This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/ElTViivmjGxEdxaxj11VFkP14YI.roa File: ElTViivmjGxEdxaxj11VFkP14YI.roa (raw, json) Hash identifier: YUVaRGC2xsx0b6XubgQiQ6H3U/a4QTrhpMWWRuXADx4= Subject key identifier: 12:54:D5:8A:2B:E6:8C:6C:44:77:16:B1:8F:5D:55:16:43:F5:E1:82 Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2 Certificate serial: 019B7DCB2832991F5114846E25AD974DEDBB Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/ElTViivmjGxEdxaxj11VFkP14YI.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210251 IP address blocks: 5.1.120.0/23 maxlen: 23 2a02:e740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:28:32:99:1f:51:14:84:6e:25:ad:97:4d:ed:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1254d58a2be68c6c447716b18f5d551643f5e182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:6b:85:e5:2c:0d:ba:33:37:a3:a6:b0:6d: f5:3e:3f:2e:69:1f:22:fa:d7:31:ce:47:b8:bb:4b: f4:ff:d9:9a:84:77:74:c9:ba:a0:56:93:5d:e2:ae: e8:4d:a1:8d:ee:61:96:8a:ab:b0:ea:95:71:f9:2c: ac:a9:be:76:b9:4a:cd:7c:26:6d:63:0d:1b:e8:82: 68:a3:ff:bb:44:f2:94:44:72:89:e5:27:3e:af:b2: 3f:98:7a:10:62:11:53:31:5b:88:83:3f:f6:40:af: a0:33:f2:67:de:60:a0:75:60:d3:d8:a4:da:cd:c1: cb:a1:dc:b1:fd:70:08:ca:67:6a:5f:63:3f:8a:eb: 6a:e8:3e:d5:a7:74:5c:5d:6d:dc:c0:e2:ce:83:c0: f8:a3:e4:41:32:ba:45:56:73:09:b0:c5:79:17:00: fd:41:11:3f:16:1e:6f:74:8a:56:d4:47:55:35:7b: 68:f5:13:01:a7:08:8b:fc:18:38:3d:61:a4:c8:07: 22:6e:a6:74:4e:af:a5:ea:a8:c1:8a:b0:20:07:bf: 99:d0:ea:0e:17:d7:c2:2a:37:b3:27:dc:a7:52:63: cb:38:1d:b0:ab:4e:08:d5:7c:d6:1d:a3:48:ee:1f: 3b:d9:5c:1a:af:fd:09:e2:97:4e:3c:72:ff:2c:b9: 71:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:54:D5:8A:2B:E6:8C:6C:44:77:16:B1:8F:5D:55:16:43:F5:E1:82 X509v3 Authority Key Identifier: keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/ElTViivmjGxEdxaxj11VFkP14YI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.120.0/23 IPv6: 2a02:e740::/48 Signature Algorithm: sha256WithRSAEncryption 7a:6a:1d:8b:d8:f0:ed:89:4c:e5:e6:48:c7:0c:78:37:37:1f: 20:07:1e:47:d2:23:15:19:9a:b0:77:92:c0:84:c2:a7:b6:98: ba:fd:82:0c:5e:0e:39:b2:be:9d:75:2e:05:71:39:6a:76:6a: 83:de:f4:df:2c:72:cf:8b:af:95:4e:98:a7:b1:a7:99:e8:bf: 03:38:79:2c:1a:78:44:82:39:10:44:47:c1:02:5f:87:7e:87: 52:f2:60:79:4e:dc:a8:e1:00:94:60:34:bc:2e:c0:ec:97:3f: af:ce:c7:8d:04:84:48:21:c7:0b:1f:58:33:e1:3b:49:1a:cb: 76:73:ca:16:8c:bc:bf:71:f8:66:03:ca:31:c6:f4:9d:6e:7e: 52:02:97:b1:35:cb:4a:d9:ab:13:11:b2:73:a5:20:ec:b0:0c: fa:cc:e0:09:21:d5:23:e9:54:00:be:9e:39:6a:64:49:5c:ea: 6f:5d:fd:69:ab:f8:39:0d:1b:b3:5f:30:ff:8a:10:56:27:8c: 49:e1:04:e2:69:36:c5:d7:48:b7:7e:3b:74:61:b6:1f:5a:6b: 66:a1:fc:ec:88:0f:a9:22:f5:74:55:15:18:da:0d:15:c7:7a: c6:12:c6:9b:f4:1d:85:e3:ca:82:3c:a0:f7:85:5d:8a:2c:a9: 34:5f:35:dd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yygymR9RFIRuJa2XTe27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3Zjk1OGMzYjc1OWIyYzc4OTZmNWVkNjYzZTgwNzc4MWYz ZmY1YTIwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjU0ZDU4YTJiZTY4YzZjNDQ3NzE2YjE4ZjVkNTUxNjQzZjVlMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9trheUsDbozN6OmsG31Pj8uaR8i +tcxzke4u0v0/9mahHd0ybqgVpNd4q7oTaGN7mGWiquw6pVx+Sysqb52uUrNfCZt Yw0b6IJoo/+7RPKURHKJ5Sc+r7I/mHoQYhFTMVuIgz/2QK+gM/Jn3mCgdWDT2KTa zcHLodyx/XAIymdqX2M/iutq6D7Vp3RcXW3cwOLOg8D4o+RBMrpFVnMJsMV5FwD9 QRE/Fh5vdIpW1EdVNXto9RMBpwiL/Bg4PWGkyAcibqZ0Tq+l6qjBirAgB7+Z0OoO F9fCKjezJ9ynUmPLOB2wq04I1XzWHaNI7h872Vwar/0J4pdOPHL/LLlx5wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBJU1Yor5oxsRHcWsY9dVRZD9eGCMB8GA1UdIwQY MBaAFCf5WMO3WbLHiW9e1mPoB3gfP/WiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYt YjI5MTA3Yjk4YWNjLzEvRWxUVmlpdm1qR3hFZHhheGoxMVZGa1AxNFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYtYjI5MTA3Yjk4YWNj LzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBBQF4MA8E AgACMAkDBwAqAudAAAAwDQYJKoZIhvcNAQELBQADggEBAHpqHYvY8O2JTOXmSMcM eDc3HyAHHkfSIxUZmrB3ksCEwqe2mLr9ggxeDjmyvp11LgVxOWp2aoPe9N8scs+L r5VOmKexp5novwM4eSwaeESCORBER8ECX4d+h1LyYHlO3KjhAJRgNLwuwOyXP6/O x40EhEghxwsfWDPhO0kay3ZzyhaMvL9x+GYDyjHG9J1uflICl7E1y0rZqxMRsnOl IOywDPrM4Akh1SPpVAC+njlqZElc6m9d/Wmr+DkNG7NfMP+KEFYnjEnhBOJpNsXX SLd+O3Rhth9aa2ah/OyID6ki9XRVFRjaDRXHesYSxpv0HYXjyoI8oPeFXYosqTRf Nd0= -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:45 2026 by rpki-client