This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/elxGqaSSCPzbnna9LphI4AtDmt0.roa File: elxGqaSSCPzbnna9LphI4AtDmt0.roa (raw, json) Hash identifier: NQw7Z6GEsHKzgUP/gKqAvQGVNWTZW1UPoVL70/D8TsE= Subject key identifier: 7A:5C:46:A9:A4:92:08:FC:DB:9E:76:BD:2E:98:48:E0:0B:43:9A:DD Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B775907C6842E801F25D18254D98BB3D7 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/elxGqaSSCPzbnna9LphI4AtDmt0.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214432 IP address blocks: 88.223.42.0/24 maxlen: 24 88.223.43.0/24 maxlen: 24 88.223.44.0/24 maxlen: 24 88.223.45.0/24 maxlen: 24 88.223.46.0/24 maxlen: 24 88.223.168.0/24 maxlen: 24 88.223.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:07:c6:84:2e:80:1f:25:d1:82:54:d9:8b:b3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a5c46a9a49208fcdb9e76bd2e9848e00b439add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:e2:c6:47:62:31:a4:03:71:c3:e1:a8:63: a3:a9:a8:fc:d3:14:4a:16:14:25:67:99:1b:9f:b8: d2:74:de:81:c4:ca:4c:2f:be:5e:e1:0c:bb:17:17: b5:b7:d8:58:19:c5:5d:56:57:d0:2c:2f:e4:cd:fd: b0:68:8c:7a:3b:27:4c:ed:88:bf:34:cb:f3:7c:0a: fd:eb:dd:6b:cf:dd:19:b0:68:73:c0:14:67:69:d8: b1:cc:f4:7a:26:95:5e:ad:90:03:aa:da:14:10:1f: e4:cc:8c:52:58:ac:18:6b:9b:73:ac:64:ea:e9:74: fb:45:9c:50:48:26:41:57:82:d0:51:12:40:e5:56: 21:b6:a7:44:2e:1a:ce:7e:e5:53:45:75:86:67:84: 33:65:1c:dd:ad:f8:58:b1:23:b6:21:6b:f5:fc:e8: 97:92:f0:7a:fd:d8:35:ec:00:93:70:4a:e2:91:9a: ac:5a:02:13:3f:a9:c1:7a:ae:b4:1c:3c:3f:f7:b8: f8:b4:ed:0e:87:ab:a9:9e:91:03:1a:cd:82:1f:85: 62:9f:6b:1b:ce:4c:f7:2c:7f:c1:f4:e6:ff:72:6e: 30:74:d0:1d:ed:dd:fe:8d:6b:c9:b0:34:04:18:63: 7b:23:5d:be:af:e8:13:5a:95:a7:e7:7e:16:e4:9d: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5C:46:A9:A4:92:08:FC:DB:9E:76:BD:2E:98:48:E0:0B:43:9A:DD X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/elxGqaSSCPzbnna9LphI4AtDmt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.223.42.0-88.223.46.255 88.223.168.0/23 Signature Algorithm: sha256WithRSAEncryption 10:95:ab:e1:c8:54:5d:c9:04:9f:d3:ab:ae:06:e0:c0:36:c4: f7:8a:89:b0:22:e1:b5:d6:4d:7f:52:60:15:83:f2:94:e1:7c: dd:c6:b6:00:5a:1e:85:f4:6d:4d:ba:3f:54:e1:88:d2:40:73: b4:76:e2:dd:b8:17:83:60:9b:41:d3:50:80:c0:a1:ed:dc:56: 8e:4d:4d:9b:c0:44:00:77:3f:a8:b3:ef:9e:4b:c7:1c:80:a1: 4c:6d:a4:17:88:95:7c:6a:f7:29:dd:55:6e:59:13:0e:71:05: 22:f8:ad:1d:c4:6c:ab:9c:75:6e:b7:30:6d:96:dd:9b:ba:74: 4a:5e:fc:7e:1b:57:80:06:a6:8c:40:b6:2a:cc:98:1a:2d:22: c6:99:5e:86:b3:13:f9:d3:52:17:7d:27:a7:7e:bb:98:49:15: f1:e6:e8:56:05:56:0d:06:c0:8f:a5:a8:2f:e7:bf:03:af:8b: 09:50:7c:84:1a:72:d2:01:71:f8:d1:4a:10:72:2c:2c:e7:91: 8d:17:bd:e4:6c:f0:f4:47:5c:b2:b3:4f:60:df:7c:dc:35:bf: ce:5f:33:97:a9:5d:a2:cc:c7:50:8d:30:5f:92:27:d9:ca:01: 6b:76:17:f1:d9:5f:c2:e2:cc:94:30:ee:73:26:93:cd:40:8b: 78:c4:0a:4d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WQfGhC6AHyXRglTZi7PXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTVjNDZhOWE0OTIwOGZjZGI5ZTc2YmQyZTk4NDhlMDBiNDM5YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfbixkdiMaQDccPhqGOjqaj80xRK FhQlZ5kbn7jSdN6BxMpML75e4Qy7Fxe1t9hYGcVdVlfQLC/kzf2waIx6OydM7Yi/ NMvzfAr9691rz90ZsGhzwBRnadixzPR6JpVerZADqtoUEB/kzIxSWKwYa5tzrGTq 6XT7RZxQSCZBV4LQURJA5VYhtqdELhrOfuVTRXWGZ4QzZRzdrfhYsSO2IWv1/OiX kvB6/dg17ACTcErikZqsWgITP6nBeq60HDw/97j4tO0Oh6upnpEDGs2CH4Vin2sb zkz3LH/B9Ob/cm4wdNAd7d3+jWvJsDQEGGN7I12+r+gTWpWn534W5J3KsQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHpcRqmkkgj82552vS6YSOALQ5rdMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvZWx4R3FhU1NDUHpibm5hOUxwaEk0QXREbXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAFY3yoD BABY3y4DBAFY36gwDQYJKoZIhvcNAQELBQADggEBABCVq+HIVF3JBJ/Tq64G4MA2 xPeKibAi4bXWTX9SYBWD8pThfN3GtgBaHoX0bU26P1ThiNJAc7R24t24F4Ngm0HT UIDAoe3cVo5NTZvARAB3P6iz755LxxyAoUxtpBeIlXxq9yndVW5ZEw5xBSL4rR3E bKucdW63MG2W3Zu6dEpe/H4bV4AGpoxAtirMmBotIsaZXoazE/nTUhd9J6d+u5hJ FfHm6FYFVg0GwI+lqC/nvwOviwlQfIQactIBcfjRShByLCznkY0XveRs8PRHXLKz T2DffNw1v85fM5epXaLMx1CNMF+SJ9nKAWt2F/HZX8LizJQw7nMmk81Ai3jECk0= -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:18 2026 by rpki-client