This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/27jrzr1xWogH3ddsATux5O5Jw1A.roa File: 27jrzr1xWogH3ddsATux5O5Jw1A.roa (raw, json) Hash identifier: xfv2vIRKihnS8ExH9lEFM1xLctm/mcM8AdL4KJZKGlc= Subject key identifier: DB:B8:EB:CE:BD:71:5A:88:07:DD:D7:6C:01:3B:B1:E4:EE:49:C3:50 Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82 Certificate serial: 019B797EEDD8B68B27FDAF83F5B8371761A4 Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/27jrzr1xWogH3ddsATux5O5Jw1A.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35834 IP address blocks: 87.237.32.0/23 maxlen: 23 87.237.32.0/24 maxlen: 24 87.237.33.0/24 maxlen: 24 87.237.34.0/23 maxlen: 23 87.237.34.0/24 maxlen: 24 87.237.36.0/24 maxlen: 24 87.237.38.0/23 maxlen: 23 87.237.38.0/24 maxlen: 24 87.237.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ed:d8:b6:8b:27:fd:af:83:f5:b8:37:17:61:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82 Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbb8ebcebd715a8807ddd76c013bb1e4ee49c350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:86:d9:8d:d3:05:38:7b:ce:65:a9:df:9d: b3:e2:7d:07:23:ec:52:87:00:0f:9d:31:ec:b8:61: 1c:57:5b:4f:a4:83:4c:a8:2d:96:9f:fa:79:f9:cf: aa:55:66:13:6b:8e:76:57:a4:a9:96:2c:88:d7:d9: 5b:ac:1c:09:df:9e:57:ea:0c:a4:a5:84:2f:07:4a: 13:07:4c:e5:68:03:45:c5:de:78:4d:34:83:04:c7: 85:fe:4f:a7:19:5e:b5:79:c5:6d:d4:d9:54:db:39: 9d:b4:30:64:5a:d8:2c:5b:92:1e:58:00:ce:f2:56: b2:cb:13:b7:51:98:9d:14:50:80:e3:17:e2:ae:d1: ff:4b:b2:40:fa:e4:cd:8e:49:e2:89:ec:df:d0:7c: 56:75:18:ff:69:ca:2c:32:47:9e:e8:f7:cf:60:49: 93:e3:87:2a:e8:ac:d9:05:c5:76:31:40:cf:14:1f: 06:76:5b:f8:d4:39:e9:64:5e:45:69:77:e6:a0:75: d2:95:d5:3b:aa:b2:38:0d:a4:3a:6a:1b:f4:0e:cb: 70:72:62:78:d3:c7:16:bd:a9:72:20:9b:5c:7e:c1: 31:f3:d2:5f:dc:0b:bc:41:99:92:21:38:50:ce:7c: ce:92:44:9f:c5:de:c4:56:3c:d6:43:8e:20:a6:3a: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B8:EB:CE:BD:71:5A:88:07:DD:D7:6C:01:3B:B1:E4:EE:49:C3:50 X509v3 Authority Key Identifier: keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/27jrzr1xWogH3ddsATux5O5Jw1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.32.0-87.237.36.255 87.237.38.0/23 Signature Algorithm: sha256WithRSAEncryption 18:cf:2a:f5:32:bf:76:68:db:86:26:90:6a:17:93:61:e7:a0: 78:ca:ed:7d:5d:ba:d9:61:e5:a5:af:3e:59:ad:76:e1:b7:87: c8:7b:99:46:46:cb:ce:dc:1d:eb:6a:32:aa:a0:56:3b:92:15: 97:83:e5:7c:15:98:b7:db:90:34:c4:26:c7:12:81:da:5f:44: 91:b4:29:e0:e5:51:74:a9:49:ac:8d:97:e6:2e:ac:bc:43:08: bb:4d:d6:8c:07:fe:28:10:ac:b5:0d:43:6d:ef:50:e2:d4:8f: 05:16:68:15:1b:71:a6:2f:9a:b4:96:07:09:72:46:33:2b:81: 6d:44:83:f9:4b:e4:c0:de:68:a4:a3:70:dc:08:da:61:65:a6: 96:e7:26:6f:38:b4:18:17:5f:20:d7:5b:ce:cc:0d:4b:06:3d: e6:c8:a7:5c:91:b2:42:94:c1:51:af:48:e9:69:5f:9c:1e:21: 7a:7d:f5:44:c4:cd:55:ea:f6:91:55:19:49:3e:26:41:77:c1: a6:90:d3:9c:2b:00:4d:9b:0f:77:87:24:ab:68:67:f4:78:14: 6d:f2:05:f4:6d:0d:e9:1b:68:6e:32:f7:c4:10:c0:d3:87:ce: 27:d8:41:f7:b1:21:c6:a0:e3:f4:40:7b:34:e7:da:31:e7:86: a5:a3:bf:0a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5fu3Ytosn/a+D9bg3F2GkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTliYmIyZGMzNjFmMTQ4YjUxYTc1MDgwZDhlMGI0Zjc4 YTFmODIwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmI4ZWJjZWJkNzE1YTg4MDdkZGQ3NmMwMTNiYjFlNGVlNDljMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttKG2Y3TBTh7zmWp352z4n0HI+xS hwAPnTHsuGEcV1tPpINMqC2Wn/p5+c+qVWYTa452V6SpliyI19lbrBwJ355X6gyk pYQvB0oTB0zlaANFxd54TTSDBMeF/k+nGV61ecVt1NlU2zmdtDBkWtgsW5IeWADO 8layyxO3UZidFFCA4xfirtH/S7JA+uTNjkniiezf0HxWdRj/acosMkee6PfPYEmT 44cq6KzZBcV2MUDPFB8Gdlv41DnpZF5FaXfmoHXSldU7qrI4DaQ6ahv0DstwcmJ4 08cWvalyIJtcfsEx89Jf3Au8QZmSIThQznzOkkSfxd7EVjzWQ44gpjqHLwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNu46869cVqIB93XbAE7seTuScNQMB8GA1UdIwQY MBaAFKLpu7LcNh8Ui1GnUIDY4LT3ih+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUt MDQwMTI5YWViMGJmLzEvMjdqcnpyMXhXb2dIM2Rkc0FUdXg1TzVKdzFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUtMDQwMTI5YWViMGJm LzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAVX7SAD BABX7SQDBAFX7SYwDQYJKoZIhvcNAQELBQADggEBABjPKvUyv3Zo24YmkGoXk2Hn oHjK7X1dutlh5aWvPlmtduG3h8h7mUZGy87cHetqMqqgVjuSFZeD5XwVmLfbkDTE JscSgdpfRJG0KeDlUXSpSayNl+YurLxDCLtN1owH/igQrLUNQ23vUOLUjwUWaBUb caYvmrSWBwlyRjMrgW1Eg/lL5MDeaKSjcNwI2mFlppbnJm84tBgXXyDXW87MDUsG PebIp1yRskKUwVGvSOlpX5weIXp99UTEzVXq9pFVGUk+JkF3waaQ05wrAE2bD3eH JKtoZ/R4FG3yBfRtDekbaG4y98QQwNOHzifYQfexIcag4/RAezTn2jHnhqWjvwo= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:17 2026 by rpki-client