This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ELAI9UPVmjFCSUbo66jGt5UCI8U.roa File: ELAI9UPVmjFCSUbo66jGt5UCI8U.roa (raw, json) Hash identifier: ohc6atYTDOUNEhiqINJsZmaSadbVokvGYeaRCovf75Y= Subject key identifier: 10:B0:08:F5:43:D5:9A:31:42:49:46:E8:EB:A8:C6:B7:95:02:23:C5 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019A5AB7AB40D08AC0655DFE10A0CA83E3CB Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ELAI9UPVmjFCSUbo66jGt5UCI8U.roa Signing time: Thu 06 Nov 2025 19:49:37 +0000 ROA not before: Thu 06 Nov 2025 19:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56971 IP address blocks: 46.8.64.0/24 maxlen: 24 46.8.224.0/24 maxlen: 24 46.8.225.0/24 maxlen: 24 46.8.226.0/24 maxlen: 24 46.8.227.0/24 maxlen: 24 46.8.228.0/24 maxlen: 24 46.8.229.0/24 maxlen: 24 46.8.230.0/24 maxlen: 24 46.8.231.0/24 maxlen: 24 46.8.236.0/24 maxlen: 24 46.8.237.0/24 maxlen: 24 46.8.238.0/24 maxlen: 32 95.182.101.0/24 maxlen: 24 95.182.114.0/24 maxlen: 24 95.182.115.0/24 maxlen: 24 95.182.116.0/24 maxlen: 24 109.248.160.0/24 maxlen: 24 109.248.161.0/24 maxlen: 24 109.248.162.0/24 maxlen: 24 109.248.163.0/24 maxlen: 24 188.130.154.0/24 maxlen: 24 188.130.206.0/24 maxlen: 32 188.130.207.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5a:b7:ab:40:d0:8a:c0:65:5d:fe:10:a0:ca:83:e3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Nov 6 19:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=10b008f543d59a31424946e8eba8c6b7950223c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:44:e4:91:c3:8f:d4:a0:a3:10:89:f2:ab: 25:3a:56:e5:9e:72:95:bf:06:fb:d7:4f:28:a6:0c: 01:b7:94:d2:0d:04:52:67:7d:e0:f8:59:c8:5d:0f: c8:4e:f9:23:79:7e:69:5d:fa:76:66:8d:35:cf:83: 35:53:ea:5d:d4:8f:7a:a5:92:79:46:be:34:b6:bf: 86:d7:f8:54:b8:c9:e4:b4:86:3c:1a:4d:ac:63:1f: 11:00:ec:4d:3e:cf:48:96:f9:05:0d:ca:19:4b:1f: b7:40:e7:b7:39:83:82:86:b2:5a:41:af:80:6e:28: 98:23:1c:a5:ee:64:e0:65:83:f0:34:48:4a:e2:11: 57:b9:b6:a0:52:47:79:f3:90:33:0b:64:c3:91:63: 15:f1:64:5d:92:ca:af:29:9d:21:57:74:c6:e8:36: 10:69:cb:a6:ce:ef:e1:2f:4e:7e:66:7d:be:5e:ea: 9c:30:cc:5b:41:46:8d:b8:82:a5:6a:11:12:c5:82: c5:d1:99:ca:cd:39:57:86:3f:fb:a4:f1:49:e4:7a: 26:f4:de:9d:72:f4:88:2b:60:59:20:37:23:9c:76: 02:f8:8a:fa:28:9b:17:69:b2:ef:9e:3c:c9:f8:a7: f6:59:58:b2:a4:79:d0:c8:42:88:c1:bc:e9:f7:28: f6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B0:08:F5:43:D5:9A:31:42:49:46:E8:EB:A8:C6:B7:95:02:23:C5 