This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/UboZ50C_e6m85Y04ZZEQFVaz2bU.roa File: UboZ50C_e6m85Y04ZZEQFVaz2bU.roa (raw, json) Hash identifier: Za+7ixivpFVxRDrXbo5D+97t0iV/6NJ0y3X8U2eMBXY= Subject key identifier: 51:BA:19:E7:40:BF:7B:A9:BC:E5:8D:38:65:91:10:15:56:B3:D9:B5 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019BE248A689DB66B1C1AC3A3A748FE8A07F Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/UboZ50C_e6m85Y04ZZEQFVaz2bU.roa Signing time: Wed 21 Jan 2026 20:39:30 +0000 ROA not before: Wed 21 Jan 2026 20:39:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 37027 IP address blocks: 152.55.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e2:48:a6:89:db:66:b1:c1:ac:3a:3a:74:8f:e8:a0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 21 20:39:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51ba19e740bf7ba9bce58d386591101556b3d9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:65:c6:8b:79:57:d3:c3:75:c0:d5:10:a3: 7f:2d:99:6d:e6:d9:08:d7:ca:04:9e:5f:46:f9:94: 2b:00:4a:15:db:69:dc:1a:af:80:27:59:80:77:59: 85:d2:ea:a9:a3:47:01:9a:6b:dc:6d:e3:76:00:74: 8a:63:49:c7:ff:fa:e9:03:c4:2d:b4:2e:f0:d4:55: f2:55:8d:d1:6b:74:d7:d5:e8:31:d5:52:9c:5c:83: 7e:cc:5b:8e:eb:7b:36:fa:8b:47:c8:57:0d:cd:55: 5a:c8:aa:e6:29:2f:7b:5a:af:a1:b0:f2:fa:8f:41: 79:37:5e:9e:13:aa:cf:45:08:1d:4e:e3:47:a0:96: 67:52:a5:b8:a5:71:6d:34:af:a0:51:74:7b:ed:3f: 7f:b3:0b:3e:a9:e1:b3:66:62:cb:2f:01:63:31:d7: 6d:a2:f4:7b:18:f6:aa:22:3f:d2:e8:bc:eb:3e:d6: a6:91:99:34:60:b0:f6:d6:fd:00:c8:fc:d8:28:cf: fc:75:50:ec:a9:9e:3d:f9:05:44:71:cd:37:77:64: 77:af:73:d7:f8:2b:fd:ff:f9:c4:5f:d0:b2:ab:3c: b7:6a:fe:9e:69:58:24:d4:52:57:be:69:e4:ad:62: 38:41:1c:b1:c3:b2:b7:f3:39:44:1d:69:b8:0a:13: 59:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BA:19:E7:40:BF:7B:A9:BC:E5:8D:38:65:91:10:15:56:B3:D9:B5 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/UboZ50C_e6m85Y04ZZEQFVaz2bU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.55.221.0/24 Signature Algorithm: sha256WithRSAEncryption 26:02:3d:d8:4b:29:50:0f:7f:22:8b:cb:e6:ba:3d:cb:e8:ba: 0d:8e:87:e1:62:6a:50:07:01:57:0d:76:cf:46:89:54:c9:5c: c9:cd:d5:c4:92:7f:56:43:bc:2f:2d:06:ea:9f:a3:e7:31:37: 28:79:94:af:6c:4f:dc:ed:3e:f8:59:6e:a4:42:9f:4a:9e:16: 47:53:61:63:80:70:24:c4:d4:ff:e9:61:2e:d4:f5:d4:a3:eb: 24:d0:63:81:2c:a6:8b:98:39:ba:ee:8d:8e:e5:0a:f4:2e:ce: 24:54:32:7b:4e:74:e8:72:e2:c2:2c:68:94:94:ac:1d:82:ce: 53:fb:ba:60:fc:2f:19:ac:ed:6a:b2:1f:e2:d6:ff:62:d4:bf: 35:44:18:ab:da:5b:9c:3f:c9:0d:74:94:23:f4:19:6c:43:26: 16:60:4b:ac:c7:4b:f3:57:62:33:04:90:d8:c5:3f:fd:8e:55: a1:af:8b:94:2c:c3:f1:26:4b:b0:c3:09:9b:59:f5:d4:d3:0a: 38:d2:06:46:78:31:1c:57:c1:95:d9:ed:57:59:51:3a:c7:5b: 9c:8b:8a:44:e6:d8:f3:69:c7:df:97:47:40:cc:fb:d1:99:94: cb:73:d4:54:30:5f:31:19:50:f1:fc:74:85:eb:83:a9:0b:c3: 7e:b1:1d:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZviSKaJ22axwaw6OnSP6KB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTIxMjAzOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWJhMTllNzQwYmY3YmE5YmNlNThkMzg2NTkxMTAxNTU2YjNkOWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAtlxot5V9PDdcDVEKN/LZlt5tkI 18oEnl9G+ZQrAEoV22ncGq+AJ1mAd1mF0uqpo0cBmmvcbeN2AHSKY0nH//rpA8Qt tC7w1FXyVY3Ra3TX1egx1VKcXIN+zFuO63s2+otHyFcNzVVayKrmKS97Wq+hsPL6 j0F5N16eE6rPRQgdTuNHoJZnUqW4pXFtNK+gUXR77T9/sws+qeGzZmLLLwFjMddt ovR7GPaqIj/S6LzrPtamkZk0YLD21v0AyPzYKM/8dVDsqZ49+QVEcc03d2R3r3PX +Cv9//nEX9Cyqzy3av6eaVgk1FJXvmnkrWI4QRyxw7K38zlEHWm4ChNZxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFG6GedAv3upvOWNOGWREBVWs9m1MB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvVWJvWjUwQ19lNm04NVkwNFpaRVFGVmF6MmJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmDfdMA0G CSqGSIb3DQEBCwUAA4IBAQAmAj3YSylQD38ii8vmuj3L6LoNjofhYmpQBwFXDXbP RolUyVzJzdXEkn9WQ7wvLQbqn6PnMTcoeZSvbE/c7T74WW6kQp9KnhZHU2FjgHAk xNT/6WEu1PXUo+sk0GOBLKaLmDm67o2O5Qr0Ls4kVDJ7TnTocuLCLGiUlKwdgs5T +7pg/C8ZrO1qsh/i1v9i1L81RBir2lucP8kNdJQj9BlsQyYWYEusx0vzV2IzBJDY xT/9jlWhr4uULMPxJkuwwwmbWfXU0wo40gZGeDEcV8GV2e1XWVE6x1uci4pE5tjz acffl0dAzPvRmZTLc9RUMF8xGVDx/HSF64OpC8N+sR2H -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:29 2026 by rpki-client