This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/EltWU6BPMuO1ItcZzbbDLhGIcyw.roa File: EltWU6BPMuO1ItcZzbbDLhGIcyw.roa (raw, json) Hash identifier: ErznFfmY/TRRK13oDADB0v3OAux59FUBMiU3vqEPAWQ= Subject key identifier: 12:5B:56:53:A0:4F:32:E3:B5:22:D7:19:CD:B6:C3:2E:11:88:73:2C Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095 Certificate serial: 019AA322C28BD782DD9B3A251C2CB5D5DAB0 Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/EltWU6BPMuO1ItcZzbbDLhGIcyw.roa Signing time: Thu 20 Nov 2025 21:19:15 +0000 ROA not before: Thu 20 Nov 2025 21:19:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33915 IP address blocks: 24.132.0.0/16 maxlen: 16 24.132.0.0/17 maxlen: 17 24.132.128.0/17 maxlen: 17 31.151.0.0/16 maxlen: 16 31.151.0.0/17 maxlen: 17 31.151.128.0/17 maxlen: 17 46.129.0.0/16 maxlen: 16 46.129.0.0/17 maxlen: 17 46.129.128.0/17 maxlen: 17 62.100.0.0/18 maxlen: 18 62.108.0.0/19 maxlen: 19 62.108.0.0/20 maxlen: 20 62.108.16.0/20 maxlen: 20 62.163.0.0/16 maxlen: 16 62.163.0.0/17 maxlen: 17 62.163.128.0/17 maxlen: 17 62.194.0.0/15 maxlen: 15 62.194.0.0/16 maxlen: 16 62.195.0.0/16 maxlen: 16 77.248.0.0/14 maxlen: 14 77.248.0.0/15 maxlen: 15 77.250.0.0/15 maxlen: 15 80.56.0.0/15 maxlen: 15 80.56.0.0/16 maxlen: 16 80.57.0.0/16 maxlen: 16 80.85.32.0/20 maxlen: 20 80.113.0.0/16 maxlen: 16 80.113.0.0/17 maxlen: 17 80.113.128.0/17 maxlen: 17 80.248.32.0/20 maxlen: 20 80.248.32.0/21 maxlen: 21 80.248.40.0/21 maxlen: 21 81.175.64.0/18 maxlen: 18 81.175.64.0/19 maxlen: 19 81.175.96.0/19 maxlen: 19 84.41.128.0/17 maxlen: 17 88.211.128.0/18 maxlen: 18 89.98.0.0/15 maxlen: 15 89.98.0.0/16 maxlen: 16 89.99.0.0/16 maxlen: 16 89.220.0.0/17 maxlen: 17 92.108.0.0/14 maxlen: 14 92.108.0.0/15 maxlen: 15 92.110.0.0/15 maxlen: 15 95.96.0.0/15 maxlen: 15 95.96.0.0/16 maxlen: 16 95.97.0.0/16 maxlen: 16 178.84.0.0/15 maxlen: 15 178.84.0.0/16 maxlen: 16 178.85.0.0/16 maxlen: 16 185.94.92.0/22 maxlen: 22 185.137.200.0/22 maxlen: 22 185.137.200.0/23 maxlen: 23 185.137.202.0/23 maxlen: 23 195.18.64.0/18 maxlen: 18 212.67.160.0/19 maxlen: 19 212.83.64.0/19 maxlen: 19 212.83.64.0/20 maxlen: 20 212.83.80.0/20 maxlen: 20 212.178.32.0/19 maxlen: 19 212.178.32.0/20 maxlen: 20 212.178.48.0/20 maxlen: 20 212.187.0.0/17 maxlen: 17 212.187.0.0/18 maxlen: 18 212.187.64.0/18 maxlen: 18 213.34.0.0/19 maxlen: 19 213.34.0.0/20 maxlen: 20 213.34.16.0/20 maxlen: 20 213.46.0.0/16 maxlen: 16 213.46.0.0/17 maxlen: 17 213.46.128.0/17 maxlen: 17 213.93.0.0/16 maxlen: 16 213.93.0.0/17 maxlen: 17 213.93.128.0/17 maxlen: 17 213.124.160.0/19 maxlen: 19 213.124.160.0/20 maxlen: 20 213.124.176.0/20 maxlen: 20 213.124.192.0/18 maxlen: 18 213.124.192.0/19 maxlen: 19 213.124.224.0/19 maxlen: 19 213.126.128.0/17 maxlen: 17 213.126.128.0/18 maxlen: 18 213.126.192.0/18 maxlen: 18 213.127.0.0/16 maxlen: 