This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/ELUa2vRm_h_Z93KcCk-HcWekDRU.roa File: ELUa2vRm_h_Z93KcCk-HcWekDRU.roa (raw, json) Hash identifier: ZBi1wRd/swMpVPnmEQ6bKzd+xCPdQKaLoo/Wn1BWpb8= Subject key identifier: 10:B5:1A:DA:F4:66:FE:1F:D9:F7:72:9C:0A:4F:87:71:67:A4:0D:15 Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19 Certificate serial: 019B7835002011EF6DA78D39C3AA5E149B34 Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/ELUa2vRm_h_Z93KcCk-HcWekDRU.roa Signing time: Thu 01 Jan 2026 06:18:17 +0000 ROA not before: Thu 01 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214209 IP address blocks: 2a0d:8140:1fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:00:20:11:ef:6d:a7:8d:39:c3:aa:5e:14:9b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19 Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10b51adaf466fe1fd9f7729c0a4f877167a40d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fc:bf:63:1f:2f:66:89:7d:7a:eb:cb:36:09: ba:56:2f:59:87:86:43:e1:97:ca:45:94:a9:4f:f9: 96:71:b3:e2:35:55:93:37:80:8b:5d:0e:6d:c2:6a: e4:52:26:0b:7a:43:6d:c9:1e:7b:2c:17:0b:e6:3d: 13:0f:03:4f:af:2b:48:4a:df:f2:6b:bd:f2:a3:12: 92:9e:84:31:d2:14:e1:d5:6f:ae:34:03:5d:b4:d6: 55:7e:d9:33:19:e2:66:ef:d6:ca:70:5e:1e:53:c9: 06:21:c2:4d:44:b2:e7:e8:a6:f2:2d:3d:01:69:5a: 47:8f:09:98:ba:23:cd:a8:0a:67:07:f5:9d:ff:45: 4c:77:d7:67:63:ce:f0:06:7d:f6:f9:df:a3:97:0e: 7e:6d:49:a1:a0:5e:3e:93:c9:f0:94:0b:c4:87:c7: 05:37:63:03:cc:a7:43:18:17:51:2d:66:19:8a:b2: c3:f7:7c:d5:af:bd:5a:e3:0a:6a:42:9e:9c:e2:db: e3:c1:a7:71:78:7b:d0:70:5f:c7:ea:bb:87:a8:eb: ef:d5:22:15:75:d7:e4:4e:a6:f4:d6:14:b5:d4:4b: f9:22:4a:79:69:82:0e:78:68:f3:84:1a:24:1d:20: de:9c:53:64:04:ac:98:7f:8a:73:82:b9:56:37:18: 8f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B5:1A:DA:F4:66:FE:1F:D9:F7:72:9C:0A:4F:87:71:67:A4:0D:15 X509v3 Authority Key Identifier: keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/ELUa2vRm_h_Z93KcCk-HcWekDRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:8140:1fff::/48 Signature Algorithm: sha256WithRSAEncryption d0:ac:3d:de:18:74:af:93:c3:2b:7b:03:85:a5:9d:87:79:14: 8d:23:0a:84:70:2f:33:e4:7e:3c:78:1b:b2:92:c7:74:2e:fe: a1:22:c7:fa:9b:f5:38:10:56:3a:5a:1d:c1:6f:0f:da:43:a4: 51:07:05:8a:2e:04:99:26:6b:3f:8d:a9:e4:e0:30:cb:fa:ab: 05:fe:2e:8d:b7:9a:e2:0a:c6:7c:35:22:3a:18:d3:c6:c2:53: f4:ba:52:5e:76:69:7a:23:c1:af:b6:98:b4:a4:09:62:1d:9b: b2:f6:35:b8:11:16:41:34:91:a6:f5:77:55:75:15:1e:3d:6b: d9:eb:a1:4f:29:57:6b:1a:db:ed:7e:33:2e:3c:e2:13:fe:24: 50:aa:02:82:25:7d:f5:86:aa:63:fb:9f:65:8d:89:32:2d:bb: 7d:2e:fb:d0:ac:ec:e3:bf:3c:34:52:8d:d1:c4:72:1b:da:45: 82:b4:3a:4a:b2:18:44:64:55:e0:a2:e4:14:dc:cc:0d:bd:8c: 12:b5:f2:8a:ee:c7:b3:a4:a0:df:61:b0:43:a4:56:ca:05:ad: c3:eb:2a:ff:42:f3:b0:5b:d4:bc:a4:4c:e3:15:05:05:f8:d2: 9e:56:7c:33:a8:68:2b:0c:a0:d0:79:d2:51:6e:92:73:e5:84: 20:57:7b:1d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NQAgEe9tp405w6peFJs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz NThkMTkwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGI1MWFkYWY0NjZmZTFmZDlmNzcyOWMwYTRmODc3MTY3YTQwZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfy/Yx8vZol9euvLNgm6Vi9Zh4ZD 4ZfKRZSpT/mWcbPiNVWTN4CLXQ5twmrkUiYLekNtyR57LBcL5j0TDwNPrytISt/y a73yoxKSnoQx0hTh1W+uNANdtNZVftkzGeJm79bKcF4eU8kGIcJNRLLn6KbyLT0B aVpHjwmYuiPNqApnB/Wd/0VMd9dnY87wBn32+d+jlw5+bUmhoF4+k8nwlAvEh8cF N2MDzKdDGBdRLWYZirLD93zVr71a4wpqQp6c4tvjwadxeHvQcF/H6ruHqOvv1SIV ddfkTqb01hS11Ev5Ikp5aYIOeGjzhBokHSDenFNkBKyYf4pzgrlWNxiPbwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBC1Gtr0Zv4f2fdynApPh3FnpA0VMB8GA1UdIwQY MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt YTU2YmRmYWRiODFlLzEvRUxVYTJ2Um1faF9aOTNLY0NrLUhjV2VrRFJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg2BQB// MA0GCSqGSIb3DQEBCwUAA4IBAQDQrD3eGHSvk8MrewOFpZ2HeRSNIwqEcC8z5H48 eBuyksd0Lv6hIsf6m/U4EFY6Wh3Bbw/aQ6RRBwWKLgSZJms/jank4DDL+qsF/i6N t5riCsZ8NSI6GNPGwlP0ulJedml6I8Gvtpi0pAliHZuy9jW4ERZBNJGm9XdVdRUe PWvZ66FPKVdrGtvtfjMuPOIT/iRQqgKCJX31hqpj+59ljYkyLbt9LvvQrOzjvzw0 Uo3RxHIb2kWCtDpKshhEZFXgouQU3MwNvYwStfKK7sezpKDfYbBDpFbKBa3D6yr/ QvOwW9S8pEzjFQUF+NKeVnwzqGgrDKDQedJRbpJz5YQgV3sd -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:32 2026 by rpki-client