This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/AzZk9QAqPqWf3O9wTWZeF2Vcxhg.roa File: AzZk9QAqPqWf3O9wTWZeF2Vcxhg.roa (raw, json) Hash identifier: dZhRjLL5CEKtS/PuAcT89si0PPLH+tO48MwH9vrr1Do= Subject key identifier: 03:36:64:F5:00:2A:3E:A5:9F:DC:EF:70:4D:66:5E:17:65:5C:C6:18 Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B791087017599B0B91E7EDCBC99C387C3 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/AzZk9QAqPqWf3O9wTWZeF2Vcxhg.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53356 IP address blocks: 194.64.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:87:01:75:99:b0:b9:1e:7e:dc:bc:99:c3:87:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=033664f5002a3ea59fdcef704d665e17655cc618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:a6:ca:4e:15:dd:f9:40:66:32:f6:b4:ae: f4:0e:e5:60:77:85:49:cf:28:e5:70:ca:9a:73:b9: bc:7a:11:b3:07:4f:c7:0e:40:ce:99:a1:5b:8e:88: 49:9c:ca:60:ae:09:0d:bf:24:11:43:0d:73:0a:9d: ce:56:ed:4a:15:7b:b2:40:83:f3:7a:2e:7f:58:bc: 39:57:05:e7:d8:de:5b:20:41:e2:4f:01:1f:20:8e: fa:60:4a:f9:50:75:56:3a:a6:40:8a:3a:cd:1e:93: 6a:c3:8f:57:c8:9c:5b:e5:dd:2f:ab:8e:00:81:15: 62:ad:16:b9:9b:58:63:ac:5b:b2:8c:76:89:d8:a9: b2:1c:e9:15:46:fb:56:9c:e7:1a:78:fa:92:3d:87: b2:67:53:b3:4a:82:17:58:67:de:1d:5c:65:1d:7c: 61:14:4e:69:73:8e:17:d2:ca:77:e6:80:ab:08:15: d6:8c:19:4d:0d:4a:d6:ea:4c:e2:62:4e:30:54:d9: 18:98:ac:95:6c:98:91:03:17:02:4b:86:e2:52:66: bc:33:be:da:ca:b9:2f:b8:bd:22:0f:42:13:ca:f3: 65:2a:e5:32:d4:8b:c9:3b:a5:24:37:ed:04:fd:27: b0:56:b1:e7:23:70:62:3b:35:4c:e3:cc:29:7e:95: 4c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:36:64:F5:00:2A:3E:A5:9F:DC:EF:70:4D:66:5E:17:65:5C:C6:18 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/AzZk9QAqPqWf3O9wTWZeF2Vcxhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.64.164.0/22 Signature Algorithm: sha256WithRSAEncryption 34:74:4c:31:2f:5e:a3:c2:29:2b:76:fd:c1:58:88:1f:0c:ee: b0:6c:52:7a:cd:f4:d1:14:b8:fa:a4:6c:75:1a:88:72:39:e9: 2f:39:79:5e:96:99:cc:1a:bc:9c:d8:e5:67:03:8b:a9:56:de: 4d:ed:50:b8:c3:89:2c:c9:5b:62:16:64:93:ea:73:91:74:f2: d9:65:a8:f5:cb:a4:d6:a4:a2:0e:df:5e:af:3a:e0:a0:58:02: 05:24:20:30:2c:17:86:3d:19:cb:a9:f6:7c:84:f5:b1:90:e8: 92:70:54:7d:e4:2d:50:02:1a:06:38:04:b6:28:91:fb:75:e6: cb:5c:6d:42:ef:c3:da:8c:9d:e8:0d:82:79:18:96:2a:ad:7c: 85:50:ca:51:7c:8b:30:d8:5f:86:00:da:00:08:00:43:7b:f4: 2a:8c:a4:25:ed:b2:85:15:87:b3:ec:ca:82:a8:cd:1b:04:4d: 6d:c2:c5:33:4c:7b:b8:47:c3:da:58:11:4d:57:e5:45:12:0d: b2:75:b9:04:62:24:39:4a:12:4c:03:4b:88:d2:99:ba:ee:84: 8d:2b:c5:a9:d9:2e:4b:6c:c3:8f:bf:b0:f4:38:30:ec:e3:54: 78:3a:23:63:f7:16:aa:6a:c3:f0:0e:4a:c8:10:af:28:ef:5a: 9c:cf:20:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIcBdZmwuR5+3LyZw4fDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzM2NjRmNTAwMmEzZWE1OWZkY2VmNzA0ZDY2NWUxNzY1NWNjNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZimyk4V3flAZjL2tK70DuVgd4VJ zyjlcMqac7m8ehGzB0/HDkDOmaFbjohJnMpgrgkNvyQRQw1zCp3OVu1KFXuyQIPz ei5/WLw5VwXn2N5bIEHiTwEfII76YEr5UHVWOqZAijrNHpNqw49XyJxb5d0vq44A gRVirRa5m1hjrFuyjHaJ2KmyHOkVRvtWnOcaePqSPYeyZ1OzSoIXWGfeHVxlHXxh FE5pc44X0sp35oCrCBXWjBlNDUrW6kziYk4wVNkYmKyVbJiRAxcCS4biUma8M77a yrkvuL0iD0ITyvNlKuUy1IvJO6UkN+0E/SewVrHnI3BiOzVM48wpfpVMpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAM2ZPUAKj6ln9zvcE1mXhdlXMYYMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvQXpaazlRQXFQcVdmM085d1RXWmVGMlZjeGhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwkCkMA0G CSqGSIb3DQEBCwUAA4IBAQA0dEwxL16jwikrdv3BWIgfDO6wbFJ6zfTRFLj6pGx1 GohyOekvOXlelpnMGryc2OVnA4upVt5N7VC4w4ksyVtiFmST6nORdPLZZaj1y6TW pKIO316vOuCgWAIFJCAwLBeGPRnLqfZ8hPWxkOiScFR95C1QAhoGOAS2KJH7debL XG1C78PajJ3oDYJ5GJYqrXyFUMpRfIsw2F+GANoACABDe/QqjKQl7bKFFYez7MqC qM0bBE1twsUzTHu4R8PaWBFNV+VFEg2ydbkEYiQ5ShJMA0uI0pm67oSNK8Wp2S5L bMOPv7D0ODDs41R4OiNj9xaqasPwDkrIEK8o71qczyBr -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:06 2026 by rpki-client