16 213.127.0.0/17 maxlen: 17 213.127.128.0/17 maxlen: 17 213.160.192.0/19 maxlen: 19 213.160.192.0/20 maxlen: 20 213.160.208.0/20 maxlen: 20 213.160.248.0/21 maxlen: 21 213.160.248.0/22 maxlen: 22 213.160.252.0/22 maxlen: 22 217.17.128.0/20 maxlen: 20 217.63.128.0/18 maxlen: 18 217.63.128.0/19 maxlen: 19 217.63.160.0/19 maxlen: 19 217.102.0.0/17 maxlen: 17 217.102.0.0/18 maxlen: 18 217.102.64.0/18 maxlen: 18 217.103.0.0/16 maxlen: 16 217.103.0.0/17 maxlen: 17 217.103.128.0/17 maxlen: 17 217.104.128.0/17 maxlen: 17 217.104.128.0/18 maxlen: 18 217.104.192.0/18 maxlen: 18 217.105.0.0/18 maxlen: 18 217.105.0.0/19 maxlen: 19 217.105.32.0/19 maxlen: 19 217.105.224.0/19 maxlen: 19 217.105.224.0/20 maxlen: 20 217.105.240.0/20 maxlen: 20 217.112.112.0/20 maxlen: 20 2a02:938::/29 maxlen: 29 2a02:a200::/27 maxlen: 27 2a02:a200::/28 maxlen: 28 2a02:a210::/28 maxlen: 28 2a03:4aa0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a3:22:c2:8b:d7:82:dd:9b:3a:25:1c:2c:b5:d5:da:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095 Validity Not Before: Nov 20 21:19:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=125b5653a04f32e3b522d719cdb6c32e1188732c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:aa:99:07:c3:ba:bc:39:bb:06:80:ce:95: 96:b2:a0:2d:2c:d1:8f:f7:2f:b8:da:bf:44:61:57: 66:a4:ea:b2:0b:49:b2:77:00:fa:26:d5:51:d6:ad: 89:e9:ae:89:2c:a5:9c:5f:09:4c:d2:cb:b1:a2:e4: 06:f7:57:b9:4e:a5:27:a6:79:fd:00:db:69:00:33: 3b:24:1c:e8:3c:7f:a5:d3:31:5e:e7:56:af:25:96: db:0a:1d:8b:99:1e:51:84:5d:06:20:66:dc:d4:44: a6:f8:2e:3b:ce:0e:ef:f6:62:39:86:db:2e:38:fb: 08:5c:aa:39:44:cb:89:7e:24:22:37:b5:55:94:d3: 91:e8:a4:78:dd:1b:7e:35:2b:d3:04:cc:65:1a:59: ba:b8:1b:81:25:08:1e:a6:ca:54:9a:e1:43:f7:40: 32:a0:c5:34:69:d2:35:67:54:72:22:4d:2e:56:27: 25:22:d2:40:b6:45:75:85:3e:08:19:aa:ba:72:9d: 48:56:33:91:a7:5f:ca:bb:32:8d:11:e9:5e:1a:23: eb:0e:c9:0d:b9:46:c5:f5:87:34:18:18:63:64:19: 63:de:5c:b1:e0:8e:02:25:af:8d:e1:71:5e:53:87: f8:a9:04:79:f9:23:45:1f:b3:15:a4:2e:52:ff:ab: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5B:56:53:A0:4F:32:E3:B5:22:D7:19:CD:B6:C3:2E:11:88:73:2C X509v3 Authority Key Identifier: keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/EltWU6BPMuO1ItcZzbbDLhGIcyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.132.0.0/16 31.151.0.0/16 46.129.0.0/16 62.100.0.0/18 62.108.0.0/19 62.163.0.0/16 62.194.0.0/15 77.248.0.0/14 80.56.0.0/15 80.85.32.0/20 80.113.0.0/16 80.248.32.0/20 81.175.64.0/18 84.41.128.0/17 88.211.128.0/18 89.98.0.0/15 89.220.0.0/17 92.108.0.0/14 95.96.0.0/15 178.84.0.0/15 185.94.92.0/22 185.137.200.0/22 195.18.64.0/18 212.67.160.0/19 212.83.64.0/19 212.178.32.0/19 212.187.0.0/17 213.34.0.0/19 213.46.0.0/16 213.93.0.0/16 213.124.160.0-213.124.255.255 213.126.128.0-213.127.255.255 213.160.192.0/19 213.160.248.0/21 217.17.128.0/20 