This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/E-AZAYW2qhUsuxgQihaSy4RhoY0.roa File: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (raw, json) Hash identifier: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg= Subject key identifier: 13:E0:19:01:85:B6:AA:15:2C:BB:18:10:8A:16:92:CB:84:61:A1:8D Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4 Certificate serial: 019B7C12721C5CDEB6A27CAF04EE25107025 Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/E-AZAYW2qhUsuxgQihaSy4RhoY0.roa Signing time: Fri 02 Jan 2026 00:19:02 +0000 ROA not before: Fri 02 Jan 2026 00:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62179 IP address blocks: 185.44.72.0/22 maxlen: 22 185.44.72.0/24 maxlen: 24 185.44.73.0/24 maxlen: 24 185.44.74.0/24 maxlen: 24 185.44.75.0/24 maxlen: 24 2a01:7220::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:72:1c:5c:de:b6:a2:7c:af:04:ee:25:10:70:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13e0190185b6aa152cbb18108a1692cb8461a18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:1e:b6:b1:f5:ff:3d:be:d6:b9:8b:3f:40: e3:aa:28:48:27:a3:e6:14:66:b9:c5:5c:a6:06:a9: e1:19:ae:c2:32:a4:ca:66:2f:fc:08:82:48:fd:90: d4:48:ff:38:17:79:25:30:79:84:00:b9:22:ec:95: d6:0c:65:b7:29:e2:fe:8e:ba:f3:d9:57:8a:ea:e7: d5:98:ac:18:f4:9c:42:ec:8b:a6:f1:e0:73:05:6d: 21:36:6d:eb:82:e5:ce:1d:c4:61:ae:6b:7c:d4:81: e1:ec:bb:3c:ec:ce:27:c1:86:48:47:6b:57:2c:77: 69:ca:6c:7f:3a:24:01:c9:ff:f1:a2:92:4c:0f:6f: c8:d8:4e:89:79:84:81:33:ba:66:01:30:42:07:b1: 0d:aa:0a:b1:7f:bc:48:0c:5b:7f:11:9f:1c:9f:42: 5c:bb:3c:90:ca:39:f5:6b:ec:5e:0e:e3:11:0f:d8: b6:c6:3b:02:12:12:8c:30:12:fc:26:40:cd:5c:b3: b5:18:92:62:4a:8a:61:fd:0a:2f:87:98:49:a6:23: 6a:e8:2b:4a:7f:24:66:d6:63:c8:64:e6:65:8d:54: e1:1f:2f:91:9b:60:5c:0c:32:5c:19:93:26:77:01: 28:cd:bb:6c:59:7b:1b:18:c3:c3:f5:22:bc:11:cf: 40:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E0:19:01:85:B6:AA:15:2C:BB:18:10:8A:16:92:CB:84:61:A1:8D X509v3 Authority Key Identifier: keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/E-AZAYW2qhUsuxgQihaSy4RhoY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.72.0/22 IPv6: 2a01:7220::/32 Signature Algorithm: sha256WithRSAEncryption cd:fa:9a:ea:77:46:cf:94:46:33:80:e9:06:9c:02:cf:bc:01: fd:f4:66:54:5a:80:60:8c:49:ce:14:e6:f9:40:4d:63:31:13: 36:f2:3e:24:17:b9:e1:a5:91:5f:de:1b:9e:cf:23:3f:e0:1c: b3:c0:26:0b:1b:8f:61:d3:ec:b7:0e:e9:d9:38:c1:3f:b0:62: 9b:e3:9e:9e:17:31:ee:ac:6c:a9:86:17:32:4e:b9:0d:e6:50: 3f:8f:a5:c8:80:96:bd:d0:56:0e:e2:84:2c:b8:1d:2a:ce:a9: 1a:8a:43:4b:e0:53:e6:e3:9d:90:af:c0:d2:4a:32:af:27:b1: bb:d7:1c:3a:51:0d:8e:9a:03:a3:92:02:da:8c:f4:b9:4f:28: 11:46:32:51:ef:5b:9b:1f:4e:51:d6:e1:0d:1d:b8:b5:68:fa: 4f:47:0f:90:cf:97:40:9f:dc:5d:42:82:2a:ea:22:d5:24:e2: ae:38:e3:1f:4a:d8:e6:8d:78:cf:5e:cf:1a:e2:3b:f8:ce:1f: 04:81:5e:25:76:65:67:9e:6b:4a:eb:87:92:e8:49:25:0f:4a: 47:88:63:de:20:20:89:d2:24:b5:7f:9b:d1:ed:6e:1f:67:eb: 74:37:f4:69:2e:0d:4d:92:02:2f:b4:ec:10:25:47:8b:dc:5a: 9d:55:57:95 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EnIcXN62onyvBO4lEHAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzAzM2ExMDJiM2I3OTEyYTM2NjMyMGY0NDM1YzUzZmI5 NzczZjQwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2UwMTkwMTg1YjZhYTE1MmNiYjE4MTA4YTE2OTJjYjg0NjFhMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc0etrH1/z2+1rmLP0DjqihIJ6Pm FGa5xVymBqnhGa7CMqTKZi/8CIJI/ZDUSP84F3klMHmEALki7JXWDGW3KeL+jrrz 2VeK6ufVmKwY9JxC7Ium8eBzBW0hNm3rguXOHcRhrmt81IHh7Ls87M4nwYZIR2tX LHdpymx/OiQByf/xopJMD2/I2E6JeYSBM7pmATBCB7ENqgqxf7xIDFt/EZ8cn0Jc uzyQyjn1a+xeDuMRD9i2xjsCEhKMMBL8JkDNXLO1GJJiSoph/Qovh5hJpiNq6CtK fyRm1mPIZOZljVThHy+Rm2BcDDJcGZMmdwEozbtsWXsbGMPD9SK8Ec9AsQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBPgGQGFtqoVLLsYEIoWksuEYaGNMB8GA1UdIwQY MBaAFLwwM6ECs7eRKjZjIPRDXFP7l3P0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWIt ZjlhN2FjZDkxYmNjLzEvRS1BWkFZVzJxaFVzdXhnUWloYVN5NFJob1kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWItZjlhN2FjZDkxYmNj LzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSxIMA0E AgACMAcDBQAqAXIgMA0GCSqGSIb3DQEBCwUAA4IBAQDN+prqd0bPlEYzgOkGnALP vAH99GZUWoBgjEnOFOb5QE1jMRM28j4kF7nhpZFf3huezyM/4ByzwCYLG49h0+y3 DunZOME/sGKb456eFzHurGyphhcyTrkN5lA/j6XIgJa90FYO4oQsuB0qzqkaikNL 4FPm452Qr8DSSjKvJ7G71xw6UQ2OmgOjkgLajPS5TygRRjJR71ubH05R1uENHbi1 aPpPRw+Qz5dAn9xdQoIq6iLVJOKuOOMfStjmjXjPXs8a4jv4zh8EgV4ldmVnnmtK 64eS6EklD0pHiGPeICCJ0iS1f5vR7W4fZ+t0N/RpLg1NkgIvtOwQJUeL3FqdVVeV -----END CERTIFICATE-----Generated at Mon Jan 19 17:10:33 2026 by rpki-client