This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS12027.roa File: AS12027.roa (raw, json) Hash identifier: GvhVHbayc/+BKZb2NsmIAgY1zCFKBXztVlQOGKrcP2k= Subject key identifier: 79:24:72:A9:AF:66:5B:7C:95:F0:4A:A7:E6:EB:03:A1:4F:67:90:6D Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 07A6E2E83DF1587699213F55CBCA8FD97A4DE149 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS12027.roa Signing time: Wed 04 Feb 2026 12:57:38 +0000 ROA not before: Wed 04 Feb 2026 12:52:38 +0000 ROA not after: Wed 03 Feb 2027 12:57:38 +0000 asID: 12027 IP address blocks: 139.28.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a6:e2:e8:3d:f1:58:76:99:21:3f:55:cb:ca:8f:d9:7a:4d:e1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:38 2026 GMT Not After : Feb 3 12:57:38 2027 GMT Subject: CN=792472A9AF665B7C95F04AA7E6EB03A14F67906D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:31:b6:32:3c:71:b5:9f:1d:ab:25:c0:42: a2:8b:2f:94:d2:51:c1:b2:76:f5:62:ca:7e:00:8e: 5d:3c:8b:5c:5b:96:b1:60:ae:53:2c:54:ee:44:6e: 46:27:c7:7f:b4:41:7f:b7:e6:3b:1e:89:20:7b:c7: 44:df:f2:a9:aa:77:e8:46:ac:f8:28:92:2c:20:97: 2b:83:c2:d2:f8:6b:d9:a5:d6:93:85:10:82:32:98: 00:a2:5c:3a:33:06:9b:55:d5:9c:94:88:c6:5a:bc: 7b:ee:77:27:ef:9f:d6:a9:c1:cb:b3:c8:ea:a8:13: a6:cb:0b:a5:6b:44:32:85:e2:5a:17:49:6f:d5:78: 19:48:10:f1:31:0c:4d:74:2b:d0:be:d5:7f:4e:0a: d6:55:a5:25:cb:eb:d0:58:a8:51:38:9d:be:9f:28: f9:63:21:18:d2:03:c2:ac:b6:6e:06:e1:a5:50:49: 29:a5:c5:4c:ec:98:7c:97:94:c0:80:c8:42:09:1a: 2f:b8:73:06:60:3e:18:fa:6e:fa:59:17:e6:c5:8e: a7:28:cb:c3:3a:a1:d8:c6:13:17:1a:3d:02:d4:56: c8:00:51:3d:6e:45:85:31:2d:50:ee:2e:73:55:aa: 92:a7:a8:19:e1:40:13:c2:e7:10:69:e0:1f:79:15: 4e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:24:72:A9:AF:66:5B:7C:95:F0:4A:A7:E6:EB:03:A1:4F:67:90:6D X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS12027.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.50.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:43:e8:c1:47:ea:58:06:c2:17:f3:eb:de:6a:01:fa:21:67: cd:de:ec:51:59:78:db:b9:24:4d:0f:d3:22:7c:43:c3:2a:c6: 70:b2:cb:8a:83:1b:b3:a2:db:cc:db:92:f2:c6:93:a0:9a:32: 02:c3:37:ce:09:74:7f:59:ae:64:c9:4b:40:ae:0e:fe:e2:32: 28:36:60:3a:ab:89:53:21:2b:cf:60:d3:93:7e:d7:bb:86:82: 9e:a9:89:9f:56:a5:40:2c:54:3d:04:27:17:73:c3:f0:41:a4: 79:fb:a7:81:d0:6a:ea:9c:ce:7b:d8:cb:50:43:48:a8:87:a7: 74:86:1d:ea:b9:6c:37:74:7b:43:f5:fb:37:a4:69:97:ed:56: 6a:80:46:2b:b1:50:d9:fd:96:43:c8:5c:f4:64:3a:86:73:01: 90:1b:8a:65:fa:b8:75:34:04:58:f2:89:41:72:25:29:f8:06: e3:19:8c:96:9f:b6:4c:44:07:6b:4d:df:80:02:e3:20:d9:71: 7b:0f:1f:82:ef:06:2a:46:51:b5:3d:fa:49:db:f1:c0:f3:74: eb:a0:70:f6:9e:a2:f5:56:d1:e7:d1:b0:ea:95:36:a4:cc:23: d3:80:37:f5:c9:2c:d4:5a:e4:ca:b0:31:b3:58:96:71:cc:7b: 7e:33:5f:f6 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUB6bi6D3xWHaZIT9Vy8qP2XpN4UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzhaFw0yNzAyMDMxMjU3MzhaMDMxMTAvBgNV BAMTKDc5MjQ3MkE5QUY2NjVCN0M5NUYwNEFBN0U2RUIwM0ExNEY2NzkwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KzG2MjxxtZ8dqyXAQqKLL5TS UcGydvViyn4Ajl08i1xblrFgrlMsVO5EbkYnx3+0QX+35jseiSB7x0Tf8qmqd+hG rPgokiwglyuDwtL4a9ml1pOFEIIymACiXDozBptV1ZyUiMZavHvudyfvn9apwcuz yOqoE6bLC6VrRDKF4loXSW/VeBlIEPExDE10K9C+1X9OCtZVpSXL69BYqFE4nb6f KPljIRjSA8Kstm4G4aVQSSmlxUzsmHyXlMCAyEIJGi+4cwZgPhj6bvpZF+bFjqco y8M6odjGExcaPQLUVsgAUT1uRYUxLVDuLnNVqpKnqBnhQBPC5xBp4B95FU4/AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUeSRyqa9mW3yV8Eqn5usDoU9nkG0wHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMTIwMjcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACLHDIw DQYJKoZIhvcNAQELBQADggEBAI9D6MFH6lgGwhfz695qAfohZ83e7FFZeNu5JE0P 0yJ8Q8MqxnCyy4qDG7Oi28zbkvLGk6CaMgLDN84JdH9ZrmTJS0CuDv7iMig2YDqr iVMhK89g05N+17uGgp6piZ9WpUAsVD0EJxdzw/BBpHn7p4HQauqcznvYy1BDSKiH p3SGHeq5bDd0e0P1+zekaZftVmqARiuxUNn9lkPIXPRkOoZzAZAbimX6uHU0BFjy iUFyJSn4BuMZjJaftkxEB2tN34AC4yDZcXsPH4LvBipGUbU9+knb8cDzdOugcPae ovVW0efRsOqVNqTMI9OAN/XJLNRa5MqwMbNYlnHMe34zX/Y= -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:51 2026 by rpki-client