This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa File: axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa (raw, json) Hash identifier: 19+634b7ERlCmGPvTLiIQL850moJR3rSQ5I/u031cHQ= Subject key identifier: 6B:13:F1:76:71:97:80:24:70:41:A4:AA:4D:76:6E:36:DF:D9:79:14 Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Certificate serial: 019B7CECDFE28DD81E575B130465849671D8 Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57809 IP address blocks: 91.212.26.0/24 maxlen: 24 185.177.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:df:e2:8d:d8:1e:57:5b:13:04:65:84:96:71:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b13f176719780247041a4aa4d766e36dfd97914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:6a:58:42:fd:58:f1:5e:f0:ef:9c:41:df: 21:ad:11:45:02:fb:a0:26:7e:c2:9d:ff:1c:29:3b: 3c:e5:bf:df:ba:00:3a:6d:75:25:ce:22:df:80:b3: 2d:52:57:ec:02:c5:41:fd:d8:85:26:b7:82:af:fa: a5:34:9e:e9:d4:f5:59:ba:a4:b2:99:bb:f9:2d:da: d9:44:91:bb:e7:3e:4b:70:1e:e5:f4:a1:aa:71:a7: 23:60:f9:06:ea:d9:3f:75:9e:05:41:81:62:d4:dc: 10:79:57:63:e2:fc:aa:04:a3:75:0f:13:5c:68:77: 4c:1e:7e:bf:cf:08:e8:44:08:7d:4b:3a:2f:5b:cb: 83:e2:85:79:49:bd:8c:20:f8:19:3a:13:4d:5f:a4: 8f:ad:8e:c2:7d:a1:a7:77:16:cc:a0:6d:54:6a:00: d4:b2:b3:9d:d7:d7:0a:9d:bb:be:9e:5c:7b:f5:ff: 8a:49:70:39:55:8f:b8:3f:ff:47:9e:cb:c7:6c:e6: 73:20:32:87:3d:3c:67:22:03:13:2b:05:a1:cf:a8: ae:81:0f:c8:09:d6:b3:c1:2d:f0:9b:fe:3f:dd:4b: 75:76:74:ae:d6:cb:91:d7:20:88:ad:19:72:c0:58: 7e:48:5e:30:c8:fb:45:f2:6f:2f:1e:ab:1a:1d:ae: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:13:F1:76:71:97:80:24:70:41:A4:AA:4D:76:6E:36:DF:D9:79:14 X509v3 Authority Key Identifier: keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.26.0/24 185.177.44.0/24 Signature Algorithm: sha256WithRSAEncryption 13:52:5a:25:ff:3d:d6:33:56:ae:9d:19:63:04:69:20:ef:8f: 86:fd:ba:6f:83:98:8f:05:83:62:e8:bb:69:20:c9:e7:32:0b: 26:a8:fa:6c:da:a6:9c:22:25:a3:f2:2b:4e:ff:10:04:c8:5d: ae:ed:53:5e:6d:20:1e:4b:85:db:17:8d:51:9c:a3:9a:80:5e: 4f:6d:3c:b0:fc:3e:2e:3d:04:28:24:a0:4a:3e:5d:98:18:82: 87:95:4d:e9:ef:03:92:84:7d:51:6a:57:cc:20:b6:3b:1a:cd: 24:4c:81:95:42:8d:d3:ca:b6:1a:61:84:4d:51:06:f7:60:79: 1a:16:a4:d7:40:c1:57:39:35:67:63:c9:0d:51:56:15:d9:5f: 5b:be:68:cf:5c:a4:cc:46:2f:52:c7:8a:7d:c2:e1:68:a2:3d: 14:bf:55:bb:4c:23:6a:54:e8:97:da:1b:7c:3b:d4:6a:86:79: bd:03:73:96:51:c4:56:56:6f:89:2d:65:62:fa:ab:94:63:b9: b7:ac:86:bc:d9:d9:bc:4a:e2:a7:a4:d7:6f:2e:68:98:51:b4: 88:25:ed:4f:d1:b7:4a:51:54:89:d3:89:ba:b7:21:a7:ec:5e: 55:12:67:7c:67:82:2e:78:48:ef:4b:c4:d6:59:ee:6c:19:86: 1c:6d:c2:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87N/ijdgeV1sTBGWElnHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxY2IyYWMzNzdmYzYwM2Y5NWZhZWNjNTRhYzdkNTkwZjJj YzMxOWQwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjEzZjE3NjcxOTc4MDI0NzA0MWE0YWE0ZDc2NmUzNmRmZDk3OTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms1qWEL9WPFe8O+cQd8hrRFFAvug Jn7Cnf8cKTs85b/fugA6bXUlziLfgLMtUlfsAsVB/diFJreCr/qlNJ7p1PVZuqSy mbv5LdrZRJG75z5LcB7l9KGqcacjYPkG6tk/dZ4FQYFi1NwQeVdj4vyqBKN1DxNc aHdMHn6/zwjoRAh9SzovW8uD4oV5Sb2MIPgZOhNNX6SPrY7CfaGndxbMoG1UagDU srOd19cKnbu+nlx79f+KSXA5VY+4P/9HnsvHbOZzIDKHPTxnIgMTKwWhz6iugQ/I CdazwS3wm/4/3Ut1dnSu1suR1yCIrRlywFh+SF4wyPtF8m8vHqsaHa5vjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGsT8XZxl4AkcEGkqk12bjbf2XkUMB8GA1UdIwQY MBaAFCHLKsN3/GA/lfrsxUrH1ZDyzDGdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUt ZmI0MGQ2ZGEyNDY4LzEvYXhQeGRuR1hnQ1J3UWFTcVRYWnVOdF9aZVJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUtZmI0MGQ2ZGEyNDY4 LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9QaAwQA ubEsMA0GCSqGSIb3DQEBCwUAA4IBAQATUlol/z3WM1aunRljBGkg74+G/bpvg5iP BYNi6LtpIMnnMgsmqPps2qacIiWj8itO/xAEyF2u7VNebSAeS4XbF41RnKOagF5P bTyw/D4uPQQoJKBKPl2YGIKHlU3p7wOShH1RalfMILY7Gs0kTIGVQo3TyrYaYYRN UQb3YHkaFqTXQMFXOTVnY8kNUVYV2V9bvmjPXKTMRi9Sx4p9wuFooj0Uv1W7TCNq VOiX2ht8O9Rqhnm9A3OWUcRWVm+JLWVi+quUY7m3rIa82dm8SuKnpNdvLmiYUbSI Je1P0bdKUVSJ04m6tyGn7F5VEmd8Z4IueEjvS8TWWe5sGYYcbcIR -----END CERTIFICATE-----Generated at Sun Jan 25 20:50:25 2026 by rpki-client