This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UCRNfEFNUmWpNz8qLDb9GmdgTX8.roa File: UCRNfEFNUmWpNz8qLDb9GmdgTX8.roa (raw, json) Hash identifier: ptTqtPeJ+Ndz+LwQ3WcEcOSuCPBGuhNKLQR2Ye5MgL0= Subject key identifier: 50:24:4D:7C:41:4D:52:65:A9:37:3F:2A:2C:36:FD:1A:67:60:4D:7F Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758BB2A90BC7361D62B8CF2FD28DCD8 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UCRNfEFNUmWpNz8qLDb9GmdgTX8.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212219 IP address blocks: 193.35.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bb:2a:90:bc:73:61:d6:2b:8c:f2:fd:28:dc:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50244d7c414d5265a9373f2a2c36fd1a67604d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:7a:66:04:58:29:df:1c:a8:82:2a:59:9f: fd:52:8b:9d:a8:d9:f9:40:32:55:a2:58:7b:5f:49: 6c:eb:46:b8:91:f6:b0:81:84:f0:b0:80:43:5e:70: dd:90:9d:91:85:14:2d:fc:43:c1:77:bd:59:4c:33: 51:97:65:ae:28:8d:50:41:87:da:d8:ee:5a:2c:d8: 83:f5:f3:a2:87:6c:6f:57:fc:64:f3:0c:04:22:2b: b9:1a:f4:1b:fc:a1:aa:2b:96:ab:2e:a6:c5:e2:10: 91:a3:37:c6:5d:6c:3c:98:c5:cf:2c:2e:46:d9:4d: 89:b7:8b:eb:aa:94:1a:4c:fb:1f:0e:77:9a:c2:b3: a3:55:e6:99:f1:2b:26:13:de:50:3b:5d:31:03:b6: 78:5c:e7:2e:b4:74:05:42:ed:13:6a:3f:b5:ab:d8: 55:b9:78:e0:8b:2a:a2:ba:e5:bc:a0:bc:e8:d7:1a: 6d:d8:ea:f7:79:fc:91:8b:e7:aa:4a:e4:4c:55:03: e4:ee:bb:ce:9f:fe:75:2d:89:30:51:46:53:f4:44: c8:b9:6d:87:fb:59:4b:1f:2e:c4:a1:e8:38:de:fd: 56:5a:d2:a1:a8:16:03:e7:eb:6e:59:f4:da:fe:3e: 15:3e:9c:50:6f:1f:b2:47:ac:02:a1:12:d4:f0:40: 67:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:24:4D:7C:41:4D:52:65:A9:37:3F:2A:2C:36:FD:1A:67:60:4D:7F X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UCRNfEFNUmWpNz8qLDb9GmdgTX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.154.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:4a:75:e0:52:fe:e2:f1:37:a9:a1:5b:98:ad:86:ca:67:35: 9d:55:3a:68:eb:38:1b:d2:28:b3:e7:68:47:c4:93:28:1b:bf: 65:ec:af:ea:6b:9e:34:bb:89:15:5b:ba:5b:2c:8b:a1:4c:44: 8a:58:45:4c:8d:c9:55:2c:70:9d:fd:39:a6:a5:8a:f2:00:d1: 05:14:21:8e:88:a5:ca:46:f1:9c:56:cf:21:c6:42:01:13:f2: e3:88:b2:b2:c9:bf:0d:c5:07:56:e9:2c:2c:cc:e4:da:0a:69: 73:93:20:b3:8d:b8:b5:f9:26:b1:6a:72:f0:14:b7:ee:46:b7: f3:57:18:da:16:5b:72:51:08:d6:ae:6a:bd:80:07:41:0a:85: 80:0d:9e:44:df:e9:bd:e7:fa:71:35:bd:98:bf:6f:51:a9:95: fd:aa:9f:f8:e0:0c:36:73:38:70:86:45:81:08:dd:33:07:fe: 05:1b:ea:6c:d9:9a:da:77:ef:c1:dd:23:8f:73:eb:de:37:af: 74:cc:ea:6a:05:1b:c8:91:d2:09:6d:e3:3a:b2:09:df:97:da: a4:71:d3:9d:7d:10:22:4f:ee:9e:fb:17:d6:ca:15:65:02:f5: 75:4d:ba:92:0b:26:58:e2:08:2a:88:dc:7d:c6:90:ef:b1:fe: 5b:93:b4:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLsqkLxzYdYrjPL9KNzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDI0NGQ3YzQxNGQ1MjY1YTkzNzNmMmEyYzM2ZmQxYTY3NjA0ZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjh6ZgRYKd8cqIIqWZ/9UoudqNn5 QDJVolh7X0ls60a4kfawgYTwsIBDXnDdkJ2RhRQt/EPBd71ZTDNRl2WuKI1QQYfa 2O5aLNiD9fOih2xvV/xk8wwEIiu5GvQb/KGqK5arLqbF4hCRozfGXWw8mMXPLC5G 2U2Jt4vrqpQaTPsfDneawrOjVeaZ8SsmE95QO10xA7Z4XOcutHQFQu0Taj+1q9hV uXjgiyqiuuW8oLzo1xpt2Or3efyRi+eqSuRMVQPk7rvOn/51LYkwUUZT9ETIuW2H +1lLHy7Eoeg43v1WWtKhqBYD5+tuWfTa/j4VPpxQbx+yR6wCoRLU8EBn7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAkTXxBTVJlqTc/Kiw2/RpnYE1/MB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvVUNSTmZFRk5VbVdwTno4cUxEYjlHbWRnVFg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSOaMA0G CSqGSIb3DQEBCwUAA4IBAQAbSnXgUv7i8TepoVuYrYbKZzWdVTpo6zgb0iiz52hH xJMoG79l7K/qa540u4kVW7pbLIuhTESKWEVMjclVLHCd/TmmpYryANEFFCGOiKXK RvGcVs8hxkIBE/LjiLKyyb8NxQdW6SwszOTaCmlzkyCzjbi1+SaxanLwFLfuRrfz VxjaFltyUQjWrmq9gAdBCoWADZ5E3+m95/pxNb2Yv29RqZX9qp/44Aw2czhwhkWB CN0zB/4FG+ps2Zrad+/B3SOPc+veN690zOpqBRvIkdIJbeM6sgnfl9qkcdOdfRAi T+6e+xfWyhVlAvV1TbqSCyZY4ggqiNx9xpDvsf5bk7RN -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:23 2026 by rpki-client