This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa File: PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa (raw, json) Hash identifier: Ds9oHPXZ9drh6bet4k02ulHrCJ7yWBpxx33onOLcAs4= Subject key identifier: 3E:54:02:01:EE:05:5A:35:12:08:EB:1A:C4:99:52:F2:B3:8C:81:85 Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Certificate serial: 019B7EA6F5876C826EDC0A94C353365B36F9 Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa Signing time: Fri 02 Jan 2026 12:20:29 +0000 ROA not before: Fri 02 Jan 2026 12:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 149.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f5:87:6c:82:6e:dc:0a:94:c3:53:36:5b:36:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e540201ee055a351208eb1ac49952f2b38c8185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:c1:45:c7:bb:e5:f2:e4:17:04:80:be:10: 1f:c7:15:49:93:cb:c4:03:c7:4b:1b:fe:65:05:49: e6:1f:c4:6f:73:e7:91:e7:63:bc:e8:28:78:93:6b: ac:6d:2a:f4:93:c9:62:62:d1:a1:b3:be:c1:b1:5c: cb:02:9b:11:5a:77:65:11:8d:e9:dc:4e:5e:9f:23: b2:52:d1:36:91:42:b8:a6:e7:33:b5:8b:0a:a0:28: d4:fa:46:6a:18:44:b6:7b:60:e8:d0:20:ba:32:6f: 89:d6:ad:1e:ea:62:88:01:c2:d4:57:e7:65:f2:16: cc:7a:7c:b9:0a:92:96:10:7e:07:1c:32:67:ae:4d: 58:7b:03:04:53:e3:4e:48:a5:a5:b8:14:51:9a:9f: 82:e0:a1:44:93:77:2d:45:0e:e0:22:4f:8c:dd:13: 50:71:65:5f:4c:e6:4e:6a:de:82:1e:8a:66:83:4d: 3a:74:df:51:68:a4:38:05:9a:ba:20:17:72:c7:2e: b4:26:33:da:b4:0b:b0:9b:82:a8:21:e8:df:87:59: 1d:92:fe:63:91:67:3e:37:43:d0:e1:fc:cd:2a:0d: 3b:74:7c:76:b6:f5:9f:01:26:3d:0f:b3:ad:99:f5: b1:4d:f1:59:e9:10:5e:0c:2b:1e:70:be:ba:92:db: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:54:02:01:EE:05:5A:35:12:08:EB:1A:C4:99:52:F2:B3:8C:81:85 X509v3 Authority Key Identifier: keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.132.0.0/16 Signature Algorithm: sha256WithRSAEncryption 34:37:46:11:53:21:1f:bf:df:24:ed:a7:4c:36:e9:73:a8:e7: 62:3d:6e:1e:6f:aa:93:bd:cf:62:e4:a1:ea:c3:92:ef:19:c1: c1:45:a3:f8:7c:2e:10:63:61:79:c7:62:e0:70:6f:da:7f:c4: 72:e2:f8:91:69:27:63:38:71:04:ca:a2:2a:e7:7a:cb:39:5f: 06:c3:18:55:5a:90:d8:14:4b:bb:3e:b0:03:0e:a7:ac:4d:36: 00:20:70:6f:c3:1e:e7:fa:d9:8c:12:78:8d:e3:82:3e:de:49: 4a:35:c3:e7:49:09:6a:34:f9:56:98:8e:d9:2b:94:1d:59:d6: 8f:4c:13:cf:e5:b7:1f:b0:2a:15:75:02:cc:19:36:f9:d0:02: 3b:dd:27:7e:db:90:92:7f:d2:ec:45:d6:3c:94:b1:f9:bc:dd: 4b:63:ef:78:ec:82:1b:55:0b:5b:a6:eb:df:46:36:70:57:9b: 3e:9b:ea:e4:fd:43:63:59:8d:64:e5:8c:45:5e:8f:48:13:00: d6:4f:61:8a:58:b3:58:b3:9b:66:f2:a2:67:dd:d2:bc:af:f4: 2d:db:79:d1:0e:55:48:e4:d1:df:25:b4:84:6f:68:59:ab:41: 5a:90:f4:df:ee:d7:94:ce:bd:21:02:11:f7:68:cb:c0:57:55: 03:7a:4c:dc -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+pvWHbIJu3AqUw1M2Wzb5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Y2Y2YWQ5Y2JlOWY3YjI4NjNlMGNlYzM2YzE1M2M1ZDA3 MzZhZTIwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTU0MDIwMWVlMDU1YTM1MTIwOGViMWFjNDk5NTJmMmIzOGM4MTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+zBRce75fLkFwSAvhAfxxVJk8vE A8dLG/5lBUnmH8Rvc+eR52O86Ch4k2usbSr0k8liYtGhs77BsVzLApsRWndlEY3p 3E5enyOyUtE2kUK4pucztYsKoCjU+kZqGES2e2Do0CC6Mm+J1q0e6mKIAcLUV+dl 8hbMeny5CpKWEH4HHDJnrk1YewMEU+NOSKWluBRRmp+C4KFEk3ctRQ7gIk+M3RNQ cWVfTOZOat6CHopmg006dN9RaKQ4BZq6IBdyxy60JjPatAuwm4KoIejfh1kdkv5j kWc+N0PQ4fzNKg07dHx2tvWfASY9D7OtmfWxTfFZ6RBeDCsecL66ktt5ywIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFD5UAgHuBVo1EgjrGsSZUvKzjIGFMB8GA1UdIwQY MBaAFAXPatnL6feyhj4M7DbBU8XQc2riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2Yt NzQ4YWYxZjg0MDBlLzEvUGxRQ0FlNEZXalVTQ09zYXhKbFM4ck9NZ1lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2YtNzQ4YWYxZjg0MDBl LzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlYQwDQYJ KoZIhvcNAQELBQADggEBADQ3RhFTIR+/3yTtp0w26XOo52I9bh5vqpO9z2LkoerD ku8ZwcFFo/h8LhBjYXnHYuBwb9p/xHLi+JFpJ2M4cQTKoirness5XwbDGFVakNgU S7s+sAMOp6xNNgAgcG/DHuf62YwSeI3jgj7eSUo1w+dJCWo0+VaYjtkrlB1Z1o9M E8/ltx+wKhV1AswZNvnQAjvdJ37bkJJ/0uxF1jyUsfm83Utj73jsghtVC1um699G NnBXmz6b6uT9Q2NZjWTljEVej0gTANZPYYpYs1izm2byomfd0ryv9C3bedEOVUjk 0d8ltIRvaFmrQVqQ9N/u15TOvSECEfdoy8BXVQN6TNw= -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:39 2026 by rpki-client