This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/irfw5UW1_BtcJGyWmOKmkhAGuPM.roa File: irfw5UW1_BtcJGyWmOKmkhAGuPM.roa (raw, json) Hash identifier: KUrzlXQ0G9dX8hl6WHyNKm8JCOJt/8bKQDZ8bvI+eWI= Subject key identifier: 8A:B7:F0:E5:45:B5:FC:1B:5C:24:6C:96:98:E2:A6:92:10:06:B8:F3 Certificate issuer: /CN=101287927ad7b1db479ae5ab92ab87c4a4faf496 Certificate serial: 019B797EC891EB490CB780139B1C1E046D04 Authority key identifier: 10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/irfw5UW1_BtcJGyWmOKmkhAGuPM.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42811 IP address blocks: 81.14.0.0/17 maxlen: 17 95.176.0.0/17 maxlen: 17 185.147.220.0/22 maxlen: 22 2a00:be80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c8:91:eb:49:0c:b7:80:13:9b:1c:1e:04:6d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101287927ad7b1db479ae5ab92ab87c4a4faf496 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ab7f0e545b5fc1b5c246c9698e2a6921006b8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:44:1e:c9:13:da:19:f8:81:d4:cc:d0:c0: f0:c3:2b:a3:84:f2:17:ef:a6:1d:50:58:18:dd:a6: 22:fc:13:c2:ed:88:4a:27:3a:85:ca:7a:8b:05:5b: 10:2a:6a:0a:e7:f9:9a:26:90:e6:d8:13:78:e2:78: 4b:73:2a:3b:cc:49:d1:62:49:28:23:55:94:84:d3: e4:d9:86:07:d9:0f:61:83:19:d7:7f:c7:f6:58:68: 54:13:66:b1:57:24:11:60:99:69:58:c0:82:4c:bd: 27:c6:8e:42:53:f2:19:5c:75:08:4b:7b:a5:af:be: 0d:c8:dc:d7:71:b1:0f:7a:48:53:2e:a2:cb:86:c5: b8:29:d7:3b:be:28:c4:c2:0c:e6:c5:f1:fb:46:2a: a7:ff:2c:d1:b9:f8:dd:7d:6e:4b:0f:79:e1:6d:fa: 2e:f6:5c:1b:f3:dc:b7:e8:91:0c:d9:a9:b5:e7:00: 27:39:7b:1e:28:d6:36:57:34:5c:39:32:2e:78:10: d0:db:41:74:8c:b2:b3:59:99:b8:15:3c:4c:df:f9: 76:74:6a:ec:ed:b0:ea:ea:5c:00:2a:93:64:90:53: 40:12:83:0e:07:1d:28:55:d4:f3:fb:91:68:df:53: dd:c0:9d:9e:e3:ec:70:84:65:57:fd:52:fb:1f:78: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B7:F0:E5:45:B5:FC:1B:5C:24:6C:96:98:E2:A6:92:10:06:B8:F3 X509v3 Authority Key Identifier: keyid:10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/irfw5UW1_BtcJGyWmOKmkhAGuPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.14.0.0/17 95.176.0.0/17 185.147.220.0/22 IPv6: 2a00:be80::/32 Signature Algorithm: sha256WithRSAEncryption 9f:d6:fb:2d:94:e4:c3:d9:59:61:01:d6:f1:83:e2:a9:89:d5: e2:58:57:e2:f2:07:24:ae:ed:ea:25:00:e9:f7:18:a5:0a:0f: 16:ff:af:f2:32:03:d1:7d:68:5e:6f:f4:61:77:f9:6e:41:5f: b7:18:0b:a0:0c:93:77:d9:05:b3:89:02:79:97:f0:76:a3:f7: 84:c5:f1:98:f0:a4:f0:eb:63:10:67:01:d8:13:d3:52:9f:b8: 2a:a5:ee:50:18:8a:d4:9b:d3:0b:f6:a0:f1:dc:8e:42:39:37: 9f:e8:c6:d8:74:ec:ca:a8:da:f4:3c:17:82:79:ff:68:eb:fe: 24:6b:a1:58:8b:12:e7:66:d9:24:30:7f:8a:da:35:a7:a8:49: d8:b1:fa:04:3a:72:61:06:c8:a6:f2:47:83:a8:5a:42:f9:b1: da:d0:12:57:4c:61:38:58:2e:f3:e3:1e:ee:69:8b:19:6d:95: 6b:4f:09:ed:d6:21:08:b8:84:5a:0b:7c:9b:50:fe:d7:ce:fa: e4:79:5e:01:86:94:30:29:af:59:81:79:0c:58:b6:65:82:2c: b1:60:ac:04:88:15:71:39:05:36:84:98:7d:0a:9b:90:9a:ca: 6a:af:b6:e5:e4:9e:a0:70:c9:f0:bc:15:a8:96:2d:90:40:3d: 94:84:ca:fc -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fsiR60kMt4ATmxweBG0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMTI4NzkyN2FkN2IxZGI0NzlhZTVhYjkyYWI4N2M0YTRm YWY0OTYwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWI3ZjBlNTQ1YjVmYzFiNWMyNDZjOTY5OGUyYTY5MjEwMDZiOGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs5EHskT2hn4gdTM0MDwwyujhPIX 76YdUFgY3aYi/BPC7YhKJzqFynqLBVsQKmoK5/maJpDm2BN44nhLcyo7zEnRYkko I1WUhNPk2YYH2Q9hgxnXf8f2WGhUE2axVyQRYJlpWMCCTL0nxo5CU/IZXHUIS3ul r74NyNzXcbEPekhTLqLLhsW4Kdc7vijEwgzmxfH7Riqn/yzRufjdfW5LD3nhbfou 9lwb89y36JEM2am15wAnOXseKNY2VzRcOTIueBDQ20F0jLKzWZm4FTxM3/l2dGrs 7bDq6lwAKpNkkFNAEoMOBx0oVdTz+5Fo31PdwJ2e4+xwhGVX/VL7H3h0mQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIq38OVFtfwbXCRslpjippIQBrjzMB8GA1UdIwQY MBaAFBASh5J617HbR5rlq5Krh8Sk+vSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMt NzNhNDUyYmFmYjQ2LzEvaXJmdzVVVzFfQnRjSkd5V21PS21raEFHdVBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMtNzNhNDUyYmFmYjQ2 LzEvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQHUQ4AAwQH X7AAAwQCuZPcMA0EAgACMAcDBQAqAL6AMA0GCSqGSIb3DQEBCwUAA4IBAQCf1vst lOTD2VlhAdbxg+KpidXiWFfi8gckru3qJQDp9xilCg8W/6/yMgPRfWheb/Rhd/lu QV+3GAugDJN32QWziQJ5l/B2o/eExfGY8KTw62MQZwHYE9NSn7gqpe5QGIrUm9ML 9qDx3I5COTef6MbYdOzKqNr0PBeCef9o6/4ka6FYixLnZtkkMH+K2jWnqEnYsfoE OnJhBsim8keDqFpC+bHa0BJXTGE4WC7z4x7uaYsZbZVrTwnt1iEIuIRaC3ybUP7X zvrkeV4BhpQwKa9ZgXkMWLZlgiyxYKwEiBVxOQU2hJh9CpuQmspqr7bl5J6gcMnw vBWoli2QQD2UhMr8 -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:38 2026 by rpki-client