This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PlnG4SNFGvv0AvbgfETfGEsYaOE.roa File: PlnG4SNFGvv0AvbgfETfGEsYaOE.roa (raw, json) Hash identifier: 58j62VRrdnZhQ7TX3AIK2x9DVKA271cTjKPxGl+hQxQ= Subject key identifier: 3E:59:C6:E1:23:45:1A:FB:F4:02:F6:E0:7C:44:DF:18:4B:18:68:E1 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019BC8841B6EF7739A6562D4AA92A9D07781 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PlnG4SNFGvv0AvbgfETfGEsYaOE.roa Signing time: Fri 16 Jan 2026 20:34:19 +0000 ROA not before: Fri 16 Jan 2026 20:34:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400992 IP address blocks: 45.150.195.0/24 maxlen: 24 45.159.79.0/24 maxlen: 24 185.121.12.0/24 maxlen: 24 185.121.15.0/24 maxlen: 24 185.196.41.0/24 maxlen: 24 185.218.16.0/24 maxlen: 24 185.218.19.0/24 maxlen: 24 185.232.205.0/24 maxlen: 24 185.236.25.0/24 maxlen: 24 185.236.26.0/24 maxlen: 24 185.236.27.0/24 maxlen: 24 185.245.34.0/24 maxlen: 24 185.245.35.0/24 maxlen: 24 185.250.180.0/24 maxlen: 24 193.17.183.0/24 maxlen: 24 194.48.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 20:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c8:84:1b:6e:f7:73:9a:65:62:d4:aa:92:a9:d0:77:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 16 20:34:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e59c6e123451afbf402f6e07c44df184b1868e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fc:aa:3e:a1:3d:ea:48:b2:3d:ac:83:4f:5f: 00:54:42:12:69:ed:39:20:3a:a6:57:98:f9:0b:8e: 1f:6a:06:86:a5:27:73:6f:56:0e:9e:08:34:27:49: 4c:d5:d5:22:97:62:76:04:e2:0d:ce:fc:9c:8c:72: c5:56:02:e5:84:60:b2:d1:17:98:1a:fc:3e:0a:69: e8:39:c1:ae:91:33:b5:3b:0c:6d:dc:62:51:00:ee: 3c:c4:c9:ff:76:d1:24:e0:a5:92:70:4b:f2:0a:87: 59:02:c8:6d:0b:11:8f:2e:73:7c:77:df:93:8b:03: 73:e8:17:00:05:95:64:07:e9:83:42:75:d1:52:71: f7:ea:f4:83:f8:ce:62:e4:f0:d4:9d:f3:95:fa:06: 7b:ed:6d:34:87:93:3b:78:cd:c8:74:4e:40:d1:49: 9d:51:44:e3:08:1d:4b:64:41:a9:c6:48:f6:19:0d: 19:02:09:a6:5c:04:29:de:1c:74:a1:62:ac:03:37: 28:53:69:68:97:7f:bd:6f:91:8b:3f:01:3b:41:5c: e3:c6:3b:df:0d:f4:fd:9f:d7:2e:f7:ce:d5:e0:ae: c0:5c:ad:e9:1d:70:4c:b4:b0:d9:5e:8d:9a:5e:75: 00:c7:da:d3:7a:c7:c9:43:b8:7b:52:22:a6:bc:89: 8f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:59:C6:E1:23:45:1A:FB:F4:02:F6:E0:7C:44:DF:18:4B:18:68:E1 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PlnG4SNFGvv0AvbgfETfGEsYaOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.195.0/24 45.159.79.0/24 