This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/UlALuQSonGHb83C6mCtDsKsISTs.roa File: UlALuQSonGHb83C6mCtDsKsISTs.roa (raw, json) Hash identifier: z6SE+BCxoycaJSnwl42l4AOKUzdbwtgoMRZeUMft74U= Subject key identifier: 52:50:0B:B9:04:A8:9C:61:DB:F3:70:BA:98:2B:43:B0:AB:08:49:3B Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660 Certificate serial: 019B7E3871E089CE4D552281177EB509A36A Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/UlALuQSonGHb83C6mCtDsKsISTs.roa Signing time: Fri 02 Jan 2026 10:19:46 +0000 ROA not before: Fri 02 Jan 2026 10:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 194.50.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:71:e0:89:ce:4d:55:22:81:17:7e:b5:09:a3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660 Validity Not Before: Jan 2 10:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52500bb904a89c61dbf370ba982b43b0ab08493b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:53:ec:f8:82:23:fd:21:e9:79:2a:b6:87: b1:1f:a2:74:19:bf:5e:a6:bb:e2:81:ab:dc:80:fc: eb:5d:e2:e3:bc:15:c1:f1:db:3f:2c:6c:f1:44:de: 89:e2:49:13:1e:95:a6:7e:8c:d1:2b:65:0e:61:fa: 84:21:10:4f:99:06:df:b7:71:3c:bb:4f:9a:c8:f1: 97:b6:f3:34:5f:34:6e:4c:0b:5b:ac:4c:bf:f4:d5: 78:eb:28:26:20:20:8a:4f:b4:2e:b7:87:b5:51:d7: 66:fd:bb:7f:64:a4:3c:4b:0b:9c:a4:bb:47:45:2e: 0d:04:6f:43:46:0d:01:13:3b:33:45:f0:05:ff:a9: c2:52:55:6b:15:27:76:0a:ed:6c:c9:79:66:2b:15: 02:40:cf:b6:e9:13:a0:46:c8:c5:6b:e7:89:c5:e8: 12:8a:73:f7:98:4e:f2:fb:48:50:7c:f6:b2:9f:eb: cd:1c:fb:db:bd:79:55:4d:d8:08:c3:da:ed:0d:52: 74:2a:69:d4:97:23:60:c9:bb:82:43:8b:7d:ad:dc: 8a:c8:0d:ec:a1:bd:f1:2f:b7:88:d2:5a:ae:03:ff: ca:68:b5:a0:8b:bd:b0:84:b1:a0:80:d2:49:3f:45: 80:41:ff:23:b2:9f:ef:26:71:06:87:ca:b9:9b:a3: e1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:50:0B:B9:04:A8:9C:61:DB:F3:70:BA:98:2B:43:B0:AB:08:49:3B X509v3 Authority Key Identifier: keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/UlALuQSonGHb83C6mCtDsKsISTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.144.0/22 Signature Algorithm: sha256WithRSAEncryption 89:62:7a:8a:53:50:4c:9e:48:21:3a:ab:32:ca:f2:cd:69:03: 2c:33:f4:7e:03:9c:b0:96:ae:a0:bd:7a:e6:91:87:cc:ac:36: 1e:1c:94:e2:68:d3:78:d8:5f:27:ee:3b:1b:da:04:89:86:9d: 7d:43:d4:e6:01:e7:33:4d:da:3b:6d:e8:9d:0e:09:f2:43:fc: f0:ba:06:3e:db:8c:bb:54:b6:98:dc:d8:81:a0:ee:0c:12:17: 54:b5:73:21:37:d3:1d:87:d5:0d:79:7b:df:82:6f:4d:cf:0b: 59:b4:28:9c:06:03:62:e7:e0:ff:30:4c:29:a5:09:aa:72:30: 05:b4:5b:14:29:e3:f4:c3:48:35:e1:87:97:16:51:cd:db:09: 0c:d3:90:e4:9f:96:22:b0:63:7b:12:5c:a6:a0:02:8d:4e:59: ce:8d:7d:12:c0:c8:1b:51:e9:e4:c6:1b:e1:9a:5d:a2:52:33: 84:6c:b1:01:da:e7:0a:5f:26:4d:60:b9:dc:12:fd:c8:da:01: 73:4a:dc:6a:a8:39:14:74:14:07:8a:93:fa:94:8f:1f:b8:5c: cd:15:a5:4c:50:b0:b7:88:fe:0a:5c:f3:d4:73:6c:c2:11:b1: ca:23:58:08:cc:5c:f5:83:81:c0:84:b2:00:aa:c0:c6:48:22: 9f:b2:3d:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHHgic5NVSKBF361CaNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmUzZjZmNmQ5ODcxNGUwMWYwOGM3M2IyNjQ0MzY4Nzc0 ZTg2NjAwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjUwMGJiOTA0YTg5YzYxZGJmMzcwYmE5ODJiNDNiMGFiMDg0OTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIBT7PiCI/0h6XkqtoexH6J0Gb9e prvigavcgPzrXeLjvBXB8ds/LGzxRN6J4kkTHpWmfozRK2UOYfqEIRBPmQbft3E8 u0+ayPGXtvM0XzRuTAtbrEy/9NV46ygmICCKT7Qut4e1Uddm/bt/ZKQ8SwucpLtH RS4NBG9DRg0BEzszRfAF/6nCUlVrFSd2Cu1syXlmKxUCQM+26ROgRsjFa+eJxegS inP3mE7y+0hQfPayn+vNHPvbvXlVTdgIw9rtDVJ0KmnUlyNgybuCQ4t9rdyKyA3s ob3xL7eI0lquA//KaLWgi72whLGggNJJP0WAQf8jsp/vJnEGh8q5m6PhgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFJQC7kEqJxh2/NwupgrQ7CrCEk7MB8GA1UdIwQY MBaAFO3+P29tmHFOAfCMc7JkQ2h3ToZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xODUzNjItYzhkOS00NTZmLTllMmMt ZWI0YTk2YzM4YzZmLzEvVWxBTHVRU29uR0hiODNDNm1DdERzS3NJU1RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xODUzNjItYzhkOS00NTZmLTllMmMtZWI0YTk2YzM4YzZm LzEvN2Y0X2IyMlljVTRCOEl4enNtUkRhSGRPaG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjKQMA0G CSqGSIb3DQEBCwUAA4IBAQCJYnqKU1BMnkghOqsyyvLNaQMsM/R+A5ywlq6gvXrm kYfMrDYeHJTiaNN42F8n7jsb2gSJhp19Q9TmAeczTdo7beidDgnyQ/zwugY+24y7 VLaY3NiBoO4MEhdUtXMhN9Mdh9UNeXvfgm9NzwtZtCicBgNi5+D/MEwppQmqcjAF tFsUKeP0w0g14YeXFlHN2wkM05Dkn5YisGN7ElymoAKNTlnOjX0SwMgbUenkxhvh ml2iUjOEbLEB2ucKXyZNYLncEv3I2gFzStxqqDkUdBQHipP6lI8fuFzNFaVMULC3 iP4KXPPUc2zCEbHKI1gIzFz1g4HAhLIAqsDGSCKfsj3T -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:49 2026 by rpki-client