This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/a27qVn_k5d7rFpyZQYzwTiZkhY0.roa File: a27qVn_k5d7rFpyZQYzwTiZkhY0.roa (raw, json) Hash identifier: yXSZOhjfWxv0LjskprohS30KlvIJQI3hLL3gKXTjDOw= Subject key identifier: 6B:6E:EA:56:7F:E4:E5:DE:EB:16:9C:99:41:8C:F0:4E:26:64:85:8D Certificate issuer: /CN=66e3ed06e88e5591d9096676951555c0dc535c19 Certificate serial: 019B7AC8AB73B35E79E77D6BE08F2100DDD8 Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/a27qVn_k5d7rFpyZQYzwTiZkhY0.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201020 IP address blocks: 185.28.176.0/24 maxlen: 24 185.28.179.0/24 maxlen: 24 2a04:4000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ab:73:b3:5e:79:e7:7d:6b:e0:8f:21:00:dd:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b6eea567fe4e5deeb169c99418cf04e2664858d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:b0:3c:d0:ee:a9:f8:cd:9a:e4:36:60:70: 31:d2:29:fa:ef:bd:d6:fa:a7:88:ce:10:f3:fe:7e: e1:86:6d:2f:82:2d:fe:88:8c:f6:e9:3f:03:4e:62: e6:16:60:76:14:ac:33:4c:7e:aa:4b:43:5a:e9:7e: e9:44:e4:8a:1c:13:77:02:7b:58:ab:d8:b5:21:a6: 77:40:32:72:54:ba:3f:85:4f:65:ad:f3:46:55:41: 63:25:de:b9:4e:2b:64:14:b7:3b:ad:cc:4e:57:21: 98:79:10:3e:7d:4b:0a:51:53:c5:92:3f:1d:58:95: da:bd:98:0a:4b:32:d5:be:99:1d:17:a7:48:bd:5b: 31:1b:55:b7:d9:4a:76:0f:b6:79:07:e8:f8:e7:31: 64:52:e1:37:60:13:82:e7:d4:03:1e:24:c9:cf:64: c0:10:34:ab:17:aa:67:f9:05:8a:05:90:f2:ea:0c: 1f:89:6b:1e:89:e7:8d:34:d7:4d:0a:26:34:ed:08: a6:ba:e9:e3:8f:53:61:f7:c7:9e:e9:c9:6e:05:53: 17:cd:83:e3:f1:d6:a9:29:9e:fb:60:2d:1c:b0:e8: 9e:34:d1:67:4f:11:4e:74:d2:c8:79:12:0c:5f:d2: c7:56:00:26:21:39:1e:9c:ad:5a:74:d4:be:86:1c: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6E:EA:56:7F:E4:E5:DE:EB:16:9C:99:41:8C:F0:4E:26:64:85:8D X509v3 Authority Key Identifier: keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/a27qVn_k5d7rFpyZQYzwTiZkhY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.176.0/24 185.28.179.0/24 IPv6: 2a04:4000::/29 Signature Algorithm: sha256WithRSAEncryption 34:43:fd:5a:86:5b:e6:51:53:c7:c1:fe:c5:5a:fd:04:16:db: fa:ed:c6:d3:c6:07:cb:05:4a:c0:c1:22:10:99:3f:c9:a0:56: 7b:ca:c6:11:23:12:7a:65:9e:45:6c:09:de:91:4f:ad:7c:c9: 37:43:8f:43:33:10:00:3b:3b:31:20:0b:52:bb:f5:98:68:50: 68:49:5a:7d:11:3e:a8:bf:46:11:97:3e:69:94:92:ca:34:26: 90:bc:53:e1:2e:43:7e:81:4a:0c:a1:5d:bb:2c:23:5b:66:e6: 13:1a:5b:ac:88:3e:ce:08:5c:2f:07:1d:e7:7d:dc:36:97:b7: 90:7f:5a:cb:39:cb:b1:c2:8d:26:a2:9a:a0:d5:73:2c:f8:71: 23:fd:8a:89:8b:44:dd:28:56:c6:ce:5c:98:2a:51:86:bb:a7: 87:cc:95:6d:7b:c3:ce:38:6d:ae:0e:8c:21:c5:bd:55:3a:01: 7b:19:c7:af:4a:4b:46:40:9d:7c:a5:64:d1:df:3d:bd:1d:b3: f5:bb:d3:1f:bb:57:53:b1:0c:ca:07:33:7b:98:ed:ef:c1:a6: a2:13:ed:c6:ab:c7:03:b3:35:7f:d9:a9:d0:42:5d:61:a0:4f: 75:4e:77:1e:d6:f3:ff:4d:52:e0:cd:c1:19:67:11:46:c1:57: 68:ba:95:8c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6yKtzs155531r4I8hAN3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZTNlZDA2ZTg4ZTU1OTFkOTA5NjY3Njk1MTU1NWMwZGM1 MzVjMTkwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjZlZWE1NjdmZTRlNWRlZWIxNjljOTk0MThjZjA0ZTI2NjQ4NThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvqwPNDuqfjNmuQ2YHAx0in6773W +qeIzhDz/n7hhm0vgi3+iIz26T8DTmLmFmB2FKwzTH6qS0Na6X7pROSKHBN3AntY q9i1IaZ3QDJyVLo/hU9lrfNGVUFjJd65TitkFLc7rcxOVyGYeRA+fUsKUVPFkj8d WJXavZgKSzLVvpkdF6dIvVsxG1W32Up2D7Z5B+j45zFkUuE3YBOC59QDHiTJz2TA EDSrF6pn+QWKBZDy6gwfiWseieeNNNdNCiY07Qimuunjj1Nh98ee6cluBVMXzYPj 8dapKZ77YC0csOieNNFnTxFOdNLIeRIMX9LHVgAmITkenK1adNS+hhz7SwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGtu6lZ/5OXe6xacmUGM8E4mZIWNMB8GA1UdIwQY MBaAFGbj7QbojlWR2QlmdpUVVcDcU1wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZDc1NDgtMDc1My00MGRjLThmYmIt ZGUyMWY1ZmVlM2RiLzEvYTI3cVZuX2s1ZDdyRnB5WlFZendUaVpraFkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84ZDc1NDgtMDc1My00MGRjLThmYmItZGUyMWY1ZmVlM2Ri LzEvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuRywAwQA uRyzMA0EAgACMAcDBQMqBEAAMA0GCSqGSIb3DQEBCwUAA4IBAQA0Q/1ahlvmUVPH wf7FWv0EFtv67cbTxgfLBUrAwSIQmT/JoFZ7ysYRIxJ6ZZ5FbAnekU+tfMk3Q49D MxAAOzsxIAtSu/WYaFBoSVp9ET6ov0YRlz5plJLKNCaQvFPhLkN+gUoMoV27LCNb ZuYTGlusiD7OCFwvBx3nfdw2l7eQf1rLOcuxwo0mopqg1XMs+HEj/YqJi0TdKFbG zlyYKlGGu6eHzJVte8POOG2uDowhxb1VOgF7GcevSktGQJ18pWTR3z29HbP1u9Mf u1dTsQzKBzN7mO3vwaaiE+3Gq8cDszV/2anQQl1hoE91Tnce1vP/TVLgzcEZZxFG wVdoupWM -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:56 2026 by rpki-client