This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/PLI-b-dEqvor_bfeFFOG1C_Iuok.roa File: PLI-b-dEqvor_bfeFFOG1C_Iuok.roa (raw, json) Hash identifier: F4VORd4mU+np6RmTvpkvMCjqhk8AClBJilDTjN/zMb8= Subject key identifier: 3C:B2:3E:6F:E7:44:AA:FA:2B:FD:B7:DE:14:53:86:D4:2F:C8:BA:89 Certificate issuer: /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6 Certificate serial: 019B7F84087BA3BBD2BC2F0019AB25C2D42C Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/PLI-b-dEqvor_bfeFFOG1C_Iuok.roa Signing time: Fri 02 Jan 2026 16:21:57 +0000 ROA not before: Fri 02 Jan 2026 16:21:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47180 IP address blocks: 185.28.46.0/24 maxlen: 24 194.179.140.0/22 maxlen: 24 2a13:f8c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:08:7b:a3:bb:d2:bc:2f:00:19:ab:25:c2:d4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6 Validity Not Before: Jan 2 16:21:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cb23e6fe744aafa2bfdb7de145386d42fc8ba89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ff:1d:bf:ff:59:83:ce:8a:09:5d:21:4c:92: bd:36:b7:0a:20:a0:34:aa:c7:7a:89:62:b6:00:cb: a5:93:34:69:75:8d:0f:e9:c2:88:7f:64:c6:74:5d: c4:e9:91:8f:d5:cd:86:e5:04:f2:ce:cc:7b:9a:c1: e3:ce:c1:1c:37:b9:2a:33:5e:4e:f6:93:47:cf:20: a2:89:45:fd:85:2a:f0:d0:b8:b2:74:d7:76:f4:58: 45:33:d2:c8:11:1b:f8:65:49:e9:09:79:e0:b5:1c: ce:22:c0:99:7e:76:85:63:98:88:a1:c7:b5:37:e3: f9:d9:43:35:3e:9c:e2:c0:b5:97:1f:35:d3:e1:24: e8:71:53:b6:3b:28:83:de:e6:ab:95:43:f0:7c:de: 1c:77:a6:41:f8:10:81:10:b2:21:8f:1a:aa:d2:17: dc:5d:8c:37:8e:02:9f:85:f9:ed:40:5d:d4:f0:ef: 66:ae:76:99:70:6e:7e:ab:6e:a5:bf:ee:0b:81:c0: 56:1a:cf:85:7e:48:6c:ff:dc:15:f8:3d:7c:7b:79: 08:e9:15:3f:5c:df:93:87:dd:66:4f:67:f0:36:a9: a4:9c:05:58:cb:e9:22:2f:79:8d:d7:30:e1:99:1f: 76:78:4d:60:a3:8d:77:8f:78:43:bb:80:4f:1f:4c: 51:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B2:3E:6F:E7:44:AA:FA:2B:FD:B7:DE:14:53:86:D4:2F:C8:BA:89 X509v3 Authority Key Identifier: keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/PLI-b-dEqvor_bfeFFOG1C_Iuok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.46.0/24 194.179.140.0/22 IPv6: 2a13:f8c0::/29 Signature Algorithm: sha256WithRSAEncryption 52:7b:bb:74:f0:e8:e8:7c:14:67:18:f1:15:7d:72:a7:e0:71: 56:80:b1:fc:ff:59:31:5a:ee:0e:10:df:3c:63:b5:80:9f:17: a9:7d:4b:c5:03:6c:f6:3a:8c:37:f5:2a:f1:2c:36:1c:1a:ac: 