This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/PltyVjQAqljKh-lpYhHsZNR11q4.roa File: PltyVjQAqljKh-lpYhHsZNR11q4.roa (raw, json) Hash identifier: M3aePkMYEmgu13dRPatY8KDTkwjaxhLnORYN2cJl+Pk= Subject key identifier: 3E:5B:72:56:34:00:AA:58:CA:87:E9:69:62:11:EC:64:D4:75:D6:AE Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B7C7EFD20D7025CB2F293E5F4030F4E18 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/PltyVjQAqljKh-lpYhHsZNR11q4.roa Signing time: Fri 02 Jan 2026 02:17:35 +0000 ROA not before: Fri 02 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395092 IP address blocks: 45.95.16.0/22 maxlen: 22 45.155.36.0/22 maxlen: 22 85.155.112.0/22 maxlen: 24 94.124.160.0/24 maxlen: 24 168.222.248.0/22 maxlen: 24 185.93.220.0/22 maxlen: 24 193.17.56.0/22 maxlen: 22 213.108.246.0/23 maxlen: 23 213.139.204.0/22 maxlen: 22 217.195.152.0/22 maxlen: 22 2a0d:9ec0::/48 maxlen: 48 2a0d:9ec1::/48 maxlen: 48 2a0d:9ec2::/48 maxlen: 48 2a0d:9ec3::/48 maxlen: 48 2a0d:9ec4::/48 maxlen: 48 2a0d:9ec5::/48 maxlen: 48 2a0d:d8c0::/48 maxlen: 48 2a0d:d8c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:fd:20:d7:02:5c:b2:f2:93:e5:f4:03:0f:4e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jan 2 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e5b72563400aa58ca87e9696211ec64d475d6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:3a:d9:3b:19:3d:fb:e1:0d:d4:f5:c5:b4: b6:fa:20:23:cc:26:b4:1b:6f:5b:d4:74:cd:89:a8: 75:f2:a8:56:83:62:4d:42:8d:5e:4d:f1:9f:b8:28: bf:c6:67:ec:cf:7b:ab:fb:15:97:be:b8:a4:47:cb: 4a:fd:05:96:8a:fb:f9:8f:6c:ed:a2:0c:a9:94:ae: 84:59:cf:a5:66:24:69:88:0b:78:f1:65:f7:c3:8d: a5:50:47:36:b6:0a:f2:4d:59:14:10:5e:9c:04:4d: a2:31:d1:a1:d8:8d:c2:52:b7:e7:1b:f4:8e:7a:20: 17:a9:d2:79:e9:08:58:c3:82:12:ec:1e:2d:0c:d3: 71:bd:cd:bb:4b:1c:3d:34:47:42:cc:a4:54:85:ba: 63:a6:93:1b:a5:dd:25:56:45:6d:cb:29:7d:10:e9: 62:fa:c9:ac:45:a9:bb:7d:99:b5:eb:b2:31:df:38: c6:e5:69:e3:21:fb:a4:0f:88:0f:ba:2c:fe:2d:a0: b1:36:b7:2c:1a:64:45:95:cb:cc:a2:a2:54:ce:85: c2:98:06:fe:da:26:f2:a8:eb:dd:8d:02:77:f2:cc: ee:42:33:83:bd:93:4d:ae:b3:95:87:b0:91:7f:de: ef:fe:81:f7:4a:3f:22:af:bd:e9:d2:22:a8:e1:1e: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5B:72:56:34:00:AA:58:CA:87:E9:69:62:11:EC:64:D4:75:D6:AE X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/PltyVjQAqljKh-lpYhHsZNR11q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.16.0/22 45.155.36.0/22 85.155.112.0/22 94.124.160.0/24 168.222.248.0/22 185.93.220.0/22 193.17.56.0/22 