This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/IfzETMMC-j-YvD0FSk3qPcmm-yw.roa File: IfzETMMC-j-YvD0FSk3qPcmm-yw.roa (raw, json) Hash identifier: dGEKAMpI/CAcq7wm1BNcqLfoTKopdJ+aL/NynEfuwvo= Subject key identifier: 21:FC:C4:4C:C3:02:FA:3F:98:BC:3D:05:4A:4D:EA:3D:C9:A6:FB:2C Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019BD265B3EEFE6F43057B8B5E8D9EBE23C3 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/IfzETMMC-j-YvD0FSk3qPcmm-yw.roa Signing time: Sun 18 Jan 2026 18:37:19 +0000 ROA not before: Sun 18 Jan 2026 18:37:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25211 IP address blocks: 94.26.3.0/24 maxlen: 24 94.26.32.0/24 maxlen: 24 94.26.38.0/24 maxlen: 24 94.26.41.0/24 maxlen: 24 94.26.42.0/24 maxlen: 24 94.26.68.0/24 maxlen: 24 94.26.69.0/24 maxlen: 24 94.26.88.0/24 maxlen: 24 192.109.139.0/24 maxlen: 24 Validation: Failed, certificate revoked on Fri 23 Jan 2026 12:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:65:b3:ee:fe:6f:43:05:7b:8b:5e:8d:9e:be:23:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jan 18 18:37:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21fcc44cc302fa3f98bc3d054a4dea3dc9a6fb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:39:f8:aa:db:f0:82:36:e4:0a:8d:f1:60:0b: 9e:64:32:fb:0d:93:a9:71:5f:a2:cf:0e:94:3d:48: 84:aa:f5:61:38:fc:73:dd:e4:66:d7:8d:0e:90:c7: 57:3f:7e:fa:b3:d7:cb:ef:e7:6b:a3:2b:dc:a5:bd: 8a:6c:fb:41:af:00:4d:85:13:45:01:27:62:92:5a: d5:8d:57:39:0c:6d:ce:86:9c:e8:54:d4:c6:dc:25: bd:c2:4f:30:76:de:44:c3:a0:ee:31:38:06:f8:f3: 90:46:8a:12:86:0b:38:97:be:85:84:3e:4b:a1:61: c8:d6:24:8c:3f:cb:58:e1:04:1f:35:ff:c3:c3:1e: 4c:f2:85:9e:99:a1:62:ea:f7:67:a9:0b:35:57:9d: 43:6c:3b:a6:3a:68:1f:78:6d:78:d5:13:c7:19:c7: 46:c7:0a:8a:60:2b:63:62:84:32:8b:e7:f9:ca:41: c3:ea:df:21:11:ac:08:7a:b5:b3:04:5e:04:fe:7f: 4d:a9:cc:09:7d:1b:23:c6:18:06:6a:2f:17:25:42: 26:ee:b1:1d:24:24:6e:d7:be:07:df:af:c6:29:39: cf:92:47:34:66:73:40:6b:d8:32:79:c5:0b:9e:5a: 0d:5c:a9:d8:e3:6d:82:33:4d:71:03:91:1e:7a:d0: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FC:C4:4C:C3:02:FA:3F:98:BC:3D:05:4A:4D:EA:3D:C9:A6:FB:2C X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/IfzETMMC-j-YvD0FSk3qPcmm-yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.3.0/24 94.26.32.0/24 94.26.38.0/24 94.26.41.0-94.26.42.255 94.26.68.0/23 94.26.88.0/24 192.109.139.0/24 Signature Algorithm: sha256WithRSAEncryption dd:b1:d5:98:75:36:5d:e0:2a:7b:41:77:50:74:ad:21:42:35: 77:d5:74:23:30:78:ec:43:5f:3c:10:c7:2e:c3:16:a1:df:93: 1e:f6:30:91:8e:51:e5:8c:24:d9:f9:c6:ee:3f:7f:5e:3b:2e: 62:f9:9f:fe:42:4c:7b:4b:29:1b:15:3b:fa:7a:de:0c:d2:7a: a1:53:61:18:54:36:1d:c4:21:e9:58:f0:c1:52:95:42:fb:ea: fe:80:3b:0d:99:a6:7d:02:32:bf:1c:33:46:be:02:91:89:5e: b5:19:25:d8:6b:07:7b:58:03:27:15:17:33:c9:26:00:49:7d: 5e:37:de:d3:4c:54:a9:06:27:7f:e2:9b:57:97:3d:dd:9c:75: e4:53:b9:50:82:1a:77:8a:2e:4a:3f:f9:2e:a1:74:b6:9c:49: b4:6f:3c:ab:c1:10:a2:a5:72:b1:1d:8c:22:d5:c3:c9:db:33: 33:aa:53:03:7f:f0:c0:93:2e:a8:be:3a:81:66:27:b9:55:ae: 9a:b0:e1:d1:9c:62:08:d3:17:48:c5:d7:8b:6b:f7:1d:ad:57: 71:b9:12:3c:7e:28:7f:6c:76:9f:26:47:fc:02:1b:a8:1a:ee: d8:22:51:e9:b0:7e:40:a1:c7:85:39:4c:de:bf:55:ed:cd:4d: 70:a3:b9:73 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZvSZbPu/m9DBXuLXo2eviPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMTE4MTgzNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWZjYzQ0Y2MzMDJmYTNmOThiYzNkMDU0YTRkZWEzZGM5YTZmYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTn4qtvwgjbkCo3xYAueZDL7DZOp cV+izw6UPUiEqvVhOPxz3eRm140OkMdXP376s9fL7+droyvcpb2KbPtBrwBNhRNF ASdiklrVjVc5DG3OhpzoVNTG3CW9wk8wdt5Ew6DuMTgG+POQRooShgs4l76FhD5L oWHI1iSMP8tY4QQfNf/Dwx5M8oWemaFi6vdnqQs1V51DbDumOmgfeG141RPHGcdG xwqKYCtjYoQyi+f5ykHD6t8hEawIerWzBF4E/n9NqcwJfRsjxhgGai8XJUIm7rEd JCRu174H36/GKTnPkkc0ZnNAa9gyecULnloNXKnY422CM01xA5EeetARIwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFCH8xEzDAvo/mLw9BUpN6j3JpvssMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvSWZ6RVRNTUMtai1ZdkQwRlNrM3FQY21tLXl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAXhoDAwQA XhogAwQAXhomMAwDBABeGikDBABeGioDBAFeGkQDBABeGlgDBADAbYswDQYJKoZI hvcNAQELBQADggEBAN2x1Zh1Nl3gKntBd1B0rSFCNXfVdCMweOxDXzwQxy7DFqHf kx72MJGOUeWMJNn5xu4/f147LmL5n/5CTHtLKRsVO/p63gzSeqFTYRhUNh3EIelY 8MFSlUL76v6AOw2Zpn0CMr8cM0a+ApGJXrUZJdhrB3tYAycVFzPJJgBJfV433tNM VKkGJ3/im1eXPd2cdeRTuVCCGneKLko/+S6hdLacSbRvPKvBEKKlcrEdjCLVw8nb MzOqUwN/8MCTLqi+OoFmJ7lVrpqw4dGcYgjTF0jF14tr9x2tV3G5Ejx+KH9sdp8m R/wCG6ga7tgiUemwfkChx4U5TN6/Ve3NTXCjuXM= -----END CERTIFICATE-----Generated at Fri Jan 23 15:12:14 2026 by rpki-client