This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/AzEsRWCvBiHpqfFTvRErWOBYIZc.roa File: AzEsRWCvBiHpqfFTvRErWOBYIZc.roa (raw, json) Hash identifier: vJXv/xJSbjhCpSaxfq/1xi0XVWjOr4ZUd1h2IPsQrP8= Subject key identifier: 03:31:2C:45:60:AF:06:21:E9:A9:F1:53:BD:11:2B:58:E0:58:21:97 Certificate issuer: /CN=ac5d4cea41585a0a368401699280ac1b6bb73223 Certificate serial: 019AC54BD63A02FDBD6EC73A48E11A939EF5 Authority key identifier: AC:5D:4C:EA:41:58:5A:0A:36:84:01:69:92:80:AC:1B:6B:B7:32:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/AzEsRWCvBiHpqfFTvRErWOBYIZc.roa Signing time: Thu 27 Nov 2025 12:31:12 +0000 ROA not before: Thu 27 Nov 2025 12:31:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31507 IP address blocks: 78.110.80.0/21 maxlen: 21 78.110.88.0/21 maxlen: 21 83.166.0.0/21 maxlen: 21 83.166.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:4b:d6:3a:02:fd:bd:6e:c7:3a:48:e1:1a:93:9e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac5d4cea41585a0a368401699280ac1b6bb73223 Validity Not Before: Nov 27 12:31:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=03312c4560af0621e9a9f153bd112b58e0582197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:c0:1d:be:86:ed:28:b7:42:f6:85:9a:a7: d2:f4:74:24:19:f2:f6:f4:72:58:23:bb:ae:0d:0f: 36:c4:cd:a8:f1:70:f5:49:2c:34:6c:95:8d:05:3e: 63:a6:01:20:8b:9c:40:99:a9:35:96:c2:63:86:f0: 89:35:3f:95:ac:e1:4c:0d:e6:78:86:7e:df:9b:59: 26:1e:a5:b1:f1:5b:f2:3a:cd:10:59:8f:63:48:8e: b1:29:b5:01:32:51:a6:c2:ea:7c:7e:9a:7d:22:b0: b7:93:65:55:a4:26:23:78:c4:b6:a0:59:5c:a3:88: 6c:a5:f3:a2:d0:38:29:e6:5a:6e:f9:b7:01:30:65: 5a:a5:62:fa:72:77:c8:79:b1:c9:3a:95:93:0e:1d: ad:17:38:0e:c5:ee:7c:cf:7f:74:39:75:31:a2:da: ec:0a:b3:c3:5f:2c:d9:19:ce:04:b1:5b:8a:7e:11: a1:00:e8:94:90:bb:ee:55:fc:00:ac:d7:40:67:7a: bb:e7:90:eb:3c:07:08:95:fe:fa:49:19:80:6e:28: db:87:29:b0:1c:74:19:f3:cb:9a:2c:9d:d7:fd:26: f6:77:32:6f:7b:7f:49:76:f4:b1:df:25:e4:3c:d5: 8e:92:28:69:ab:1a:59:51:ed:19:e9:d7:12:65:6a: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:31:2C:45:60:AF:06:21:E9:A9:F1:53:BD:11:2B:58:E0:58:21:97 X509v3 Authority Key Identifier: keyid:AC:5D:4C:EA:41:58:5A:0A:36:84:01:69:92:80:AC:1B:6B:B7:32:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/AzEsRWCvBiHpqfFTvRErWOBYIZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.110.80.0/20 83.166.0.0/21 83.166.24.0/21 Signature Algorithm: sha256WithRSAEncryption 64:a3:77:c3:16:84:d9:25:eb:13:d7:e7:87:f8:b0:69:83:f0: