This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/Earh1-Ut3sDfnZNPJggy5Cb2fi4.roa File: Earh1-Ut3sDfnZNPJggy5Cb2fi4.roa (raw, json) Hash identifier: cMmPk/r2Za9CkVsHB0dbnHuHqvMIc0pQPhHtDqpty8Q= Subject key identifier: 11:AA:E1:D7:E5:2D:DE:C0:DF:9D:93:4F:26:08:32:E4:26:F6:7E:2E Certificate issuer: /CN=e86fc9f927947aa48983b027cf3de38475b053d3 Certificate serial: 019B7CECBFFF05C6CC8184612693B7C24B89 Authority key identifier: E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/Earh1-Ut3sDfnZNPJggy5Cb2fi4.roa Signing time: Fri 02 Jan 2026 04:17:28 +0000 ROA not before: Fri 02 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28795 IP address blocks: 194.247.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/6G_J-SeUeqSJg7Anzz3jhHWwU9M.crl rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/6G_J-SeUeqSJg7Anzz3jhHWwU9M.mft rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:bf:ff:05:c6:cc:81:84:61:26:93:b7:c2:4b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e86fc9f927947aa48983b027cf3de38475b053d3 Validity Not Before: Jan 2 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11aae1d7e52ddec0df9d934f260832e426f67e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:af:68:f5:f0:09:99:e7:04:84:d2:3a:6a:2b: ff:45:39:fb:03:52:e5:2f:22:3e:39:92:a9:ff:a2: bd:42:0c:f0:26:c7:1b:59:e2:de:fb:a8:b2:ba:66: 65:a9:dd:5c:c4:7b:b3:62:06:cc:e9:07:51:02:b1: 01:53:ba:53:04:ac:99:99:c9:29:f2:bc:62:19:d8: 15:1e:b1:3f:58:82:cb:41:5c:68:a6:6d:37:48:be: b7:2b:14:e9:c1:f5:5c:13:1a:1b:93:40:17:90:b0: 66:23:c4:a7:0e:22:a2:d5:4f:1b:f3:c4:6e:2e:6c: ef:d0:8e:d0:8a:74:19:e5:f9:fd:45:69:4d:f4:47: 78:7f:a0:89:25:3c:c7:73:d3:cc:6f:ef:4e:85:7d: 4f:b9:0f:67:92:33:a6:51:12:d0:41:02:c3:88:ec: f5:c5:8e:08:16:91:2d:36:92:7d:df:cd:5b:32:f2: d0:ae:c4:88:fe:4b:b0:64:1b:05:57:be:6e:84:81: 9c:1d:1c:23:32:2b:b6:6e:e0:34:57:fd:44:4a:fa: 0f:af:3c:3a:eb:49:9c:4e:6f:e2:77:79:dd:e4:ed: e6:98:1a:1e:da:62:4f:5a:8e:ae:7e:43:60:9d:fe: c1:a5:a7:f8:f6:51:a9:eb:fe:bd:3a:17:ff:bc:ad: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AA:E1:D7:E5:2D:DE:C0:DF:9D:93:4F:26:08:32:E4:26:F6:7E:2E X509v3 Authority Key Identifier: keyid:E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/Earh1-Ut3sDfnZNPJggy5Cb2fi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/6G_J-SeUeqSJg7Anzz3jhHWwU9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.247.180.