This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/azb1_WO3_kwPuSAgYoVTIRPk0go.roa File: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (raw, json) Hash identifier: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM= Subject key identifier: 6B:36:F5:FD:63:B7:FE:4C:0F:B9:20:20:62:85:53:21:13:E4:D2:0A Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38 Certificate serial: 019B76EB971AA764E69F07A7E9A5CECB5FB4 Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/azb1_WO3_kwPuSAgYoVTIRPk0go.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31511 IP address blocks: 185.30.252.0/22 maxlen: 22 195.62.68.0/23 maxlen: 23 2a04:4720::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:97:1a:a7:64:e6:9f:07:a7:e9:a5:ce:cb:5f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b36f5fd63b7fe4c0fb920206285532113e4d20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:de:7c:f5:16:6c:ae:51:86:b5:d1:73:ae: d5:90:79:08:28:88:3f:4f:3d:62:b9:2c:7d:5d:79: 53:f8:fe:6f:2a:eb:f5:0e:3a:bd:36:c1:e9:5e:35: 48:a7:18:9c:f2:60:e9:12:6f:d4:d8:38:af:57:a1: cc:48:bc:9e:80:8b:ea:81:ec:6c:ff:4c:cb:82:19: e5:27:fa:5c:76:e7:c5:74:d0:73:e0:66:fa:8c:0a: 38:da:64:7e:01:c2:c6:a5:61:63:1d:5f:8c:02:fe: d4:d4:09:b1:ab:0c:4e:ab:6a:6f:21:34:d1:48:aa: 6b:30:99:7b:0d:42:11:43:46:2d:d7:0c:d6:20:95: 4b:ce:29:cd:07:14:13:15:e5:6e:5b:32:32:75:3f: e5:09:ef:6a:65:72:a5:00:3e:79:6a:0f:4a:7f:5c: e6:b6:7a:60:ff:bc:84:1c:a1:fa:19:b8:f6:31:79: 21:44:7e:39:53:16:c0:bf:d7:3f:e2:f2:46:7d:92: 70:e8:23:1f:b2:17:20:71:5e:d5:58:2b:ac:3d:73: d6:3d:a4:d2:92:94:81:90:78:5c:10:93:4c:3c:02: 0a:59:9f:49:39:65:7a:44:3e:1d:d7:2f:34:29:bf: ac:9d:40:31:07:c5:25:64:bb:d4:eb:f2:c6:74:c1: 2e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:36:F5:FD:63:B7:FE:4C:0F:B9:20:20:62:85:53:21:13:E4:D2:0A X509v3 Authority Key Identifier: keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/azb1_WO3_kwPuSAgYoVTIRPk0go.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.252.0/22 195.62.68.0/23 IPv6: 2a04:4720::/30 Signature Algorithm: sha256WithRSAEncryption 2d:13:b4:9c:01:17:03:86:33:d5:c7:82:64:87:29:a9:d9:84: 09:85:47:d7:15:25:26:56:fa:63:05:f8:ae:60:9f:dd:65:1e: 1e:45:16:2a:e2:be:73:1b:5a:58:d4:6a:3b:90:f6:cd:90:94: 34:84:46:bf:6f:bc:29:62:63:66:58:a6:a9:88:c4:9c:b1:9c: 71:d2:fa:4f:37:55:6d:84:9f:a9:ab:13:99:46:ec:10:dc:68: b9:62:18:6c:5e:47:fa:a1:fa:1c:62:89:94:03:bb:83:73:d1: 29:41:96:5c:18:5c:39:d3:8f:bd:76:fa:97:0f:d4:d6:c7:52: a2:65:82:ea:d8:f8:dc:76:22:fd:63:fb:ca:37:a1:75:db:04: c5:7e:e3:71:b7:08:c1:45:33:07:1b:20:e0:a7:9e:c3:ef:85: 21:6d:2e:59:2c:76:54:84:f6:7f:48:ea:82:59:3a:3b:40:7b: 0d:12:b7:15:19:bc:ac:cf:ce:d4:ff:e5:01:6c:ef:1d:11:e0: dd:47:2b:2e:54:b7:fd:ca:76:45:6c:04:b7:f0:1d:6f:38:93: 5e:6a:3b:9c:11:95:37:fe:91:a2:22:36:e0:ce:87:a7:29:34: ea:a5:42:39:d9:c3:df:6b:84:82:32:82:fc:03:c8:22:77:dc: 0c:64:44:ba -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt265cap2Tmnwen6aXOy1+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGU5MDdjMGZlNTA4OTFhNzZiZDk5YjI5MDg3MDBhNmFj NjJlMzgwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjM2ZjVmZDYzYjdmZTRjMGZiOTIwMjA2Mjg1NTMyMTEzZTRkMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEzefPUWbK5RhrXRc67VkHkIKIg/ Tz1iuSx9XXlT+P5vKuv1Djq9NsHpXjVIpxic8mDpEm/U2DivV6HMSLyegIvqgexs /0zLghnlJ/pcdufFdNBz4Gb6jAo42mR+AcLGpWFjHV+MAv7U1AmxqwxOq2pvITTR SKprMJl7DUIRQ0Yt1wzWIJVLzinNBxQTFeVuWzIydT/lCe9qZXKlAD55ag9Kf1zm tnpg/7yEHKH6Gbj2MXkhRH45UxbAv9c/4vJGfZJw6CMfshcgcV7VWCusPXPWPaTS kpSBkHhcEJNMPAIKWZ9JOWV6RD4d1y80Kb+snUAxB8UlZLvU6/LGdMEu6QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGs29f1jt/5MD7kgIGKFUyET5NIKMB8GA1UdIwQY MBaAFOCOkHwP5QiRp2vZmykIcApqxi44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEk2UWZBX2xDSkduYTltYktRaHdDbXJHTGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjhlMjctZDA1Yi00NzhhLTliMGIt ZGI5Nzg5MmE1MWZkLzEvYXpiMV9XTzNfa3dQdVNBZ1lvVlRJUlBrMGdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMjhlMjctZDA1Yi00NzhhLTliMGItZGI5Nzg5MmE1MWZk LzEvNEk2UWZBX2xDSkduYTltYktRaHdDbXJHTGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuR78AwQB wz5EMA0EAgACMAcDBQIqBEcgMA0GCSqGSIb3DQEBCwUAA4IBAQAtE7ScARcDhjPV x4Jkhymp2YQJhUfXFSUmVvpjBfiuYJ/dZR4eRRYq4r5zG1pY1Go7kPbNkJQ0hEa/ b7wpYmNmWKapiMScsZxx0vpPN1VthJ+pqxOZRuwQ3Gi5YhhsXkf6ofocYomUA7uD c9EpQZZcGFw504+9dvqXD9TWx1KiZYLq2PjcdiL9Y/vKN6F12wTFfuNxtwjBRTMH GyDgp57D74UhbS5ZLHZUhPZ/SOqCWTo7QHsNErcVGbysz87U/+UBbO8dEeDdRysu VLf9ynZFbAS38B1vOJNeajucEZU3/pGiIjbgzoenKTTqpUI52cPfa4SCMoL8A8gi d9wMZES6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:21 2026 by rpki-client