This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/1jOzSXBij5_0E-f2suF9FA2ns6E.roa File: 1jOzSXBij5_0E-f2suF9FA2ns6E.roa (raw, json) Hash identifier: Nc0F7T+rokFZEGPWl4wCwZ72VzEoKQta+d5LVxuMNuk= Subject key identifier: D6:33:B3:49:70:62:8F:9F:F4:13:E7:F6:B2:E1:7D:14:0D:A7:B3:A1 Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Certificate serial: 019B7CECDF137EEF64F0CCCF9E03E4FCB0E8 Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/1jOzSXBij5_0E-f2suF9FA2ns6E.roa Signing time: Fri 02 Jan 2026 04:17:36 +0000 ROA not before: Fri 02 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16347 IP address blocks: 91.212.26.0/24 maxlen: 24 185.177.44.0/24 maxlen: 24 2a0a:2f80::/32 maxlen: 32 2a0a:2f81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:df:13:7e:ef:64:f0:cc:cf:9e:03:e4:fc:b0:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Validity Not Before: Jan 2 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d633b34970628f9ff413e7f6b2e17d140da7b3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7d:21:d3:20:11:89:99:c6:63:5f:d7:0f:80: 2d:86:de:63:86:13:4f:3d:ac:43:88:d1:2d:db:c5: f1:09:8d:94:e6:bf:72:20:e9:16:07:b1:62:7f:1c: 8a:10:f5:34:db:49:94:dc:4d:c1:0f:94:93:dd:18: 7f:07:88:50:2b:af:3c:80:2b:c4:80:03:8c:b5:37: cd:b4:37:36:49:d5:25:4c:16:61:51:20:16:41:87: 88:e3:5f:b3:6b:ea:c3:a1:b3:cc:ee:33:89:9d:6e: 93:ec:01:d7:62:4d:9d:ca:33:2d:e5:6e:9a:9b:58: a6:ba:51:e5:99:13:86:93:d3:94:bf:df:bb:71:24: dc:83:63:c4:ac:90:f3:29:02:3f:39:88:4d:6c:85: 3c:43:1e:75:57:5d:89:1c:6d:ec:6c:76:83:31:3e: dd:c4:68:43:c9:b0:79:42:33:63:4a:09:63:ac:4b: 97:a6:9c:60:d8:d3:fe:8f:02:38:e1:80:82:bf:e8: b9:6e:4f:57:0f:1a:6b:25:4d:fe:e2:64:ea:51:20: 72:59:21:0e:f6:95:03:e1:c4:4d:2a:90:ca:62:ab: 6b:62:26:f6:ee:db:8b:f1:43:1c:16:7e:b6:a7:12: e8:18:33:6b:7c:8f:d2:50:1a:c1:43:cb:7d:5a:bc: 6a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:33:B3:49:70:62:8F:9F:F4:13:E7:F6:B2:E1:7D:14:0D:A7:B3:A1 X509v3 Authority Key Identifier: keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/1jOzSXBij5_0E-f2suF9FA2ns6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.26.0/24 185.177.44.0/24 IPv6: 2a0a:2f80::/31 Signature Algorithm: sha256WithRSAEncryption b6:59:ca:c8:7b:5f:64:14:c6:cf:8f:ba:6a:d1:fd:f1:74:6a: 33:a9:57:ba:cf:8e:7f:90:78:95:a1:03:36:68:2a:15:fe:db: 52:c5:d0:a2:77:44:3f:db:a4:6a:39:a7:35:6a:10:8c:79:7e: f1:80:42:ab:74:eb:3e:01:98:1f:65:eb:8a:f6:79:76:30:d1: 2f:5f:cb:5f:c0:48:d9:5c:47:77:0d:e9:42:a0:e9:74:53:56: f9:18:f6:8c:db:cb:58:a7:32:58:83:9d:37:8e:b3:ee:5a:f0: 68:a8:06:f1:4d:75:c1:a9:3d:5c:50:7e:ab:26:2f:20:8a:42: ba:bb:43:df:03:78:d3:85:a1:a0:80:8e:1d:97:07:d6:25:93: 53:fe:6c:dc:47:ed:02:ae:c0:61:f8:1f:86:32:ef:e5:78:66: 07:b1:43:3e:a7:6d:49:9d:11:6e:5c:f9:ee:e3:34:42:5f:b1: 75:c2:1b:77:78:53:09:53:71:d0:aa:61:7b:e1:00:0f:c1:62: 4f:5f:9a:6c:03:56:88:24:47:c0:db:ff:12:47:46:01:52:59: 26:7b:9d:ac:3f:27:55:2c:fa:09:b3:a5:d2:30:55:58:bf:82: 0e:d3:8d:38:43:0b:b1:de:a3:2e:0a:28:9e:91:01:1d:49:28: f1:70:09:2b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87N8Tfu9k8MzPngPk/LDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxY2IyYWMzNzdmYzYwM2Y5NWZhZWNjNTRhYzdkNTkwZjJj YzMxOWQwHhcNMjYwMTAyMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjMzYjM0OTcwNjI4ZjlmZjQxM2U3ZjZiMmUxN2QxNDBkYTdiM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH0h0yARiZnGY1/XD4Atht5jhhNP PaxDiNEt28XxCY2U5r9yIOkWB7FifxyKEPU020mU3E3BD5ST3Rh/B4hQK688gCvE gAOMtTfNtDc2SdUlTBZhUSAWQYeI41+za+rDobPM7jOJnW6T7AHXYk2dyjMt5W6a m1imulHlmROGk9OUv9+7cSTcg2PErJDzKQI/OYhNbIU8Qx51V12JHG3sbHaDMT7d xGhDybB5QjNjSgljrEuXppxg2NP+jwI44YCCv+i5bk9XDxprJU3+4mTqUSByWSEO 9pUD4cRNKpDKYqtrYib27tuL8UMcFn62pxLoGDNrfI/SUBrBQ8t9WrxqsQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNYzs0lwYo+f9BPn9rLhfRQNp7OhMB8GA1UdIwQY MBaAFCHLKsN3/GA/lfrsxUrH1ZDyzDGdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUt ZmI0MGQ2ZGEyNDY4LzEvMWpPelNYQmlqNV8wRS1mMnN1RjlGQTJuczZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUtZmI0MGQ2ZGEyNDY4 LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9QaAwQA ubEsMA0EAgACMAcDBQEqCi+AMA0GCSqGSIb3DQEBCwUAA4IBAQC2WcrIe19kFMbP j7pq0f3xdGozqVe6z45/kHiVoQM2aCoV/ttSxdCid0Q/26RqOac1ahCMeX7xgEKr dOs+AZgfZeuK9nl2MNEvX8tfwEjZXEd3DelCoOl0U1b5GPaM28tYpzJYg503jrPu WvBoqAbxTXXBqT1cUH6rJi8gikK6u0PfA3jThaGggI4dlwfWJZNT/mzcR+0CrsBh +B+GMu/leGYHsUM+p21JnRFuXPnu4zRCX7F1wht3eFMJU3HQqmF74QAPwWJPX5ps A1aIJEfA2/8SR0YBUlkme52sPydVLPoJs6XSMFVYv4IO0404Qwux3qMuCiiekQEd SSjxcAkr -----END CERTIFICATE-----Generated at Mon Jan 26 07:09:24 2026 by rpki-client