This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/1jO_MX-Sw_SWrVNjj0SJGriKWso.roa File: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (raw, json) Hash identifier: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY= Subject key identifier: D6:33:BF:31:7F:92:C3:F4:96:AD:53:63:8F:44:89:1A:B8:8A:5A:CA Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c Certificate serial: 019B7DCB66F8AE035F0850E8BC9472231147 Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/1jO_MX-Sw_SWrVNjj0SJGriKWso.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39537 IP address blocks: 185.105.64.0/23 maxlen: 24 185.105.66.0/23 maxlen: 24 2a09:fd40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:66:f8:ae:03:5f:08:50:e8:bc:94:72:23:11:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d633bf317f92c3f496ad53638f44891ab88a5aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c5:96:ce:c3:4f:c3:81:52:9b:08:02:7f:48: 99:92:ec:1f:34:e6:7a:fc:6f:20:dc:e7:1e:0b:31: e5:a1:a5:31:bb:b6:90:c6:09:4c:fa:7a:42:0b:fb: 39:1f:68:cc:fc:29:29:74:71:d8:52:02:5a:4b:8a: 5e:74:88:77:ee:ba:34:7c:8c:7a:4a:c9:54:7a:df: b2:2b:cd:1e:b4:e6:70:ee:e6:17:1d:27:b3:af:ad: ab:87:6f:37:2c:bb:16:52:83:58:ea:d3:5f:f7:61: 4b:59:f5:21:27:c6:62:ef:26:a4:ec:91:2d:ee:97: 4a:02:ea:b1:a7:b2:41:dd:9d:e7:79:da:e6:b2:84: bc:2f:7a:ce:b0:1e:36:5b:48:9b:af:92:11:53:67: e3:02:2b:47:47:e1:d6:f5:45:00:7b:87:f9:66:fa: d3:dd:8a:ea:85:1b:7e:4b:e3:be:5d:6d:43:cf:f0: 2f:1b:f8:28:84:4a:22:7f:10:8f:d4:81:1f:f5:8e: 22:ab:d4:25:ab:7b:21:3c:d1:58:b9:b3:52:76:5d: 60:4a:4d:0c:bd:b4:3f:2c:5a:c2:b9:d0:7c:3c:5b: f3:16:97:de:89:9f:19:d6:57:bc:f9:b8:52:be:70: 23:5f:be:dd:0f:84:c1:53:df:17:aa:e2:2e:fe:bc: 6b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:33:BF:31:7F:92:C3:F4:96:AD:53:63:8F:44:89:1A:B8:8A:5A:CA X509v3 Authority Key Identifier: keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/1jO_MX-Sw_SWrVNjj0SJGriKWso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.64.0/22 IPv6: 2a09:fd40::/48 Signature Algorithm: sha256WithRSAEncryption 13:81:90:12:b8:75:84:b8:07:20:14:16:82:11:29:7a:70:42: 5b:59:68:18:e1:09:d0:dc:7a:93:2a:15:58:ca:7b:ee:db:25: ff:f9:38:00:ea:3b:e3:33:07:a4:dd:15:91:da:7a:83:c7:5c: b3:72:86:75:15:4f:18:32:8e:ab:49:c5:c4:70:0c:b4:d4:43: 12:df:dd:7a:a8:58:24:2d:6d:d9:14:36:c8:0c:68:2b:33:8b: c7:aa:22:8b:23:35:4f:7d:29:1a:01:82:57:99:43:db:e6:7c: 17:02:5f:34:88:50:4c:cb:79:b8:03:d6:5c:43:c4:89:97:c0: 2b:b0:c9:3b:ca:22:2c:3b:19:3d:1f:b3:57:69:2b:73:46:67: 47:71:c9:c3:df:16:d0:b8:bc:ea:7e:4a:2d:72:49:0c:98:be: 7f:fa:62:13:29:1e:e1:b8:df:67:fe:5a:48:27:6c:9f:bf:3d: 2f:de:73:e8:53:7d:8d:62:cf:a6:a9:d4:8f:a1:97:77:13:da: 4c:2f:34:21:f0:44:83:78:d2:5a:e5:e5:ed:7a:fd:9b:7c:c2: 12:b5:97:c3:11:99:9c:ab:cb:a4:60:05:f6:87:9c:3b:23:e4: 97:09:3f:1e:b7:f5:f6:8b:01:8d:c3:c6:6d:19:fd:07:13:38: ed:de:a2:e0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9y2b4rgNfCFDovJRyIxFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw ZGM5MmMwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjMzYmYzMTdmOTJjM2Y0OTZhZDUzNjM4ZjQ0ODkxYWI4OGE1YWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cWWzsNPw4FSmwgCf0iZkuwfNOZ6 /G8g3OceCzHloaUxu7aQxglM+npCC/s5H2jM/CkpdHHYUgJaS4pedIh37ro0fIx6 SslUet+yK80etOZw7uYXHSezr62rh283LLsWUoNY6tNf92FLWfUhJ8Zi7yak7JEt 7pdKAuqxp7JB3Z3nedrmsoS8L3rOsB42W0ibr5IRU2fjAitHR+HW9UUAe4f5ZvrT 3YrqhRt+S+O+XW1Dz/AvG/gohEoifxCP1IEf9Y4iq9Qlq3shPNFYubNSdl1gSk0M vbQ/LFrCudB8PFvzFpfeiZ8Z1le8+bhSvnAjX77dD4TBU98XquIu/rxrXQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNYzvzF/ksP0lq1TY49EiRq4ilrKMB8GA1UdIwQY MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt YjA2ODMxNTk2NDQ5LzEvMWpPX01YLVN3X1NXclZOamowU0pHcmlLV3NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5 LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuWlAMA8E AgACMAkDBwAqCf1AAAAwDQYJKoZIhvcNAQELBQADggEBABOBkBK4dYS4ByAUFoIR KXpwQltZaBjhCdDcepMqFVjKe+7bJf/5OADqO+MzB6TdFZHaeoPHXLNyhnUVTxgy jqtJxcRwDLTUQxLf3XqoWCQtbdkUNsgMaCszi8eqIosjNU99KRoBgleZQ9vmfBcC XzSIUEzLebgD1lxDxImXwCuwyTvKIiw7GT0fs1dpK3NGZ0dxycPfFtC4vOp+Si1y SQyYvn/6YhMpHuG432f+WkgnbJ+/PS/ec+hTfY1iz6ap1I+hl3cT2kwvNCHwRIN4 0lrl5e16/Zt8whK1l8MRmZyry6RgBfaHnDsj5JcJPx639faLAY3Dxm0Z/QcTOO3e ouA= -----END CERTIFICATE-----Generated at Mon Jan 26 04:19:54 2026 by rpki-client