This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/ElUtMbg_2SVD7otrBAd2hF50jDw.roa File: ElUtMbg_2SVD7otrBAd2hF50jDw.roa (raw, json) Hash identifier: gBEbPywjfhmRcZU6nHTXUHZioujDMyqjzGbOG8d2lXc= Subject key identifier: 12:55:2D:31:B8:3F:D9:25:43:EE:8B:6B:04:07:76:84:5E:74:8C:3C Certificate issuer: /CN=e726926b6e8970cf84d6b4756fa9c56211200537 Certificate serial: 019ABB259B2241F54C544A96F84B2B0AF30B Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/ElUtMbg_2SVD7otrBAd2hF50jDw.roa Signing time: Tue 25 Nov 2025 13:13:15 +0000 ROA not before: Tue 25 Nov 2025 13:13:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47701 IP address blocks: 185.144.40.0/22 maxlen: 22 185.144.40.0/24 maxlen: 24 185.144.41.0/24 maxlen: 24 185.144.42.0/24 maxlen: 24 185.144.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:25:9b:22:41:f5:4c:54:4a:96:f8:4b:2b:0a:f3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537 Validity Not Before: Nov 25 13:13:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=12552d31b83fd92543ee8b6b040776845e748c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:a5:7d:68:68:29:59:cb:56:c9:f6:73:ec: 0d:5a:21:4f:e2:3f:16:27:82:b3:b8:70:7f:66:b4: 21:66:9f:ef:ef:a2:18:49:0a:fc:80:63:6a:0a:fa: 6e:ee:3b:69:e3:c7:db:c1:eb:ab:95:ee:69:21:5c: 41:8e:43:5d:70:75:d4:58:6f:df:ea:b5:82:6c:0a: 65:29:f2:44:de:f1:84:1a:39:a4:97:9d:de:4e:7c: e1:05:4a:44:bf:bf:1a:f8:e9:2f:f2:dc:0c:96:59: 6a:7c:13:33:18:8a:bc:d9:b6:b4:f2:63:00:44:bc: 66:b2:42:e5:d7:e4:b4:06:c2:69:03:19:c3:d9:3e: e0:7b:09:6a:53:aa:73:e7:9a:ed:b4:40:dc:07:15: c5:de:6f:54:43:b1:73:1c:f5:50:ea:f4:7b:d5:ce: 52:d5:8f:ec:a6:01:6e:f8:c1:89:36:28:a9:7d:58: a8:cc:53:f7:a7:de:3f:42:1d:e5:ab:b9:1f:c8:7b: c5:a2:31:0d:67:b2:c6:93:e8:83:fe:a6:82:fd:89: c4:49:60:60:55:13:0a:bf:de:08:56:3a:9d:74:31: 17:b6:8c:39:f0:26:8b:37:0c:f7:2e:8f:76:7d:7e: ac:be:46:a0:69:f4:df:15:a3:4a:51:43:a8:14:83: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:55:2D:31:B8:3F:D9:25:43:EE:8B:6B:04:07:76:84:5E:74:8C:3C X509v3 Authority Key Identifier: keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/ElUtMbg_2SVD7otrBAd2hF50jDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.40.0/22 Signature Algorithm: sha256WithRSAEncryption 09:38:5d:35:d2:3c:4e:07:54:68:b1:1f:23:12:85:f4:ac:0c: 69:4a:47:ac:65:8e:96:e0:9d:71:a8:c3:8e:72:81:53:97:4f: 49:24:e8:d7:3b:29:aa:39:de:ba:f8:1c:cf:f5:93:fa:14:47: e2:d1:6a:ff:61:e4:cb:fc:62:1b:43:7b:8a:75:8d:7c:f1:6f: 88:17:94:41:ae:4a:e6:4a:47:bb:2b:43:8e:21:80:d0:01:51: 10:87:c6:42:f7:53:4a:26:1b:e6:35:fb:6d:f2:4b:37:c5:35: bd:b3:0e:e8:67:1d:4a:23:7c:81:75:e8:18:a4:b5:c3:05:15: c5:22:5c:e1:96:4b:c8:d7:2c:29:d2:dc:27:07:1a:14:92:06: aa:76:2a:ac:04:c5:d3:74:29:d4:ec:aa:d0:40:29:e6:b5:1b: d6:53:e6:52:3c:9b:7e:ed:31:a9:95:67:59:0a:2a:d0:7b:3c: bf:7b:73:25:44:be:00:c9:38:48:cb:b1:af:dc:5b:3c:39:50: 61:95:b9:bb:61:b6:81:51:e8:aa:98:6f:2c:a7:0e:80:3f:0f: b1:6a:91:06:f1:7c:86:cd:a0:8a:6c:0b:f0:8a:d4:6e:5c:7e: ff:53:15:b9:c2:c9:20:b3:e9:fb:08:b3:41:8b:af:90:53:f0: 64:8b:75:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq7JZsiQfVMVEqW+EsrCvMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MjY5MjZiNmU4OTcwY2Y4NGQ2YjQ3NTZmYTljNTYyMTEy MDA1MzcwHhcNMjUxMTI1MTMxMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjU1MmQzMWI4M2ZkOTI1NDNlZThiNmIwNDA3NzY4NDVlNzQ4YzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIqlfWhoKVnLVsn2c+wNWiFP4j8W J4KzuHB/ZrQhZp/v76IYSQr8gGNqCvpu7jtp48fbweurle5pIVxBjkNdcHXUWG/f 6rWCbAplKfJE3vGEGjmkl53eTnzhBUpEv78a+Okv8twMlllqfBMzGIq82ba08mMA RLxmskLl1+S0BsJpAxnD2T7gewlqU6pz55rttEDcBxXF3m9UQ7FzHPVQ6vR71c5S 1Y/spgFu+MGJNiipfViozFP3p94/Qh3lq7kfyHvFojENZ7LGk+iD/qaC/YnESWBg VRMKv94IVjqddDEXtow58CaLNwz3Lo92fX6svkagafTfFaNKUUOoFINNGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBJVLTG4P9klQ+6LawQHdoRedIw8MB8GA1UdIwQY MBaAFOcmkmtuiXDPhNa0dW+pxWIRIAU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAt YzEwMmVlOTY4NThlLzEvRWxVdE1iZ18yU1ZEN290ckJBZDJoRjUwakR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAtYzEwMmVlOTY4NThl LzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZAoMA0G CSqGSIb3DQEBCwUAA4IBAQAJOF010jxOB1RosR8jEoX0rAxpSkesZY6W4J1xqMOO coFTl09JJOjXOymqOd66+BzP9ZP6FEfi0Wr/YeTL/GIbQ3uKdY188W+IF5RBrkrm Ske7K0OOIYDQAVEQh8ZC91NKJhvmNftt8ks3xTW9sw7oZx1KI3yBdegYpLXDBRXF IlzhlkvI1ywp0twnBxoUkgaqdiqsBMXTdCnU7KrQQCnmtRvWU+ZSPJt+7TGplWdZ CirQezy/e3MlRL4AyThIy7Gv3Fs8OVBhlbm7YbaBUeiqmG8spw6APw+xapEG8XyG zaCKbAvwitRuXH7/UxW5wskgs+n7CLNBi6+QU/Bki3Uz -----END CERTIFICATE-----Generated at Sun Dec 7 07:33:36 2025 by rpki-client