185.121.12.0/24 185.121.15.0/24 185.196.41.0/24 185.218.16.0/24 185.218.19.0/24 185.232.205.0/24 185.236.25.0-185.236.27.255 185.245.34.0/23 185.250.180.0/24 193.17.183.0/24 194.48.142.0/24 Signature Algorithm: sha256WithRSAEncryption 41:a1:76:08:20:f7:2b:98:71:bc:d5:cd:73:bf:29:ad:a0:52: b1:bf:da:7f:c3:3e:98:34:3f:cb:90:d8:c4:e2:c0:56:e7:19: 23:7b:2c:c9:58:db:94:0f:0d:f4:5c:0d:6a:e8:ab:5a:d5:1a: e6:09:b8:6d:a3:16:08:fc:dd:0c:17:76:2a:97:36:b3:a9:2f: f7:16:4a:c4:16:24:c1:2d:bb:33:66:7d:58:2a:d8:2d:47:a7: 35:00:64:b1:b3:c0:fe:33:ee:65:2f:81:f3:d9:6f:05:ff:c9: 97:67:53:16:a4:1d:b1:1e:f8:77:83:d1:92:9a:07:2e:70:e5: 38:5c:42:0e:f3:de:65:21:f7:a3:53:18:30:da:04:c3:e8:74: 65:fc:5c:39:de:ce:00:4c:f9:7c:09:66:b2:c4:a2:56:05:d8: 83:90:e8:ab:ee:3e:52:2f:59:fa:5f:0c:0e:35:44:74:7e:46: 58:fd:36:7f:d0:8d:5b:53:82:e7:1f:17:4d:8f:5a:f0:83:30: ba:bc:8e:22:b9:59:40:00:e4:38:0e:2e:c6:bc:24:d8:26:da: f5:4e:ee:7e:6d:07:6a:65:91:ec:bf:5c:2a:51:4f:24:ef:24: a1:e0:1f:27:68:88:1b:97:46:a5:2f:f6:0d:25:b1:6a:c5:a9: 52:48:5b:63 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZvIhBtu93OaZWLUqpKp0HeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTE2MjAzNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTU5YzZlMTIzNDUxYWZiZjQwMmY2ZTA3YzQ0ZGYxODRiMTg2OGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfyqPqE96kiyPayDT18AVEISae05 IDqmV5j5C44fagaGpSdzb1YOngg0J0lM1dUil2J2BOINzvycjHLFVgLlhGCy0ReY Gvw+CmnoOcGukTO1Owxt3GJRAO48xMn/dtEk4KWScEvyCodZAshtCxGPLnN8d9+T iwNz6BcABZVkB+mDQnXRUnH36vSD+M5i5PDUnfOV+gZ77W00h5M7eM3IdE5A0Umd UUTjCB1LZEGpxkj2GQ0ZAgmmXAQp3hx0oWKsAzcoU2lol3+9b5GLPwE7QVzjxjvf DfT9n9cu987V4K7AXK3pHXBMtLDZXo2aXnUAx9rTesfJQ7h7UiKmvImPMwIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFD5ZxuEjRRr79AL24HxE3xhLGGjhMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvUGxuRzRTTkZHdnYwQXZiZ2ZFVGZHRXNZYU9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQALZbDAwQA LZ9PAwQAuXkMAwQAuXkPAwQAucQpAwQAudoQAwQAudoTAwQAuejNMAwDBAC57BkD BAK57BgDBAG59SIDBAC5+rQDBADBEbcDBADCMI4wDQYJKoZIhvcNAQELBQADggEB AEGhdggg9yuYcbzVzXO/Ka2gUrG/2n/DPpg0P8uQ2MTiwFbnGSN7LMlY25QPDfRc DWroq1rVGuYJuG2jFgj83QwXdiqXNrOpL/cWSsQWJMEtuzNmfVgq2C1HpzUAZLGz wP4z7mUvgfPZbwX/yZdnUxakHbEe+HeD0ZKaBy5w5ThcQg7z3mUh96NTGDDaBMPo dGX8XDnezgBM+XwJZrLEolYF2IOQ6KvuPlIvWfpfDA41RHR+Rlj9Nn/QjVtTgucf F02PWvCDMLq8jiK5WUAA5DgOLsa8JNgm2vVO7n5tB2plkey/XCpRTyTvJKHgHydo iBuXRqUv9g0lsWrFqVJIW2M= -----END CERTIFICATE-----Generated at Sat Jan 17 05:34:27 2026 by rpki-client