This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/elhUH_WUoKPd7qLRAFV2-LXjxEo.roa File: elhUH_WUoKPd7qLRAFV2-LXjxEo.roa (raw, json) Hash identifier: 4ZjB1AFqaxAVM4qIOAHfRoRDgH3bdKIdZVYcL0q8MJw= Subject key identifier: 7A:58:54:1F:F5:94:A0:A3:DD:EE:A2:D1:00:55:76:F8:B5:E3:C4:4A Certificate issuer: /CN=54d65d06de265da2b5d588e06df8816ef45b2e17 Certificate serial: 019AFF2C122B508EB4472AA824B5DE85E4D5 Authority key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/elhUH_WUoKPd7qLRAFV2-LXjxEo.roa Signing time: Mon 08 Dec 2025 18:14:29 +0000 ROA not before: Mon 08 Dec 2025 18:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16740 IP address blocks: 2a11:46c0::/32 maxlen: 48 2a11:46c0::/48 maxlen: 48 2a11:46c0:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:2c:12:2b:50:8e:b4:47:2a:a8:24:b5:de:85:e4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54d65d06de265da2b5d588e06df8816ef45b2e17 Validity Not Before: Dec 8 18:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7a58541ff594a0a3ddeea2d1005576f8b5e3c44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:79:ba:a5:41:c3:d1:b4:4c:60:fe:73:74: db:7b:1f:81:ca:f6:10:1e:f6:93:79:5b:2d:6c:2a: fc:72:8e:62:ee:3b:92:6e:e0:e6:87:2a:a8:32:df: a1:ea:a2:9e:63:e8:8c:d8:33:50:cd:06:cd:89:ed: 56:a8:d0:ab:4e:08:35:2d:f7:d8:a6:cb:af:0d:01: 8b:81:83:37:6a:42:cd:4d:59:d7:51:79:d1:22:e5: 3e:38:84:0b:c8:28:30:1b:68:69:6e:a9:30:79:46: 78:35:16:c4:75:47:ef:67:86:54:0d:11:fe:00:a6: 7d:6c:f5:8c:04:a6:7f:18:0f:0c:b2:c9:71:21:3c: b8:e0:d6:74:8e:22:80:62:83:e9:06:c3:85:e1:13: ae:6e:be:10:18:e5:aa:f8:74:26:e7:2e:69:71:37: e5:95:f7:08:46:1f:4f:0c:42:e0:aa:fa:61:cb:e6: 62:89:4d:cb:64:ee:fc:c1:dc:a1:48:1f:ca:34:ab: 4b:f0:0a:1f:6e:52:61:8a:d0:d3:74:fc:8a:06:fc: 73:93:41:5d:bb:7c:e7:6e:71:24:58:72:47:a9:f5: df:48:b1:46:6f:80:0e:d3:23:91:55:9c:a7:92:39: 01:c2:cd:22:10:db:e2:9e:19:b2:86:83:86:d5:9a: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:58:54:1F:F5:94:A0:A3:DD:EE:A2:D1:00:55:76:F8:B5:E3:C4:4A X509v3 Authority Key Identifier: keyid:54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/elhUH_WUoKPd7qLRAFV2-LXjxEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:46c0::/32 Signature Algorithm: sha256WithRSAEncryption 7c:33:76:09:c3:ff:f4:23:6b:f2:8d:05:1a:62:59:18:67:83: 82:6f:b1:39:21:8d:22:ba:4b:96:b3:1f:e3:49:88:5c:0c:97: 2b:17:bd:8f:2b:8e:16:5e:4a:fd:f3:f4:b7:9a:5c:e8:0c:bb: 8a:15:50:bb:48:40:79:1c:a7:ea:81:5a:c1:b5:15:35:f1:d9: ba:3f:99:69:3f:e1:25:72:75:9d:78:40:77:53:f0:62:95:b3: f2:6e:87:2a:b3:f1:08:e5:d9:c4:7b:e3:64:21:1a:73:09:1d: 93:7a:b3:54:a4:3d:41:35:6c:16:60:56:76:b6:59:0c:48:91: bf:b5:54:3f:0c:13:95:0b:4a:64:56:75:c3:0d:09:d0:dc:e9: 83:55:cd:e7:1b:fd:2f:69:ac:9d:cb:63:c2:68:15:49:a7:ae: 38:aa:3e:07:7b:3b:a5:a9:97:5e:90:d7:da:a2:fd:4c:0a:4a: f2:fd:b4:76:19:b4:f8:bb:bb:a0:ec:33:4a:ec:b0:7e:c8:46: 81:f8:7c:37:6a:99:fc:65:1a:72:97:07:44:d1:4d:69:80:8a: 4e:5c:4c:e7:5a:7f:c5:3f:a8:7e:8d:66:0c:72:5e:b1:3c:df: a8:46:01:58:ad:cd:20:60:2c:19:ee:3f:b5:5f:18:eb:37:67: 75:4a:07:f4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZr/LBIrUI60RyqoJLXeheTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZDY1ZDA2ZGUyNjVkYTJiNWQ1ODhlMDZkZjg4MTZlZjQ1 YjJlMTcwHhcNMjUxMjA4MTgxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTU4NTQxZmY1OTRhMGEzZGRlZWEyZDEwMDU1NzZmOGI1ZTNjNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp55uqVBw9G0TGD+c3Tbex+ByvYQ HvaTeVstbCr8co5i7juSbuDmhyqoMt+h6qKeY+iM2DNQzQbNie1WqNCrTgg1LffY psuvDQGLgYM3akLNTVnXUXnRIuU+OIQLyCgwG2hpbqkweUZ4NRbEdUfvZ4ZUDRH+ AKZ9bPWMBKZ/GA8MsslxITy44NZ0jiKAYoPpBsOF4ROubr4QGOWq+HQm5y5pcTfl lfcIRh9PDELgqvphy+ZiiU3LZO78wdyhSB/KNKtL8AofblJhitDTdPyKBvxzk0Fd u3znbnEkWHJHqfXfSLFGb4AO0yORVZynkjkBws0iENvinhmyhoOG1ZrnAwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHpYVB/1lKCj3e6i0QBVdvi148RKMB8GA1UdIwQY MBaAFFTWXQbeJl2itdWI4G34gW70Wy4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWIt YTEzOTc4NzBiMTY2LzEvZWxoVUhfV1VvS1BkN3FMUkFGVjItTFhqeEVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWItYTEzOTc4NzBiMTY2 LzEvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhFGwDAN BgkqhkiG9w0BAQsFAAOCAQEAfDN2CcP/9CNr8o0FGmJZGGeDgm+xOSGNIrpLlrMf 40mIXAyXKxe9jyuOFl5K/fP0t5pc6Ay7ihVQu0hAeRyn6oFawbUVNfHZuj+ZaT/h JXJ1nXhAd1PwYpWz8m6HKrPxCOXZxHvjZCEacwkdk3qzVKQ9QTVsFmBWdrZZDEiR v7VUPwwTlQtKZFZ1ww0J0Nzpg1XN5xv9L2msnctjwmgVSaeuOKo+B3s7pamXXpDX 2qL9TApK8v20dhm0+Lu7oOwzSuywfshGgfh8N2qZ/GUacpcHRNFNaYCKTlxM51p/ xT+ofo1mDHJesTzfqEYBWK3NIGAsGe4/tV8Y6zdndUoH9A== -----END CERTIFICATE-----Generated at Tue Dec 16 20:38:47 2025 by rpki-client