This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/elu1abDHd3RfzpApGEKnDnwdAcI.roa File: elu1abDHd3RfzpApGEKnDnwdAcI.roa (raw, json) Hash identifier: HHOSPK0nfYS+xwtq8H1DXb/qJlWmVpm7P0B6dxlEAcU= Subject key identifier: 7A:5B:B5:69:B0:C7:77:74:5F:CE:90:29:18:42:A7:0E:7C:1D:01:C2 Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076 Certificate serial: 019B7C1284E0B33F3D083B4A656CA0640D7A Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/elu1abDHd3RfzpApGEKnDnwdAcI.roa Signing time: Fri 02 Jan 2026 00:19:07 +0000 ROA not before: Fri 02 Jan 2026 00:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214009 IP address blocks: 2a01:ee80:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:84:e0:b3:3f:3d:08:3b:4a:65:6c:a0:64:0d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076 Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a5bb569b0c777745fce90291842a70e7c1d01c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e4:62:a9:c7:e9:5d:2c:b3:da:b5:46:10:dc: 15:57:e7:b3:c3:0e:5b:6a:96:22:0a:f2:7f:f3:e5: d6:d3:d8:c3:8e:dc:45:58:a3:6f:47:3b:e1:d3:bf: 04:e1:bb:08:50:4f:fd:47:fc:ca:49:86:71:3a:cd: 1d:dc:e1:7e:86:6e:7f:a5:d3:94:2b:af:75:15:80: 6d:e3:e5:f0:11:0f:9a:a9:7c:4c:e7:ce:da:2f:e5: 41:95:5b:d6:05:89:01:ba:df:e7:e8:f7:1b:02:30: c5:79:ce:c8:f4:a0:13:26:ad:60:a5:eb:7f:28:d1: f8:bc:21:39:b7:7f:4a:fa:83:a8:e9:f5:8b:60:97: 2a:ea:63:85:31:aa:4c:dd:87:5e:28:41:25:c2:64: e1:a8:0b:26:e6:e4:1b:2c:9f:b8:35:1a:04:c5:1f: df:ef:e6:00:3a:72:46:8d:6d:db:ff:f4:e8:6d:6c: ac:ca:f0:56:d2:a1:ed:da:cf:e4:6a:63:01:87:a7: ea:ac:74:a0:03:c7:7e:b3:72:dd:d8:ad:48:14:6d: ea:aa:31:86:a6:9b:c5:50:37:59:f2:98:3b:00:6c: f6:7c:3f:17:a8:21:da:d5:a2:d0:ce:06:29:42:2d: ac:07:15:7e:22:fb:4d:4e:ac:bb:ab:67:d6:09:2d: 9d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5B:B5:69:B0:C7:77:74:5F:CE:90:29:18:42:A7:0E:7C:1D:01:C2 X509v3 Authority Key Identifier: keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/elu1abDHd3RfzpApGEKnDnwdAcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ee80:dead::/48 Signature Algorithm: sha256WithRSAEncryption 10:4d:c8:30:c7:ab:0d:c0:ee:b9:5c:ba:9f:00:5e:00:fb:0d: 3c:56:af:df:63:8a:1b:f3:72:b5:fa:f9:cb:18:f0:dd:9d:26: ae:5b:24:f5:57:b7:df:7d:e7:d2:84:06:ab:23:bc:4a:4c:e3: a5:fd:1b:e5:59:af:55:73:1f:58:82:42:25:73:63:cb:98:6e: 93:62:b8:aa:c3:2d:08:be:50:71:5b:df:a8:99:ae:2b:f7:7c: 25:2c:ed:14:1d:f1:35:fc:4f:1d:9d:b0:19:fc:12:c1:10:5c: c6:22:f6:15:38:06:52:47:e2:7b:3f:27:c6:20:9e:2f:cc:e5: 7c:f7:ec:ce:34:c2:71:25:97:01:94:14:87:43:fc:1f:f2:39: d0:ba:23:20:05:e3:52:4e:fb:c3:96:69:f0:07:a3:0a:04:e0: d5:a7:9d:df:65:11:43:52:e5:15:68:0a:5c:99:6e:82:be:80: c3:05:4d:8c:72:ed:95:e0:4d:fd:cf:60:95:7a:21:1a:af:e9: b1:34:63:6e:6b:15:a5:ae:6a:ad:60:99:5d:84:da:36:ef:7a: ea:9b:7f:a5:59:2e:49:4b:ed:7d:5d:15:b9:d6:3a:b4:01:3a: 22:08:f2:e5:de:98:1c:94:f5:41:79:7d:cb:e5:ec:ec:de:5b: 9f:ec:48:f1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EoTgsz89CDtKZWygZA16MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDI1ZmEzNTdjMjBhYmJmMTE4NDI2MjM0NjU4ZTYyZDdk YzcwNzYwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTViYjU2OWIwYzc3Nzc0NWZjZTkwMjkxODQyYTcwZTdjMWQwMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+RiqcfpXSyz2rVGENwVV+ezww5b apYiCvJ/8+XW09jDjtxFWKNvRzvh078E4bsIUE/9R/zKSYZxOs0d3OF+hm5/pdOU K691FYBt4+XwEQ+aqXxM587aL+VBlVvWBYkBut/n6PcbAjDFec7I9KATJq1gpet/ KNH4vCE5t39K+oOo6fWLYJcq6mOFMapM3YdeKEElwmThqAsm5uQbLJ+4NRoExR/f 7+YAOnJGjW3b//TobWysyvBW0qHt2s/kamMBh6fqrHSgA8d+s3Ld2K1IFG3qqjGG ppvFUDdZ8pg7AGz2fD8XqCHa1aLQzgYpQi2sBxV+IvtNTqy7q2fWCS2dzwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHpbtWmwx3d0X86QKRhCpw58HQHCMB8GA1UdIwQY MBaAFA8CX6NXwgq78RhCYjRljmLX3HB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2Ut ZDRkNTlhMDk1YzdmLzEvZWx1MWFiREhkM1JmenBBcEdFS25EbndkQWNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2UtZDRkNTlhMDk1Yzdm LzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgHugN6t MA0GCSqGSIb3DQEBCwUAA4IBAQAQTcgwx6sNwO65XLqfAF4A+w08Vq/fY4ob83K1 +vnLGPDdnSauWyT1V7fffefShAarI7xKTOOl/RvlWa9Vcx9YgkIlc2PLmG6TYriq wy0IvlBxW9+oma4r93wlLO0UHfE1/E8dnbAZ/BLBEFzGIvYVOAZSR+J7PyfGIJ4v zOV89+zONMJxJZcBlBSHQ/wf8jnQuiMgBeNSTvvDlmnwB6MKBODVp53fZRFDUuUV aApcmW6CvoDDBU2Mcu2V4E39z2CVeiEar+mxNGNuaxWlrmqtYJldhNo273rqm3+l WS5JS+19XRW51jq0AToiCPLl3pgclPVBeX3L5ezs3luf7Ejx -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:59 2026 by rpki-client