This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/plt_9sG7wtfK-X5IzTU2wQwMo9k.roa File: plt_9sG7wtfK-X5IzTU2wQwMo9k.roa (raw, json) Hash identifier: jDkUUlBe6ISyETczyYHxkJjtY7ZB3oieA1Lcm/dcjlE= Subject key identifier: A6:5B:7F:F6:C1:BB:C2:D7:CA:F9:7E:48:CD:35:36:C1:0C:0C:A3:D9 Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019B7F8344B85A6BDACA45DE08499C5B8D37 Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/plt_9sG7wtfK-X5IzTU2wQwMo9k.roa Signing time: Fri 02 Jan 2026 16:21:07 +0000 ROA not before: Fri 02 Jan 2026 16:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214020 IP address blocks: 2a06:d1c1:70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:44:b8:5a:6b:da:ca:45:de:08:49:9c:5b:8d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Jan 2 16:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a65b7ff6c1bbc2d7caf97e48cd3536c10c0ca3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:e9:f1:ba:f3:c4:30:9f:52:92:55:13:0d: ce:da:e6:9f:d2:53:28:0c:53:f8:29:1f:1d:c0:64: d9:7c:f4:d0:3c:6b:80:77:49:4e:2c:0e:9d:a9:c7: af:ca:8f:a8:15:91:dc:93:87:e1:a8:b2:51:a5:ad: cf:b0:5d:d3:1f:22:c1:dc:8d:83:cc:fc:93:ca:a7: 54:dd:e8:f2:69:b6:f7:db:30:47:7c:0c:ae:45:78: 13:2a:33:bf:f3:4b:ed:ee:f3:92:1e:f4:ac:cb:22: 7a:2d:b0:36:94:48:8b:2e:e0:22:96:66:0c:12:00: 27:92:2f:da:5b:ca:5e:e4:69:1e:03:08:d8:58:ea: ff:55:0c:64:56:ff:a8:cd:e0:b6:dd:ab:03:f7:9b: 2d:63:3c:72:8c:e7:9e:4a:6f:cd:37:09:e7:3f:2c: 0f:75:7c:55:fe:d7:4e:ab:c4:5f:9b:da:de:54:53: d8:8a:2b:77:c7:a6:39:b9:8f:17:64:a6:e7:e7:a9: cf:6c:a5:4d:26:b6:8c:94:70:84:21:17:f9:eb:28: e5:cf:51:fd:37:de:49:b8:7f:c5:e9:57:12:44:1d: 8c:21:ad:cb:9e:b2:21:8d:06:bf:74:cd:99:a5:19: c3:9c:ec:27:b9:bb:0e:ca:4a:ab:dd:1b:10:89:35: 8a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5B:7F:F6:C1:BB:C2:D7:CA:F9:7E:48:CD:35:36:C1:0C:0C:A3:D9 X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/plt_9sG7wtfK-X5IzTU2wQwMo9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:d1c1:70::/44 Signature Algorithm: sha256WithRSAEncryption 54:5d:72:60:b7:bb:f3:ab:65:ab:26:a9:21:74:63:77:95:dd: e3:d8:1c:59:8a:ff:23:a9:e4:11:a0:2f:5e:cb:ff:c8:f9:35: f6:94:5d:d6:a0:3d:27:db:5c:57:7d:f2:79:2a:e8:a8:4c:92: 2f:bb:fb:6d:22:27:8f:13:51:8a:6f:3d:b6:bb:c0:a6:16:73: c8:b7:d1:4f:a8:97:50:75:de:58:21:bf:75:ae:5a:14:7a:e8: 0b:78:76:25:65:6f:05:a7:62:db:ff:df:00:3a:52:cd:79:33: 37:d4:1a:e5:b9:9d:ae:52:0e:80:e5:15:53:51:7c:f1:8c:25: d7:50:6d:ab:01:e3:43:9f:bf:8b:9d:16:84:fe:60:da:59:5d: ef:29:90:bc:40:ad:19:fd:9e:b9:90:52:fd:bd:f2:68:63:54: 83:bd:6f:3f:9a:8e:f0:13:ae:01:15:55:da:b2:40:97:48:8b: fe:58:52:fb:93:27:a9:08:f0:63:88:33:56:fd:01:10:fa:00: a7:fa:a3:91:8f:27:fc:c6:0f:ff:fd:83:ef:72:f0:eb:11:64: 46:96:65:7e:79:f7:e3:39:8d:04:e3:0d:ee:8a:0f:bf:24:dd: 0b:c9:47:09:22:67:6f:28:1a:2c:53:f8:48:29:6f:55:b3:69: 16:2d:bf:60 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g0S4WmvaykXeCEmcW403MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwMTAyMTYyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjViN2ZmNmMxYmJjMmQ3Y2FmOTdlNDhjZDM1MzZjMTBjMGNhM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4np8brzxDCfUpJVEw3O2uaf0lMo DFP4KR8dwGTZfPTQPGuAd0lOLA6dqcevyo+oFZHck4fhqLJRpa3PsF3THyLB3I2D zPyTyqdU3ejyabb32zBHfAyuRXgTKjO/80vt7vOSHvSsyyJ6LbA2lEiLLuAilmYM EgAnki/aW8pe5GkeAwjYWOr/VQxkVv+ozeC23asD95stYzxyjOeeSm/NNwnnPywP dXxV/tdOq8Rfm9reVFPYiit3x6Y5uY8XZKbn56nPbKVNJraMlHCEIRf56yjlz1H9 N95JuH/F6VcSRB2MIa3LnrIhjQa/dM2ZpRnDnOwnubsOykqr3RsQiTWKiwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKZbf/bBu8LXyvl+SM01NsEMDKPZMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEvcGx0XzlzRzd3dGZLLVg1SXpUVTJ3UXdNbzlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbRwQBw MA0GCSqGSIb3DQEBCwUAA4IBAQBUXXJgt7vzq2WrJqkhdGN3ld3j2BxZiv8jqeQR oC9ey//I+TX2lF3WoD0n21xXffJ5KuioTJIvu/ttIiePE1GKbz22u8CmFnPIt9FP qJdQdd5YIb91rloUeugLeHYlZW8Fp2Lb/98AOlLNeTM31BrluZ2uUg6A5RVTUXzx jCXXUG2rAeNDn7+LnRaE/mDaWV3vKZC8QK0Z/Z65kFL9vfJoY1SDvW8/mo7wE64B FVXaskCXSIv+WFL7kyepCPBjiDNW/QEQ+gCn+qORjyf8xg///YPvcvDrEWRGlmV+ effjOY0E4w3uig+/JN0LyUcJImdvKBosU/hIKW9Vs2kWLb9g -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:54 2026 by rpki-client