This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ELslBOHBv5-XcSLv7x75wO-bv90.roa File: ELslBOHBv5-XcSLv7x75wO-bv90.roa (raw, json) Hash identifier: Zouws+HHuZn3NgZqtXkIn5fTWW558EOwtiy7/SfjSEY= Subject key identifier: 10:BB:25:04:E1:C1:BF:9F:97:71:22:EF:EF:1E:F9:C0:EF:9B:BF:DD Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019A86EE56D5E2A6C038F81D8D4BD6FC7D68 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ELslBOHBv5-XcSLv7x75wO-bv90.roa Signing time: Sat 15 Nov 2025 09:52:38 +0000 ROA not before: Sat 15 Nov 2025 09:52:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 158.173.195.0/24 maxlen: 24 158.173.200.0/24 maxlen: 24 158.173.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:86:ee:56:d5:e2:a6:c0:38:f8:1d:8d:4b:d6:fc:7d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Nov 15 09:52:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=10bb2504e1c1bf9f977122efef1ef9c0ef9bbfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:54:c8:ae:2a:bd:3c:58:5d:ba:91:9f:95:69: be:58:6a:7d:37:40:27:8d:69:57:a2:cf:45:82:79: d1:8b:3c:64:96:f7:2d:12:fc:85:69:4b:92:67:7e: 7a:58:85:b4:a8:48:93:28:e6:84:ba:2e:42:53:48: dc:28:22:15:97:e4:c9:5d:ad:1b:21:b8:69:41:ec: e5:7f:d3:e5:5e:65:84:73:07:fc:be:9c:31:c5:67: 1d:1e:d4:8b:e1:a9:44:4d:48:04:89:57:85:84:16: 5d:a3:e6:51:22:f2:95:c0:dd:4b:92:2f:da:2c:b5: 37:5c:27:09:d8:35:b7:a6:de:05:16:33:92:64:cf: b1:f4:a5:df:6d:be:24:3f:ec:18:3b:5f:9a:4c:c2: d2:a4:62:3a:59:9d:82:3e:16:f7:be:7d:c8:10:d0: 5d:70:c0:6b:a2:aa:bc:3f:ce:cf:11:70:46:7c:9c: 94:18:85:b1:c4:19:db:f7:44:2e:85:92:5e:7a:56: 17:2b:9d:9f:ef:82:16:3a:20:6e:df:3e:27:05:d1: 20:62:01:39:90:8a:e5:26:1c:35:5e:9d:45:b3:11: 32:74:ec:f9:02:f0:c5:a9:d0:c9:97:49:f3:4e:0b: 61:b6:cd:d3:c8:a6:5c:59:61:99:79:3a:15:89:fc: 08:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BB:25:04:E1:C1:BF:9F:97:71:22:EF:EF:1E:F9:C0:EF:9B:BF:DD X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ELslBOHBv5-XcSLv7x75wO-bv90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.195.0/24 158.173.200.0/24 158.173.210.0/24 Signature Algorithm: sha256WithRSAEncryption 82:38:9e:03:f5:64:4b:a8:28:f4:3b:23:d3:3c:9f:ab:d0:c9: 06:6b:a9:5a:a0:ab:fe:76:d6:fa:bc:43:a4:86:27:54:3a:b9: 79:a9:fd:89:de:d5:b9:82:31:ba:67:ee:3b:15:98:f5:76:56: 89:7a:6a:e9:6d:98:3f:15:18:8c:42:0d:c6:0f:65:59:e7:ac: 18:68:7f:dc:95:97:8f:be:09:f1:78:69:76:72:30:bf:08:c3: 2d:73:f7:85:8d:a1:73:5c:23:e1:c4:88:c9:ae:49:ff:a5:16: 9b:eb:76:2b:be:cd:dd:67:fa:25:2b:6f:05:fa:fd:30:d5:cc: 17:19:23:54:05:b1:f5:28:8e:46:94:c5:ce:fa:73:b2:41:c6: 4c:21:3c:c1:43:72:a2:f6:93:e8:fb:0e:af:4a:71:65:78:bc: c5:6b:c0:af:be:2b:63:18:f8:61:a1:0c:54:74:ec:a2:85:92: 48:bc:f1:dd:1f:fd:13:66:ee:d2:34:59:86:2f:eb:88:b8:68: b6:6e:bf:21:57:ce:a2:3c:af:7f:56:88:d5:02:f2:b2:c3:77: 93:19:f9:a0:24:d7:e9:1c:1b:3a:3c:1f:4f:1b:2b:da:f0:7e: 48:9b:39:ee:00:51:aa:a0:c7:1b:12:5e:66:04:6e:83:8e:d4: 1d:04:b0:a4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqG7lbV4qbAOPgdjUvW/H1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMTE1MDk1MjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGJiMjUwNGUxYzFiZjlmOTc3MTIyZWZlZjFlZjljMGVmOWJiZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lTIriq9PFhdupGflWm+WGp9N0An jWlXos9FgnnRizxklvctEvyFaUuSZ356WIW0qEiTKOaEui5CU0jcKCIVl+TJXa0b IbhpQezlf9PlXmWEcwf8vpwxxWcdHtSL4alETUgEiVeFhBZdo+ZRIvKVwN1Lki/a LLU3XCcJ2DW3pt4FFjOSZM+x9KXfbb4kP+wYO1+aTMLSpGI6WZ2CPhb3vn3IENBd cMBroqq8P87PEXBGfJyUGIWxxBnb90QuhZJeelYXK52f74IWOiBu3z4nBdEgYgE5 kIrlJhw1Xp1FsxEydOz5AvDFqdDJl0nzTgthts3TyKZcWWGZeToVifwI3wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBC7JQThwb+fl3Ei7+8e+cDvm7/dMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvRUxzbEJPSEJ2NS1YY1NMdjd4NzV3Ty1idjkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnq3DAwQA nq3IAwQAnq3SMA0GCSqGSIb3DQEBCwUAA4IBAQCCOJ4D9WRLqCj0OyPTPJ+r0MkG a6laoKv+dtb6vEOkhidUOrl5qf2J3tW5gjG6Z+47FZj1dlaJemrpbZg/FRiMQg3G D2VZ56wYaH/clZePvgnxeGl2cjC/CMMtc/eFjaFzXCPhxIjJrkn/pRab63Yrvs3d Z/olK28F+v0w1cwXGSNUBbH1KI5GlMXO+nOyQcZMITzBQ3Ki9pPo+w6vSnFleLzF a8CvvitjGPhhoQxUdOyihZJIvPHdH/0TZu7SNFmGL+uIuGi2br8hV86iPK9/VojV AvKyw3eTGfmgJNfpHBs6PB9PGyva8H5ImznuAFGqoMcbEl5mBG6DjtQdBLCk -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:44 2025 by rpki-client