This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AzzJ5-eItlHTh8BA8dME2_IiuNs.roa File: AzzJ5-eItlHTh8BA8dME2_IiuNs.roa (raw, json) Hash identifier: JYYzKrTA269AZmPDJt5N/eUOJVdhQgZQ6E0jxqD/MTs= Subject key identifier: 03:3C:C9:E7:E7:88:B6:51:D3:87:C0:40:F1:D3:04:DB:F2:22:B8:DB Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA54B1041047737FD178FB5E3D89E54 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AzzJ5-eItlHTh8BA8dME2_IiuNs.roa Signing time: Thu 01 Jan 2026 22:19:48 +0000 ROA not before: Thu 01 Jan 2026 22:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39351 IP address blocks: 45.92.231.0/24 maxlen: 24 45.130.118.0/24 maxlen: 24 45.132.193.0/24 maxlen: 24 45.149.104.0/24 maxlen: 24 194.34.172.0/24 maxlen: 24 2a07:e340::/32 maxlen: 32 2a07:e341::/32 maxlen: 32 2a07:e344::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:4b:10:41:04:77:37:fd:17:8f:b5:e3:d8:9e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=033cc9e7e788b651d387c040f1d304dbf222b8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:4d:f1:59:93:b5:63:2b:c2:00:f4:23:9c: 5e:80:d6:24:50:aa:57:10:84:59:ba:1f:13:3f:ff: 88:5b:77:26:5b:ab:d6:36:e0:00:07:ef:53:19:8f: 07:e6:20:12:47:cf:76:da:86:50:1e:53:f1:4e:79: 11:ae:23:ce:cc:37:bd:80:07:b4:ad:4e:38:ec:98: 82:4e:37:e5:f7:ab:cb:00:9f:73:67:99:e1:26:1b: ab:ce:c5:81:2f:66:4f:4f:f0:f0:65:cc:c3:15:e3: 54:4c:85:c2:ed:31:dc:79:15:d7:12:8e:31:a9:0c: 46:5c:4e:89:49:e4:de:68:a6:1f:b4:52:1d:3a:09: d7:7d:69:72:a9:c4:a3:a0:09:24:5e:69:8d:7a:bf: 05:b5:48:7b:50:e3:02:82:61:d4:c3:56:17:7d:20: 2b:e0:80:c0:76:a9:13:75:e0:be:65:90:99:9e:f5: b1:4d:7f:8b:5f:02:99:ad:27:58:72:37:bc:bc:98: 47:1f:c7:26:4c:72:88:7a:80:f5:de:af:24:58:0a: d9:90:76:d8:5d:84:f0:a0:21:36:90:1e:7b:7c:52: 58:40:e8:f2:e3:61:f3:47:24:3a:e7:52:27:0a:a5: 20:4a:2a:e4:7f:3b:2e:3b:89:d6:e7:43:c0:7c:4b: f0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3C:C9:E7:E7:88:B6:51:D3:87:C0:40:F1:D3:04:DB:F2:22:B8:DB X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/AzzJ5-eItlHTh8BA8dME2_IiuNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.231.0/24 45.130.118.0/24 45.132.193.0/24 45.149.104.0/24 194.34.172.0/24 IPv6: 2a07:e340::/31 2a07:e344::/32 Signature Algorithm: sha256WithRSAEncryption 18:4b:2c:a1:7d:dc:58:f0:fb:ef:3e:f0:2d:ff:20:d5:e2:99: 65:e8:90:cf:94:77:a3:bc:21:b2:09:4e:52:4b:de:50:c1:3b: 6e:2e:95:df:d0:ad:ec:13:1e:e3:0c:47:d5:96:8c:42:ff:87: bf:00:35:36:bb:b2:25:26:a3:b7:4a:c4:32:55:6c:16:aa:e9: 4f:25:6d:a0:6a:93:d5:57:e8:24:f2:ef:1d:11:28:c4:06:4f: 77:f4:3e:da:2d:10:5e:c0:c0:1d:ce:70:9b:7c:ee:22:59:1c: 2b:0a:5c:11:42:29:74:c7:7c:a2:68:35:a7:9c:bf:ec:51:54: 66:de:fa:74:4f:d2:87:38:0a:e4:3f:6c:7e:d5:4a:27:8e:78: 19:39:e5:b2:ba:32:5a:a4:27:f2:cd:1e:a4:ff:01:f3:b7:a9: e4:66:3a:71:dc:e4:b0:e5:9b:59:66:81:61:9f:f7:3f:3a:23: 78:33:e3:34:75:08:45:c3:3d:dc:4d:b4:3a:ea:7d:da:85:d3: 74:f1:f0:54:f5:8c:11:a3:83:29:bb:4e:36:68:70:26:c2:49: 7c:fb:f2:8d:e1:70:6a:ef:20:80:db:fc:ac:2b:32:98:ff:00: cd:6a:c9:d5:50:1a:1d:8e:a4:78:80:52:a4:27:d3:32:92:51: 8c:96:f8:88 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt7pUsQQQR3N/0Xj7Xj2J5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzNjYzllN2U3ODhiNjUxZDM4N2MwNDBmMWQzMDRkYmYyMjJiOGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstVN8VmTtWMrwgD0I5xegNYkUKpX EIRZuh8TP/+IW3cmW6vWNuAAB+9TGY8H5iASR8922oZQHlPxTnkRriPOzDe9gAe0 rU447JiCTjfl96vLAJ9zZ5nhJhurzsWBL2ZPT/DwZczDFeNUTIXC7THceRXXEo4x qQxGXE6JSeTeaKYftFIdOgnXfWlyqcSjoAkkXmmNer8FtUh7UOMCgmHUw1YXfSAr 4IDAdqkTdeC+ZZCZnvWxTX+LXwKZrSdYcje8vJhHH8cmTHKIeoD13q8kWArZkHbY XYTwoCE2kB57fFJYQOjy42HzRyQ651InCqUgSirkfzsuO4nW50PAfEvwowIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFAM8yefniLZR04fAQPHTBNvyIrjbMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvQXp6SjUtZUl0bEhUaDhCQThkTUUyX0lpdU5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQALVznAwQA LYJ2AwQALYTBAwQALZVoAwQAwiKsMBQEAgACMA4DBQEqB+NAAwUAKgfjRDANBgkq hkiG9w0BAQsFAAOCAQEAGEssoX3cWPD77z7wLf8g1eKZZeiQz5R3o7whsglOUkve UME7bi6V39Ct7BMe4wxH1ZaMQv+HvwA1NruyJSajt0rEMlVsFqrpTyVtoGqT1Vfo JPLvHREoxAZPd/Q+2i0QXsDAHc5wm3zuIlkcKwpcEUIpdMd8omg1p5y/7FFUZt76 dE/ShzgK5D9sftVKJ454GTnlsroyWqQn8s0epP8B87ep5GY6cdzksOWbWWaBYZ/3 PzojeDPjNHUIRcM93E20Oup92oXTdPHwVPWMEaODKbtONmhwJsJJfPvyjeFwau8g gNv8rCsymP8AzWrJ1VAaHY6keIBSpCfTMpJRjJb4iA== -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:29 2026 by rpki-client