This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/iedupfr9QK50wIN0wozy7_kWP9g.roa File: iedupfr9QK50wIN0wozy7_kWP9g.roa (raw, json) Hash identifier: 9oaIzU1IMMqazdot348K8ie6tvqf50Lv+z07QI0mEXA= Subject key identifier: 89:E7:6E:A5:FA:FD:40:AE:74:C0:83:74:C2:8C:F2:EF:F9:16:3F:D8 Certificate issuer: /CN=270fff2185665b9df9008c9e1be62601189a7d7c Certificate serial: 019B7B3695B2021063F16817CD8F5E89EF19 Authority key identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/iedupfr9QK50wIN0wozy7_kWP9g.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60855 IP address blocks: 194.5.170.0/23 maxlen: 23 194.5.170.0/24 maxlen: 24 194.5.171.0/24 maxlen: 24 194.5.172.0/23 maxlen: 23 194.5.172.0/24 maxlen: 24 194.5.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:95:b2:02:10:63:f1:68:17:cd:8f:5e:89:ef:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=270fff2185665b9df9008c9e1be62601189a7d7c Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89e76ea5fafd40ae74c08374c28cf2eff9163fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b1:d1:d2:e0:6b:9d:21:32:ba:45:c4:f5:1c: 2e:57:c1:ed:a4:ee:68:92:2b:7a:4a:f8:10:4b:05: ef:7a:fb:d2:16:c3:fc:7a:cc:06:01:a2:c1:db:51: 70:af:84:e0:36:27:ac:d2:b5:40:98:1f:ef:16:79: 93:6b:d5:8d:73:94:1f:87:37:73:bf:9d:d8:94:05: 15:25:0b:81:84:83:0e:e0:34:b1:c3:cc:f7:3a:51: 24:c5:c9:b1:92:d5:94:e9:af:fa:92:a3:fc:1c:c7: c3:9e:e8:56:5c:0a:04:9f:02:e8:c6:38:a7:74:4c: d3:40:3d:0a:11:2a:43:00:19:0a:24:d6:ba:28:3e: 8a:9c:19:f3:72:dc:32:0f:f2:ce:da:b6:8e:d2:5e: 9d:76:c0:b3:3a:94:3f:7a:ca:0d:0c:9a:78:d8:6f: 1a:5e:25:f8:17:3a:43:8d:fe:f2:32:fb:2b:be:d3: 4e:12:35:84:81:78:70:75:ba:f9:59:b0:f4:ae:c3: 56:f6:2c:89:64:52:5c:1c:fb:b8:69:87:69:b5:c8: 82:76:ed:ba:c4:db:f7:d1:d1:5f:73:45:34:14:dc: 6d:87:4e:34:bf:c3:c8:8f:17:25:a4:86:f5:51:1f: 88:17:73:10:63:05:19:a4:be:c8:2d:16:9a:02:58: 70:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E7:6E:A5:FA:FD:40:AE:74:C0:83:74:C2:8C:F2:EF:F9:16:3F:D8 X509v3 Authority Key Identifier: keyid:27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/iedupfr9QK50wIN0wozy7_kWP9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.170.0-194.5.173.255 Signature Algorithm: sha256WithRSAEncryption cb:57:8c:ea:0c:89:e6:66:9a:af:93:5c:c9:b1:d3:2b:8a:f7: 37:cd:fa:84:dd:40:22:d2:e8:e4:5a:4d:29:1c:ee:a6:14:e5: b6:b6:dc:a7:da:7a:a5:2e:25:60:27:c5:1d:71:27:ce:3d:8e: 90:ca:df:0f:43:4d:a2:04:25:f4:2a:94:53:d2:cf:49:63:1f: 2b:be:63:f3:e8:5a:00:ac:78:61:7b:7e:b9:90:1f:bb:f8:e2: 79:f5:25:c1:da:ca:73:28:e9:45:fc:51:b1:03:9a:83:87:0d: 6e:6d:b1:6e:1b:c5:21:5f:99:de:07:e5:d2:d7:75:17:1d:d6: 01:16:dd:61:85:78:0a:bc:6c:b9:43:54:3b:53:11:c3:31:46: d6:b1:13:b2:ad:3d:08:9c:ef:c7:ca:18:02:dd:42:35:c3:a1: d7:da:c7:da:9b:98:0b:af:6e:af:6f:e5:f3:8e:be:dd:c7:d3: b2:a9:b1:13:bb:91:a6:fe:9f:20:3b:18:3a:bc:90:6b:67:bf: ed:28:fa:96:39:dc:1e:88:a2:c5:85:93:11:54:87:07:25:3e: b7:cd:7e:13:42:6c:54:54:8f:39:26:d7:60:bf:b3:84:8b:51: 01:ea:0d:7a:d0:ff:a9:8b:fb:86:9e:a5:45:7f:16:8a:1c:36: 43:87:d1:5e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NpWyAhBj8WgXzY9eie8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MGZmZjIxODU2NjViOWRmOTAwOGM5ZTFiZTYyNjAxMTg5 YTdkN2MwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWU3NmVhNWZhZmQ0MGFlNzRjMDgzNzRjMjhjZjJlZmY5MTYzZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bHR0uBrnSEyukXE9RwuV8HtpO5o kit6SvgQSwXvevvSFsP8eswGAaLB21Fwr4TgNies0rVAmB/vFnmTa9WNc5Qfhzdz v53YlAUVJQuBhIMO4DSxw8z3OlEkxcmxktWU6a/6kqP8HMfDnuhWXAoEnwLoxjin dEzTQD0KESpDABkKJNa6KD6KnBnzctwyD/LO2raO0l6ddsCzOpQ/esoNDJp42G8a XiX4FzpDjf7yMvsrvtNOEjWEgXhwdbr5WbD0rsNW9iyJZFJcHPu4aYdptciCdu26 xNv30dFfc0U0FNxth040v8PIjxclpIb1UR+IF3MQYwUZpL7ILRaaAlhwrQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFInnbqX6/UCudMCDdMKM8u/5Fj/YMB8GA1UdIwQY MBaAFCcP/yGFZlud+QCMnhvmJgEYmn18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndfX0lZVm1XNTM1QUl5ZUctWW1BUmlhZlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83ZGM0NTQtMTUxNi00OTc5LTljNzIt ZTQ2OTRhZmJiNmZjLzEvaWVkdXBmcjlRSzUwd0lOMHdvenk3X2tXUDlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83ZGM0NTQtMTUxNi00OTc5LTljNzItZTQ2OTRhZmJiNmZj LzEvSndfX0lZVm1XNTM1QUl5ZUctWW1BUmlhZlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHCBaoD BAHCBawwDQYJKoZIhvcNAQELBQADggEBAMtXjOoMieZmmq+TXMmx0yuK9zfN+oTd QCLS6ORaTSkc7qYU5ba23KfaeqUuJWAnxR1xJ849jpDK3w9DTaIEJfQqlFPSz0lj Hyu+Y/PoWgCseGF7frmQH7v44nn1JcHaynMo6UX8UbEDmoOHDW5tsW4bxSFfmd4H 5dLXdRcd1gEW3WGFeAq8bLlDVDtTEcMxRtaxE7KtPQic78fKGALdQjXDodfax9qb mAuvbq9v5fOOvt3H07KpsRO7kab+nyA7GDq8kGtnv+0o+pY53B6IosWFkxFUhwcl PrfNfhNCbFRUjzkm12C/s4SLUQHqDXrQ/6mL+4aepUV/FoocNkOH0V4= -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:45 2026 by rpki-client