217.63.128.0/18 217.102.0.0/17 217.103.0.0/16 217.104.128.0-217.105.63.255 217.105.224.0/19 217.112.112.0/20 IPv6: 2a02:938::/29 2a02:a200::/27 2a03:4aa0::/29 Signature Algorithm: sha256WithRSAEncryption 87:69:81:aa:d2:79:da:8b:f4:45:19:68:8f:27:17:ba:04:ca: 41:43:33:25:b8:b2:39:33:31:31:88:72:31:92:66:6b:b4:6b: 69:f7:24:c6:ea:7d:ed:67:cf:b4:7f:93:4e:27:93:d8:cb:23: 8d:af:e7:46:76:eb:19:fd:86:a3:68:9c:cf:8f:19:60:e0:bf: 2a:48:48:d1:d2:ba:0d:5f:71:bd:16:ae:a1:71:42:79:2a:71: c9:79:37:2c:c5:9c:cf:4a:3a:35:21:d0:a8:61:19:9f:fb:d8: 6c:76:f0:fa:7a:63:52:6d:66:72:d4:9e:55:84:01:82:c4:ad: 82:5a:42:8d:64:31:c2:af:2c:e4:54:e0:d8:95:3f:1c:21:d9: 41:ec:ec:93:b0:ac:d8:f7:1e:11:1d:0d:6c:bb:d3:46:0c:9f: 7d:4e:93:8b:b2:e1:22:4d:60:17:c2:12:28:a7:aa:ff:a3:e4: b4:6b:e0:91:f5:c6:02:1a:13:42:35:89:7a:af:3c:29:d2:e8: 8d:f5:7d:31:a1:d9:d2:7f:60:31:30:4f:6c:73:9f:d7:c4:ea: 61:7e:b0:34:68:10:c0:27:5b:dc:67:c7:cb:6e:1d:e2:d1:74: c9:48:d0:0e:7e:66:3c:23:3e:eb:b8:a6:78:81:21:22:fb:96: 05:50:44:97 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgISAZqjIsKL14LdmzolHCy11dqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj MmEwOTUwHhcNMjUxMTIwMjExOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjViNTY1M2EwNGYzMmUzYjUyMmQ3MTljZGI2YzMyZTExODg3MzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubyqmQfDurw5uwaAzpWWsqAtLNGP 9y+42r9EYVdmpOqyC0mydwD6JtVR1q2J6a6JLKWcXwlM0suxouQG91e5TqUnpnn9 ANtpADM7JBzoPH+l0zFe51avJZbbCh2LmR5RhF0GIGbc1ESm+C47zg7v9mI5htsu OPsIXKo5RMuJfiQiN7VVlNOR6KR43Rt+NSvTBMxlGlm6uBuBJQgepspUmuFD90Ay oMU0adI1Z1RyIk0uViclItJAtkV1hT4IGaq6cp1IVjORp1/KuzKNEeleGiPrDskN uUbF9Yc0GBhjZBlj3lyx4I4CJa+N4XFeU4f4qQR5+SNFH7MVpC5S/6vRrQIDAQAB o4IDJjCCAyIwHQYDVR0OBBYEFBJbVlOgTzLjtSLXGc22wy4RiHMsMB8GA1UdIwQY MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct MDRkNzRmMzY4Njk4LzEvRWx0V1U2QlBNdU8xSXRjWnpiYkRMaEdJY3l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4 LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOgYIKwYBBQUHAQcBAf8EggEpMIIBJTCCAQQEAgABMIH9 AwMAGIQDAwAflwMDAC6BAwQGPmQAAwQFPmwAAwMAPqMDAwE+wgMDAk34AwMBUDgD BARQVSADAwBQcQMEBFD4IAMEBlGvQAMEB1QpgAMEBljTgAMDAVliAwQHWdwAAwMC XGwDAwFfYAMDAbJUAwQCuV5cAwQCuYnIAwQGwxJAAwQF1EOgAwQF1FNAAwQF1LIg AwQH1LsAAwQF1SIAAwMA1S4DAwDVXTALAwQF1XygAwMA1XwwCwMEB9V+gAMDB9UA AwQF1aDAAwQD1aD4AwQE2RGAAwQG2T+AAwQH2WYAAwMA2WcwDAMEB9logAMEBtlp AAMEBdlp4AMEBNlwcDAbBAIAAjAVAwUDKgIJOAMFBSoCogADBQMqA0qgMA0GCSqG SIb3DQEBCwUAA4IBAQCHaYGq0nnai/RFGWiPJxe6BMpBQzMluLI5MzExiHIxkmZr tGtp9yTG6n3tZ8+0f5NOJ5PYyyONr+dGdusZ/YajaJzPjxlg4L8qSEjR0roNX3G9 Fq6hcUJ5KnHJeTcsxZzPSjo1IdCoYRmf+9hsdvD6emNSbWZy1J5VhAGCxK2CWkKN ZDHCryzkVODYlT8cIdlB7OyTsKzY9x4RHQ1su9NGDJ99TpOLsuEiTWAXwhIop6r/ o+S0a+CR9cYCGhNCNYl6rzwp0uiN9X0xodnSf2AxME9sc5/XxOphfrA0aBDAJ1vc Z8fLbh3i0XTJSNAOfmY8Iz7ruKZ4gSEi+5YFUESX -----END CERTIFICATE-----Generated at Sat Dec 6 16:17:16 2025 by rpki-client