This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/VJzsM7xLy0BvWv62rRogwgx0xmY.roa File: VJzsM7xLy0BvWv62rRogwgx0xmY.roa (raw, json) Hash identifier: r5eVuV7raUZo7rWfONsinf2tvmGiQxP2qwK0CFC96cA= Subject key identifier: 54:9C:EC:33:BC:4B:CB:40:6F:5A:FE:B6:AD:1A:20:C2:0C:74:C6:66 Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Certificate serial: 019B7CECE0A2D160D3B1C9FA6C123C025B1E Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/VJzsM7xLy0BvWv62rRogwgx0xmY.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212815 IP address blocks: 91.212.26.0/24 maxlen: 24 185.177.44.0/24 maxlen: 24 2a0a:2f80::/32 maxlen: 32 2a0a:2f81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e0:a2:d1:60:d3:b1:c9:fa:6c:12:3c:02:5b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=549cec33bc4bcb406f5afeb6ad1a20c20c74c666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:64:09:5f:78:d3:f0:6a:40:7d:8b:e6:33:2a: 21:12:5d:80:92:7d:23:80:f5:ba:f7:93:4d:79:39: 44:c6:89:bc:be:39:a0:1e:fa:9b:5e:37:dd:95:e3: 02:d6:35:18:9a:48:62:c4:f4:0d:ba:e5:03:5e:9a: b3:a5:dc:d2:96:d8:9d:24:0c:e4:92:d6:9f:70:08: e5:70:57:92:6e:4c:c1:cd:de:d6:d2:b3:5c:47:7b: 05:31:42:cb:12:19:77:5f:01:f0:5b:8d:3a:4f:ea: ef:9b:57:5a:58:b8:d1:be:71:49:48:16:13:d2:a0: f5:9e:b6:56:42:0c:d9:40:65:21:fe:68:a6:67:82: f3:17:7c:eb:4f:b0:fc:51:ad:3b:74:31:20:21:fc: bd:64:0d:92:b0:97:46:ea:47:c9:bb:51:58:b3:3b: 4b:da:3a:33:f7:e7:3a:c1:a9:c2:97:e9:3a:34:df: 16:19:6c:5e:b1:2a:2f:b6:8d:56:8f:0b:78:87:d0: ec:62:1b:f5:da:23:53:cd:e3:e5:b2:0a:cb:24:62: bb:59:8c:78:a8:be:8d:d3:28:92:79:10:5d:81:8a: 7b:d5:39:22:a4:85:ff:0b:27:04:b8:3c:bd:bd:87: e5:b9:d2:a0:66:da:fe:b2:8c:2a:6f:45:52:93:6c: 9b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9C:EC:33:BC:4B:CB:40:6F:5A:FE:B6:AD:1A:20:C2:0C:74:C6:66 X509v3 Authority Key Identifier: keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/VJzsM7xLy0BvWv62rRogwgx0xmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.26.0/24 185.177.44.0/24 IPv6: 2a0a:2f80::/31 Signature Algorithm: sha256WithRSAEncryption 33:25:d0:28:41:d0:22:d9:95:e3:52:27:a1:de:50:cf:78:d9: 37:e5:d1:f2:07:ee:b6:ca:87:6a:08:cd:8f:cf:a4:ab:d0:28: ec:ed:d1:c9:28:9e:29:ec:6e:23:76:11:ad:25:92:fe:ec:ef: 9d:06:59:bd:4f:ff:53:7a:0d:a5:ae:14:2d:35:6d:96:10:92: b9:73:94:7e:b5:7c:44:c1:52:13:f4:30:fc:ce:33:8c:ba:b5: 60:0e:b5:cc:9a:06:9c:79:de:d8:96:c9:2e:70:c9:f3:46:9d: 3b:60:15:e4:ee:15:13:09:c7:68:df:66:2f:7e:45:69:87:aa: 85:b2:16:59:9f:cf:fd:9d:1b:93:3e:15:c8:25:ed:3e:67:f5: 7d:94:66:56:8a:08:3d:a0:a5:2e:97:9f:cf:d8:d6:53:7f:e6: 81:c8:16:c2:47:46:39:9a:1f:a4:6f:d1:4c:50:a5:bb:69:4c: 39:d1:2f:9e:85:b2:11:a2:8a:ec:2b:f2:34:9f:d8:08:99:d3: ba:b8:ae:4d:6d:86:25:fc:b3:d2:b2:56:14:fc:fa:9a:30:18: bd:a2:01:07:59:75:5b:06:2f:ca:d0:ce:b1:8f:cd:d8:b4:af: d2:11:71:a9:e6:f5:92:b1:75:e9:f0:f0:64:e2:7e:14:6b:e4: 46:b4:3d:6d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87OCi0WDTscn6bBI8AlseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxY2IyYWMzNzdmYzYwM2Y5NWZhZWNjNTRhYzdkNTkwZjJj YzMxOWQwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDljZWMzM2JjNGJjYjQwNmY1YWZlYjZhZDFhMjBjMjBjNzRjNjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmQJX3jT8GpAfYvmMyohEl2Akn0j gPW695NNeTlExom8vjmgHvqbXjfdleMC1jUYmkhixPQNuuUDXpqzpdzSltidJAzk ktafcAjlcFeSbkzBzd7W0rNcR3sFMULLEhl3XwHwW406T+rvm1daWLjRvnFJSBYT 0qD1nrZWQgzZQGUh/mimZ4LzF3zrT7D8Ua07dDEgIfy9ZA2SsJdG6kfJu1FYsztL 2joz9+c6wanCl+k6NN8WGWxesSovto1Wjwt4h9DsYhv12iNTzePlsgrLJGK7WYx4 qL6N0yiSeRBdgYp71TkipIX/CycEuDy9vYfludKgZtr+sowqb0VSk2ybdwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFSc7DO8S8tAb1r+tq0aIMIMdMZmMB8GA1UdIwQY MBaAFCHLKsN3/GA/lfrsxUrH1ZDyzDGdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUt ZmI0MGQ2ZGEyNDY4LzEvVkp6c003eEx5MEJ2V3Y2MnJSb2d3Z3gweG1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUtZmI0MGQ2ZGEyNDY4 LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9QaAwQA ubEsMA0EAgACMAcDBQEqCi+AMA0GCSqGSIb3DQEBCwUAA4IBAQAzJdAoQdAi2ZXj Uieh3lDPeNk35dHyB+62yodqCM2Pz6Sr0Cjs7dHJKJ4p7G4jdhGtJZL+7O+dBlm9 T/9Teg2lrhQtNW2WEJK5c5R+tXxEwVIT9DD8zjOMurVgDrXMmgaced7YlskucMnz Rp07YBXk7hUTCcdo32YvfkVph6qFshZZn8/9nRuTPhXIJe0+Z/V9lGZWigg9oKUu l5/P2NZTf+aByBbCR0Y5mh+kb9FMUKW7aUw50S+ehbIRoorsK/I0n9gImdO6uK5N bYYl/LPSslYU/PqaMBi9ogEHWXVbBi/K0M6xj83YtK/SEXGp5vWSsXXp8PBk4n4U a+RGtD1t -----END CERTIFICATE-----Generated at Sun Jan 25 16:14:16 2026 by rpki-client