This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/plUr9gudzZoPtnkII6cnHF57P4M.roa File: plUr9gudzZoPtnkII6cnHF57P4M.roa (raw, json) Hash identifier: mvCT8kIz4XKdwEkHlORGXzNQSdZYbQHIRuHumnNRblw= Subject key identifier: A6:55:2B:F6:0B:9D:CD:9A:0F:B6:79:08:23:A7:27:1C:5E:7B:3F:83 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A35D163A58960A9AE3DD8229E7F013 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/plUr9gudzZoPtnkII6cnHF57P4M.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399486 IP address blocks: 45.88.91.0/24 maxlen: 24 79.110.49.0/24 maxlen: 24 80.76.49.0/24 maxlen: 24 194.59.30.0/24 maxlen: 24 194.59.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5d:16:3a:58:96:0a:9a:e3:dd:82:29:e7:f0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6552bf60b9dcd9a0fb6790823a7271c5e7b3f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:56:45:83:5c:49:fb:e8:1c:db:d6:d5:97:db: a7:b1:a4:35:d0:6b:ec:c6:8a:e2:e0:ee:5a:17:1c: 10:89:98:6f:93:85:98:e0:92:8c:18:f2:87:a1:3d: dd:33:5b:24:ed:df:fb:ab:ce:0c:40:68:22:f9:b0: 4b:82:99:ad:c2:15:95:df:0c:d1:3d:d0:ad:52:57: ca:46:6b:e4:72:9f:bd:be:61:83:39:d9:1d:2b:49: d7:35:86:c9:66:2e:79:06:76:ef:eb:6c:27:72:97: 8d:65:cd:95:94:84:66:99:d6:07:4e:64:5e:52:c7: d9:8d:da:ca:df:8c:cc:90:c1:06:98:15:90:71:39: 28:60:87:fc:dc:6a:f1:47:87:17:04:54:ea:05:ea: ad:60:0a:4d:f8:6a:3b:18:60:82:ba:4b:4d:a3:37: b0:1d:c0:4f:e0:69:46:ad:60:b5:c5:66:4f:96:2b: 71:3f:b1:29:35:e6:d2:86:88:a9:0f:1b:9d:e9:f4: 0d:ac:28:2d:bf:06:42:b3:22:98:b3:8b:3c:90:e4: 8c:2d:07:83:ec:3c:6a:b6:18:3b:1c:9e:f9:73:96: 6b:66:af:ac:ec:6e:14:65:26:72:c0:69:63:30:ad: 00:ae:b8:bf:50:d4:cc:79:68:e2:d0:02:db:68:c4: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:55:2B:F6:0B:9D:CD:9A:0F:B6:79:08:23:A7:27:1C:5E:7B:3F:83 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/plUr9gudzZoPtnkII6cnHF57P4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.91.0/24 79.110.49.0/24 80.76.49.0/24 194.59.30.0/23 Signature Algorithm: sha256WithRSAEncryption af:fc:34:0c:83:e3:91:d5:ae:9f:28:46:fb:0a:4d:76:ec:40: a0:71:e0:7f:8d:9e:9b:92:a5:3a:2d:bd:5b:ba:77:e2:7c:8b: be:14:76:96:0e:a3:c0:34:af:03:8d:91:fa:60:f5:3a:40:54: 2e:15:5d:75:99:96:a0:ed:ac:cc:98:31:b8:0d:5f:08:a2:38: a4:2b:4c:c8:4a:3e:ad:57:bf:67:cc:11:b2:61:2a:08:b3:46: 03:e2:d3:52:40:5c:ff:70:8e:79:44:fa:92:30:46:a5:a4:cd: 56:41:2a:e8:aa:e1:43:cc:38:ef:85:17:71:9d:45:a9:66:1b: 3d:7e:f2:59:12:07:0a:90:2b:18:49:6f:fc:cd:de:e3:a8:8c: 26:b4:6b:23:e4:f9:fa:d8:ec:a7:e5:7f:ea:57:97:32:50:19: 6f:a1:69:c9:b6:55:d5:35:e8:fd:98:c1:4d:fd:c4:d5:a0:7e: 40:39:42:d6:ae:6d:25:39:82:18:3b:82:55:6e:4c:50:c5:53: 2b:ce:3a:df:dc:9e:62:8b:f5:e6:98:a1:51:13:b9:5d:13:47: bf:cb:e1:7c:38:21:c1:3e:73:d5:87:21:62:13:b5:93:61:36: d3:ce:ad:84:3b:ee:59:6a:78:9a:0a:cc:e4:25:bf:01:0d:4c: 17:fc:4d:7b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4o10WOliWCprj3YIp5/ATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjU1MmJmNjBiOWRjZDlhMGZiNjc5MDgyM2E3MjcxYzVlN2IzZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FZFg1xJ++gc29bVl9unsaQ10Gvs xori4O5aFxwQiZhvk4WY4JKMGPKHoT3dM1sk7d/7q84MQGgi+bBLgpmtwhWV3wzR PdCtUlfKRmvkcp+9vmGDOdkdK0nXNYbJZi55Bnbv62wncpeNZc2VlIRmmdYHTmRe UsfZjdrK34zMkMEGmBWQcTkoYIf83GrxR4cXBFTqBeqtYApN+Go7GGCCuktNozew HcBP4GlGrWC1xWZPlitxP7EpNebShoipDxud6fQNrCgtvwZCsyKYs4s8kOSMLQeD 7Dxqthg7HJ75c5ZrZq+s7G4UZSZywGljMK0Arri/UNTMeWji0ALbaMTjMwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKZVK/YLnc2aD7Z5CCOnJxxeez+DMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcGxVcjlndWR6Wm9QdG5rSUk2Y25IRjU3UDRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVhbAwQA T24xAwQAUEwxAwQBwjseMA0GCSqGSIb3DQEBCwUAA4IBAQCv/DQMg+OR1a6fKEb7 Ck127ECgceB/jZ6bkqU6Lb1bunfifIu+FHaWDqPANK8DjZH6YPU6QFQuFV11mZag 7azMmDG4DV8IojikK0zISj6tV79nzBGyYSoIs0YD4tNSQFz/cI55RPqSMEalpM1W QSroquFDzDjvhRdxnUWpZhs9fvJZEgcKkCsYSW/8zd7jqIwmtGsj5Pn62Oyn5X/q V5cyUBlvoWnJtlXVNej9mMFN/cTVoH5AOULWrm0lOYIYO4JVbkxQxVMrzjrf3J5i i/XmmKFRE7ldE0e/y+F8OCHBPnPVhyFiE7WTYTbTzq2EO+5ZaniaCszkJb8BDUwX /E17 -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:03 2026 by rpki-client