This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PLN-kcscR3JI-sF__gcxVUpaV7c.roa File: PLN-kcscR3JI-sF__gcxVUpaV7c.roa (raw, json) Hash identifier: fvQSP+Op2JJDbjnRCHyr0cCdFF7Yog1Rtf7dWsdxZbs= Subject key identifier: 3C:B3:7E:91:CB:1C:47:72:48:FA:C1:7F:FE:07:31:55:4A:5A:57:B7 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F9D353F6FA7C17592BF35B738917 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PLN-kcscR3JI-sF__gcxVUpaV7c.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51820 IP address blocks: 138.188.136.0/24 maxlen: 24 138.188.138.0/24 maxlen: 24 193.5.63.0/24 maxlen: 24 193.247.90.0/24 maxlen: 24 194.209.67.0/24 maxlen: 24 195.65.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f9:d3:53:f6:fa:7c:17:59:2b:f3:5b:73:89:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cb37e91cb1c477248fac17ffe0731554a5a57b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:b0:e0:a9:bc:d2:51:9a:0c:3c:a0:af:5a: fe:97:f4:41:de:ad:79:a1:5d:61:21:ac:c4:fa:d0: 42:86:6f:bb:2a:d3:0b:89:ca:a5:95:dd:bb:af:c1: f4:4c:f1:8f:18:72:bc:07:c0:0a:17:df:9f:5a:54: c9:a3:0c:91:5b:1a:e5:93:fd:34:65:44:e6:b8:3e: e0:12:8d:b7:11:58:29:99:56:13:f1:4f:03:28:08: 61:e0:09:ff:87:56:a2:b6:bc:61:4e:39:57:a4:dd: 7b:fc:67:32:3b:f9:14:f8:57:6a:43:61:f5:77:e4: 24:b8:bf:68:6d:66:da:93:fb:d9:68:50:ac:37:b9: 61:c0:27:f4:a9:9e:8b:4a:72:cc:7f:63:59:73:93: 90:57:82:fc:75:73:ce:54:bd:53:3a:04:a2:0e:64: a0:30:68:14:5b:4b:73:cd:51:21:03:64:92:ab:04: a8:bd:18:0a:80:e5:d9:a0:8a:77:67:62:88:b3:e7: 13:dd:2b:60:38:c9:6c:f6:a6:46:9a:bb:fc:c7:29: 0a:78:10:0e:ec:da:7e:e1:27:68:1a:59:89:02:32: ce:eb:2b:d4:05:c0:79:27:0c:82:d7:29:59:74:f2: 94:dd:f3:bb:ee:c1:33:6d:94:93:a4:3b:64:fc:2e: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B3:7E:91:CB:1C:47:72:48:FA:C1:7F:FE:07:31:55:4A:5A:57:B7 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/PLN-kcscR3JI-sF__gcxVUpaV7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.188.136.0/24 138.188.138.0/24 193.5.63.0/24 193.247.90.0/24 194.209.67.0/24 195.65.47.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:c9:a8:49:75:78:85:01:44:aa:eb:6e:0c:64:07:20:56:d5: 47:fd:33:3b:1f:2a:50:87:1b:6b:18:bf:b8:a1:d5:08:f0:2c: ae:24:08:65:b0:e6:e0:62:a6:df:b5:7e:be:00:dc:41:f0:6f: ae:4f:5b:a8:95:08:eb:80:e2:48:b0:17:e7:e4:e0:1d:9e:f2: 43:ac:36:36:fd:94:f0:1b:8c:e3:2a:c7:96:a3:60:c7:17:41: ec:06:6a:45:25:f2:8b:73:34:2f:c9:cc:f6:bb:ca:87:50:a1: e1:95:f1:c8:37:99:df:44:8f:81:71:c0:8a:b4:79:3b:ef:61: de:a2:27:74:64:e0:df:37:20:27:b4:34:7e:cf:f3:a6:09:85: 93:f3:5d:c5:18:ef:14:7c:ae:c6:c7:19:bd:06:e9:24:a4:77: 92:19:0a:51:79:9b:ad:03:ae:1f:74:e2:2d:9b:ee:39:d5:13: db:0f:cd:01:9b:d8:7d:59:8d:50:e1:94:5b:73:34:0e:63:7b: bb:0b:4e:40:68:88:14:6d:15:f0:bf:7b:2c:bd:e6:5b:d0:01: 32:28:2c:08:b3:5b:8c:eb:ce:84:5e:80:7a:8a:59:ed:5d:2d: 26:f5:61:93:f5:ba:57:0e:94:9a:5a:2c:8e:a6:fb:ce:97:4d: 11:fb:98:aa -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8EvnTU/b6fBdZK/Nbc4kXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2IzN2U5MWNiMWM0NzcyNDhmYWMxN2ZmZTA3MzE1NTRhNWE1N2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmmw4Km80lGaDDygr1r+l/RB3q15 oV1hIazE+tBChm+7KtMLicqlld27r8H0TPGPGHK8B8AKF9+fWlTJowyRWxrlk/00 ZUTmuD7gEo23EVgpmVYT8U8DKAhh4An/h1aitrxhTjlXpN17/GcyO/kU+FdqQ2H1 d+QkuL9obWbak/vZaFCsN7lhwCf0qZ6LSnLMf2NZc5OQV4L8dXPOVL1TOgSiDmSg MGgUW0tzzVEhA2SSqwSovRgKgOXZoIp3Z2KIs+cT3StgOMls9qZGmrv8xykKeBAO 7Np+4SdoGlmJAjLO6yvUBcB5JwyC1ylZdPKU3fO77sEzbZSTpDtk/C6R+QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDyzfpHLHEdySPrBf/4HMVVKWle3MB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvUExOLWtjc2NSM0pJLXNGX19nY3hWVXBhVjdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAiryIAwQA iryKAwQAwQU/AwQAwfdaAwQAwtFDAwQAw0EvMA0GCSqGSIb3DQEBCwUAA4IBAQA9 yahJdXiFAUSq624MZAcgVtVH/TM7HypQhxtrGL+4odUI8CyuJAhlsObgYqbftX6+ ANxB8G+uT1uolQjrgOJIsBfn5OAdnvJDrDY2/ZTwG4zjKseWo2DHF0HsBmpFJfKL czQvycz2u8qHUKHhlfHIN5nfRI+BccCKtHk772Heoid0ZODfNyAntDR+z/OmCYWT 813FGO8UfK7Gxxm9BukkpHeSGQpReZutA64fdOItm+451RPbD80Bm9h9WY1Q4ZRb czQOY3u7C05AaIgUbRXwv3ssveZb0AEyKCwIs1uM686EXoB6ilntXS0m9WGT9bpX DpSaWiyOpvvOl00R+5iq -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:21 2026 by rpki-client