This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/zm911m8cc8YZZfJbwYQ5aTAaoOY.roa
File: zm911m8cc8YZZfJbwYQ5aTAaoOY.roa (raw, json)
Hash identifier: ReJF3cVbfAIqGPp+g2zOsYcwozrF/qsi8DLjV5pxna8=
Subject key identifier: CE:6F:75:D6:6F:1C:73:C6:19:65:F2:5B:C1:84:39:69:30:1A:A0:E6
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 019B7C1224C8FA0E66B63249D7DC08286632
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/zm911m8cc8YZZfJbwYQ5aTAaoOY.roa
Signing time: Fri 02 Jan 2026 00:18:42 +0000
ROA not before: Fri 02 Jan 2026 00:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59853
IP address blocks: 185.156.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:24:c8:fa:0e:66:b6:32:49:d7:dc:08:28:66:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Jan 2 00:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce6f75d66f1c73c61965f25bc1843969301aa0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:23:03:44:aa:63:16:53:56:2d:b3:de:74:
6e:30:9d:c7:fc:f2:86:3e:05:d3:05:97:8f:f2:8a:
e4:03:77:55:c4:3b:ce:cb:25:73:07:c5:0e:17:bd:
01:44:ca:a0:99:6e:7e:24:a5:27:71:4e:9e:a5:0d:
56:32:5f:54:34:a3:70:e3:7f:00:72:66:00:16:44:
69:4a:d8:b8:e2:42:bc:64:ac:ec:15:41:bb:6d:65:
2f:d3:59:f5:cf:96:07:44:2b:62:87:8b:4d:38:ef:
0e:87:0f:1c:a0:d7:a6:44:89:1d:1e:ea:af:f4:39:
a3:5b:89:55:bb:5d:3a:f7:e7:a7:1b:2b:fe:dd:98:
56:22:a9:18:24:20:7d:48:6c:41:c3:31:64:79:58:
cc:b0:86:87:bf:12:7a:8a:89:c3:83:e1:cf:41:23:
e1:32:3a:6e:4a:ce:8b:dc:b4:c0:f6:78:b9:2d:14:
30:37:ea:58:37:38:c8:15:71:b7:2e:75:e5:57:97:
fe:7d:5d:37:1a:49:80:c9:d5:fe:89:fc:88:e0:f7:
90:b1:d0:b5:c2:03:6c:65:80:e0:03:41:82:d7:62:
5a:2d:26:d3:c3:64:d8:0f:71:5d:bc:26:ff:09:95:
22:89:a4:b9:4c:c6:da:c8:82:1e:c8:7e:45:16:6c:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6F:75:D6:6F:1C:73:C6:19:65:F2:5B:C1:84:39:69:30:1A:A0:E6
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/zm911m8cc8YZZfJbwYQ5aTAaoOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:98:a7:7d:a7:57:28:de:1e:53:2d:9a:5b:d4:c4:0b:96:db:
28:3a:7f:ea:da:b1:6e:cc:eb:ae:50:35:19:14:61:13:9e:c2:
e6:61:14:c6:ae:3e:f7:3a:98:3f:56:93:ff:8d:2f:3a:87:bf:
39:63:86:ca:c5:45:1a:a6:5f:ce:93:64:e8:15:59:8e:70:19:
d5:c1:f4:c6:68:10:d1:c3:17:68:9b:19:31:b6:37:d9:ec:a9:
e1:2c:fe:ab:0d:af:0a:f7:3a:65:c8:fa:c6:80:f9:04:7e:36:
a6:93:8e:87:e2:c3:f0:77:b0:c1:4a:3f:2c:40:00:5d:26:b5:
c3:27:6c:50:ed:eb:5a:bf:1b:2c:72:f3:9f:2d:8e:04:c9:dd:
f8:19:c6:ec:04:76:b1:60:db:f0:00:0b:61:96:f1:09:c5:0d:
8d:bb:50:bb:eb:f1:f8:1d:4e:aa:15:e1:24:2a:6e:f2:b5:ff:
07:ef:95:7d:3e:1d:70:a4:a8:a2:3e:ca:8f:66:20:b7:69:57:
65:8b:a5:12:48:b9:54:85:7f:e5:7d:58:02:5b:3c:e7:2b:64:
f8:3c:8d:3d:51:ef:d8:68:a4:8f:78:8f:b3:2a:8b:11:84:80:
f2:22:a0:98:04:f2:f8:e4:1f:e9:4c:43:39:f9:fe:d6:72:35:
0a:a2:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 14:41:23 2026 by rpki-client