This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa File: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (raw, json) Hash identifier: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks= Subject key identifier: 03:3C:EA:F8:63:CD:9A:01:33:17:5D:B2:07:9E:61:14:11:A6:43:96 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019B7A5AAF085A7FC04116C339E22EF398C3 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 45.140.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:af:08:5a:7f:c0:41:16:c3:39:e2:2e:f3:98:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=033ceaf863cd9a0133175db2079e611411a64396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:72:dc:43:59:31:50:71:31:4e:80:9d:ff: 82:99:b7:c8:cb:95:b4:81:5e:c6:6b:d6:ad:67:e8: 0b:fd:58:cf:0c:b6:09:b9:ec:03:91:20:28:cc:98: c5:39:07:40:f7:d7:2e:fa:8b:d6:55:78:09:b7:7b: a2:a2:8e:bb:fa:ec:0c:67:b6:2f:48:36:94:ac:46: a0:6f:8a:e5:e0:21:0c:bd:cd:d3:96:2a:2e:dc:08: f0:d4:d2:0b:ce:03:87:ab:2b:78:d3:fa:85:a4:69: d6:4a:18:58:ca:2c:f5:c7:40:f8:b0:34:76:7a:4f: 22:4a:d2:31:7e:20:5f:5f:ad:17:8f:6c:8d:d9:48: d8:c1:b3:47:9b:d1:45:d2:d2:9c:49:f9:39:64:20: 2f:15:e7:1c:b1:fc:c3:e3:47:83:8f:4d:32:c2:d7: 8a:82:9b:11:f9:54:92:45:14:18:02:e9:0a:25:1b: 9d:a0:14:27:86:14:36:6a:43:cf:d0:f3:02:2f:23: 35:02:6a:e1:46:a9:2c:45:b9:3b:1c:aa:7c:be:3f: 3c:3a:ca:74:e8:64:9f:15:e3:4f:00:23:b7:e2:e1: e5:c6:69:7f:2c:0f:4d:8a:25:cd:43:fc:c2:d0:2d: f8:83:02:80:c6:39:44:e0:06:95:e1:7d:f2:98:f5: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3C:EA:F8:63:CD:9A:01:33:17:5D:B2:07:9E:61:14:11:A6:43:96 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.210.0/24 Signature Algorithm: sha256WithRSAEncryption db:f1:35:73:f0:0d:fb:fd:2a:7d:cc:11:1d:71:75:1d:da:1f: 31:2d:bc:29:8c:3d:77:95:db:09:17:89:d7:74:be:28:91:c8: f5:41:ad:13:9e:63:45:51:44:25:fe:f6:48:f4:03:44:78:e3: 67:45:cc:b0:c8:53:3b:f8:6b:9f:00:eb:56:64:17:bc:83:94: 7a:c9:25:38:e6:c7:a1:6d:76:f3:af:8b:51:b8:82:1b:48:01: 36:c8:22:cd:5c:cf:db:56:a8:d5:38:d6:81:d8:b4:2e:45:2a: 0c:9d:c0:57:59:b3:2e:7d:26:d6:85:dc:1d:e6:3a:4c:40:08: e6:5e:05:e7:a7:45:22:47:08:87:d1:1e:ab:35:5c:da:d4:48: 06:22:12:56:d4:42:f9:22:99:86:92:d8:f9:b0:9d:47:6d:66: 9d:aa:7c:e2:37:23:ae:7c:60:dd:8a:2e:fd:d0:8c:00:39:9c: 04:80:2c:2c:f6:71:42:dd:2e:05:3e:96:6f:cf:e3:50:2f:76: 80:90:4f:0d:17:85:dd:58:26:bc:31:7e:b0:df:47:55:50:20: 8f:12:64:88:95:7a:c2:b7:8e:7f:ac:7f:93:af:7c:92:42:26: 72:f0:fa:b1:39:73:4f:4c:4b:57:ae:ab:80:c7:45:b2:41:14: a9:96:3d:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wq8IWn/AQRbDOeIu85jDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzNjZWFmODYzY2Q5YTAxMzMxNzVkYjIwNzllNjExNDExYTY0Mzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt49y3ENZMVBxMU6Anf+CmbfIy5W0 gV7Ga9atZ+gL/VjPDLYJuewDkSAozJjFOQdA99cu+ovWVXgJt3uioo67+uwMZ7Yv SDaUrEagb4rl4CEMvc3Tliou3Ajw1NILzgOHqyt40/qFpGnWShhYyiz1x0D4sDR2 ek8iStIxfiBfX60Xj2yN2UjYwbNHm9FF0tKcSfk5ZCAvFeccsfzD40eDj00ywteK gpsR+VSSRRQYAukKJRudoBQnhhQ2akPP0PMCLyM1AmrhRqksRbk7HKp8vj88Osp0 6GSfFeNPACO34uHlxml/LA9NiiXNQ/zC0C34gwKAxjlE4AaV4X3ymPUPQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAM86vhjzZoBMxddsgeeYRQRpkOWMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEvQXp6cS1HUE5tZ0V6RjEyeUI1NWhGQkdtUTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzSMA0G CSqGSIb3DQEBCwUAA4IBAQDb8TVz8A37/Sp9zBEdcXUd2h8xLbwpjD13ldsJF4nX dL4okcj1Qa0TnmNFUUQl/vZI9ANEeONnRcywyFM7+GufAOtWZBe8g5R6ySU45seh bXbzr4tRuIIbSAE2yCLNXM/bVqjVONaB2LQuRSoMncBXWbMufSbWhdwd5jpMQAjm XgXnp0UiRwiH0R6rNVza1EgGIhJW1EL5IpmGktj5sJ1HbWadqnziNyOufGDdii79 0IwAOZwEgCws9nFC3S4FPpZvz+NQL3aAkE8NF4XdWCa8MX6w30dVUCCPEmSIlXrC t45/rH+Tr3ySQiZy8PqxOXNPTEtXrquAx0WyQRSplj1+ -----END CERTIFICATE-----Generated at Sun Jan 11 07:32:23 2026 by rpki-client