This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/pl5TgcI9rIRH0y77nHhxnfwWtPk.roa File: pl5TgcI9rIRH0y77nHhxnfwWtPk.roa (raw, json) Hash identifier: CkXLY7tCmd+sGKHgRWHWB416fZODZOIxKK4kNfkQp/g= Subject key identifier: A6:5E:53:81:C2:3D:AC:84:47:D3:2E:FB:9C:78:71:9D:FC:16:B4:F9 Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019B7E3905E0407C9B5F390662604C4BD4BE Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/pl5TgcI9rIRH0y77nHhxnfwWtPk.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 138.226.234.0/24 maxlen: 24 138.226.239.0/24 maxlen: 24 216.163.179.0/24 maxlen: 24 2a14:a087::/48 maxlen: 48 2a14:a087:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:05:e0:40:7c:9b:5f:39:06:62:60:4c:4b:d4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a65e5381c23dac8447d32efb9c78719dfc16b4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:a3:17:4a:45:6b:37:df:65:ea:7b:fe:54: 6a:66:40:94:3f:fc:e5:d9:13:90:97:ff:a8:d5:68: 39:cf:d0:80:76:9c:69:59:54:df:0c:6c:81:9f:c3: 38:0d:0c:a3:6b:49:ac:ef:91:6c:18:a9:1c:12:ad: 81:38:d4:a5:a5:73:67:b8:5d:0e:fd:0f:f6:8d:d0: 00:ee:07:c5:ba:cd:a1:92:1d:a4:5b:97:7d:02:f9: d1:93:e7:b0:95:73:a0:04:a8:ac:83:94:64:1f:09: a4:60:f1:10:18:c3:16:63:15:8e:7e:80:42:05:8f: 64:ef:90:15:0e:47:40:98:70:2d:f4:01:dd:d6:72: 78:17:82:95:69:29:59:37:3a:62:b6:96:29:07:81: bf:5f:a8:6e:5b:c8:a4:b9:f0:d7:71:51:41:3c:1d: 54:4b:27:42:be:d0:74:05:9a:e0:f1:9c:a0:a1:5a: 3d:c1:c4:f0:3a:77:81:8a:1b:27:65:b3:f4:04:d1: 29:26:70:5f:88:15:dd:c2:83:c7:94:96:75:07:0a: 5e:d1:36:43:7e:73:3d:45:4f:af:be:ad:e3:2e:bb: fa:8b:e4:cf:b7:f0:8b:58:e4:e3:1b:a3:c8:8a:b0: 2b:45:a4:63:f6:41:c1:20:18:40:9d:ad:47:85:d3: 17:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5E:53:81:C2:3D:AC:84:47:D3:2E:FB:9C:78:71:9D:FC:16:B4:F9 X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/pl5TgcI9rIRH0y77nHhxnfwWtPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.226.234.0/24 138.226.239.0/24 216.163.179.0/24 IPv6: 2a14:a087::/47 Signature Algorithm: sha256WithRSAEncryption 71:75:14:39:b1:83:42:57:e9:82:25:aa:4a:ca:2f:0d:40:20: 26:f0:59:78:6e:12:2a:ba:30:3c:bf:e8:e2:02:9f:a7:38:4a: 30:74:eb:a3:b9:44:2e:7f:72:ef:b2:ff:43:da:0c:36:10:76: 64:d2:34:10:27:72:fe:49:b4:28:fd:1d:b3:15:ab:9b:6f:84: 98:f8:b8:bf:89:ce:31:37:75:c5:b2:1b:5f:2b:9d:9a:98:0d: b6:3c:6c:70:a5:38:74:4e:9b:0e:58:9d:9e:45:ed:72:40:4d: 20:06:b2:9a:b3:22:58:cd:8d:c7:90:a2:62:fb:8a:67:d8:1a: 3f:f3:34:13:9b:7c:09:ba:33:1b:5d:95:d7:db:1d:fc:45:eb: ed:92:3e:0f:32:cb:c9:3b:c0:f6:42:bb:8c:5f:ae:c6:72:29: f5:16:b8:4c:63:52:37:58:b0:79:44:e4:3f:d9:33:9a:d1:0f: 86:5b:fa:b8:6c:21:8d:45:53:d2:72:bc:77:df:6a:a5:b6:91: 3f:95:67:d2:72:17:32:35:c0:fe:4f:43:15:d3:95:67:32:ca: ad:d5:5d:d7:6c:71:ff:65:bb:41:dd:69:39:87:a1:7a:f7:e1: e0:37:88:d9:39:df:d1:4e:b4:51:fd:87:21:35:6c:7a:1b:2b: d8:86:ca:ce -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt+OQXgQHybXzkGYmBMS9S+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjVlNTM4MWMyM2RhYzg0NDdkMzJlZmI5Yzc4NzE5ZGZjMTZiNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL6jF0pFazffZep7/lRqZkCUP/zl 2ROQl/+o1Wg5z9CAdpxpWVTfDGyBn8M4DQyja0ms75FsGKkcEq2BONSlpXNnuF0O /Q/2jdAA7gfFus2hkh2kW5d9AvnRk+ewlXOgBKisg5RkHwmkYPEQGMMWYxWOfoBC BY9k75AVDkdAmHAt9AHd1nJ4F4KVaSlZNzpitpYpB4G/X6huW8ikufDXcVFBPB1U SydCvtB0BZrg8ZygoVo9wcTwOneBihsnZbP0BNEpJnBfiBXdwoPHlJZ1Bwpe0TZD fnM9RU+vvq3jLrv6i+TPt/CLWOTjG6PIirArRaRj9kHBIBhAna1HhdMXEwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFKZeU4HCPayER9Mu+5x4cZ38FrT5MB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEvcGw1VGdjSTlySVJIMHk3N25IaHhuZndXdFBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAiuLqAwQA iuLvAwQA2KOzMA8EAgACMAkDBwEqFKCHAAAwDQYJKoZIhvcNAQELBQADggEBAHF1 FDmxg0JX6YIlqkrKLw1AICbwWXhuEiq6MDy/6OICn6c4SjB066O5RC5/cu+y/0Pa DDYQdmTSNBAncv5JtCj9HbMVq5tvhJj4uL+JzjE3dcWyG18rnZqYDbY8bHClOHRO mw5YnZ5F7XJATSAGspqzIljNjceQomL7imfYGj/zNBObfAm6MxtdldfbHfxF6+2S Pg8yy8k7wPZCu4xfrsZyKfUWuExjUjdYsHlE5D/ZM5rRD4Zb+rhsIY1FU9JyvHff aqW2kT+VZ9JyFzI1wP5PQxXTlWcyyq3VXddscf9lu0HdaTmHoXr34eA3iNk539FO tFH9hyE1bHobK9iGys4= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:20 2026 by rpki-client