This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/AZMCEzr7sQUflIjUGb4dyJfXWkE.roa File: AZMCEzr7sQUflIjUGb4dyJfXWkE.roa (raw, json) Hash identifier: tLGKtI9IlbDmLitqyc6zJTxWyS6ivdCRkCF6bD5jbY0= Subject key identifier: 01:93:02:13:3A:FB:B1:05:1F:94:88:D4:19:BE:1D:C8:97:D7:5A:41 Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c Certificate serial: 019B7CED510C6F587C7BF50A3467BD5A7FD8 Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/AZMCEzr7sQUflIjUGb4dyJfXWkE.roa Signing time: Fri 02 Jan 2026 04:18:06 +0000 ROA not before: Fri 02 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215145 IP address blocks: 195.88.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:51:0c:6f:58:7c:7b:f5:0a:34:67:bd:5a:7f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c Validity Not Before: Jan 2 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=019302133afbb1051f9488d419be1dc897d75a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:74:e5:cc:24:e0:5a:cb:a7:cb:77:ce:d1:97: f7:41:4b:a6:b9:f9:20:2d:7d:1b:0e:5d:d2:2e:ed: 69:79:05:c8:db:99:65:14:ab:78:94:26:21:0a:bf: 29:67:62:8d:0c:95:6a:06:07:63:cd:3e:84:0a:59: 5f:80:97:2e:6f:36:dd:d0:e0:0c:73:e4:3d:cb:c2: 5a:50:db:28:e2:39:da:c5:0c:9b:63:b2:ca:48:40: 4e:1a:23:60:02:fd:1e:97:2e:be:0d:e4:6f:f9:aa: 7f:c7:9f:b1:bb:29:21:7c:c7:0b:ea:3a:67:8b:dc: 18:28:28:70:42:e2:da:e5:73:7d:e0:f7:f5:0b:34: a2:fe:b5:05:58:87:13:e5:5b:02:cb:1c:ae:78:f2: 2f:12:52:d2:0e:d8:27:d7:98:e1:b9:84:a4:ba:db: 26:aa:94:c3:aa:98:d4:54:ec:9d:d2:93:2f:f6:aa: 59:a2:62:a3:c2:77:9f:75:88:f5:5a:b5:5f:e4:0c: c5:18:c1:7e:b4:4f:d3:2b:71:27:03:10:4a:13:85: 22:21:d9:6f:ab:87:9b:f1:d3:90:74:1a:e0:76:42: 40:91:35:92:ce:96:24:4e:63:26:55:d0:78:f2:57: 4f:2f:d5:cf:74:90:d5:67:72:75:90:f8:38:52:7f: 16:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:93:02:13:3A:FB:B1:05:1F:94:88:D4:19:BE:1D:C8:97:D7:5A:41 X509v3 Authority Key Identifier: keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/AZMCEzr7sQUflIjUGb4dyJfXWkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.119.0/24 Signature Algorithm: sha256WithRSAEncryption 74:a7:ce:b9:f2:34:86:af:b5:90:98:5a:9d:84:df:07:ae:ea: 53:3d:5a:4a:f0:39:70:33:4d:5b:63:68:65:b5:7f:07:34:48: f0:bc:83:39:9b:e1:12:93:af:6a:fc:43:bb:22:c2:46:a1:6f: e2:93:90:c3:ed:40:ef:8c:ce:57:02:c4:7f:39:7b:ca:51:08: a7:b7:11:b8:a0:5c:8f:34:18:74:5f:2e:5d:5f:33:a7:1b:40: 61:e4:1c:01:c7:d5:a8:ab:f0:a2:10:95:ea:8d:6e:c8:1d:6d: 81:fa:27:24:91:f7:d3:f0:45:be:cc:46:55:12:db:b1:e0:46: 06:49:36:13:62:f2:6d:22:51:a4:77:ea:f4:20:c0:aa:cd:f4: c2:8e:a1:ba:b1:29:9b:e5:42:d8:c1:11:74:56:7b:e7:2f:c0: 95:88:7b:93:ce:60:63:01:2e:df:12:18:e3:67:da:91:3b:27: 1c:0e:a7:bc:23:6d:68:18:93:ac:ec:d7:4e:16:cc:06:99:d8: 54:08:84:87:1f:f5:b9:57:1e:07:91:f0:82:c3:b3:09:11:c7: 38:02:78:0a:7e:bc:4e:5c:08:83:3a:8e:64:a3:4e:75:8f:34: ff:9c:f0:18:f8:ba:46:a8:30:44:99:3b:79:5d:40:97:0e:62: 45:71:48:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87VEMb1h8e/UKNGe9Wn/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjBmOTEwMmRiMmViZTFhZjFkMDc1MTY4NDQzODZhNzk2 M2VmNWMwHhcNMjYwMTAyMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTkzMDIxMzNhZmJiMTA1MWY5NDg4ZDQxOWJlMWRjODk3ZDc1YTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnTlzCTgWsuny3fO0Zf3QUumufkg LX0bDl3SLu1peQXI25llFKt4lCYhCr8pZ2KNDJVqBgdjzT6ECllfgJcubzbd0OAM c+Q9y8JaUNso4jnaxQybY7LKSEBOGiNgAv0ely6+DeRv+ap/x5+xuykhfMcL6jpn i9wYKChwQuLa5XN94Pf1CzSi/rUFWIcT5VsCyxyuePIvElLSDtgn15jhuYSkutsm qpTDqpjUVOyd0pMv9qpZomKjwnefdYj1WrVf5AzFGMF+tE/TK3EnAxBKE4UiIdlv q4eb8dOQdBrgdkJAkTWSzpYkTmMmVdB48ldPL9XPdJDVZ3J1kPg4Un8WowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAGTAhM6+7EFH5SI1Bm+HciX11pBMB8GA1UdIwQY MBaAFLvw+RAtsuvhrx0HUWhEOGp5Y+9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMt MDcyNzM5NjgzMzQ2LzEvQVpNQ0V6cjdzUVVmbElqVUdiNGR5SmZYV2tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMtMDcyNzM5NjgzMzQ2 LzEvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1h3MA0G CSqGSIb3DQEBCwUAA4IBAQB0p8658jSGr7WQmFqdhN8HrupTPVpK8DlwM01bY2hl tX8HNEjwvIM5m+ESk69q/EO7IsJGoW/ik5DD7UDvjM5XAsR/OXvKUQintxG4oFyP NBh0Xy5dXzOnG0Bh5BwBx9Woq/CiEJXqjW7IHW2B+ickkffT8EW+zEZVEtux4EYG STYTYvJtIlGkd+r0IMCqzfTCjqG6sSmb5ULYwRF0VnvnL8CViHuTzmBjAS7fEhjj Z9qROyccDqe8I21oGJOs7NdOFswGmdhUCISHH/W5Vx4HkfCCw7MJEcc4AngKfrxO XAiDOo5ko051jzT/nPAY+LpGqDBEmTt5XUCXDmJFcUiP -----END CERTIFICATE-----Generated at Tue Jan 27 10:19:02 2026 by rpki-client