This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ETuDi1i7QuaCZ06xCz67-_-3rS8.roa File: ETuDi1i7QuaCZ06xCz67-_-3rS8.roa (raw, json) Hash identifier: gA8InJx+hYlKiEEOwcyboW6iWIBSscTMh1nnp+mxyU8= Subject key identifier: 11:3B:83:8B:58:BB:42:E6:82:67:4E:B1:0B:3E:BB:FB:FF:B7:AD:2F Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e Certificate serial: 019A7DB5306C7D6CCFCF05490FA32256D7B7 Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ETuDi1i7QuaCZ06xCz67-_-3rS8.roa Signing time: Thu 13 Nov 2025 14:53:37 +0000 ROA not before: Thu 13 Nov 2025 14:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210250 IP address blocks: 194.1.147.0/24 maxlen: 24 198.60.193.0/24 maxlen: 24 2001:67c:51c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:b5:30:6c:7d:6c:cf:cf:05:49:0f:a3:22:56:d7:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e Validity Not Before: Nov 13 14:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=113b838b58bb42e682674eb10b3ebbfbffb7ad2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:f4:9a:26:04:ec:da:ca:15:01:7a:43:3d: fb:8c:84:1d:d6:c6:3b:c4:81:99:20:34:a4:ac:2d: 7d:89:3c:0a:85:5d:2a:4e:77:bc:34:4f:5b:ba:03: 98:dc:5b:d8:92:68:da:d3:99:8e:d8:5a:f1:24:17: 87:2d:d8:5a:f8:ed:93:86:c7:b2:63:50:7b:59:f4: ee:f4:e1:64:ef:48:e1:61:47:21:ae:45:80:67:2f: 11:53:ed:13:32:d3:49:b6:c5:08:5c:45:0e:f7:78: f5:ca:0b:1e:6d:19:72:c4:92:8d:85:bf:01:8e:a6: 82:2a:45:79:52:81:1b:b0:cc:0d:ab:36:3a:ff:f7: 00:0f:32:4d:f5:5e:b8:49:52:5a:a5:a6:a0:d5:32: 76:f3:98:9f:59:75:ee:24:5d:32:2d:bd:83:7b:98: b3:aa:8f:aa:ae:20:e4:e8:1d:db:d3:ef:16:99:26: c9:57:19:71:c5:65:41:69:5b:cf:13:57:7b:1b:1a: 3b:55:d9:9b:a7:27:a3:2d:bc:51:60:df:af:f1:48: f3:98:bb:3d:74:b6:a7:9c:f0:d6:a4:d2:c6:32:23: 85:14:78:9f:c2:56:7a:c3:6c:9a:3d:9f:3a:c6:f5: c4:43:30:69:a8:87:d1:b8:ed:46:87:79:d5:5b:5b: 90:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3B:83:8B:58:BB:42:E6:82:67:4E:B1:0B:3E:BB:FB:FF:B7:AD:2F X509v3 Authority Key Identifier: keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ETuDi1i7QuaCZ06xCz67-_-3rS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.147.0/24 198.60.193.0/24 IPv6: 2001:67c:51c::/48 Signature Algorithm: sha256WithRSAEncryption 0a:1e:c6:1f:83:cf:9a:ca:97:2e:f8:1b:9f:e7:73:ee:64:53: 2e:94:90:e7:73:d8:5f:8e:6d:70:2b:04:38:d9:92:a3:4a:34: 18:27:4d:56:db:dc:a1:70:d2:21:02:37:57:00:e2:e6:c4:7b: 77:94:00:11:ce:2e:c6:ed:62:84:c3:85:5b:ba:b7:79:40:a3: c2:33:ed:ca:79:50:9c:e0:af:45:3c:87:51:69:0c:df:70:0e: a7:14:a7:9f:7d:9f:11:af:4c:41:5d:ae:a6:84:a0:a5:58:c6: 27:06:c3:8d:25:28:be:c8:2c:e0:ad:99:49:0a:7b:26:e4:da: 0e:53:5e:1a:7c:70:73:9d:e0:b4:2f:a2:5c:8b:1c:8b:5f:09: 03:0d:6a:62:43:4a:a2:3e:f7:16:ae:2e:65:8d:0c:cf:ce:70: 20:6e:2b:02:79:d6:9d:60:39:5f:de:e3:6f:97:88:9b:22:cd: ca:3e:64:ed:02:86:43:bc:9e:f4:c5:2e:6d:15:61:64:43:21: cd:c7:ef:04:ba:5c:7d:ad:a8:a8:eb:a2:76:54:2d:7e:30:9a: e5:3f:18:76:5a:37:08:77:1f:60:c7:06:23:1b:e6:6d:dd:15: fd:81:07:e9:55:68:59:e7:19:58:4e:5e:e4:03:88:39:1d:2c: 1c:0c:b9:db -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZp9tTBsfWzPzwVJD6MiVte3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Zjc2OWQ0NDMzYjc3MDRkZjcwM2QxNjQ1YjdmZWE4ZWZi ZjkyNmUwHhcNMjUxMTEzMTQ1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTNiODM4YjU4YmI0MmU2ODI2NzRlYjEwYjNlYmJmYmZmYjdhZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW/0miYE7NrKFQF6Qz37jIQd1sY7 xIGZIDSkrC19iTwKhV0qTne8NE9bugOY3FvYkmja05mO2FrxJBeHLdha+O2Thsey Y1B7WfTu9OFk70jhYUchrkWAZy8RU+0TMtNJtsUIXEUO93j1ygsebRlyxJKNhb8B jqaCKkV5UoEbsMwNqzY6//cADzJN9V64SVJapaag1TJ285ifWXXuJF0yLb2De5iz qo+qriDk6B3b0+8WmSbJVxlxxWVBaVvPE1d7Gxo7VdmbpyejLbxRYN+v8UjzmLs9 dLannPDWpNLGMiOFFHifwlZ6w2yaPZ86xvXEQzBpqIfRuO1Gh3nVW1uQMwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFBE7g4tYu0LmgmdOsQs+u/v/t60vMB8GA1UdIwQY MBaAFLn3adRDO3cE33A9FkW3/qjvv5JuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQt M2FlYjdjZGUwMzZjLzEvRVR1RGkxaTdRdWFDWjA2eEN6NjctXy0zclM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQtM2FlYjdjZGUwMzZj LzEvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwgGTAwQA xjzBMA8EAgACMAkDBwAgAQZ8BRwwDQYJKoZIhvcNAQELBQADggEBAAoexh+Dz5rK ly74G5/nc+5kUy6UkOdz2F+ObXArBDjZkqNKNBgnTVbb3KFw0iECN1cA4ubEe3eU ABHOLsbtYoTDhVu6t3lAo8Iz7cp5UJzgr0U8h1FpDN9wDqcUp599nxGvTEFdrqaE oKVYxicGw40lKL7ILOCtmUkKeybk2g5TXhp8cHOd4LQvolyLHItfCQMNamJDSqI+ 9xauLmWNDM/OcCBuKwJ51p1gOV/e42+XiJsizco+ZO0ChkO8nvTFLm0VYWRDIc3H 7wS6XH2tqKjronZULX4wmuU/GHZaNwh3H2DHBiMb5m3dFf2BB+lVaFnnGVhOXuQD iDkdLBwMuds= -----END CERTIFICATE-----Generated at Tue Nov 25 11:32:33 2025 by rpki-client