This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/53-Empt8fqhopJ7cOY61y1UNXLc.roa File: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (raw, json) Hash identifier: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY= Subject key identifier: E7:7F:84:9A:9B:7C:7E:A8:68:A4:9E:DC:39:8E:B5:CB:55:0D:5C:B7 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB7EBD49F7D0051E9504B745161A20 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/53-Empt8fqhopJ7cOY61y1UNXLc.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 82.222.0.0/16 maxlen: 24 85.29.0.0/18 maxlen: 24 92.44.0.0/15 maxlen: 24 151.250.0.0/16 maxlen: 24 176.33.0.0/16 maxlen: 24 176.40.0.0/14 maxlen: 24 195.214.128.0/18 maxlen: 24 212.57.0.0/19 maxlen: 24 213.153.128.0/17 maxlen: 24 2a02:e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7e:bd:49:f7:d0:05:1e:95:04:b7:45:16:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e77f849a9b7c7ea868a49edc398eb5cb550d5cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:73:22:21:e1:2d:be:36:7e:73:2d:d3:1c: 3c:2a:58:04:17:fd:4d:07:51:2a:94:f6:99:b2:06: de:11:43:52:48:0b:6c:67:b3:5c:e3:af:51:b8:5e: 0e:be:22:17:15:0e:61:d9:83:f9:cf:ac:13:40:0a: cc:6d:41:63:8d:ab:ca:0b:a4:a3:a0:e7:27:c0:42: c0:c8:80:53:50:5a:d3:3e:5d:9f:ce:69:75:4e:6d: 83:1c:71:75:7a:87:17:1f:0c:bf:e8:6a:40:94:97: d4:d4:1e:a2:f3:8a:43:3b:36:53:7f:1e:e8:7f:52: 53:6f:c4:fc:9a:38:1b:dd:b2:a7:c3:29:72:54:50: 07:55:76:dd:7f:f5:85:43:1b:71:b2:c1:c2:85:d3: 7a:ed:5c:e7:73:55:a6:1f:b3:aa:bc:f3:27:c7:ad: 2f:bc:61:84:09:cd:4b:ee:a8:f4:95:4f:64:f5:fb: 77:a0:98:9d:9d:41:26:c3:03:4c:7a:4a:64:b3:19: f3:07:cc:9d:cb:92:5f:fe:f1:93:76:bd:4d:49:e7: 57:28:e5:ab:f2:2c:ac:f2:57:50:2f:7f:5f:ad:eb: e2:d1:52:e0:fa:dd:19:c9:8f:91:a4:83:4c:74:23: 9c:ea:ac:ff:41:1b:60:4b:44:4c:eb:58:d8:16:40: 5f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7F:84:9A:9B:7C:7E:A8:68:A4:9E:DC:39:8E:B5:CB:55:0D:5C:B7 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/53-Empt8fqhopJ7cOY61y1UNXLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.222.0.0/16 85.29.0.0/18 92.44.0.0/15 151.250.0.0/16 176.33.0.0/16 176.40.0.0/14 195.214.128.0/18 212.57.0.0/19 213.153.128.0/17 IPv6: 2a02:e0::/32 Signature Algorithm: sha256WithRSAEncryption 94:46:d1:9b:92:51:07:a0:8a:c3:c5:80:d4:da:51:61:bb:e4: f9:3a:b2:3a:ce:42:28:ea:e0:c8:19:dd:7d:40:4b:45:17:ff: 42:d0:6e:fb:5f:77:7c:fd:40:90:23:48:01:e5:63:63:33:2b: 92:cc:14:ee:cd:f6:0d:f4:67:2a:e5:a2:69:6e:c7:b4:75:f8: 5b:1a:f0:94:8b:53:c1:e2:cd:20:03:d0:c1:2c:e9:ca:cb:c2: 60:25:6d:05:d0:4a:c1:dd:45:53:40:3e:82:a7:97:9b:54:a0: 0e:2f:2b:d2:47:67:72:b3:f9:bf:74:ec:de:1f:63:72:19:b2: d6:c8:50:35:ac:99:e6:7e:37:de:73:05:39:57:3e:05:d1:2c: f1:c3:79:1d:13:4f:68:33:88:ed:ca:0d:d3:da:08:ea:bd:d6: 8f:eb:f7:a8:2e:f1:01:6e:fd:d9:6e:65:92:db:da:3a:37:28: 1d:04:b0:d7:92:5f:0a:40:21:11:c1:4d:f2:48:5e:05:01:16: ee:f0:cb:4e:8a:91:43:5e:a6:fb:e6:47:07:a2:8b:d5:69:6e: 63:18:2f:3f:7d:fe:94:a2:fe:4e:7f:35:52:86:bf:50:a9:e6: 82:96:da:46:d0:cf:9b:90:c6:78:a7:38:3d:d5:1d:99:eb:51: db:11:05:73 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt26369SffQBR6VBLdFFhogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzdmODQ5YTliN2M3ZWE4NjhhNDllZGMzOThlYjVjYjU1MGQ1Y2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTdzIiHhLb42fnMt0xw8KlgEF/1N B1EqlPaZsgbeEUNSSAtsZ7Nc469RuF4OviIXFQ5h2YP5z6wTQArMbUFjjavKC6Sj oOcnwELAyIBTUFrTPl2fzml1Tm2DHHF1eocXHwy/6GpAlJfU1B6i84pDOzZTfx7o f1JTb8T8mjgb3bKnwylyVFAHVXbdf/WFQxtxssHChdN67Vznc1WmH7OqvPMnx60v vGGECc1L7qj0lU9k9ft3oJidnUEmwwNMekpksxnzB8ydy5Jf/vGTdr1NSedXKOWr 8iys8ldQL39frevi0VLg+t0ZyY+RpINMdCOc6qz/QRtgS0RM61jYFkBf+wIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFOd/hJqbfH6oaKSe3DmOtctVDVy3MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvNTMtRW1wdDhmcWhvcEo3Y09ZNjF5MVVOWExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA3BAIAATAxAwMAUt4DBAZV HQADAwFcLAMDAJf6AwMAsCEDAwKwKAMEBsPWgAMEBdQ5AAMEB9WZgDANBAIAAjAH AwUAKgIA4DANBgkqhkiG9w0BAQsFAAOCAQEAlEbRm5JRB6CKw8WA1NpRYbvk+Tqy Os5CKOrgyBndfUBLRRf/QtBu+193fP1AkCNIAeVjYzMrkswU7s32DfRnKuWiaW7H tHX4WxrwlItTweLNIAPQwSzpysvCYCVtBdBKwd1FU0A+gqeXm1SgDi8r0kdncrP5 v3Ts3h9jchmy1shQNayZ5n433nMFOVc+BdEs8cN5HRNPaDOI7coN09oI6r3Wj+v3 qC7xAW792W5lktvaOjcoHQSw15JfCkAhEcFN8kheBQEW7vDLToqRQ16m++ZHB6KL 1WluYxgvP33+lKL+Tn81Uoa/UKnmgpbaRtDPm5DGeKc4PdUdmetR2xEFcw== -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:52 2026 by rpki-client