cc:eb: 5b:d2:63:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f1lBILuYTFokIUNAiSvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGJhYzA1ZTBiZjY5NmRhYjBkMWFiZjgyMzMwMWY3OWIxNzkwMTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5OHAPtNq30EYqP6a4cVjh75aIYE 3yCAJckHtcIDpLASvRXGYwYljGMX0TtGJIb/qLSDCInBcn2HjN3IhWSRQKX4pEDk 9jzSy9L3eA+uXj4Y2qO8GZ77Ca+KjpWoMnUV86In0oOkBNnmw01xB8p2W9d18yc7 pQw3Fd1kNlp76uSWgs4A77IRNod+w5qMuN8dtweuBv5b1aUBQGZH6AzObnu4vPpl BNmJDhE3ylmuEw+ZRb+xEE/YFK1PUR65q5hFF4fpgvdYczXWyiCSkjdzfJK6cinW lSYIO2kF1vXKaNuM+Ga0NpGGvpaCdNNdhzsZLra3qDczOO9/Iy1/erVTWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBC6wF4L9pbasNGr+CMwH3mxeQEpMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvRUxyQVhndjJsdHF3MGF2NEl6QWZlYkY1QVNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b0qMA0G CSqGSIb3DQEBCwUAA4IBAQBAOF8SBuLdMpyT/hKzwaMC0sJConn7isR92lqghIno CKCnXZZj+xcZCfETXASSt1FyV5GHAkWdxhBEFOKTqKm1Mgd8mk5tByrEiMXSkBVM gsB0fRs9ZtPwewvQWdjJwt7VC6uiaWiGjVJJM0nrgqdttkhDUmqVzKLj4aJDmj+c EdygO09DqeehFERQdaHMZcqHTLTeA0qsn8BJvhoTUp0Z71oU5wpY9M2Z6u7A9GUo dWczqCT0ThNpaDPruuijA3Fs8Uy/VQR0Hv/bHstiJmTsfBswMs7nyzEL8K+vQeKQ AEc0iu+MVtSNm+ydI+FOLruDMijkISF4ylynzOtb0mN0 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:54 2026 by rpki-client