This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ELqztzBTOVJ9TbgArZg2cCQeUqs.roa
File: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (raw, json)
Hash identifier: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=
Subject key identifier: 10:BA:B3:B7:30:53:39:52:7D:4D:B8:00:AD:98:36:70:24:1E:52:AB
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 019B7BA3E4D4BC1E1484B4437C38C8C4A449
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ELqztzBTOVJ9TbgArZg2cCQeUqs.roa
Signing time: Thu 01 Jan 2026 22:18:17 +0000
ROA not before: Thu 01 Jan 2026 22:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61270
IP address blocks: 82.144.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:e4:d4:bc:1e:14:84:b4:43:7c:38:c8:c4:a4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 22:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10bab3b7305339527d4db800ad983670241e52ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:30:a4:25:90:bd:d9:40:ee:f8:b9:ec:36:
8e:91:b8:b6:a0:e2:ba:4b:69:77:e4:ac:02:b5:56:
66:51:a9:7e:2f:f0:d3:13:da:00:3c:df:9f:83:56:
5f:5f:26:5d:26:46:16:ee:39:f6:cb:99:01:a9:8a:
5a:c6:2c:e8:e8:01:e3:d5:b3:ed:cc:4c:9c:e4:5b:
fa:56:c7:13:c7:10:7e:ea:b4:3e:48:96:f9:30:0b:
e7:35:cc:1a:e2:c5:b6:8a:fe:83:f0:76:31:0d:7f:
cd:38:0c:ef:31:e6:c0:52:f5:28:22:21:df:14:0d:
23:07:07:74:7f:ab:3f:69:02:55:6e:c1:89:92:1f:
1c:50:f8:4e:12:0a:30:07:d5:dd:d2:fc:28:3a:59:
4b:46:a4:24:c6:4a:0b:e8:d0:9e:b7:ad:d9:c8:e6:
9d:18:23:51:2c:8a:c5:d6:2e:ba:a9:0c:84:16:d4:
c6:be:89:b5:4b:20:4c:bd:a9:7e:40:90:c4:21:39:
d4:fa:70:9d:55:e5:96:35:30:16:31:d0:7d:6c:c2:
19:12:e8:fa:eb:a8:e8:30:13:a1:b3:a9:f3:39:6d:
00:d7:78:7e:c7:9d:12:f8:eb:c0:21:d8:00:a0:6a:
4a:c8:2b:ec:ac:bb:6d:13:12:aa:d8:47:f0:43:1f:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BA:B3:B7:30:53:39:52:7D:4D:B8:00:AD:98:36:70:24:1E:52:AB
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ELqztzBTOVJ9TbgArZg2cCQeUqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.187.0/24
Signature Algorithm: sha256WithRSAEncryption
17:2a:ec:e5:60:31:29:24:98:da:3f:35:7e:92:ce:b9:d7:5c:
be:2d:3f:28:eb:21:4e:76:9f:7d:2c:c3:e1:6a:40:20:17:89:
5f:2d:56:5b:49:08:fe:34:a2:5b:c0:cf:91:a5:31:99:ab:da:
8a:b7:65:95:9b:ff:bb:15:d7:a1:c9:6f:c2:4d:eb:a3:1a:03:
c7:a2:6c:0f:21:80:79:ff:3e:4e:60:62:55:e2:11:8e:93:12:
03:17:a4:09:91:49:c8:d8:44:72:42:e7:16:4e:14:fa:1b:e5:
2b:69:df:e6:45:6a:08:10:2b:83:c0:0e:24:54:20:a0:14:2d:
ce:2f:40:ec:90:97:99:37:9e:21:43:24:5b:3d:60:b6:db:02:
07:93:8e:fc:b2:de:18:39:fd:5f:50:62:e6:7c:a8:a6:4a:46:
92:a2:35:74:e4:9a:86:f1:5c:c3:d9:49:3a:2f:e3:38:e8:51:
29:88:0c:1b:ed:4b:22:a1:c5:df:a9:67:e5:a0:55:bb:30:f5:
ad:53:ea:3b:17:5a:a2:f9:19:b6:35:e0:03:f7:8a:be:16:c0:
3c:93:cc:3d:51:59:c9:7c:61:c5:00:eb:dd:8e:78:8e:00:4f:
a8:59:ab:ad:01:7a:a8:b8:54:fe:47:df:de:fe:f9:93:bf:49:
d6:ec:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:49 2026 by rpki-client