213.108.246.0/23 213.139.204.0/22 217.195.152.0/22 IPv6: 2a0d:9ec0::/48 2a0d:9ec1::/48 2a0d:9ec2::/48 2a0d:9ec3::/48 2a0d:9ec4::/48 2a0d:9ec5::/48 2a0d:d8c0::/47 Signature Algorithm: sha256WithRSAEncryption 9e:b9:e2:2b:29:fc:de:46:81:55:0e:9f:f3:f3:a6:38:8a:53: 62:ef:5f:07:43:dc:7b:94:ff:2b:bb:d4:88:03:2f:ea:03:88: 79:8e:4a:db:ea:cd:ab:42:40:99:75:13:67:91:d5:eb:7f:d9: 59:e0:9e:f3:b6:e6:7a:0d:7f:2b:21:58:85:ac:68:80:6a:b3: 1e:e7:3c:36:4e:25:ac:37:ca:31:2c:03:ee:0d:50:c6:da:3b: 2b:81:2b:ee:39:e1:c0:11:44:7c:71:d6:2e:f6:cc:b9:aa:20: 65:b6:16:0c:96:1b:b9:7d:78:a8:4d:b5:5c:0d:6a:ba:64:a3: 5c:c7:86:76:42:02:ed:bb:ed:ec:4c:de:2f:a6:10:74:40:03: 64:e1:96:cb:0e:51:2c:43:a4:54:27:be:97:ee:f6:20:0e:28: b6:57:07:06:bd:e8:35:4a:b8:8f:f9:1f:b9:31:97:26:97:b5: 04:ed:e6:a1:df:48:e7:51:4d:51:3b:40:ad:ab:29:7e:d5:94: ff:64:a1:af:56:ac:9d:df:f1:3f:09:ec:8a:06:4e:14:15:93: e7:91:78:0a:a3:9e:5f:95:10:92:3b:f2:8a:1a:22:41:4f:1a: 53:31:27:4b:af:bb:a3:cb:2b:f1:be:b2:91:b6:00:52:c5:07: ba:5a:df:00 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt8fv0g1wJcsvKT5fQDD04YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMTAyMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTViNzI1NjM0MDBhYTU4Y2E4N2U5Njk2MjExZWM2NGQ0NzVkNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNw62TsZPfvhDdT1xbS2+iAjzCa0 G29b1HTNiah18qhWg2JNQo1eTfGfuCi/xmfsz3ur+xWXvrikR8tK/QWWivv5j2zt ogyplK6EWc+lZiRpiAt48WX3w42lUEc2tgryTVkUEF6cBE2iMdGh2I3CUrfnG/SO eiAXqdJ56QhYw4IS7B4tDNNxvc27Sxw9NEdCzKRUhbpjppMbpd0lVkVtyyl9EOli +smsRam7fZm167Ix3zjG5WnjIfukD4gPuiz+LaCxNrcsGmRFlcvMoqJUzoXCmAb+ 2ibyqOvdjQJ38szuQjODvZNNrrOVh7CRf97v/oH3Sj8ir73p0iKo4R6vYQIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFD5bclY0AKpYyofpaWIR7GTUddauMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvUGx0eVZqUUFxbGpLaC1scFloSHNaTlIxMXE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizBCBAIAATA8AwQCLV8Q AwQCLZskAwQCVZtwAwQAXnygAwQCqN74AwQCuV3cAwQCwRE4AwQB1Wz2AwQC1YvM AwQC2cOYMEUEAgACMD8DBwAqDZ7AAAADBwAqDZ7BAAADBwAqDZ7CAAADBwAqDZ7D AAADBwAqDZ7EAAADBwAqDZ7FAAADBwEqDdjAAAAwDQYJKoZIhvcNAQELBQADggEB AJ654isp/N5GgVUOn/PzpjiKU2LvXwdD3HuU/yu71IgDL+oDiHmOStvqzatCQJl1 E2eR1et/2VngnvO25noNfyshWIWsaIBqsx7nPDZOJaw3yjEsA+4NUMbaOyuBK+45 4cARRHxx1i72zLmqIGW2FgyWG7l9eKhNtVwNarpko1zHhnZCAu277exM3i+mEHRA A2ThlssOUSxDpFQnvpfu9iAOKLZXBwa96DVKuI/5H7kxlyaXtQTt5qHfSOdRTVE7 QK2rKX7VlP9koa9WrJ3f8T8J7IoGThQVk+eReAqjnl+VEJI78ooaIkFPGlMxJ0uv u6PLK/G+spG2AFLFB7pa3wA= -----END CERTIFICATE-----Generated at Thu Jan 22 15:48:44 2026 by rpki-client