This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AzWehDl7hMVZSWyCpzCKVhG-94s.roa File: AzWehDl7hMVZSWyCpzCKVhG-94s.roa (raw, json) Hash identifier: b83llwwDkcmO3eQefVARED+Y+AJ9nVbGytFniAACB94= Subject key identifier: 03:35:9E:84:39:7B:84:C5:59:49:6C:82:A7:30:8A:56:11:BE:F7:8B Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA76946C84204419BEA7498CAF91F67 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AzWehDl7hMVZSWyCpzCKVhG-94s.roa Signing time: Fri 02 Jan 2026 12:20:59 +0000 ROA not before: Fri 02 Jan 2026 12:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 264749 IP address blocks: 2a10:b47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:69:46:c8:42:04:41:9b:ea:74:98:ca:f9:1f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03359e84397b84c559496c82a7308a5611bef78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:98:c2:02:40:f0:89:f6:84:c1:64:05:9b:03: 6b:c5:fa:51:ab:4d:e1:18:19:09:d3:92:67:ab:dd: 83:f4:b2:05:f1:55:11:c7:42:ab:fe:1b:f2:88:42: ec:ac:a6:86:2e:79:df:2f:63:c2:27:7e:02:b1:91: eb:59:47:ec:ae:9a:89:56:79:48:83:05:f7:23:a4: 9b:ef:bf:78:d2:02:c1:1c:62:ab:2b:22:1e:c5:56: 06:42:08:f0:94:2d:8f:cd:db:60:31:a4:3e:ed:cd: 34:dc:10:07:91:58:8f:3e:17:fc:96:86:56:7f:2c: 8b:17:d9:02:1e:ef:1d:37:84:b3:f9:b9:84:b3:e3: 30:bc:d9:d5:e7:9a:03:96:06:90:81:04:de:19:3f: e6:08:89:0a:37:1a:8f:db:df:7b:c5:67:2e:a1:ee: 25:b8:35:28:22:ae:93:af:d3:af:ee:52:84:12:18: e9:64:36:a0:c8:fb:10:26:71:2d:52:9d:6f:b2:c7: 53:8b:dc:00:c3:00:e6:d8:83:dd:b2:39:16:f5:25: 0d:74:15:8e:f3:f0:f8:79:56:14:2e:c0:f7:01:02: 33:2b:35:ed:b1:8c:0c:c2:60:57:b5:e6:20:c8:df: 02:ad:e3:6c:1a:92:07:a4:60:b2:3b:bc:b2:5d:e9: f8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:35:9E:84:39:7B:84:C5:59:49:6C:82:A7:30:8A:56:11:BE:F7:8B X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AzWehDl7hMVZSWyCpzCKVhG-94s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:b47::/32 Signature Algorithm: sha256WithRSAEncryption 1d:0f:42:88:62:bd:16:57:a4:a9:4a:9c:e1:2f:99:f2:fc:4c: c6:a3:4c:8c:e2:1d:dc:f8:91:db:25:e1:b5:b1:b8:9c:a4:6b: a4:20:46:33:83:5f:00:85:49:9f:6b:12:22:87:b9:72:c2:dd: cb:9c:1a:96:68:3f:1f:4c:c7:8b:7c:a6:dd:4e:24:b6:b5:d3: 68:7d:13:d9:ca:4f:a7:97:6a:8b:35:d2:7e:0f:d5:20:40:99: c6:f9:d0:c9:26:b1:da:ad:b9:c6:c6:5c:21:1d:ab:c0:60:70: de:f7:8d:2e:7c:26:c6:55:a3:8a:5d:bb:68:a1:e4:4a:08:71: e1:1e:a0:9e:07:82:a8:af:e7:f6:3a:b0:80:6a:d1:e4:6a:57: 66:80:35:79:85:dc:e8:b9:27:88:3b:b1:f1:f5:66:5c:ba:ca: 3b:bd:45:65:d5:55:45:e0:c1:fe:9f:75:e0:60:f2:83:6e:73: 9e:9d:bb:f3:c0:0d:11:ae:c3:6b:94:73:65:54:a5:1e:7e:a9: 7d:f8:ce:b0:ba:51:21:2f:f4:02:c6:ce:0e:a3:6d:46:2b:ee: de:25:3c:0b:f5:56:25:84:f2:96:10:9b:dd:84:f6:74:09:a1: 9e:13:dc:77:38:4e:79:32:da:f2:de:78:9c:68:63:c2:0d:9d: fa:4b:10:25 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+p2lGyEIEQZvqdJjK+R9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzM1OWU4NDM5N2I4NGM1NTk0OTZjODJhNzMwOGE1NjExYmVmNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpjCAkDwifaEwWQFmwNrxfpRq03h GBkJ05Jnq92D9LIF8VURx0Kr/hvyiELsrKaGLnnfL2PCJ34CsZHrWUfsrpqJVnlI gwX3I6Sb77940gLBHGKrKyIexVYGQgjwlC2PzdtgMaQ+7c003BAHkViPPhf8loZW fyyLF9kCHu8dN4Sz+bmEs+MwvNnV55oDlgaQgQTeGT/mCIkKNxqP2997xWcuoe4l uDUoIq6Tr9Ov7lKEEhjpZDagyPsQJnEtUp1vssdTi9wAwwDm2IPdsjkW9SUNdBWO 8/D4eVYULsD3AQIzKzXtsYwMwmBXteYgyN8CreNsGpIHpGCyO7yyXen4tQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAM1noQ5e4TFWUlsgqcwilYRvveLMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvQXpXZWhEbDdoTVZaU1d5Q3B6Q0tWaEctOTRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhALRzAN BgkqhkiG9w0BAQsFAAOCAQEAHQ9CiGK9FlekqUqc4S+Z8vxMxqNMjOId3PiR2yXh tbG4nKRrpCBGM4NfAIVJn2sSIoe5csLdy5walmg/H0zHi3ym3U4ktrXTaH0T2cpP p5dqizXSfg/VIECZxvnQySax2q25xsZcIR2rwGBw3veNLnwmxlWjil27aKHkSghx 4R6gngeCqK/n9jqwgGrR5GpXZoA1eYXc6LkniDux8fVmXLrKO71FZdVVReDB/p91 4GDyg25znp2788ANEa7Da5RzZVSlHn6pffjOsLpRIS/0AsbODqNtRivu3iU8C/VW JYTylhCb3YT2dAmhnhPcdzhOeTLa8t54nGhjwg2d+ksQJQ== -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:21 2026 by rpki-client