This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PlpM0l6gzRQ5da-cAt3YnJHcnKU.roa File: PlpM0l6gzRQ5da-cAt3YnJHcnKU.roa (raw, json) Hash identifier: SC2PzMeZBRamdF+c4Qvh0eOas7yDI4pPP60Ms+pKxVk= Subject key identifier: 3E:5A:4C:D2:5E:A0:CD:14:39:75:AF:9C:02:DD:D8:9C:91:DC:9C:A5 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1443B09D454E9F45D39277B554FF1C Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PlpM0l6gzRQ5da-cAt3YnJHcnKU.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14576 IP address blocks: 193.233.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:43:b0:9d:45:4e:9f:45:d3:92:77:b5:54:ff:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e5a4cd25ea0cd143975af9c02ddd89c91dc9ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:9f:09:bc:ff:79:53:be:f9:45:95:b2:47: 31:35:d0:f4:b5:f7:57:f6:84:eb:3a:ec:43:65:27: 49:99:2a:1b:71:b1:83:85:9d:ae:46:7d:87:7d:a8: 23:ec:36:0e:d4:f8:d0:da:79:f1:f5:87:93:21:b9: 11:53:64:96:7e:58:6f:c7:81:04:a5:84:6e:3c:04: 5e:e1:b7:08:cb:27:5f:51:fd:3b:11:7a:3a:58:be: 81:a7:f8:44:25:7b:a7:00:8c:a1:62:e7:dc:f6:11: 8c:f0:5c:f2:96:4c:76:9c:08:e6:48:be:b7:86:8b: 26:5c:3e:16:33:ee:96:e7:fa:b5:1b:eb:f1:ff:5b: e7:f3:c2:b0:25:9b:c8:37:1e:af:13:9c:12:68:80: ee:eb:c1:42:6d:3c:6a:84:af:5f:84:53:91:8b:8e: 4a:70:39:86:86:19:00:1d:ed:0f:d7:45:c6:24:12: 4f:82:eb:b7:ee:0b:0f:29:f4:60:1a:df:49:43:d1: d3:68:7b:4a:51:e7:38:e5:11:10:c8:17:f9:18:be: 21:9c:63:03:6e:25:12:80:f4:e0:e9:4f:ca:24:79: 12:85:ba:3a:ad:50:7e:98:b0:76:b1:6f:25:31:79: be:1b:8d:3c:69:41:10:97:16:f3:03:1f:f4:be:c8: 33:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5A:4C:D2:5E:A0:CD:14:39:75:AF:9C:02:DD:D8:9C:91:DC:9C:A5 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PlpM0l6gzRQ5da-cAt3YnJHcnKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.91.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:85:f8:c9:b2:7c:82:54:b2:96:8e:59:73:3f:cd:92:54:29: 9c:3e:a4:6f:e5:24:a8:e9:2d:70:0c:a5:9d:c6:8e:d8:37:86: be:74:8c:ec:44:90:de:c8:5f:19:69:66:76:7f:cd:a4:c6:af: 6c:d3:8d:36:16:8d:a6:0e:4a:08:9b:b4:1d:cd:43:71:a7:13: 2f:85:de:91:0b:d7:43:66:e1:24:27:1b:2d:2f:f3:c4:19:f9: 3a:f9:f2:b0:2d:d9:07:39:85:6f:93:38:d3:44:c8:3f:2e:88: 96:32:d4:be:06:bf:8b:b0:d1:b1:a9:cb:0d:aa:7d:9f:de:b8: 6b:b9:3a:d8:55:62:7c:07:04:19:c8:28:bd:bb:61:88:2c:41: 5e:cf:2d:48:19:7a:a6:b3:ac:8e:59:fa:6b:26:b2:b3:18:02: 9d:6c:cc:d8:79:8f:4f:4a:8d:ef:a2:77:1c:c7:b1:1e:ce:d3: 58:e0:f4:b6:77:70:4e:52:fe:df:0c:f3:cc:92:98:ab:f0:0f: 93:50:67:a1:7b:02:ca:48:85:33:6c:e3:1b:d1:9b:1b:6b:0b: 50:2b:da:fc:0f:7e:8e:8a:72:2f:8c:e6:74:c6:50:b8:c7:d4: 3a:1d:09:a9:99:57:1c:93:64:70:85:48:b6:4a:1c:13:5b:46: 73:02:f7:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEOwnUVOn0XTkne1VP8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTVhNGNkMjVlYTBjZDE0Mzk3NWFmOWMwMmRkZDg5YzkxZGM5Y2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/6fCbz/eVO++UWVskcxNdD0tfdX 9oTrOuxDZSdJmSobcbGDhZ2uRn2Hfagj7DYO1PjQ2nnx9YeTIbkRU2SWflhvx4EE pYRuPARe4bcIyydfUf07EXo6WL6Bp/hEJXunAIyhYufc9hGM8Fzylkx2nAjmSL63 hosmXD4WM+6W5/q1G+vx/1vn88KwJZvINx6vE5wSaIDu68FCbTxqhK9fhFORi45K cDmGhhkAHe0P10XGJBJPguu37gsPKfRgGt9JQ9HTaHtKUec45REQyBf5GL4hnGMD biUSgPTg6U/KJHkShbo6rVB+mLB2sW8lMXm+G408aUEQlxbzAx/0vsgzcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD5aTNJeoM0UOXWvnALd2JyR3JylMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvUGxwTTBsNmd6UlE1ZGEtY0F0M1luSkhjbktVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwelbMA0G CSqGSIb3DQEBCwUAA4IBAQCPhfjJsnyCVLKWjllzP82SVCmcPqRv5SSo6S1wDKWd xo7YN4a+dIzsRJDeyF8ZaWZ2f82kxq9s0402Fo2mDkoIm7QdzUNxpxMvhd6RC9dD ZuEkJxstL/PEGfk6+fKwLdkHOYVvkzjTRMg/LoiWMtS+Br+LsNGxqcsNqn2f3rhr uTrYVWJ8BwQZyCi9u2GILEFezy1IGXqms6yOWfprJrKzGAKdbMzYeY9PSo3voncc x7EeztNY4PS2d3BOUv7fDPPMkpir8A+TUGehewLKSIUzbOMb0ZsbawtQK9r8D36O inIvjOZ0xlC4x9Q6HQmpmVcck2RwhUi2ShwTW0ZzAvce -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:45 2026 by rpki-client