This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/elGfLJu2rn3NjHkXwBbavhP82V8.roa File: elGfLJu2rn3NjHkXwBbavhP82V8.roa (raw, json) Hash identifier: Imf+gLzyVlL2GPEO5UZgqwRAC2PFawqIiV02/ZskTlk= Subject key identifier: 7A:51:9F:2C:9B:B6:AE:7D:CD:8C:79:17:C0:16:DA:BE:13:FC:D9:5F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B161FF2179949E621392A27C22A65B740 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/elGfLJu2rn3NjHkXwBbavhP82V8.roa Signing time: Sat 13 Dec 2025 05:12:30 +0000 ROA not before: Sat 13 Dec 2025 05:12:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 272605 IP address blocks: 151.244.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:1f:f2:17:99:49:e6:21:39:2a:27:c2:2a:65:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 13 05:12:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7a519f2c9bb6ae7dcd8c7917c016dabe13fcd95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:ce:07:d6:d5:6d:25:13:89:f7:cf:91:da: e4:77:e5:4f:36:58:ef:9f:2f:09:1c:3f:cd:90:19: 98:8b:e2:8f:b7:a7:e8:00:86:8c:b7:d6:4d:44:e7: 17:b6:70:b6:5f:30:c3:22:df:5a:8a:53:9d:86:95: 89:88:5c:eb:b0:ec:58:04:52:5b:67:53:ca:cc:98: 01:ed:47:07:fb:01:50:fd:72:c7:66:94:4e:e2:53: 0d:a0:cf:ef:52:6e:73:ea:a4:9e:58:02:60:ef:46: 4d:f5:ff:c0:a1:41:26:b5:55:bf:fb:2d:dc:4d:f6: ea:2c:c0:91:cf:4f:85:0c:d8:7e:5a:5a:19:17:82: 55:b7:53:a4:6f:60:8f:51:bd:2f:0c:1f:ed:12:6e: 60:ad:35:53:21:a1:1e:dd:e7:db:b2:06:10:87:e9: 73:e9:1c:28:3b:2b:e9:5c:31:bf:ae:13:87:46:04: d4:c1:1c:db:b2:6c:85:ba:7b:2e:c2:12:26:a5:f7: 05:dc:ad:c2:7a:0a:44:77:b0:2a:38:6c:ee:4a:a8: 21:4a:ff:b7:1d:89:84:a5:69:48:d5:25:8a:b0:ae: b4:31:76:48:e9:e1:dd:f8:06:f7:ef:c6:b7:5c:27: e6:53:43:d3:08:b7:f2:82:fb:f3:87:a8:8c:b9:da: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:51:9F:2C:9B:B6:AE:7D:CD:8C:79:17:C0:16:DA:BE:13:FC:D9:5F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/elGfLJu2rn3NjHkXwBbavhP82V8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.140.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:4f:a9:a1:d3:f1:07:26:58:67:ba:4d:40:05:80:a5:1e:91: 77:af:1a:f9:20:9b:c7:88:63:f5:03:07:3b:67:23:66:c1:32: 6a:0b:88:d2:78:f0:c0:8a:64:f2:73:cd:d7:26:8f:03:c4:1e: a4:78:f2:8b:ef:cc:7c:f5:6a:b8:86:1b:39:8f:ee:47:e6:51: ab:69:78:8e:3a:de:42:9d:ea:08:7e:ea:a0:21:57:b0:e9:f2: e5:a3:66:92:e4:12:08:bb:4f:fc:03:9a:ea:26:e2:dd:3a:a9: d2:15:de:33:45:3b:bf:ee:77:c6:4b:cb:0e:17:8c:81:c5:23: 45:c6:14:6d:6a:88:7d:98:36:9d:ed:5a:da:8c:dd:05:dc:d7: 48:03:55:d0:b6:7a:b5:7c:65:fb:90:f1:4b:51:de:b1:bf:63: bd:6c:3d:99:dd:cf:7d:c5:7c:d0:80:19:f0:c6:a2:9a:bd:82: 9d:16:e2:c9:ce:eb:91:50:a6:01:2e:ea:9e:13:e7:f7:0c:83: ac:40:91:da:24:d6:48:98:5e:e3:7b:66:bc:a6:79:3c:1a:95: 2d:71:81:6f:a5:c5:48:fa:53:b2:5d:83:21:a3:cf:50:a4:88: 9e:c8:15:63:65:ec:6e:68:38:e4:a9:37:2d:b7:2e:00:c6:19: af:51:bd:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsWH/IXmUnmITkqJ8IqZbdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEzMDUxMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTUxOWYyYzliYjZhZTdkY2Q4Yzc5MTdjMDE2ZGFiZTEzZmNkOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21vOB9bVbSUTiffPkdrkd+VPNljv ny8JHD/NkBmYi+KPt6foAIaMt9ZNROcXtnC2XzDDIt9ailOdhpWJiFzrsOxYBFJb Z1PKzJgB7UcH+wFQ/XLHZpRO4lMNoM/vUm5z6qSeWAJg70ZN9f/AoUEmtVW/+y3c TfbqLMCRz0+FDNh+WloZF4JVt1Okb2CPUb0vDB/tEm5grTVTIaEe3efbsgYQh+lz 6RwoOyvpXDG/rhOHRgTUwRzbsmyFunsuwhImpfcF3K3CegpEd7AqOGzuSqghSv+3 HYmEpWlI1SWKsK60MXZI6eHd+Ab378a3XCfmU0PTCLfygvvzh6iMudpPvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHpRnyybtq59zYx5F8AW2r4T/NlfMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZWxHZkxKdTJybjNOakhrWHdCYmF2aFA4MlY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/SMMA0G CSqGSIb3DQEBCwUAA4IBAQAOT6mh0/EHJlhnuk1ABYClHpF3rxr5IJvHiGP1Awc7 ZyNmwTJqC4jSePDAimTyc83XJo8DxB6kePKL78x89Wq4hhs5j+5H5lGraXiOOt5C neoIfuqgIVew6fLlo2aS5BIIu0/8A5rqJuLdOqnSFd4zRTu/7nfGS8sOF4yBxSNF xhRtaoh9mDad7VrajN0F3NdIA1XQtnq1fGX7kPFLUd6xv2O9bD2Z3c99xXzQgBnw xqKavYKdFuLJzuuRUKYBLuqeE+f3DIOsQJHaJNZImF7je2a8pnk8GpUtcYFvpcVI +lOyXYMho89QpIieyBVjZexuaDjkqTctty4AxhmvUb15 -----END CERTIFICATE-----Generated at Thu Dec 18 17:28:35 2025 by rpki-client