This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/27zcknbY6uFbGkue7arqp2ILKCs.roa
File: 27zcknbY6uFbGkue7arqp2ILKCs.roa (raw, json)
Hash identifier: gpJvert0Lh9JUkut8FStHwtZUz3TUyKcakIAUMaCQCw=
Subject key identifier: DB:BC:DC:92:76:D8:EA:E1:5B:1A:4B:9E:ED:AA:EA:A7:62:0B:28:2B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB492CF4F6CD40894BE60A706F9629
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/27zcknbY6uFbGkue7arqp2ILKCs.roa
Signing time: Fri 02 Jan 2026 08:20:33 +0000
ROA not before: Fri 02 Jan 2026 08:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133504
IP address blocks: 151.243.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:49:2c:f4:f6:cd:40:89:4b:e6:0a:70:6f:96:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbbcdc9276d8eae15b1a4b9eedaaeaa7620b282b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:e0:6d:72:4d:5b:fd:01:91:5f:dd:de:d5:
0e:22:e7:9b:a5:41:34:2b:83:41:2b:f3:7e:2e:26:
b6:29:01:a1:f3:58:f3:1f:1b:d3:52:bc:3a:a1:02:
52:d6:63:f4:5a:f0:fb:b2:b6:0b:75:99:a1:6a:cc:
46:8d:0a:52:b8:e4:7c:61:84:24:28:ad:2e:4a:33:
27:5b:b8:de:a1:e8:9c:48:74:55:42:f7:9e:6c:a0:
2c:d2:e7:32:93:03:a4:da:50:4c:4a:04:9d:e5:59:
d3:d7:77:e3:b2:4e:70:dd:78:0c:69:25:2c:39:3e:
54:51:b9:6f:b7:3c:75:b0:74:7d:da:07:28:ed:7a:
7a:3c:4d:98:50:d6:df:f3:06:65:55:db:d2:c5:00:
98:39:d8:a7:c5:d0:72:94:88:5c:d9:5a:d4:de:e9:
b3:3c:d5:45:32:d8:1b:00:81:c9:12:ec:32:15:e4:
6f:26:d6:1f:9d:b3:f0:ca:e0:ab:ea:05:05:ac:3e:
04:83:9d:07:44:15:db:1f:42:87:f3:d8:09:b3:24:
81:d1:b7:d7:6a:10:41:00:77:48:18:e3:23:05:7f:
ec:e5:3a:20:8c:d3:4c:9d:b0:ec:70:01:06:03:d5:
f2:78:f0:e8:12:9c:17:d2:04:b7:12:ad:f9:3f:c1:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:DC:92:76:D8:EA:E1:5B:1A:4B:9E:ED:AA:EA:A7:62:0B:28:2B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/27zcknbY6uFbGkue7arqp2ILKCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a9:fa:6d:14:2b:ab:e7:de:36:8c:5e:b9:7f:f1:bd:4e:49:
77:22:e5:9e:05:bc:09:ae:cc:9b:a7:02:bb:fc:0b:df:44:4d:
97:4c:eb:1c:0d:f9:79:25:a4:38:e4:fc:38:66:e9:e3:e7:67:
1e:e9:4d:6a:d6:16:58:f6:3a:2c:75:a4:7e:cd:9c:e7:17:93:
c3:7e:dc:d7:d3:f1:bc:e2:b8:41:cd:a9:ad:54:41:24:2b:3f:
30:ef:c0:d2:83:2e:be:b7:a8:d2:d2:61:89:d8:0f:4c:5b:43:
57:c5:66:39:56:1f:4b:76:e2:71:1c:7f:4a:2f:5b:bb:09:38:
dd:4b:b1:d4:42:a4:2d:c8:89:39:05:d3:f5:74:de:50:f4:14:
67:b1:a2:01:ce:2d:16:a8:ff:e5:71:ee:8f:4f:d6:c5:ca:cf:
38:b5:b9:09:42:75:0f:23:ae:3d:c7:18:85:d4:df:e2:f9:69:
be:46:9e:a8:ab:b2:92:2c:be:34:7a:b0:16:6d:3f:70:f8:23:
e6:a1:0c:79:63:63:4c:c6:f9:37:9e:9d:02:a6:e0:da:3a:03:
60:76:2c:ad:e1:c4:51:2f:52:92:a6:1f:8d:a9:ca:45:9a:c2:
c0:8a:49:21:55:29:1e:e1:7c:c4:1a:d8:a4:ff:2c:76:c7:1d:
ae:e6:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:29:57 2026 by rpki-client