This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/ElXiaB3X6qAs67WxyQYZd1mLOZ0.roa File: ElXiaB3X6qAs67WxyQYZd1mLOZ0.roa (raw, json) Hash identifier: qnDHUDsWqgYIl3iDoMNVFoilZ0R20jtQvK+Y5Fm/rYg= Subject key identifier: 12:55:E2:68:1D:D7:EA:A0:2C:EB:B5:B1:C9:06:19:77:59:8B:39:9D Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019B7A5B69C21F61A7BE74797C00C3ED8F3B Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/ElXiaB3X6qAs67WxyQYZd1mLOZ0.roa Signing time: Thu 01 Jan 2026 16:19:29 +0000 ROA not before: Thu 01 Jan 2026 16:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28685 IP address blocks: 145.128.128.0/19 maxlen: 19 145.128.160.0/19 maxlen: 19 145.128.192.0/19 maxlen: 19 145.128.224.0/19 maxlen: 19 145.131.64.0/18 maxlen: 18 145.131.128.0/19 maxlen: 19 145.131.160.0/19 maxlen: 19 145.131.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:69:c2:1f:61:a7:be:74:79:7c:00:c3:ed:8f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1255e2681dd7eaa02cebb5b1c9061977598b399d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:98:53:79:e2:73:a7:60:af:62:9d:5a:63: 9a:22:5e:9b:51:aa:13:3b:e8:64:9b:8e:b8:e5:af: 86:9b:5e:ef:4a:44:0c:c7:4b:61:37:55:33:df:72: 03:a9:e5:c4:e5:06:ac:1d:b6:60:7d:7a:4e:3e:49: 14:a7:d3:87:9b:9b:17:28:06:16:1d:72:a2:2d:31: 82:83:04:64:5f:a6:4a:10:b9:be:83:8d:76:cd:2d: 05:6f:dc:9e:44:cd:c3:c2:cd:1b:44:91:d7:09:d4: 6d:10:07:f1:47:1d:d6:c3:30:0c:e4:bb:14:21:c4: 6d:9b:44:11:47:b5:f5:b1:b5:bc:4c:1b:da:27:63: 65:95:a4:a4:08:59:db:ed:c1:6b:7a:eb:c7:c9:ec: 4f:11:cc:1f:13:89:60:31:f8:ab:d0:87:1c:cc:0a: e3:94:fb:74:83:dd:36:33:34:65:76:7c:ee:2e:8d: 42:6c:fd:90:a9:47:25:a9:a5:39:a9:0c:b4:2a:d1: 43:13:7d:b3:a7:b8:d7:00:fb:3f:2d:dd:bf:1c:56: 2f:eb:2c:98:05:1e:1c:39:fa:b2:da:34:16:26:fc: 9c:4b:ae:e5:3c:be:a7:53:6b:75:b2:b6:00:16:6a: b5:17:2d:3a:2a:08:8c:b3:34:76:6f:de:b4:19:88: 2e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:55:E2:68:1D:D7:EA:A0:2C:EB:B5:B1:C9:06:19:77:59:8B:39:9D X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/ElXiaB3X6qAs67WxyQYZd1mLOZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.128.128.0/17 145.131.64.0-145.131.255.255 Signature Algorithm: sha256WithRSAEncryption 66:5f:33:04:74:76:d5:5f:ad:a3:dc:14:9d:7a:64:95:e6:62: c3:f0:e7:18:5d:ba:9c:4d:e7:64:19:2b:aa:39:ca:0b:92:f2: 41:b0:7b:17:90:23:2e:13:b8:59:d1:97:88:21:50:ee:d8:30: d2:70:d3:ef:19:dc:3a:5f:28:b6:e9:ea:3c:33:1c:3e:d3:f9: dd:bf:65:d0:b3:dc:f8:50:f0:13:a3:69:8d:64:d2:2c:5a:10: d6:22:75:67:7c:69:ec:1d:3a:42:e4:67:8f:2a:36:9c:db:97: 21:5c:8b:3f:80:f9:f9:9a:e4:97:92:f2:e4:3a:9f:c1:bc:c0: a2:65:ef:4f:0b:d1:41:f2:99:d7:f4:f6:42:c2:8c:f8:ec:1d: df:e1:3f:8e:3e:5a:eb:a3:47:c1:07:07:17:cb:ba:01:0f:fb: 4f:88:49:49:36:b2:7d:68:cd:25:65:4f:5f:ba:f9:40:39:a6: 7c:dc:16:5b:5b:9c:a8:57:f3:42:ad:25:b6:d1:7f:21:b6:27: 36:96:56:00:26:16:d6:34:90:b3:43:1d:80:da:47:89:bd:3c: 64:9f:a1:32:81:88:f3:52:8d:c5:a6:6f:01:0d:53:1e:33:93: 4f:72:2c:a1:be:b9:3d:a5:8f:ea:76:92:26:0b:34:b7:8a:4d: 56:6e:9e:f5 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt6W2nCH2GnvnR5fADD7Y87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjU1ZTI2ODFkZDdlYWEwMmNlYmI1YjFjOTA2MTk3NzU5OGIzOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H2YU3nic6dgr2KdWmOaIl6bUaoT O+hkm4645a+Gm17vSkQMx0thN1Uz33IDqeXE5QasHbZgfXpOPkkUp9OHm5sXKAYW HXKiLTGCgwRkX6ZKELm+g412zS0Fb9yeRM3Dws0bRJHXCdRtEAfxRx3WwzAM5LsU IcRtm0QRR7X1sbW8TBvaJ2NllaSkCFnb7cFreuvHyexPEcwfE4lgMfir0IcczArj lPt0g902MzRldnzuLo1CbP2QqUclqaU5qQy0KtFDE32zp7jXAPs/Ld2/HFYv6yyY BR4cOfqy2jQWJvycS67lPL6nU2t1srYAFmq1Fy06KgiMszR2b960GYguyQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFBJV4mgd1+qgLOu1sckGGXdZizmdMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvRWxYaWFCM1g2cUFzNjdXeHlRWVpkMW1MT1owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQHkYCAMAsD BAaRg0ADAwKRgDANBgkqhkiG9w0BAQsFAAOCAQEAZl8zBHR21V+to9wUnXpkleZi w/DnGF26nE3nZBkrqjnKC5LyQbB7F5AjLhO4WdGXiCFQ7tgw0nDT7xncOl8otunq PDMcPtP53b9l0LPc+FDwE6NpjWTSLFoQ1iJ1Z3xp7B06QuRnjyo2nNuXIVyLP4D5 +Zrkl5Ly5DqfwbzAomXvTwvRQfKZ1/T2QsKM+Owd3+E/jj5a66NHwQcHF8u6AQ/7 T4hJSTayfWjNJWVPX7r5QDmmfNwWW1ucqFfzQq0lttF/IbYnNpZWACYW1jSQs0Md gNpHib08ZJ+hMoGI81KNxaZvAQ1THjOTT3Isob65PaWP6naSJgs0t4pNVm6e9Q== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:25 2026 by rpki-client