2e:03:87:07:18:10:4f:27:23:bf:ee:c4:68:35:ce:20:d0:aa: 53:ed:f1:3f:03:9b:f9:ff:94:39:9a:09:e3:bd:09:95:8d:0d: ce:6e:10:cf:aa:65:77:2f:bc:a4:58:aa:20:6a:3e:be:b3:51: 0d:dd:a2:32:3a:b3:94:0b:9f:f2:40:47:eb:34:16:56:55:fe: e0:a5:dd:ef:61:cc:e2:d4:38:43:ee:c9:b4:fa:dc:95:aa:ce: cb:58:2e:35:f7:bd:b8:41:7a:8d:f8:6e:f8:61:58:1a:b6:a1: be:37:dd:91:c4:29:c5:8c:44:7c:fa:b8:7f:57:e4:ee:74:6c: 23:80:4f:4e:ea:70:fa:97:50:8c:3e:fe:bd:5c:63:e1:62:5c: 74:f6:5f:a2:fc:b5:44:99:b0:3a:67:e3:a6:07:e9:8f:5f:28: 92:4d:2e:e1:92:31:5c:92:29:6f:c8:1e:28:c7:50:7c:8b:c8: e1:61:f9:7b:d3:13:ad:23:4f:23:92:48:af:f1:25:34:ca:bc: 8b:ef:48:d5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/hAh7o7vSvC8AGaslwtQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZmNhYjRkZWRlZDY2YWJlZjdjZDdlZDcyNjU3YmMwM2E4 MjI5ZDYwHhcNMjYwMTAyMTYyMTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2IyM2U2ZmU3NDRhYWZhMmJmZGI3ZGUxNDUzODZkNDJmYzhiYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v8dv/9Zg86KCV0hTJK9NrcKIKA0 qsd6iWK2AMulkzRpdY0P6cKIf2TGdF3E6ZGP1c2G5QTyzsx7msHjzsEcN7kqM15O 9pNHzyCiiUX9hSrw0LiydNd29FhFM9LIERv4ZUnpCXngtRzOIsCZfnaFY5iIoce1 N+P52UM1PpziwLWXHzXT4STocVO2OyiD3uarlUPwfN4cd6ZB+BCBELIhjxqq0hfc XYw3jgKfhfntQF3U8O9mrnaZcG5+q26lv+4LgcBWGs+Ffkhs/9wV+D18e3kI6RU/ XN+Th91mT2fwNqmknAVYy+kiL3mN1zDhmR92eE1go413j3hDu4BPH0xRrQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDyyPm/nRKr6K/233hRThtQvyLqJMB8GA1UdIwQY MBaAFB78q03t7War73zX7XJle8A6ginWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZ5clRlM3RacXZ2Zk5mdGNtVjd3RHFDS2RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jN2M4M2YtZmFjMi00NTUxLThmNzgt OTFhNzdlYTA1ZGYxLzEvUExJLWItZEVxdm9yX2JmZUZGT0cxQ19JdW9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jN2M4M2YtZmFjMi00NTUxLThmNzgtOTFhNzdlYTA1ZGYx LzEvSHZ5clRlM3RacXZ2Zk5mdGNtVjd3RHFDS2RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuRwuAwQC wrOMMA0EAgACMAcDBQMqE/jAMA0GCSqGSIb3DQEBCwUAA4IBAQBSe7t08OjofBRn GPEVfXKn4HFWgLH8/1kxWu4OEN88Y7WAnxepfUvFA2z2Oow39SrxLDYcGqwuA4cH GBBPJyO/7sRoNc4g0KpT7fE/A5v5/5Q5mgnjvQmVjQ3ObhDPqmV3L7ykWKogaj6+ s1EN3aIyOrOUC5/yQEfrNBZWVf7gpd3vYczi1DhD7sm0+tyVqs7LWC419724QXqN +G74YVgatqG+N92RxCnFjER8+rh/V+TudGwjgE9O6nD6l1CMPv69XGPhYlx09l+i /LVEmbA6Z+OmB+mPXyiSTS7hkjFckilvyB4ox1B8i8jhYfl70xOtI08jkkiv8SU0 yryL70jV -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:04 2026 by rpki-client