This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/PlNOWBYe5xFU6QU_i0vE5zBXu0E.roa File: PlNOWBYe5xFU6QU_i0vE5zBXu0E.roa (raw, json) Hash identifier: NUmc1QVEGYCgpRZW6pi+g/fleA3EF++2rMWcLNwzwmc= Subject key identifier: 3E:53:4E:58:16:1E:E7:11:54:E9:05:3F:8B:4B:C4:E7:30:57:BB:41 Certificate issuer: /CN=b2f83a3eb687b41994c89f78238a991133df25f6 Certificate serial: 019B79ED2E32FE4EB9BC63890B9E7299AC98 Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/PlNOWBYe5xFU6QU_i0vE5zBXu0E.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 185.149.212.0/22 maxlen: 22 2a02:c6a0::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2e:32:fe:4e:b9:bc:63:89:0b:9e:72:99:ac:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e534e58161ee71154e9053f8b4bc4e73057bb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:24:04:7d:a8:47:4b:2b:0a:a9:fe:e6:c2:dc: 19:8b:35:f1:25:1a:01:c1:0b:ac:e3:71:61:c3:26: a3:d9:10:ab:59:cc:16:58:27:24:7d:fc:21:31:55: 7e:06:9d:3f:a6:e0:02:48:3b:81:93:c5:da:97:94: 83:16:00:18:46:87:20:e9:ac:2d:b7:64:c0:e9:59: 36:e3:0e:ba:b9:3d:e3:09:30:66:c1:0c:7a:f1:89: c6:47:49:f2:3e:41:7a:7e:17:3c:3e:6f:ae:a4:0a: d4:30:9e:be:4a:c9:0f:a8:a0:c4:d3:c2:06:a5:a9: 1d:80:36:4a:9d:f1:fa:a5:bf:d9:5c:22:23:6a:3e: f3:4c:ef:74:fa:0f:4f:59:c4:2f:61:37:dd:f0:0e: a9:50:70:51:f2:cf:d6:a8:db:7b:4c:e4:fb:7f:0c: ec:60:22:ca:a1:fb:04:68:56:6c:01:8a:51:5c:d1: 82:9b:48:a4:3e:80:71:db:1a:34:00:8c:40:89:df: 41:bb:6c:7e:22:03:f1:86:32:61:8c:85:ad:de:3a: 0d:d6:69:7a:4c:b3:6c:49:55:2c:01:bf:1d:75:41: 58:f4:e9:63:bf:44:4e:1b:de:ba:6c:f9:f5:5f:ad: 38:e3:49:0b:fe:d2:31:8c:ba:ef:59:19:50:f2:8c: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:53:4E:58:16:1E:E7:11:54:E9:05:3F:8B:4B:C4:E7:30:57:BB:41 X509v3 Authority Key Identifier: keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/PlNOWBYe5xFU6QU_i0vE5zBXu0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.212.0/22 IPv6: 2a02:c6a0::/30 Signature Algorithm: sha256WithRSAEncryption a5:df:50:06:f0:f2:75:b3:89:d4:44:b2:dc:38:30:1d:6b:f2: c9:c2:b1:ca:8a:26:83:d5:b8:e4:c9:55:9a:2f:9f:13:8d:51: 0e:a7:3f:cb:0f:54:e6:bc:e3:3f:74:69:55:14:6d:d8:04:38: 39:ca:63:1a:b9:ae:f4:21:88:a8:8a:f3:c7:d6:02:40:50:9e: ff:60:9f:74:e2:21:fb:d4:c8:fe:2b:e4:e9:2d:d9:ff:1e:71: 2e:69:3f:37:32:34:28:85:d0:be:a1:3e:02:d4:9d:02:a8:71: 92:87:65:44:23:03:ea:6e:fd:2d:f9:0d:c4:6a:d5:d2:f7:ca: 21:04:21:b5:29:2f:06:f6:53:45:97:d8:bb:06:1d:d9:fc:2e: d8:7c:18:67:be:0f:ef:27:f7:f0:4e:9e:e3:87:40:db:5b:ee: 6d:1a:60:cf:a7:e4:92:92:02:52:66:3d:81:7c:3c:d6:c9:27: 56:c5:2d:88:df:59:a7:20:63:ca:8c:3b:91:77:75:09:b0:59: 71:49:9c:6a:25:3c:46:3b:66:f4:28:44:f5:c3:9e:26:d4:a9: 65:b7:a0:b2:4f:f4:a7:83:7f:dc:2b:a6:45:fd:9c:ef:54:43: 97:e6:2d:a9:c3:13:10:a4:e9:95:a0:46:b2:c1:e1:4a:15:47: c9:56:62:2b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57S4y/k65vGOJC55ymayYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZjgzYTNlYjY4N2I0MTk5NGM4OWY3ODIzOGE5OTExMzNk ZjI1ZjYwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTUzNGU1ODE2MWVlNzExNTRlOTA1M2Y4YjRiYzRlNzMwNTdiYjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SQEfahHSysKqf7mwtwZizXxJRoB wQus43Fhwyaj2RCrWcwWWCckffwhMVV+Bp0/puACSDuBk8Xal5SDFgAYRocg6awt t2TA6Vk24w66uT3jCTBmwQx68YnGR0nyPkF6fhc8Pm+upArUMJ6+SskPqKDE08IG pakdgDZKnfH6pb/ZXCIjaj7zTO90+g9PWcQvYTfd8A6pUHBR8s/WqNt7TOT7fwzs YCLKofsEaFZsAYpRXNGCm0ikPoBx2xo0AIxAid9Bu2x+IgPxhjJhjIWt3joN1ml6 TLNsSVUsAb8ddUFY9Oljv0ROG966bPn1X60440kL/tIxjLrvWRlQ8owSDwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD5TTlgWHucRVOkFP4tLxOcwV7tBMB8GA1UdIwQY MBaAFLL4Oj62h7QZlMifeCOKmREz3yX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3ZnNlByYUh0Qm1VeUo5NEk0cVpFVFBmSmZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMWIzNmUtNzQyYy00YWU1LWI3MzUt ZjYxNDFlMDNmM2E3LzEvUGxOT1dCWWU1eEZVNlFVX2kwdkU1ekJYdTBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yMWIzNmUtNzQyYy00YWU1LWI3MzUtZjYxNDFlMDNmM2E3 LzEvc3ZnNlByYUh0Qm1VeUo5NEk0cVpFVFBmSmZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZXUMA0E AgACMAcDBQIqAsagMA0GCSqGSIb3DQEBCwUAA4IBAQCl31AG8PJ1s4nURLLcODAd a/LJwrHKiiaD1bjkyVWaL58TjVEOpz/LD1TmvOM/dGlVFG3YBDg5ymMaua70IYio ivPH1gJAUJ7/YJ904iH71Mj+K+TpLdn/HnEuaT83MjQohdC+oT4C1J0CqHGSh2VE IwPqbv0t+Q3EatXS98ohBCG1KS8G9lNFl9i7Bh3Z/C7YfBhnvg/vJ/fwTp7jh0Db W+5tGmDPp+SSkgJSZj2BfDzWySdWxS2I31mnIGPKjDuRd3UJsFlxSZxqJTxGO2b0 KET1w54m1Kllt6CyT/Sng3/cK6ZF/ZzvVEOX5i2pwxMQpOmVoEayweFKFUfJVmIr -----END CERTIFICATE-----Generated at Tue Jan 27 11:28:02 2026 by rpki-client