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ELAI9UPVmjFCSUbo66jGt5UCI8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.64.0/24 46.8.224.0/21 46.8.236.0-46.8.238.255 95.182.101.0/24 95.182.114.0-95.182.116.255 109.248.160.0/22 188.130.154.0/24 188.130.206.0/23 Signature Algorithm: sha256WithRSAEncryption 09:b9:43:9b:ee:e0:64:37:a8:01:f4:06:f3:31:1e:82:e5:ad: 88:f3:2c:23:98:a0:4e:9d:ee:fb:b0:7b:da:04:26:f3:2b:c0: 03:89:ae:ad:cf:4e:8f:d4:e5:2c:56:32:81:66:cc:76:b2:00: c5:70:4c:b0:13:fe:49:91:24:5d:6c:e8:d4:80:06:29:6e:08: dd:1f:bf:d9:00:1e:95:d2:8a:8b:99:82:89:04:d0:fe:c9:aa: c0:d5:8a:4f:11:bd:5a:67:de:25:6b:06:2e:96:0f:e3:64:ad: f2:2f:c6:9e:b6:2e:d4:07:e0:3b:a5:d0:79:ae:f3:84:6d:f6: 3f:54:84:7b:c0:a0:f6:b9:a8:b5:53:ac:09:b7:aa:e5:1c:d3: 14:b0:0b:dc:b4:b7:d8:10:8b:17:3d:61:51:83:d6:c9:13:c9: 07:83:23:40:ef:63:0c:7e:05:0c:c8:2a:d4:c7:9d:81:eb:c8: a5:14:5b:f6:74:16:03:c6:ba:13:62:18:e7:c1:93:32:61:c0: b9:a9:c1:ef:fe:68:cd:c9:59:b0:79:34:33:ee:84:4f:d1:75: 7e:26:a8:8e:3f:17:f9:f4:5c:65:0d:f1:e8:c5:a9:4c:c4:b7: 20:bf:3b:ab:74:fd:1d:10:49:ce:db:0c:ba:be:3a:de:d2:55: bb:ba:b0:e5 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZpat6tA0IrAZV3+EKDKg+PLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjUxMTA2MTk0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGIwMDhmNTQzZDU5YTMxNDI0OTQ2ZThlYmE4YzZiNzk1MDIyM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGtE5JHDj9SgoxCJ8qslOlblnnKV vwb7108opgwBt5TSDQRSZ33g+FnIXQ/ITvkjeX5pXfp2Zo01z4M1U+pd1I96pZJ5 Rr40tr+G1/hUuMnktIY8Gk2sYx8RAOxNPs9IlvkFDcoZSx+3QOe3OYOChrJaQa+A biiYIxyl7mTgZYPwNEhK4hFXubagUkd585AzC2TDkWMV8WRdksqvKZ0hV3TG6DYQ acumzu/hL05+Zn2+XuqcMMxbQUaNuIKlahESxYLF0ZnKzTlXhj/7pPFJ5Hom9N6d cvSIK2BZIDcjnHYC+Ir6KJsXabLvnjzJ+Kf2WViypHnQyEKIwbzp9yj2AQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFBCwCPVD1ZoxQklG6OuoxreVAiPFMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvRUxBSTlVUFZtakZDU1VibzY2akd0NVVDSThVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQALghAAwQD LgjgMAwDBAIuCOwDBAAuCO4DBABftmUwDAMEAV+2cgMEAF+2dAMEAm34oAMEALyC mgMEAbyCzjANBgkqhkiG9w0BAQsFAAOCAQEACblDm+7gZDeoAfQG8zEeguWtiPMs I5igTp3u+7B72gQm8yvAA4murc9Oj9TlLFYygWbMdrIAxXBMsBP+SZEkXWzo1IAG KW4I3R+/2QAeldKKi5mCiQTQ/smqwNWKTxG9WmfeJWsGLpYP42St8i/GnrYu1Afg O6XQea7zhG32P1SEe8Cg9rmotVOsCbeq5RzTFLAL3LS32BCLFz1hUYPWyRPJB4Mj QO9jDH4FDMgq1MedgevIpRRb9nQWA8a6E2IY58GTMmHAuanB7/5ozclZsHk0M+6E T9F1fiaojj8X+fRcZQ3x6MWpTMS3IL87q3T9HRBJztsMur463tJVu7qw5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:07:11 2025 by rpki-client