This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/PLVDJ7dkDU--d-zDM1gbGBw8XBs.roa File: PLVDJ7dkDU--d-zDM1gbGBw8XBs.roa (raw, json) Hash identifier: 7fFDeno1llfmG5xw2+UhwO2bFxAsVyxjb17vnpRCoYg= Subject key identifier: 3C:B5:43:27:B7:64:0D:4F:BE:77:EC:C3:33:58:1B:18:1C:3C:5C:1B Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Certificate serial: 019B7BA4C2F1AF3F838AD615F59C3A9B3BCD Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/PLVDJ7dkDU--d-zDM1gbGBw8XBs.roa Signing time: Thu 01 Jan 2026 22:19:13 +0000 ROA not before: Thu 01 Jan 2026 22:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 5.253.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c2:f1:af:3f:83:8a:d6:15:f5:9c:3a:9b:3b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Validity Not Before: Jan 1 22:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cb54327b7640d4fbe77ecc333581b181c3c5c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:07:5d:4b:b1:a6:08:c5:c9:62:ee:e5:2b:21: af:03:8c:6c:ef:a2:b5:0a:ac:27:fe:85:15:eb:f0: 8c:e8:cb:07:37:9f:f9:18:6c:0f:de:f0:4e:b0:fa: 17:70:3f:e1:05:5a:e9:bc:b2:22:5f:ff:48:6e:61: 75:8b:8c:fb:b3:90:2b:44:95:79:87:b0:84:e9:ef: 82:bb:81:89:cd:4f:01:e7:bd:ca:5c:47:79:29:f6: c2:14:5d:2e:ea:d6:2e:56:ad:1a:56:32:a0:fe:9e: 8c:00:20:0f:84:63:bc:b4:50:60:51:f7:61:29:ce: c1:8b:77:b2:b6:32:78:35:19:33:70:0d:44:f3:ad: d7:0a:24:bf:43:77:70:0e:8b:31:eb:09:ff:51:a0: 98:f6:32:26:ce:8d:e1:87:37:7f:44:37:76:6c:5a: 89:78:05:73:e6:fa:34:bb:c0:b2:2c:c3:08:40:d3: f7:ff:dd:c8:56:75:ff:aa:d2:92:09:09:bb:55:0d: ee:dc:b2:06:ca:6b:c5:16:24:79:f1:40:7c:dc:6f: ab:4a:41:f8:68:bf:58:dc:31:71:d1:2b:53:ff:51: 1a:6b:46:6d:ff:e7:b7:c5:77:00:39:2d:fb:be:67: 84:fe:48:c4:93:12:d9:3f:fc:0c:f6:b3:16:c4:c6: 1a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B5:43:27:B7:64:0D:4F:BE:77:EC:C3:33:58:1B:18:1C:3C:5C:1B X509v3 Authority Key Identifier: keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/PLVDJ7dkDU--d-zDM1gbGBw8XBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.190.0/24 Signature Algorithm: sha256WithRSAEncryption 32:27:f8:f5:cd:96:fc:59:c3:bc:f2:73:f0:3f:57:74:42:bb: e0:6d:e5:e4:bb:03:b7:19:c8:ec:27:47:5e:48:f2:d1:7c:08: 05:d2:1d:bc:4e:e2:4b:d5:ed:b6:e1:c7:36:df:2d:99:e9:80: 85:da:92:ce:13:bd:6b:0d:6a:31:2d:a1:85:c4:9c:4a:94:97: 6e:0b:66:8d:6a:5b:e6:e7:a3:57:54:7c:16:33:7d:bd:a4:13: de:28:58:84:9e:51:82:57:54:c5:e0:92:38:6d:43:92:51:c3: 3c:32:4d:fd:e1:38:de:e8:c4:67:b2:b5:40:9f:c1:b5:d7:f8: b1:ba:43:b1:0f:15:e3:20:b7:5a:f9:a6:1b:19:c7:3c:27:67: 55:1e:9d:7b:08:6d:d2:80:6f:29:58:6c:ff:70:87:f5:db:9e: e1:c5:21:7c:ae:22:2a:0c:34:b5:7b:87:8c:95:af:26:d0:ef: 43:91:ee:f5:14:c4:24:93:6f:46:35:e6:a0:39:84:9d:a5:3c: 9a:40:3e:4d:13:70:5d:ff:09:77:1a:d3:7d:15:47:7c:48:1d: fe:1e:41:79:f9:2b:4e:6e:0f:0a:98:1e:aa:38:18:66:45:f7: 5a:98:3b:56:90:01:6e:9b:10:41:61:86:27:98:a8:c2:f5:06: 68:0e:23:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMLxrz+DitYV9Zw6mzvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODZjNDdkYTZkOTA3OTM0N2I2MGYwNGVkNWM1NTU3ZmU5 ODNlYjgwHhcNMjYwMTAxMjIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2I1NDMyN2I3NjQwZDRmYmU3N2VjYzMzMzU4MWIxODFjM2M1YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAddS7GmCMXJYu7lKyGvA4xs76K1 Cqwn/oUV6/CM6MsHN5/5GGwP3vBOsPoXcD/hBVrpvLIiX/9IbmF1i4z7s5ArRJV5 h7CE6e+Cu4GJzU8B573KXEd5KfbCFF0u6tYuVq0aVjKg/p6MACAPhGO8tFBgUfdh Kc7Bi3eytjJ4NRkzcA1E863XCiS/Q3dwDosx6wn/UaCY9jImzo3hhzd/RDd2bFqJ eAVz5vo0u8CyLMMIQNP3/93IVnX/qtKSCQm7VQ3u3LIGymvFFiR58UB83G+rSkH4 aL9Y3DFx0StT/1Eaa0Zt/+e3xXcAOS37vmeE/kjEkxLZP/wM9rMWxMYaoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDy1Qye3ZA1PvnfswzNYGxgcPFwbMB8GA1UdIwQY MBaAFF2GxH2m2QeTR7YPBO1cVVf+mD64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYt ZmM2MzI4NDFiYTNlLzEvUExWREo3ZGtEVS0tZC16RE0xZ2JHQnc4WEJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYtZmM2MzI4NDFiYTNl LzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf2+MA0G CSqGSIb3DQEBCwUAA4IBAQAyJ/j1zZb8WcO88nPwP1d0QrvgbeXkuwO3GcjsJ0de SPLRfAgF0h28TuJL1e224cc23y2Z6YCF2pLOE71rDWoxLaGFxJxKlJduC2aNalvm 56NXVHwWM329pBPeKFiEnlGCV1TF4JI4bUOSUcM8Mk394Tje6MRnsrVAn8G11/ix ukOxDxXjILda+aYbGcc8J2dVHp17CG3SgG8pWGz/cIf1257hxSF8riIqDDS1e4eM la8m0O9Dke71FMQkk29GNeagOYSdpTyaQD5NE3Bd/wl3GtN9FUd8SB3+HkF5+StO bg8KmB6qOBhmRfdamDtWkAFumxBBYYYnmKjC9QZoDiP/ -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:26 2026 by rpki-client