This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa File: PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa (raw, json) Hash identifier: vqQUFtoj1n4nXtNZ0/2d8eNKsl2gvGohYfVzHK71xGM= Subject key identifier: 3C:B6:61:E9:E6:F3:15:C1:CE:54:B9:23:10:FD:86:84:72:0A:09:87 Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057 Certificate serial: 019B7A5B927558D7751937D5F39EB23D8511 Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2687 IP address blocks: 87.237.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:92:75:58:d7:75:19:37:d5:f3:9e:b2:3d:85:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cb661e9e6f315c1ce54b92310fd8684720a0987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0a:4f:20:46:d8:9f:99:7f:02:4b:84:1a:14: 17:ea:35:3a:fc:e6:12:64:9f:66:8f:b5:53:f9:d8: 3a:6f:58:32:0e:a3:e4:27:2b:1f:fd:89:ab:f4:24: 21:11:6e:c0:b0:8d:91:66:bd:0f:3a:d8:f5:f3:7b: 04:10:b6:f1:f7:2f:4e:3f:e8:cb:66:9c:8d:3e:a4: 88:1d:a1:47:17:3f:00:a3:23:e9:e7:40:3f:a1:11: fc:5f:6d:65:02:fb:c2:d5:2b:b4:7f:65:95:0a:86: a5:bf:0f:27:2d:77:8c:ed:a7:f1:44:d1:f1:b5:92: c4:07:57:ea:4f:5c:3e:5b:83:52:f8:70:c3:d3:33: cc:ab:a7:a8:93:2f:60:b3:7e:cd:50:a7:88:99:25: 26:b9:61:c6:f8:59:aa:ad:e6:43:08:ea:0d:6e:04: aa:75:c4:26:16:e5:9c:9d:e0:d5:67:8d:42:1e:ba: cf:34:62:df:67:20:34:c0:e8:f2:fa:e9:35:3d:33: 7f:a6:b3:73:b4:9b:1c:7d:57:d4:60:54:d5:0c:f3: c4:c2:5f:ea:95:2f:f1:d2:6b:a3:94:66:f4:5b:34: 14:04:48:f3:ef:31:d3:44:1d:e7:35:f2:2c:46:8c: bf:20:05:5f:6d:ff:11:1e:f6:21:75:a2:b5:05:2b: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B6:61:E9:E6:F3:15:C1:CE:54:B9:23:10:FD:86:84:72:0A:09:87 X509v3 Authority Key Identifier: keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.220.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:26:1b:25:94:25:d1:75:f6:10:99:c0:52:61:0b:bd:88:89: f9:47:68:54:0b:e9:c1:3f:7b:cb:e0:f3:81:ed:c7:29:ce:45: 47:bd:39:c5:e0:ed:91:b4:1d:fc:bf:a0:a2:0c:ec:16:2b:d9: d2:df:ce:45:3b:10:df:77:3c:33:7b:84:f8:4c:1f:29:b5:4a: 6e:e1:6b:4e:e3:b3:fc:ab:a1:9a:60:ed:fc:90:7b:e2:3a:4a: 4c:43:7a:bf:aa:bb:f4:1a:fe:33:9a:dc:5c:92:5d:2d:b2:1e: 36:d4:c8:5d:38:88:85:35:b7:52:e4:bc:2e:b0:fb:1b:f9:ce: a4:93:b8:92:64:a8:d6:aa:5c:e8:0a:bf:2e:74:bb:59:c7:71: 1b:a0:aa:ce:5e:2c:2f:24:87:0c:f7:4a:ed:15:f4:d1:8a:74: 48:58:e1:cd:d1:49:ce:04:a7:b8:98:31:5f:d9:df:23:f4:13: 04:e6:be:6b:87:df:e5:cc:19:08:4e:04:8e:20:e4:62:2b:64: a3:22:b2:7e:ea:77:bc:c9:72:ab:a1:48:2a:f4:78:b5:1c:0e: 07:34:86:7d:6c:74:9d:2f:7e:89:6c:29:bb:7c:a2:3f:c1:91: 6c:81:71:b6:71:5d:d1:e6:0d:08:e4:77:55:49:6d:28:0a:52: 6f:cd:d5:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5J1WNd1GTfV856yPYURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli NTMwNTcwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2I2NjFlOWU2ZjMxNWMxY2U1NGI5MjMxMGZkODY4NDcyMGEwOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwpPIEbYn5l/AkuEGhQX6jU6/OYS ZJ9mj7VT+dg6b1gyDqPkJysf/Ymr9CQhEW7AsI2RZr0POtj183sEELbx9y9OP+jL ZpyNPqSIHaFHFz8AoyPp50A/oRH8X21lAvvC1Su0f2WVCoalvw8nLXeM7afxRNHx tZLEB1fqT1w+W4NS+HDD0zPMq6eoky9gs37NUKeImSUmuWHG+FmqreZDCOoNbgSq dcQmFuWcneDVZ41CHrrPNGLfZyA0wOjy+uk1PTN/prNztJscfVfUYFTVDPPEwl/q lS/x0mujlGb0WzQUBEjz7zHTRB3nNfIsRoy/IAVfbf8RHvYhdaK1BSt/QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDy2Yenm8xXBzlS5IxD9hoRyCgmHMB8GA1UdIwQY MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt YzQzYWM0MjllNTNmLzEvUExaaDZlYnpGY0hPVkxrakVQMkdoSElLQ1ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+3cMA0G CSqGSIb3DQEBCwUAA4IBAQA6JhsllCXRdfYQmcBSYQu9iIn5R2hUC+nBP3vL4POB 7ccpzkVHvTnF4O2RtB38v6CiDOwWK9nS385FOxDfdzwze4T4TB8ptUpu4WtO47P8 q6GaYO38kHviOkpMQ3q/qrv0Gv4zmtxckl0tsh421MhdOIiFNbdS5LwusPsb+c6k k7iSZKjWqlzoCr8udLtZx3EboKrOXiwvJIcM90rtFfTRinRIWOHN0UnOBKe4mDFf 2d8j9BME5r5rh9/lzBkITgSOIORiK2SjIrJ+6ne8yXKroUgq9Hi1HA4HNIZ9bHSd L36JbCm7fKI/wZFsgXG2cV3R5g0I5HdVSW0oClJvzdVB -----END CERTIFICATE-----Generated at Thu Jan 22 04:18:14 2026 by rpki-client