This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/PMLsTFs6Z4_PKG-Q9RTmkWCxFIc.roa File: PMLsTFs6Z4_PKG-Q9RTmkWCxFIc.roa (raw, json) Hash identifier: ObX2jBzbLPhJ//P67OMpwzqyxPHidk32VG9CzhRkZTQ= Subject key identifier: 3C:C2:EC:4C:5B:3A:67:8F:CF:28:6F:90:F5:14:E6:91:60:B1:14:87 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC79826AE98EE1C59F7CB3DEE7A7310 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/PMLsTFs6Z4_PKG-Q9RTmkWCxFIc.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61302 IP address blocks: 45.141.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:98:26:ae:98:ee:1c:59:f7:cb:3d:ee:7a:73:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cc2ec4c5b3a678fcf286f90f514e69160b11487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:7b:a1:f8:ab:20:b0:5f:f0:cd:5d:01:c1: f4:2c:b1:5c:a1:e6:37:85:f4:04:76:fe:cf:01:34: 06:57:0f:ae:d2:d8:bb:71:bc:7c:90:81:f2:45:e9: 6b:91:21:e5:fa:cd:97:1f:13:90:64:63:0d:a5:a9: 23:ab:53:aa:6f:d6:ec:67:03:f2:a6:96:2d:4f:0d: 6a:65:22:8b:2d:67:c2:eb:0d:c7:e2:98:d8:81:3a: 7b:26:76:fa:75:63:15:c6:7d:57:56:01:eb:c0:60: cc:7c:d9:fb:b0:19:25:8c:49:90:b5:95:8c:f3:08: ed:5b:f4:c8:01:9c:3a:ce:9d:c0:46:db:dd:a9:04: 17:63:6c:59:08:3b:47:e9:e8:95:e2:28:17:2f:53: 2f:a7:52:cb:2f:3f:ea:11:1b:91:dc:e0:88:07:53: 49:1f:a9:bc:d3:22:2a:f8:4f:74:ac:9e:98:dc:e4: 91:0c:93:3a:72:8e:ac:65:4e:fb:e5:28:46:e5:9d: 42:2d:cf:7d:4f:5d:0b:e7:4f:89:f4:91:78:6e:35: cf:ff:fc:d4:05:bf:06:ce:52:a9:05:34:5b:d9:05: 87:e1:4b:f8:78:cc:84:ea:b7:45:c6:1c:90:a6:2f: 62:e9:10:c3:c0:11:d1:20:50:e9:dd:ec:4c:4c:08: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C2:EC:4C:5B:3A:67:8F:CF:28:6F:90:F5:14:E6:91:60:B1:14:87 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/PMLsTFs6Z4_PKG-Q9RTmkWCxFIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.184.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:35:f0:90:b5:64:c9:6c:c5:91:32:b7:c7:9c:b1:82:c9:f0: ed:43:09:84:b0:9a:3d:2f:a2:97:98:1e:83:15:f1:24:a3:99: 22:e0:21:99:9a:a3:53:83:7d:6f:2b:8e:fb:4c:14:77:f0:dc: f6:bb:28:4a:c2:d1:4c:9f:25:de:e0:7a:e0:65:13:90:08:76: a7:80:7f:db:56:b2:36:73:1f:f1:23:4f:a9:51:08:79:b8:4b: 97:cd:6c:06:e2:94:2b:cc:7a:f6:b7:e1:74:46:f9:d9:b7:db: 2a:5a:70:55:4d:a3:cc:d8:da:b8:d7:1e:0e:8e:e1:42:05:c9: bd:da:af:86:8a:e9:e1:d4:9e:c5:dc:36:ec:9b:c8:e4:77:4d: 99:0a:f3:ca:82:04:ca:f5:1f:3b:02:d8:02:62:5e:5f:19:b0: a9:62:b3:13:7b:ef:5c:97:a6:04:49:c5:b8:a0:ab:9f:dd:1c: b3:81:e9:5c:1f:0d:9e:51:17:24:d0:f1:af:a2:27:3a:33:54: e3:d8:ad:ce:0a:a9:7c:2d:1b:9b:f8:94:45:90:27:7c:ce:48: 32:b5:ec:46:ab:1c:d5:e9:ea:4c:ef:fc:5a:93:82:70:73:15: 74:8a:52:60:60:dc:2e:26:b8:12:db:9d:da:e2:26:83:2d:b4: 04:00:cc:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5gmrpjuHFn3yz3uenMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2MyZWM0YzViM2E2NzhmY2YyODZmOTBmNTE0ZTY5MTYwYjExNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgJ7ofirILBf8M1dAcH0LLFcoeY3 hfQEdv7PATQGVw+u0ti7cbx8kIHyRelrkSHl+s2XHxOQZGMNpakjq1Oqb9bsZwPy ppYtTw1qZSKLLWfC6w3H4pjYgTp7Jnb6dWMVxn1XVgHrwGDMfNn7sBkljEmQtZWM 8wjtW/TIAZw6zp3ARtvdqQQXY2xZCDtH6eiV4igXL1Mvp1LLLz/qERuR3OCIB1NJ H6m80yIq+E90rJ6Y3OSRDJM6co6sZU775ShG5Z1CLc99T10L50+J9JF4bjXP//zU Bb8GzlKpBTRb2QWH4Uv4eMyE6rdFxhyQpi9i6RDDwBHRIFDp3exMTAgmTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDzC7ExbOmePzyhvkPUU5pFgsRSHMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvUE1Mc1RGczZaNF9QS0ctUTlSVG1rV0N4RkljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY24MA0G CSqGSIb3DQEBCwUAA4IBAQBsNfCQtWTJbMWRMrfHnLGCyfDtQwmEsJo9L6KXmB6D FfEko5ki4CGZmqNTg31vK477TBR38Nz2uyhKwtFMnyXe4HrgZROQCHangH/bVrI2 cx/xI0+pUQh5uEuXzWwG4pQrzHr2t+F0RvnZt9sqWnBVTaPM2Nq41x4OjuFCBcm9 2q+Giunh1J7F3Dbsm8jkd02ZCvPKggTK9R87AtgCYl5fGbCpYrMTe+9cl6YEScW4 oKuf3RyzgelcHw2eURck0PGvoic6M1Tj2K3OCql8LRub+JRFkCd8zkgytexGqxzV 6epM7/xak4JwcxV0ilJgYNwuJrgS253a4iaDLbQEAMxn -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:07 2026 by rpki-client