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:8c:c2:db:54:6d:09:dd:da:69:48:a5:2f:25:52:4c:8a:bc: 5f:86:0e:43:6d:83:9d:51:72:5c:75:10:9c:4b:3e:77:22:82: 5a:c9:b1:af:80:1b:46:88:33:01:20:b6:51:aa:3d:c6:2f:fe: ba:d9:8e:a4:4b:6e:93:28:5a:aa:cf:ac:86:07:89:88:56:7e: d8:77:9b:49:4e:8e:69:5c:3d:7c:47:4b:65:ad:3d:4e:96:cb: 59:f9:0f:cc:95:5e:0d:29:86:8b:5b:5c:84:04:69:38:70:d4: c4:c1:35:d3:7a:c8:52:cb:81:77:8e:82:c8:c6:4e:1c:41:28: 45:00:c5:38:ad:23:93:5b:a2:55:f5:cf:b2:d0:76:cf:0c:5f: 70:e6:a0:67:2e:8b:b6:84:17:fe:77:10:c5:ec:cb:e4:73:85: 26:b3:16:a8:75:9d:14:15:c2:3a:a2:13:48:96:40:c4:59:c8: 3b:a0:16:ce:fc:c7:dd:2b:87:19:0f:91:8c:bd:77:81:a2:2a: 75:c5:98:61:f0:a6:f2:a7:81:55:a7:73:29:4d:cb:c3:16:6b: c2:b4:9a:3d:a0:1c:01:1f:c7:c5:78:68:fa:a1:4b:4b:53:23: 3e:fe:85:a8:88:bb:61:30:a2:3c:f9:81:36:ec:fc:6c:05:37: 1d:24:e1:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87L//BcbMgYRhJpO3wkuJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NmZjOWY5Mjc5NDdhYTQ4OTgzYjAyN2NmM2RlMzg0NzVi MDUzZDMwHhcNMjYwMTAyMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWFhZTFkN2U1MmRkZWMwZGY5ZDkzNGYyNjA4MzJlNDI2ZjY3ZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q9o9fAJmecEhNI6aiv/RTn7A1Ll LyI+OZKp/6K9QgzwJscbWeLe+6iyumZlqd1cxHuzYgbM6QdRArEBU7pTBKyZmckp 8rxiGdgVHrE/WILLQVxopm03SL63KxTpwfVcExobk0AXkLBmI8SnDiKi1U8b88Ru Lmzv0I7QinQZ5fn9RWlN9Ed4f6CJJTzHc9PMb+9OhX1PuQ9nkjOmURLQQQLDiOz1 xY4IFpEtNpJ9381bMvLQrsSI/kuwZBsFV75uhIGcHRwjMiu2buA0V/1ESvoPrzw6 60mcTm/id3nd5O3mmBoe2mJPWo6ufkNgnf7Bpaf49lGp6/69Ohf/vK1wtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBGq4dflLd7A352TTyYIMuQm9n4uMB8GA1UdIwQY MBaAFOhvyfknlHqkiYOwJ88944R1sFPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkdfSi1TZVVlcVNKZzdBbnp6M2poSFd3VTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iYzk1NjMtOGZmOS00ZTk1LThlN2Ut MTNiNGMwZDBhYWUxLzEvRWFyaDEtVXQzc0RmblpOUEpnZ3k1Q2IyZmk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9iYzk1NjMtOGZmOS00ZTk1LThlN2UtMTNiNGMwZDBhYWUx LzEvNkdfSi1TZVVlcVNKZzdBbnp6M2poSFd3VTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwve0MA0G CSqGSIb3DQEBCwUAA4IBAQA+jMLbVG0J3dppSKUvJVJMirxfhg5DbYOdUXJcdRCc Sz53IoJaybGvgBtGiDMBILZRqj3GL/662Y6kS26TKFqqz6yGB4mIVn7Yd5tJTo5p XD18R0tlrT1OlstZ+Q/MlV4NKYaLW1yEBGk4cNTEwTXTeshSy4F3joLIxk4cQShF AMU4rSOTW6JV9c+y0HbPDF9w5qBnLou2hBf+dxDF7Mvkc4UmsxaodZ0UFcI6ohNI lkDEWcg7oBbO/MfdK4cZD5GMvXeBoip1xZhh8Kbyp4FVp3MpTcvDFmvCtJo9oBwB H8fFeGj6oUtLUyM+/oWoiLthMKI8+YE27PxsBTcdJOHc -----END CERTIFICATE-----Generated at Mon Jan 26 21:17:01 2026 by rpki-client