This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/azjnKORK5OUfWYKGOxP9FA9muxw.roa File: azjnKORK5OUfWYKGOxP9FA9muxw.roa (raw, json) Hash identifier: ulAofzRr1iKN0yM8vkecsWzC5HBLVvzozzy7owuvrB0= Subject key identifier: 6B:38:E7:28:E4:4A:E4:E5:1F:59:82:86:3B:13:FD:14:0F:66:BB:1C Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8 Certificate serial: 019B78A36D2FBE3EE8D60E3B9622F0AA56DE Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/azjnKORK5OUfWYKGOxP9FA9muxw.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215434 IP address blocks: 2a01:f340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6d:2f:be:3e:e8:d6:0e:3b:96:22:f0:aa:56:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b38e728e44ae4e51f5982863b13fd140f66bb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4a:7e:21:c1:b1:35:7c:89:6a:30:3c:c3:18: 03:5f:68:eb:ed:57:0f:70:14:21:9a:b0:d8:7e:b8: f1:4d:9c:c7:68:98:8d:d9:f1:25:d9:6c:7f:0e:36: 2e:43:e0:5d:01:a1:f4:b5:c5:db:e2:ba:6f:a6:32: f1:ce:c5:0e:3f:6c:a4:b5:fc:9e:09:a7:36:a8:a4: b5:f6:b0:f6:06:44:a6:45:ed:59:c9:c7:18:ce:d1: 15:c4:93:9d:c6:ef:83:21:27:3d:f1:ab:49:b6:75: 79:99:04:7c:20:04:04:89:87:96:f5:11:be:81:56: 60:41:5d:8a:c3:ad:15:96:ac:5b:e8:bb:bf:06:64: a0:a0:81:fe:2e:d3:88:66:98:f7:73:6b:d2:59:ac: 90:24:1a:20:12:c9:b8:45:97:37:0e:15:18:fe:8e: 40:3f:63:bf:02:04:06:53:54:95:8b:ad:5b:09:ab: 7e:b4:31:c0:7f:14:aa:21:e9:dd:b3:7d:70:89:e2: c1:89:6b:1b:41:c6:73:8e:bf:39:82:e3:07:dc:6e: 91:c0:29:2f:4f:d5:15:8e:9d:c7:21:43:fa:fb:cd: 73:74:41:4b:f5:81:6e:53:37:8a:5f:d4:c9:aa:d7: 3f:ea:5e:8c:66:92:6a:81:b1:82:9b:a9:bc:f4:81: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:38:E7:28:E4:4A:E4:E5:1F:59:82:86:3B:13:FD:14:0F:66:BB:1C X509v3 Authority Key Identifier: keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/azjnKORK5OUfWYKGOxP9FA9muxw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:f340::/29 Signature Algorithm: sha256WithRSAEncryption ba:e3:38:ee:7f:dc:81:95:75:06:ae:f5:51:1d:95:e7:5b:18: 73:7b:98:34:c0:f1:3b:32:c5:e7:28:4c:a4:af:9b:10:1f:b4: 07:6a:93:48:a9:e7:c8:a6:13:6d:86:b1:5d:36:8e:64:67:ea: 69:f3:34:11:1b:ff:25:10:29:be:c6:e3:c0:87:6a:2d:5a:1b: 5f:40:8c:97:2e:de:ac:2f:c2:e7:06:89:d0:07:0b:ab:b3:03: a5:d2:c0:8d:ea:97:09:72:d2:81:36:a8:a4:0a:f6:5c:10:5d: a5:20:14:74:0b:ff:5f:f2:7a:5b:f8:2c:6e:93:5f:2e:55:1c: da:c4:44:10:8e:40:b9:e5:e1:68:eb:cd:eb:68:5f:79:94:02: d0:3e:76:37:71:e8:c7:13:02:91:24:01:ed:06:48:70:8d:5e: 1a:1e:6b:0f:70:fb:2f:ce:82:36:9b:d1:3e:4e:6b:19:a0:05: 29:8e:96:b7:7c:52:d6:b0:d9:af:28:8f:54:47:46:f1:33:c1: da:78:65:98:fb:5c:9b:42:02:f5:3d:54:3a:de:27:fb:c5:4e: 94:f8:26:51:45:b4:a1:6c:e7:9b:2b:07:31:08:89:ab:05:2d: c2:2d:0a:ca:23:ab:83:99:50:d6:a5:df:b8:5d:71:07:c5:9c: 41:2a:cf:e7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o20vvj7o1g47liLwqlbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNjY5YzBjMDg1Y2M5NzhhMzcyYTBlNGYwNTY0ODM5OGUx ZTdmZTgwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjM4ZTcyOGU0NGFlNGU1MWY1OTgyODYzYjEzZmQxNDBmNjZiYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70p+IcGxNXyJajA8wxgDX2jr7VcP cBQhmrDYfrjxTZzHaJiN2fEl2Wx/DjYuQ+BdAaH0tcXb4rpvpjLxzsUOP2yktfye Cac2qKS19rD2BkSmRe1ZyccYztEVxJOdxu+DISc98atJtnV5mQR8IAQEiYeW9RG+ gVZgQV2Kw60Vlqxb6Lu/BmSgoIH+LtOIZpj3c2vSWayQJBogEsm4RZc3DhUY/o5A P2O/AgQGU1SVi61bCat+tDHAfxSqIends31wieLBiWsbQcZzjr85guMH3G6RwCkv T9UVjp3HIUP6+81zdEFL9YFuUzeKX9TJqtc/6l6MZpJqgbGCm6m89IGlXQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGs45yjkSuTlH1mChjsT/RQPZrscMB8GA1UdIwQY MBaAFBNmnAwIXMl4o3Kg5PBWSDmOHn/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEt NTNiMDQzNDI3ODNkLzEvYXpqbktPUks1T1VmV1lLR094UDlGQTltdXh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEtNTNiMDQzNDI3ODNk LzEvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHzQDAN BgkqhkiG9w0BAQsFAAOCAQEAuuM47n/cgZV1Bq71UR2V51sYc3uYNMDxOzLF5yhM pK+bEB+0B2qTSKnnyKYTbYaxXTaOZGfqafM0ERv/JRApvsbjwIdqLVobX0CMly7e rC/C5waJ0AcLq7MDpdLAjeqXCXLSgTaopAr2XBBdpSAUdAv/X/J6W/gsbpNfLlUc 2sREEI5AueXhaOvN62hfeZQC0D52N3HoxxMCkSQB7QZIcI1eGh5rD3D7L86CNpvR Pk5rGaAFKY6Wt3xS1rDZryiPVEdG8TPB2nhlmPtcm0IC9T1UOt4n+8VOlPgmUUW0 oWznmysHMQiJqwUtwi0KyiOrg5lQ1qXfuF1xB8WcQSrP5w== -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:04 2026 by rpki-client