This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/EjpzgiXwC7omQHNgYlcRzu_e8UU.roa File: EjpzgiXwC7omQHNgYlcRzu_e8UU.roa (raw, json) Hash identifier: MRUgtinadxY36CAXX+Sb8EbCP+mT/wSWQT2+h7ZWlcY= Subject key identifier: 12:3A:73:82:25:F0:0B:BA:26:40:73:60:62:57:11:CE:EF:DE:F1:45 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019BE248A54FA6F7B5298000234C78BA4F8B Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/EjpzgiXwC7omQHNgYlcRzu_e8UU.roa Signing time: Wed 21 Jan 2026 20:39:30 +0000 ROA not before: Wed 21 Jan 2026 20:39:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 152.55.216.0/22 maxlen: 22 152.55.220.0/24 maxlen: 24 152.55.222.0/24 maxlen: 24 152.55.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e2:48:a5:4f:a6:f7:b5:29:80:00:23:4c:78:ba:4f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 21 20:39:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=123a738225f00bba26407360625711ceefdef145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:6e:c5:76:3a:98:35:57:fc:2a:7b:fe:d6: 4f:f5:e7:6b:5d:47:68:f8:49:07:99:25:62:4c:3b: cc:79:73:c5:47:a9:4a:a3:5c:7f:3d:c0:9f:0b:20: e4:a6:4d:8a:2a:cd:b6:af:82:af:db:63:dc:dc:72: 6f:f1:d3:8d:2e:68:3c:71:8f:90:9f:25:22:cd:af: 5c:1d:e9:18:30:14:18:27:23:ad:d9:f5:15:63:6a: eb:00:5b:46:d2:ac:03:a4:78:94:7a:5d:59:3e:27: 40:05:23:59:98:eb:44:63:67:26:08:ab:67:df:3a: bb:4c:7c:94:f4:fe:65:2c:c0:29:43:88:84:4a:3d: 57:9c:96:ce:90:b4:d2:73:04:5d:b5:11:03:6c:8c: 40:b4:de:78:2d:bb:ba:5a:b4:87:52:e0:15:6a:90: 00:16:a3:a2:7f:04:7b:19:44:c2:0a:8f:68:78:c9: aa:a8:2f:f3:da:a3:4b:51:c6:07:2b:ff:ca:e4:bc: 57:8c:1c:1d:25:24:a0:28:41:51:8a:7a:ea:9a:bd: f0:b1:91:11:13:c5:03:1c:c1:1f:bd:ce:aa:16:37: 5e:69:dc:cc:d4:6e:7b:9d:02:8d:4d:6f:39:81:67: 26:e0:35:cf:06:b1:1b:e3:dd:f2:44:ef:ff:ee:d4: 15:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3A:73:82:25:F0:0B:BA:26:40:73:60:62:57:11:CE:EF:DE:F1:45 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/EjpzgiXwC7omQHNgYlcRzu_e8UU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.55.216.0-152.55.220.255 152.55.222.0/23 Signature Algorithm: sha256WithRSAEncryption 57:e5:31:3e:b0:73:1e:32:38:22:8f:41:08:fa:b2:83:11:7d: 24:a0:b7:63:dc:cb:37:2e:40:3b:e0:d5:4c:a3:8f:53:d2:47: 2d:6e:25:c1:15:33:d9:c4:60:c5:59:d8:6c:68:b6:3a:10:34: d3:65:8d:61:48:74:ed:0b:3a:c7:61:38:5f:ed:dc:3f:85:e6: 41:29:d6:b4:1a:15:fd:98:0e:8a:a4:6b:ef:4d:73:17:b7:f6: 03:87:a7:f2:6b:04:da:aa:41:0f:08:73:96:b7:fb:4b:a4:3e: e1:b8:50:a9:00:2f:43:bc:da:8b:17:67:b8:97:0f:b1:56:4f: bf:e6:2c:0f:ba:d5:53:78:07:dc:56:79:5a:e7:13:8e:c6:f8: 76:d7:37:6e:d5:c5:61:9c:ff:00:bc:ef:25:93:36:95:35:69: ee:f5:52:b0:54:8b:31:22:22:19:ea:f0:1d:ed:40:82:eb:2f: 89:a0:ed:7a:c4:3f:81:a8:7d:12:77:d4:1f:87:d6:c6:5c:c8: 76:8c:3c:0e:3a:86:92:4d:b4:63:9d:fa:c4:b9:77:b1:63:dd: c6:7b:14:d3:3c:e1:33:8b:e5:69:3d:55:61:ba:fb:56:46:9d: b6:8c:e3:c4:df:af:20:86:80:0e:01:0f:57:f8:2c:8d:27:82: 44:07:58:0d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZviSKVPpve1KYAAI0x4uk+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTIxMjAzOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjNhNzM4MjI1ZjAwYmJhMjY0MDczNjA2MjU3MTFjZWVmZGVmMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOJuxXY6mDVX/Cp7/tZP9edrXUdo +EkHmSViTDvMeXPFR6lKo1x/PcCfCyDkpk2KKs22r4Kv22Pc3HJv8dONLmg8cY+Q nyUiza9cHekYMBQYJyOt2fUVY2rrAFtG0qwDpHiUel1ZPidABSNZmOtEY2cmCKtn 3zq7THyU9P5lLMApQ4iESj1XnJbOkLTScwRdtREDbIxAtN54Lbu6WrSHUuAVapAA FqOifwR7GUTCCo9oeMmqqC/z2qNLUcYHK//K5LxXjBwdJSSgKEFRinrqmr3wsZER E8UDHMEfvc6qFjdeadzM1G57nQKNTW85gWcm4DXPBrEb493yRO//7tQVNQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBI6c4Il8Au6JkBzYGJXEc7v3vFFMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvRWpwemdpWHdDN29tUUhOZ1lsY1J6dV9lOFVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAOYN9gD BACYN9wDBAGYN94wDQYJKoZIhvcNAQELBQADggEBAFflMT6wcx4yOCKPQQj6soMR fSSgt2PcyzcuQDvg1Uyjj1PSRy1uJcEVM9nEYMVZ2GxotjoQNNNljWFIdO0LOsdh OF/t3D+F5kEp1rQaFf2YDoqka+9Ncxe39gOHp/JrBNqqQQ8Ic5a3+0ukPuG4UKkA L0O82osXZ7iXD7FWT7/mLA+61VN4B9xWeVrnE47G+HbXN27VxWGc/wC87yWTNpU1 ae71UrBUizEiIhnq8B3tQILrL4mg7XrEP4GofRJ31B+H1sZcyHaMPA46hpJNtGOd +sS5d7Fj3cZ7FNM84TOL5Wk9VWG6+1ZGnbaM48TfryCGgA4BD1f4LI0ngkQHWA0= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:57 2026 by rpki-client