This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/27iJL7tabeRZf9si2vPA81cwEnc.roa
File: 27iJL7tabeRZf9si2vPA81cwEnc.roa (raw, json)
Hash identifier: xWHsz8ye7DjPUgv12m50umXvY8HUT0fQ38UrVHv9Jwc=
Subject key identifier: DB:B8:89:2F:BB:5A:6D:E4:59:7F:DB:22:DA:F3:C0:F3:57:30:12:77
Certificate issuer: /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial: 019B77C684B0883DB4D68C01CBB407BED4CF
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/27iJL7tabeRZf9si2vPA81cwEnc.roa
Signing time: Thu 01 Jan 2026 04:17:37 +0000
ROA not before: Thu 01 Jan 2026 04:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20952
IP address blocks: 185.57.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:84:b0:88:3d:b4:d6:8c:01:cb:b4:07:be:d4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Validity
Not Before: Jan 1 04:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbb8892fbb5a6de4597fdb22daf3c0f357301277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:55:cf:1b:97:8d:6f:8d:b3:8a:f8:e8:16:
a9:c5:26:a4:39:58:dc:1c:d8:3a:54:80:de:9a:61:
fa:ec:b0:90:88:ec:1d:a1:57:55:fe:ca:6c:6f:c4:
ff:71:77:56:59:1c:ca:c1:23:12:53:10:a4:f6:0d:
13:06:4b:f0:86:ef:b2:1b:2b:3d:4f:bd:c3:5f:81:
ef:16:38:16:24:43:f3:58:9e:4e:c9:4d:a2:d0:e0:
71:fa:5a:ce:e6:c1:1d:60:77:32:43:88:5d:5a:a0:
8e:49:d9:b4:69:ed:d0:c6:cb:57:c4:ac:9a:00:2e:
69:fb:e6:ce:cc:26:b1:7e:99:52:81:43:04:1a:39:
ce:9f:81:ad:8c:9b:0f:a9:5c:9e:0e:5c:53:7e:83:
d1:05:2d:4a:6c:6d:44:75:ed:fa:da:62:53:7e:7a:
10:54:99:73:30:9e:90:fd:f7:6f:bc:dc:ee:bd:e6:
89:5a:3f:d0:85:a3:40:72:b3:b4:ed:fc:f9:d2:74:
35:80:81:e9:b2:df:9f:54:fa:bb:0e:80:68:9d:57:
16:ab:23:f7:92:33:06:50:af:e5:a4:d5:a1:57:8c:
24:2e:3f:f4:78:03:80:20:7b:ce:3a:03:5f:86:b1:
05:ac:f7:49:df:12:21:06:c4:4e:09:03:9f:88:b2:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B8:89:2F:BB:5A:6D:E4:59:7F:DB:22:DA:F3:C0:F3:57:30:12:77
X509v3 Authority Key Identifier:
keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/27iJL7tabeRZf9si2vPA81cwEnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.76.0/24
Signature Algorithm: sha256WithRSAEncryption
67:91:7d:b2:c9:2d:12:b1:62:37:6d:e7:21:bb:c5:99:84:0b:
db:4d:b1:76:f5:a5:45:0a:25:96:fd:c3:87:4e:1c:92:5f:32:
a1:e1:96:90:6c:f7:68:3f:31:7a:3d:9a:9a:68:aa:d1:fb:87:
41:04:2b:09:6c:8e:dd:d8:ba:de:ea:82:1e:c3:07:6c:69:18:
c9:11:be:ba:b1:c5:87:32:1b:a8:38:23:42:c9:87:d3:3c:58:
d1:df:c9:fa:c9:e6:65:93:dd:9c:8f:34:13:e2:49:2d:1f:f4:
bb:4d:bd:2c:0c:f9:42:9f:fa:35:b0:89:fb:cd:f0:09:c7:03:
a3:2c:74:80:28:ac:11:12:b6:ec:49:3d:21:d4:20:fa:84:9d:
de:79:ac:c0:d0:51:c4:77:c1:a4:48:c0:0f:e6:12:60:a0:92:
16:67:e9:63:8e:3f:26:7d:b4:9e:22:fd:8d:52:de:a7:cc:c2:
42:74:55:f8:32:f9:c1:8d:3b:af:2c:89:dd:98:35:59:07:4d:
1d:4e:f3:b4:88:42:18:42:6e:3c:72:59:3a:25:00:fd:fe:f9:
48:df:47:fd:f7:25:75:6e:8a:6e:5f:f8:e3:5d:6d:45:af:26:
50:1c:2a:e4:c2:9e:9d:b8:3c:50:60:a7:9c:7d:c1:49:d2:00:
32:30:8f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:55 2026 by rpki-client