This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/pl3mSbrSk4MDmDBbIrhCeOd9IiE.roa File: pl3mSbrSk4MDmDBbIrhCeOd9IiE.roa (raw, json) Hash identifier: ejvjOytSKn/V2pJG8G40zxgC4i1oMPYSgoJkSbOPHPc= Subject key identifier: A6:5D:E6:49:BA:D2:93:83:03:98:30:5B:22:B8:42:78:E7:7D:22:21 Certificate issuer: /CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e Certificate serial: 019B7E38E867FD4AC3E20C4CC89AECA43294 Authority key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/pl3mSbrSk4MDmDBbIrhCeOd9IiE.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15693 IP address blocks: 46.183.248.0/21 maxlen: 21 185.29.60.0/24 maxlen: 24 185.29.62.0/23 maxlen: 23 195.191.120.0/23 maxlen: 23 2a01:8800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e8:67:fd:4a:c3:e2:0c:4c:c8:9a:ec:a4:32:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a65de649bad293830398305b22b84278e77d2221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:0b:ba:70:71:1e:51:0d:c5:a7:de:af:3b: 70:83:31:4e:b5:ea:9e:e9:45:ed:df:7f:88:6a:44: 65:e4:f8:cd:88:54:3d:8c:76:23:35:7e:f1:85:2c: 36:8e:1c:6c:79:49:f1:e5:c5:cf:0d:f4:da:62:fc: 3f:2c:89:a3:6e:00:7a:66:ea:40:e4:44:b7:04:59: 4c:e3:40:c7:a6:4d:40:f3:41:ed:66:1a:e8:f1:0c: f1:29:9e:e7:f8:07:5a:c6:bf:b5:bf:fb:3d:72:a6: 51:fa:4a:ba:ed:ea:5f:0c:82:16:37:eb:05:a0:5e: c5:e2:f3:8c:10:f7:02:f5:36:b1:8f:a5:e0:d3:17: 35:b7:b2:74:d4:7f:26:51:47:77:07:1b:7d:7f:3f: ba:f8:8f:2e:31:24:0f:b7:95:bb:48:6f:89:a0:62: 49:e3:45:6a:0a:ac:21:26:34:1d:48:79:e0:16:d1: 83:57:70:d0:fc:28:83:b8:f7:79:70:4b:5c:95:a9: 0b:37:e2:16:94:92:81:c4:32:6e:8e:cc:2f:21:b0: 3f:5e:3e:aa:b6:23:aa:a3:6f:3c:d1:1d:e4:0f:6e: 0f:a8:57:98:e0:5c:36:85:cb:78:93:be:c6:e2:3b: d5:30:4d:c3:15:75:62:0e:0a:b8:e1:70:b6:8b:58: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5D:E6:49:BA:D2:93:83:03:98:30:5B:22:B8:42:78:E7:7D:22:21 X509v3 Authority Key Identifier: keyid:F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/pl3mSbrSk4MDmDBbIrhCeOd9IiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.248.0/21 185.29.60.0/24 185.29.62.0/23 195.191.120.0/23 IPv6: 2a01:8800::/29 Signature Algorithm: sha256WithRSAEncryption 8a:f5:be:79:fb:c8:8c:0a:5f:75:c4:fc:5a:6e:35:27:48:0c: 26:7c:dd:0d:65:02:b2:ce:0f:12:e2:7d:4a:46:d3:ad:57:26: d1:b5:fa:8c:41:fe:52:c0:56:d7:f7:c8:d3:1a:bf:7c:f3:dc: ee:b7:e9:fb:42:03:90:eb:c3:88:84:75:59:62:6a:e1:74:86: ba:3e:33:e2:02:da:79:64:69:38:75:0c:f2:39:2b:12:39:39: 1c:ba:3d:22:e1:6a:5f:06:ce:04:98:21:c4:92:e8:7a:1a:cc: da:19:0a:26:d8:94:f4:03:e5:3e:14:c1:eb:e8:ac:f9:58:1f: 25:de:31:38:b5:e6:42:d1:26:3e:f2:a0:18:7e:ac:cb:27:49: 0d:91:67:64:12:ea:44:6b:23:70:1b:28:44:28:d3:fe:fb:df: 0d:26:12:12:b2:95:84:6d:89:a0:13:1d:02:fe:48:4e:ff:5c: 0f:c9:f2:30:62:c5:91:b8:17:d1:7e:67:a7:13:15:99:ad:2d: 16:69:07:e7:4f:17:db:e3:92:2f:5a:2e:21:14:cc:bb:5a:b0: 1b:7b:0a:d6:89:ac:1b:c3:de:a6:f8:c2:7c:5a:16:ac:cc:c8: f5:bd:51:a7:89:31:fa:04:74:7f:c9:4b:34:d3:43:cc:98:13: c3:fb:a2:2d -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt+OOhn/UrD4gxMyJrspDKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZGQ3YWUxMmQyYTM3ZjIxYWFjNmY4MWI2YWY2N2Q2NjE3 Y2EyOGUwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjVkZTY0OWJhZDI5MzgzMDM5ODMwNWIyMmI4NDI3OGU3N2QyMjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucILunBxHlENxaferztwgzFOteqe 6UXt33+IakRl5PjNiFQ9jHYjNX7xhSw2jhxseUnx5cXPDfTaYvw/LImjbgB6ZupA 5ES3BFlM40DHpk1A80HtZhro8QzxKZ7n+Adaxr+1v/s9cqZR+kq67epfDIIWN+sF oF7F4vOMEPcC9Taxj6Xg0xc1t7J01H8mUUd3Bxt9fz+6+I8uMSQPt5W7SG+JoGJJ 40VqCqwhJjQdSHngFtGDV3DQ/CiDuPd5cEtclakLN+IWlJKBxDJujswvIbA/Xj6q tiOqo2880R3kD24PqFeY4Fw2hct4k77G4jvVME3DFXViDgq44XC2i1j+2wIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFKZd5km60pODA5gwWyK4QnjnfSIhMB8GA1UdIwQY MBaAFPjdeuEtKjfyGqxvgbavZ9ZhfKKOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OMTY0UzBxTl9JYXJHLUJ0cTluMW1GOG9vNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNm LTJiNGEzNTM4YzVlMy8xL3BsM21TYnJTazRNRG1EQmJJcmhDZU9kOUlpRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNmLTJiNGEzNTM4YzVl My8xLzEtTjE2NFMwcU5fSWFyRy1CdHE5bjFtRjhvbzQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAMut/gD BAC5HTwDBAG5HT4DBAHDv3gwDQQCAAIwBwMFAyoBiAAwDQYJKoZIhvcNAQELBQAD ggEBAIr1vnn7yIwKX3XE/FpuNSdIDCZ83Q1lArLODxLifUpG061XJtG1+oxB/lLA Vtf3yNMav3zz3O636ftCA5Drw4iEdVliauF0hro+M+IC2nlkaTh1DPI5KxI5ORy6 PSLhal8GzgSYIcSS6HoazNoZCibYlPQD5T4UwevorPlYHyXeMTi15kLRJj7yoBh+ rMsnSQ2RZ2QS6kRrI3AbKEQo0/773w0mEhKylYRtiaATHQL+SE7/XA/J8jBixZG4 F9F+Z6cTFZmtLRZpB+dPF9vjki9aLiEUzLtasBt7CtaJrBvD3qb4wnxaFqzMyPW9 UaeJMfoEdH/JSzTTQ8yYE8P7oi0= -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:41 2026 by rpki-client