This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/27zCZtJCBtoIZL8KNVcE3LjQOq8.roa File: 27zCZtJCBtoIZL8KNVcE3LjQOq8.roa (raw, json) Hash identifier: T/kqnQer07QHlzXn/hM6N4NNq2f0OutBqI6A+OxTzB4= Subject key identifier: DB:BC:C2:66:D2:42:06:DA:08:64:BF:0A:35:57:04:DC:B8:D0:3A:AF Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0 Certificate serial: 019B7B35473BA9569A0CF66904169356A902 Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/27zCZtJCBtoIZL8KNVcE3LjQOq8.roa Signing time: Thu 01 Jan 2026 20:17:27 +0000 ROA not before: Thu 01 Jan 2026 20:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51720 IP address blocks: 2a00:d340:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:47:3b:a9:56:9a:0c:f6:69:04:16:93:56:a9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0 Validity Not Before: Jan 1 20:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbbcc266d24206da0864bf0a355704dcb8d03aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:9f:75:db:27:5a:c4:6e:a3:bb:ad:9a:0d: 90:ac:69:d5:16:c5:da:40:4e:22:18:fd:56:13:05: a0:a9:52:0b:50:43:18:5b:8d:4e:81:96:c7:bc:00: 3b:94:61:21:7c:64:fd:ac:5b:4c:6b:01:78:62:e9: 0c:fd:54:c0:96:11:ca:a1:f7:91:11:ee:65:2b:e3: 7c:0e:f6:8a:da:9f:cc:99:2d:74:74:4b:dc:2e:74: aa:4f:83:c9:55:5f:98:e4:63:0d:71:37:3e:d5:e7: bf:b8:b4:49:b2:0f:80:7f:14:cf:7e:28:37:80:73: 82:4f:64:4b:fe:7e:9d:08:16:0f:4f:ff:2b:c8:99: c2:c3:f3:39:74:cf:0f:5f:44:5d:81:a3:d9:ee:7d: 82:e5:df:8d:51:4d:4d:bb:48:53:64:47:53:e9:0b: 1c:f8:d9:ed:0e:4b:17:3c:06:53:a2:79:a1:46:e6: a4:4d:06:16:15:5b:25:28:d7:12:1a:e7:77:5e:8d: b0:27:f1:10:51:55:41:02:19:cc:fb:a0:0a:03:f6: f3:20:31:e7:ac:6d:91:af:a1:b1:2f:08:bb:36:5e: 7e:48:13:e5:35:4d:04:55:56:59:2d:df:04:30:cf: 0b:4f:6c:30:a4:9e:28:75:1f:27:af:f5:04:26:33: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BC:C2:66:D2:42:06:DA:08:64:BF:0A:35:57:04:DC:B8:D0:3A:AF X509v3 Authority Key Identifier: keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/27zCZtJCBtoIZL8KNVcE3LjQOq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:d340:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 95:7e:81:ca:38:4a:75:c5:77:b1:76:2a:a8:1e:54:83:be:f9: bc:b7:2f:9e:e6:a3:db:b1:a5:c4:6b:47:1b:81:6d:91:f0:0d: 29:43:e7:da:1a:ec:29:c8:79:dd:46:d3:82:e8:1e:d0:49:df: af:b7:d8:fb:86:b5:ff:03:25:56:b9:44:d4:32:91:e5:e5:3c: d0:29:bc:e6:96:5b:68:1d:27:d7:cf:e8:37:35:bd:9e:16:49: 61:23:20:d3:8a:ce:63:84:e7:aa:6c:91:18:17:94:dd:2e:4d: 81:e7:81:56:c5:ac:e7:41:ce:ca:dd:0d:10:bc:c9:02:93:96: 08:a9:4e:49:75:29:82:fb:ce:bc:c1:35:c2:a9:14:c4:b7:1a: 22:dd:7c:00:5f:9e:30:00:13:ac:16:ab:d0:35:76:35:47:a4: 97:1e:56:e1:50:5b:26:88:50:98:0c:e1:c5:12:af:31:19:e1: 7c:5e:d4:27:81:ea:91:bb:34:91:dd:a2:7b:91:a6:5c:87:c3: 7c:ae:5b:f1:5f:73:1e:a9:29:81:cc:1d:7d:f7:fb:38:c1:2f: 7e:a9:5b:3a:22:17:4d:ad:b6:a4:35:74:06:19:b9:9d:46:d5: a9:8e:6c:57:e2:9c:6d:2e:ec:ac:af:fb:14:c1:2d:18:a1:7f: 21:4e:18:09 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NUc7qVaaDPZpBBaTVqkCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyOGJiYWQ2ZjQ5MTY4NDJiYmUzMjAyODRmYWZlMTBjYWY1 OWVkZjAwHhcNMjYwMTAxMjAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmJjYzI2NmQyNDIwNmRhMDg2NGJmMGEzNTU3MDRkY2I4ZDAzYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVufddsnWsRuo7utmg2QrGnVFsXa QE4iGP1WEwWgqVILUEMYW41OgZbHvAA7lGEhfGT9rFtMawF4YukM/VTAlhHKofeR Ee5lK+N8DvaK2p/MmS10dEvcLnSqT4PJVV+Y5GMNcTc+1ee/uLRJsg+AfxTPfig3 gHOCT2RL/n6dCBYPT/8ryJnCw/M5dM8PX0RdgaPZ7n2C5d+NUU1Nu0hTZEdT6Qsc +NntDksXPAZTonmhRuakTQYWFVslKNcSGud3Xo2wJ/EQUVVBAhnM+6AKA/bzIDHn rG2Rr6GxLwi7Nl5+SBPlNU0EVVZZLd8EMM8LT2wwpJ4odR8nr/UEJjOYawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNu8wmbSQgbaCGS/CjVXBNy40DqvMB8GA1UdIwQY MBaAFIKLutb0kWhCu+MgKE+v4QyvWe3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgt MTg5NjU1NWEyZjBlLzEvMjd6Q1p0SkNCdG9JWkw4S05WY0UzTGpRT3E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgtMTg5NjU1NWEyZjBl LzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgDTQP// MA0GCSqGSIb3DQEBCwUAA4IBAQCVfoHKOEp1xXexdiqoHlSDvvm8ty+e5qPbsaXE a0cbgW2R8A0pQ+faGuwpyHndRtOC6B7QSd+vt9j7hrX/AyVWuUTUMpHl5TzQKbzm lltoHSfXz+g3Nb2eFklhIyDTis5jhOeqbJEYF5TdLk2B54FWxaznQc7K3Q0QvMkC k5YIqU5JdSmC+868wTXCqRTEtxoi3XwAX54wABOsFqvQNXY1R6SXHlbhUFsmiFCY DOHFEq8xGeF8XtQngeqRuzSR3aJ7kaZch8N8rlvxX3MeqSmBzB199/s4wS9+qVs6 IhdNrbakNXQGGbmdRtWpjmxX4pxtLuysr/sUwS0YoX8hThgJ -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:51 2026 by rpki-client