This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/AzSbSNEJjHOAmPD-lEIirqfh5dg.roa File: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (raw, json) Hash identifier: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ= Subject key identifier: 03:34:9B:48:D1:09:8C:73:80:98:F0:FE:94:42:22:AE:A7:E1:E5:D8 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019B7F14E65D55320E4E8D87F98AAD13DC88 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/AzSbSNEJjHOAmPD-lEIirqfh5dg.roa Signing time: Fri 02 Jan 2026 14:20:34 +0000 ROA not before: Fri 02 Jan 2026 14:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59799 IP address blocks: 185.71.24.0/22 maxlen: 24 2a01:b280::/36 maxlen: 36 2a0a:fd80:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e6:5d:55:32:0e:4e:8d:87:f9:8a:ad:13:dc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Jan 2 14:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03349b48d1098c738098f0fe944222aea7e1e5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:e9:cd:aa:7c:e1:4e:9c:79:92:5f:e1:cb: 9c:d3:9e:f8:37:0f:78:a5:88:3f:34:87:84:17:40: ac:04:35:18:8c:fc:7d:d1:73:da:c0:80:90:c3:6a: 97:72:67:e1:5a:ac:66:79:1d:6a:5d:99:2a:29:86: d4:fc:50:eb:bd:42:40:6b:d8:09:4b:9c:2a:dd:c6: 70:7a:05:fb:8b:85:81:14:7e:6d:32:cb:ee:ba:1c: 73:fb:5b:c1:37:eb:9e:ed:55:cb:40:5e:54:4d:b1: 63:31:4b:63:ac:ad:66:d7:c4:bc:8e:b2:96:99:99: 17:2d:4d:9f:b0:34:85:fd:4c:41:6a:8a:6b:a9:d4: ab:67:87:44:e3:8a:e8:6a:cc:a8:88:87:3a:3b:54: b9:54:8b:0f:8b:94:97:8a:5a:74:b5:9f:f3:18:2f: 03:8c:ad:f9:50:10:4e:3e:99:cc:64:20:92:4d:2d: c8:c4:72:47:99:74:97:70:c7:b9:95:61:1b:fe:49: 88:cf:f2:b9:2b:30:01:98:ee:58:92:00:10:bf:86: 53:db:ea:c2:f5:7a:5a:f0:81:8d:bf:b7:f1:f6:94: b1:96:af:dc:7c:bf:4c:f2:24:cd:35:bb:23:8d:68: 60:88:70:c1:1b:4a:4e:a5:40:93:ba:f4:d4:b8:b6: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:34:9B:48:D1:09:8C:73:80:98:F0:FE:94:42:22:AE:A7:E1:E5:D8 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/AzSbSNEJjHOAmPD-lEIirqfh5dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.24.0/22 IPv6: 2a01:b280::/36 2a0a:fd80:5000::/36 Signature Algorithm: sha256WithRSAEncryption 84:d5:a0:6b:70:80:fa:42:17:0a:ea:db:b5:1a:d4:98:d9:1a: cb:df:ca:11:67:2d:61:a6:06:91:12:e4:c7:39:c0:c1:6d:19: cb:44:bf:3e:ae:b1:4f:89:5c:4c:35:a7:0c:f5:36:cc:b9:53: 4d:89:7f:50:ab:ca:5c:0d:b9:e7:ee:58:26:8d:c4:f3:70:03: 26:35:94:9b:31:c2:eb:94:bf:30:e4:4b:e2:8d:88:9e:d1:e1: 55:eb:84:bf:8b:92:4c:f3:7f:c3:f7:cd:f0:b8:e5:b4:51:68: ca:03:42:f7:af:62:30:70:c2:ad:c4:68:34:d5:70:41:ad:9c: 86:aa:ea:e9:18:5a:d7:36:ec:03:36:34:08:84:d6:cf:8c:5c: 59:cf:51:83:49:48:00:58:aa:0e:e9:6a:18:8b:6a:8d:d0:32: c8:03:6c:a7:b8:96:48:2a:0e:f5:32:04:ab:68:61:ab:51:da: cd:62:36:1c:dd:70:41:8d:ee:18:b6:5b:69:fb:7e:56:29:25: ae:7c:df:96:00:9b:2f:97:24:8a:94:ec:e7:d9:9d:c9:ba:86: 5c:c4:67:60:d4:5a:61:34:ff:fd:25:a8:df:99:ff:1d:7d:0b: 11:bb:33:ee:aa:85:55:8c:40:43:55:a8:18:08:80:d0:69:92: 6e:b1:d9:bc -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/FOZdVTIOTo2H+YqtE9yIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjYwMTAyMTQyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzM0OWI0OGQxMDk4YzczODA5OGYwZmU5NDQyMjJhZWE3ZTFlNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxTpzap84U6ceZJf4cuc0574Nw94 pYg/NIeEF0CsBDUYjPx90XPawICQw2qXcmfhWqxmeR1qXZkqKYbU/FDrvUJAa9gJ S5wq3cZwegX7i4WBFH5tMsvuuhxz+1vBN+ue7VXLQF5UTbFjMUtjrK1m18S8jrKW mZkXLU2fsDSF/UxBaoprqdSrZ4dE44roasyoiIc6O1S5VIsPi5SXilp0tZ/zGC8D jK35UBBOPpnMZCCSTS3IxHJHmXSXcMe5lWEb/kmIz/K5KzABmO5YkgAQv4ZT2+rC 9Xpa8IGNv7fx9pSxlq/cfL9M8iTNNbsjjWhgiHDBG0pOpUCTuvTUuLbNmQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAM0m0jRCYxzgJjw/pRCIq6n4eXYMB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEvQXpTYlNORUpqSE9BbVBELWxFSWlycWZoNWRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCuUcYMBYE AgACMBADBgQqAbKAAAMGBCoK/YBQMA0GCSqGSIb3DQEBCwUAA4IBAQCE1aBrcID6 QhcK6tu1GtSY2RrL38oRZy1hpgaREuTHOcDBbRnLRL8+rrFPiVxMNacM9TbMuVNN iX9Qq8pcDbnn7lgmjcTzcAMmNZSbMcLrlL8w5EvijYie0eFV64S/i5JM83/D983w uOW0UWjKA0L3r2IwcMKtxGg01XBBrZyGqurpGFrXNuwDNjQIhNbPjFxZz1GDSUgA WKoO6WoYi2qN0DLIA2ynuJZIKg71MgSraGGrUdrNYjYc3XBBje4Ytltp+35WKSWu fN+WAJsvlySKlOzn2Z3JuoZcxGdg1FphNP/9Jajfmf8dfQsRuzPuqoVVjEBDVagY CIDQaZJusdm8 -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:29 2026 by rpki-client