cf:6d:f5:b6:b3:d7:46:fc:d0:03:76:a5:3e:00:8e:f2:37:74: 54:01:66:cc:35:34:39:1e:d7:6b:32:40:b0:8d:89:61:13:b7: 0d:50:ce:fc:3d:bc:0d:ab:c2:30:54:55:ce:15:04:00:9d:63: 73:09:7f:14:83:2f:d4:40:63:a9:63:d3:92:94:27:16:3b:d8: 04:5f:69:39:60:a6:ad:6f:66:10:ae:fa:cc:15:70:f3:2e:f6: c0:d8:33:45:4c:67:d8:b7:6e:c0:c3:0f:69:4c:84:42:f9:66: be:6c:4f:61:d9:36:d4:2c:5c:6a:e0:36:ae:3b:9b:0d:87:ef: ee:4b:94:83:13:b8:e1:47:cd:6c:f8:61:9c:27:d7:02:2b:e5: 1f:e6:6e:84:b0:5e:eb:f3:6f:43:c9:92:a6:fb:ef:be:4c:a9: 10:78:00:20:46:46:69:07:f8:91:08:a7:a7:15:fd:ca:c1:d1: e4:03:d4:6c:14:8e:55:c5:c7:fc:cb:b2:03:22:a7:aa:44:34: ca:48:36:5b:60:32:12:60:73:a6:df:e4:eb:20:fa:b7:9a:a9: 17:49:fc:0b:91:89:88:80:3e:50:d6:f4:34:5f:36:1b:42:5c: fe:70:4e:44 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrFS9Y6Av29bsc6SOEak571MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNWQ0Y2VhNDE1ODVhMGEzNjg0MDE2OTkyODBhYzFiNmJi NzMyMjMwHhcNMjUxMTI3MTIzMTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzMxMmM0NTYwYWYwNjIxZTlhOWYxNTNiZDExMmI1OGUwNTgyMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1/AHb6G7Si3QvaFmqfS9HQkGfL2 9HJYI7uuDQ82xM2o8XD1SSw0bJWNBT5jpgEgi5xAmak1lsJjhvCJNT+VrOFMDeZ4 hn7fm1kmHqWx8VvyOs0QWY9jSI6xKbUBMlGmwup8fpp9IrC3k2VVpCYjeMS2oFlc o4hspfOi0Dgp5lpu+bcBMGVapWL6cnfIebHJOpWTDh2tFzgOxe58z390OXUxotrs CrPDXyzZGc4EsVuKfhGhAOiUkLvuVfwArNdAZ3q755DrPAcIlf76SRmAbijbhymw HHQZ88uaLJ3X/Sb2dzJve39JdvSx3yXkPNWOkihpqxpZUe0Z6dcSZWpEUQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAMxLEVgrwYh6anxU70RK1jgWCGXMB8GA1UdIwQY MBaAFKxdTOpBWFoKNoQBaZKArBtrtzIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckYxTTZrRllXZ28yaEFGcGtvQ3NHMnUzTWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81YTVlODctOTVkZC00NWIzLTg3YzEt YmFkZDY5NmNjOTg2LzEvQXpFc1JXQ3ZCaUhwcWZGVHZSRXJXT0JZSVpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS81YTVlODctOTVkZC00NWIzLTg3YzEtYmFkZDY5NmNjOTg2 LzEvckYxTTZrRllXZ28yaEFGcGtvQ3NHMnUzTWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQETm5QAwQD U6YAAwQDU6YYMA0GCSqGSIb3DQEBCwUAA4IBAQBko3fDFoTZJesT1+eH+LBpg/DP bfW2s9dG/NADdqU+AI7yN3RUAWbMNTQ5HtdrMkCwjYlhE7cNUM78PbwNq8IwVFXO FQQAnWNzCX8Ugy/UQGOpY9OSlCcWO9gEX2k5YKatb2YQrvrMFXDzLvbA2DNFTGfY t27Aww9pTIRC+Wa+bE9h2TbULFxq4DauO5sNh+/uS5SDE7jhR81s+GGcJ9cCK+Uf 5m6EsF7r829DyZKm++++TKkQeAAgRkZpB/iRCKenFf3KwdHkA9RsFI5Vxcf8y7ID IqeqRDTKSDZbYDISYHOm3+TrIPq3mqkXSfwLkYmIgD5Q1vQ0XzYbQlz+cE5E -----END CERTIFICATE-----Generated at Sat Dec 6 19:18:14 2025 by rpki-client