This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/pLaNYArbIS0rafOBL7h0fXIe6CM.roa File: pLaNYArbIS0rafOBL7h0fXIe6CM.roa (raw, json) Hash identifier: zf52GsTjQldTWK0nhHsTnNM6ABPaj1zGS4hFUqV1OmQ= Subject key identifier: A4:B6:8D:60:0A:DB:21:2D:2B:69:F3:81:2F:B8:74:7D:72:1E:E8:23 Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F1412C4806D62BD4480375BB6B794A7 Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/pLaNYArbIS0rafOBL7h0fXIe6CM.roa Signing time: Fri 02 Jan 2026 14:19:40 +0000 ROA not before: Fri 02 Jan 2026 14:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 212.11.8.0/24 maxlen: 24 212.11.44.0/24 maxlen: 24 212.11.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:12:c4:80:6d:62:bd:44:80:37:5b:b6:b7:94:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4b68d600adb212d2b69f3812fb8747d721ee823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:4b:44:4b:c7:de:9e:af:db:eb:08:f2:1c: 38:15:e1:a4:3c:e6:dc:9c:28:40:1f:9e:5b:88:7f: 5c:b1:0a:83:80:27:bb:71:99:bd:15:14:70:85:64: b4:4b:6e:92:70:e2:41:59:05:cc:8c:87:f0:67:07: d3:9e:70:fe:aa:03:0c:31:26:a7:bd:a9:bf:b6:71: be:a9:ac:b9:81:90:ae:85:37:20:f4:18:02:35:07: 77:d4:ef:3e:cf:5d:7b:0d:92:8b:14:d5:c8:19:75: df:22:86:ee:56:31:3e:b7:aa:db:69:3a:a1:e0:4a: 01:d4:f5:bd:59:0c:cb:8e:d0:9d:0c:13:58:12:82: 84:e7:22:23:d6:53:c4:f4:a0:41:bd:03:a5:57:64: 71:64:0d:72:de:b2:ab:f8:60:24:72:c4:dc:55:d3: 92:5b:f1:7b:b7:b2:f4:f7:99:74:c5:74:1f:44:5c: 7b:82:62:e4:6b:48:bf:63:9c:28:8c:43:25:22:e0: d4:cd:b7:84:c1:99:c6:8a:d4:3a:59:b0:b3:d5:76: 40:c0:87:cb:25:91:7d:cd:f8:57:0a:0f:18:9d:13: 9b:8e:13:97:b8:6b:b2:2b:dc:21:10:ab:06:36:b4: 39:9e:2b:32:15:30:2d:73:ba:2b:7e:87:33:88:80: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B6:8D:60:0A:DB:21:2D:2B:69:F3:81:2F:B8:74:7D:72:1E:E8:23 X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/pLaNYArbIS0rafOBL7h0fXIe6CM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.11.8.0/24 212.11.44.0/24 212.11.55.0/24 Signature Algorithm: sha256WithRSAEncryption 32:de:f4:d1:c9:13:33:48:2b:f8:a2:81:1c:04:34:42:15:b4: fb:47:e5:04:11:b2:74:10:72:1d:82:31:05:44:af:34:8d:2f: 42:62:97:98:d0:21:f7:38:b0:d5:17:a6:19:37:2e:79:19:d1: 86:39:2e:85:8c:2c:61:9f:4b:72:a0:e0:33:c6:e3:6c:57:38: f7:80:68:f4:f2:f4:74:8f:e0:7b:5d:68:69:c8:f3:89:de:14: 5a:45:bd:1b:89:6a:33:a1:43:31:3b:7b:7d:2a:ea:5a:e4:32: 90:c8:ec:58:36:8f:c5:4d:c6:79:f2:98:d1:7d:43:b4:2b:17: 24:7c:ad:10:5c:86:cb:6e:20:5d:e7:76:49:d0:10:34:6b:29: 6d:af:e9:4c:0c:76:ea:02:ac:c0:8e:a7:34:c6:b8:80:c1:8b: 07:d7:db:8d:bd:1b:4a:a3:04:db:33:92:94:f7:9e:87:df:3a: c2:91:12:b5:f6:3d:4d:a5:f2:fd:26:bd:84:c8:e4:5d:07:65: 43:99:e9:c5:77:38:65:7c:c1:cf:e8:26:40:a5:47:76:19:cf: 6f:e2:a0:ad:c7:0f:e4:92:e8:f1:3d:e8:4e:a7:c3:d5:66:0c: ce:30:c7:7c:b2:37:2a:9f:19:cb:59:00:58:24:ae:fe:78:b7: 77:25:95:ea -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FBLEgG1ivUSAN1u2t5SnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGI2OGQ2MDBhZGIyMTJkMmI2OWYzODEyZmI4NzQ3ZDcyMWVlODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYFLREvH3p6v2+sI8hw4FeGkPObc nChAH55biH9csQqDgCe7cZm9FRRwhWS0S26ScOJBWQXMjIfwZwfTnnD+qgMMMSan vam/tnG+qay5gZCuhTcg9BgCNQd31O8+z117DZKLFNXIGXXfIobuVjE+t6rbaTqh 4EoB1PW9WQzLjtCdDBNYEoKE5yIj1lPE9KBBvQOlV2RxZA1y3rKr+GAkcsTcVdOS W/F7t7L095l0xXQfRFx7gmLka0i/Y5wojEMlIuDUzbeEwZnGitQ6WbCz1XZAwIfL JZF9zfhXCg8YnRObjhOXuGuyK9whEKsGNrQ5nisyFTAtc7orfocziIB6CQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKS2jWAK2yEtK2nzgS+4dH1yHugjMB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEvcExhTllBcmJJUzByYWZPQkw3aDBmWEllNkNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1AsIAwQA 1AssAwQA1As3MA0GCSqGSIb3DQEBCwUAA4IBAQAy3vTRyRMzSCv4ooEcBDRCFbT7 R+UEEbJ0EHIdgjEFRK80jS9CYpeY0CH3OLDVF6YZNy55GdGGOS6FjCxhn0tyoOAz xuNsVzj3gGj08vR0j+B7XWhpyPOJ3hRaRb0biWozoUMxO3t9Kupa5DKQyOxYNo/F TcZ58pjRfUO0KxckfK0QXIbLbiBd53ZJ0BA0ayltr+lMDHbqAqzAjqc0xriAwYsH 19uNvRtKowTbM5KU956H3zrCkRK19j1NpfL9Jr2EyORdB2VDmenFdzhlfMHP6CZA pUd2Gc9v4qCtxw/kkujxPehOp8PVZgzOMMd8sjcqnxnLWQBYJK7+eLd3JZXq -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:45 2026 by rpki-client