This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/earkCFjIv2or5fVmfCpyFBzbJ_0.roa File: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (raw, json) Hash identifier: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo= Subject key identifier: 79:AA:E4:08:58:C8:BF:6A:2B:E5:F5:66:7C:2A:72:14:1C:DB:27:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019BB7D5B40C7C7FE84F233D2F112866BB36 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/earkCFjIv2or5fVmfCpyFBzbJ_0.roa Signing time: Tue 13 Jan 2026 14:49:54 +0000 ROA not before: Tue 13 Jan 2026 14:49:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 80.93.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 08:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:d5:b4:0c:7c:7f:e8:4f:23:3d:2f:11:28:66:bb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Jan 13 14:49:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79aae40858c8bf6a2be5f5667c2a72141cdb27fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e3:3f:38:ec:74:18:49:32:80:42:47:9b:0d: 24:7d:47:4a:e5:27:00:87:c6:fa:f5:ce:a3:67:88: 18:ef:99:38:c9:35:71:e5:0e:ed:d3:6f:3b:55:6a: cc:05:89:c4:03:48:cc:0d:78:fb:71:ae:89:ed:4d: 8e:00:0a:c8:c1:9c:bb:1e:e5:15:01:2e:b4:ae:67: 72:0b:e4:f6:22:8f:d1:7e:5a:cc:60:80:55:fe:cc: 95:90:75:d9:83:80:43:77:03:87:9c:99:94:e4:64: ee:a6:20:b6:2c:ba:33:bd:81:ce:77:a9:f6:54:ee: 94:53:77:5d:d6:ea:12:91:af:07:ae:50:9d:bc:5e: f7:4d:30:2b:c5:64:ec:1b:b1:b7:15:a6:df:4a:6b: da:71:19:83:bc:e7:4e:18:a0:13:a0:45:c2:3e:5d: 6f:55:3a:aa:cb:98:03:a6:07:88:77:a1:90:5c:2b: 89:a9:5e:7b:53:a5:b7:f8:f8:f0:40:b2:e8:e2:40: 84:80:f7:9e:f5:45:c2:58:66:95:5a:82:2e:60:62: 75:8a:c2:5f:57:74:9f:03:9c:95:04:ed:26:ad:80: 32:aa:e8:7d:bc:3f:e3:3f:25:42:f1:0b:7f:0c:d0: ac:bf:e0:7b:9e:66:6c:f3:bd:4f:38:f4:98:55:d8: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AA:E4:08:58:C8:BF:6A:2B:E5:F5:66:7C:2A:72:14:1C:DB:27:FD X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/earkCFjIv2or5fVmfCpyFBzbJ_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.93.201.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:e3:b1:74:1e:99:67:54:79:27:4d:04:56:b2:ca:aa:c3:39: d0:f8:61:7e:dd:3b:46:f0:4e:0a:35:59:20:19:e2:ad:e2:fb: e3:8d:15:39:72:a9:7e:9a:49:f6:de:ce:ee:63:c2:e9:71:f6: b9:23:d5:71:ed:6b:34:a3:22:05:e6:df:bc:03:b8:f1:9c:22: 0e:c1:4f:e8:a8:f5:9a:c7:24:5a:2d:2a:f3:2d:e3:c0:7d:ad: 94:fc:03:c9:96:a4:97:a3:44:7e:d7:cc:93:d1:8a:a4:59:68: 35:8a:59:7f:b1:7a:df:f7:e1:a8:da:3a:00:1c:90:2f:dc:c5: 58:10:a1:46:63:12:36:b0:8c:3d:55:80:9c:ac:78:b3:5c:54: 36:00:ce:d1:2b:3e:8c:2c:d2:17:9c:2e:cf:77:6b:45:ea:8c: d9:0f:fa:15:2f:d9:bc:2c:ff:c7:88:78:b5:02:ca:81:41:f4: 8b:f6:23:ba:89:a1:1c:4c:04:14:65:47:20:70:31:7d:69:02: 2e:ac:9b:42:31:b5:fc:61:97:13:98:f2:79:71:b0:85:be:cf: e7:57:f0:21:ef:49:21:89:8e:78:db:f0:ab:45:20:09:48:ec: 91:c8:ea:68:9a:10:0e:a1:91:b1:5d:3b:fd:00:35:3b:52:7b: 1b:43:9d:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu31bQMfH/oTyM9LxEoZrs2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwMTEzMTQ0OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWFhZTQwODU4YzhiZjZhMmJlNWY1NjY3YzJhNzIxNDFjZGIyN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uM/OOx0GEkygEJHmw0kfUdK5ScA h8b69c6jZ4gY75k4yTVx5Q7t0287VWrMBYnEA0jMDXj7ca6J7U2OAArIwZy7HuUV AS60rmdyC+T2Io/RflrMYIBV/syVkHXZg4BDdwOHnJmU5GTupiC2LLozvYHOd6n2 VO6UU3dd1uoSka8HrlCdvF73TTArxWTsG7G3FabfSmvacRmDvOdOGKAToEXCPl1v VTqqy5gDpgeId6GQXCuJqV57U6W3+PjwQLLo4kCEgPee9UXCWGaVWoIuYGJ1isJf V3SfA5yVBO0mrYAyquh9vD/jPyVC8Qt/DNCsv+B7nmZs871POPSYVdgA7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmq5AhYyL9qK+X1ZnwqchQc2yf9MB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvZWFya0NGakl2Mm9yNWZWbWZDcHlGQnpiSl8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3JMA0G CSqGSIb3DQEBCwUAA4IBAQBt47F0HplnVHknTQRWssqqwznQ+GF+3TtG8E4KNVkg GeKt4vvjjRU5cql+mkn23s7uY8Lpcfa5I9Vx7Ws0oyIF5t+8A7jxnCIOwU/oqPWa xyRaLSrzLePAfa2U/APJlqSXo0R+18yT0YqkWWg1ill/sXrf9+Go2joAHJAv3MVY EKFGYxI2sIw9VYCcrHizXFQ2AM7RKz6MLNIXnC7Pd2tF6ozZD/oVL9m8LP/HiHi1 AsqBQfSL9iO6iaEcTAQUZUcgcDF9aQIurJtCMbX8YZcTmPJ5cbCFvs/nV/Ah70kh iY542/CrRSAJSOyRyOpomhAOoZGxXTv9ADU7UnsbQ524 -----END CERTIFICATE-----Generated at Thu Jan 15 16:37:59 2026 by rpki-client