This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PL2U7DOCq76cgXHv0KvhvGbsNjQ.roa File: PL2U7DOCq76cgXHv0KvhvGbsNjQ.roa (raw, json) Hash identifier: Y9FFhi0YeQ8XuIS0pxZ98nY59bYPBcpn/gcuwmFmnLE= Subject key identifier: 3C:BD:94:EC:33:82:AB:BE:9C:81:71:EF:D0:AB:E1:BC:66:EC:36:34 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B8FCEE36B3063016B702B8CE89CFC1559 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PL2U7DOCq76cgXHv0KvhvGbsNjQ.roa Signing time: Mon 05 Jan 2026 20:17:39 +0000 ROA not before: Mon 05 Jan 2026 20:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215365 IP address blocks: 5.83.142.0/23 maxlen: 23 5.83.142.0/24 maxlen: 24 5.83.143.0/24 maxlen: 24 77.90.15.0/24 maxlen: 24 77.90.60.0/24 maxlen: 24 77.90.61.0/24 maxlen: 24 185.129.84.0/22 maxlen: 22 185.129.84.0/24 maxlen: 24 185.129.85.0/24 maxlen: 24 185.129.86.0/24 maxlen: 24 185.129.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:ce:e3:6b:30:63:01:6b:70:2b:8c:e8:9c:fc:15:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 5 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cbd94ec3382abbe9c8171efd0abe1bc66ec3634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d3:1e:1f:0c:f5:9f:1e:66:32:c5:9c:fe:82: f5:db:38:b2:2f:1a:a8:d0:84:12:3d:7c:c9:00:a7: 54:d5:a4:c6:6c:bb:f5:84:25:34:08:b2:c3:0b:cd: 1e:8c:89:de:f5:5d:d5:49:2b:a8:c5:96:e2:38:b9: 2c:9b:31:ca:7f:c6:9a:1f:83:0c:31:26:03:f9:bc: d6:ca:16:b7:89:43:f7:6f:0e:04:49:e9:0c:90:ae: d1:8f:c1:19:58:0c:6c:0d:76:3e:6c:d5:26:63:d1: 91:c2:a4:8e:bd:a2:16:bc:6a:d1:17:54:c7:b1:f3: 84:5a:37:c3:8b:d6:58:91:54:f8:20:03:6d:3b:06: 0c:5d:13:73:ef:44:80:90:b2:8f:71:6b:74:20:86: 38:57:3b:04:6d:a0:e6:92:77:5f:39:de:07:58:48: 59:28:f4:77:f7:48:73:e5:0b:15:64:40:6d:61:38: da:60:ae:08:66:0b:9d:9d:be:78:9e:32:9f:67:e7: 4e:fc:af:e0:a3:58:a6:12:98:f3:2b:e5:80:36:62: 77:ca:0f:61:3d:f8:d4:7d:f5:d1:9b:2f:4d:7c:fb: 1a:54:0b:d6:2c:86:a8:b2:b5:97:ca:72:0c:1e:76: e6:27:b2:6f:e7:30:07:b8:9c:bc:8b:af:80:c5:e2: 67:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BD:94:EC:33:82:AB:BE:9C:81:71:EF:D0:AB:E1:BC:66:EC:36:34 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PL2U7DOCq76cgXHv0KvhvGbsNjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.142.0/23 77.90.15.0/24 77.90.60.0/23 185.129.84.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:52:d1:80:14:08:1e:09:c4:17:a0:18:29:91:57:0c:c8:0f: 14:95:fa:eb:f3:0c:40:da:3d:86:2c:5b:ea:af:9d:75:56:fe: ad:f8:7f:7e:27:e5:4b:a4:08:0f:d1:a9:71:c4:f5:52:90:75: 10:61:9d:ee:be:12:34:95:36:6c:b4:0e:06:20:03:c0:52:40: bf:c2:d7:76:98:d9:17:d9:e9:9b:77:6d:11:c6:78:20:2a:ec: 23:03:78:43:f9:d2:37:76:da:25:33:aa:68:5f:16:e5:03:66: 1b:8a:8a:b9:82:a3:1d:a7:fd:c3:0e:23:b6:d4:77:f0:e0:b1: 6f:e5:d6:17:cb:d0:ad:ad:52:c4:e7:c6:fb:cc:0e:a6:ca:e3: c5:19:0a:f8:b1:0a:7a:a7:2b:2e:e4:67:f5:8a:14:98:45:a2: d7:00:03:32:e1:79:f0:c2:9d:fb:94:e8:c7:58:ee:1b:60:f6: b0:c4:6e:05:19:f6:0c:27:01:7d:88:ec:6a:57:50:82:a3:da: bf:ac:0e:27:c0:62:71:28:2b:e7:55:b5:64:48:2d:6c:41:d8: 02:03:ff:54:30:34:de:1f:1a:32:61:a9:eb:68:2d:a2:70:15: 3c:d0:47:e9:cc:7f:f6:57:24:a5:3d:c7:c9:81:87:02:78:68: 2f:8a:42:88 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuPzuNrMGMBa3ArjOic/BVZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTA1MjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2JkOTRlYzMzODJhYmJlOWM4MTcxZWZkMGFiZTFiYzY2ZWMzNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9MeHwz1nx5mMsWc/oL12ziyLxqo 0IQSPXzJAKdU1aTGbLv1hCU0CLLDC80ejIne9V3VSSuoxZbiOLksmzHKf8aaH4MM MSYD+bzWyha3iUP3bw4ESekMkK7Rj8EZWAxsDXY+bNUmY9GRwqSOvaIWvGrRF1TH sfOEWjfDi9ZYkVT4IANtOwYMXRNz70SAkLKPcWt0IIY4VzsEbaDmkndfOd4HWEhZ KPR390hz5QsVZEBtYTjaYK4IZgudnb54njKfZ+dO/K/go1imEpjzK+WANmJ3yg9h PfjUffXRmy9NfPsaVAvWLIaosrWXynIMHnbmJ7Jv5zAHuJy8i6+AxeJnRwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDy9lOwzgqu+nIFx79Cr4bxm7DY0MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvUEwyVTdET0NxNzZjZ1hIdjBLdmh2R2JzTmpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBBVOOAwQA TVoPAwQBTVo8AwQCuYFUMA0GCSqGSIb3DQEBCwUAA4IBAQANUtGAFAgeCcQXoBgp kVcMyA8Ulfrr8wxA2j2GLFvqr511Vv6t+H9+J+VLpAgP0alxxPVSkHUQYZ3uvhI0 lTZstA4GIAPAUkC/wtd2mNkX2embd20RxnggKuwjA3hD+dI3dtolM6poXxblA2Yb ioq5gqMdp/3DDiO21Hfw4LFv5dYXy9CtrVLE58b7zA6myuPFGQr4sQp6pysu5Gf1 ihSYRaLXAAMy4Xnwwp37lOjHWO4bYPawxG4FGfYMJwF9iOxqV1CCo9q/rA4nwGJx KCvnVbVkSC1sQdgCA/9UMDTeHxoyYanraC2icBU80EfpzH/2VySlPcfJgYcCeGgv ikKI -----END CERTIFICATE-----Generated at Sun Jan 11 16:30:37 2026 by rpki-client