This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PLFKqqxZZt7jksbM5wA5MkSKFzA.roa File: PLFKqqxZZt7jksbM5wA5MkSKFzA.roa (raw, json) Hash identifier: iI0zTQKwVydj/Sndu4jpjeWJ0df62TfpD0I2qCsRRx4= Subject key identifier: 3C:B1:4A:AA:AC:59:66:DE:E3:92:C6:CC:E7:00:39:32:44:8A:17:30 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019AD58E5F868082C1CE505809EE963E9516 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PLFKqqxZZt7jksbM5wA5MkSKFzA.roa Signing time: Sun 30 Nov 2025 16:17:48 +0000 ROA not before: Sun 30 Nov 2025 16:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210848 IP address blocks: 45.140.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:8e:5f:86:80:82:c1:ce:50:58:09:ee:96:3e:95:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Nov 30 16:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3cb14aaaac5966dee392c6cce7003932448a1730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:43:04:ca:42:fc:3e:31:a6:3e:32:bd:8b:0c: 72:1f:f2:71:c5:27:ee:ae:0d:40:7e:87:92:05:47: ad:36:a3:de:22:ae:ca:6c:d7:a1:83:24:7e:ef:f7: 1d:a1:63:bf:69:0b:ac:cb:76:a5:88:7a:30:29:94: 0f:00:b0:e5:9f:11:c7:5d:96:f1:dd:c4:90:c5:96: 15:e5:ef:e3:57:d4:ec:7b:4f:75:0e:3a:0d:e9:8c: 4e:45:9a:aa:b3:52:88:17:7a:d4:c5:0d:54:ea:2d: f5:cc:0e:6d:77:82:7f:92:5b:ee:38:c1:44:a8:31: 29:08:da:05:06:26:69:ad:33:3d:ff:64:f5:65:6b: 4a:e2:61:07:3d:e9:f1:3c:13:04:08:eb:cb:4d:21: 2f:35:b1:05:22:b1:3d:61:d9:53:79:74:a9:e4:87: 6f:f2:44:49:6c:88:c3:39:d0:9e:cc:8e:84:42:9c: 92:d9:07:b9:72:5d:c2:4a:d2:70:62:3a:69:cd:ca: a2:fb:1d:1e:56:55:45:a1:5e:3a:0c:06:58:e5:33: d9:a1:7a:e9:96:8f:7a:d1:e5:27:46:65:b4:9d:84: 78:1b:53:6e:d3:ba:f2:5c:fd:62:64:49:3c:cd:f7: 89:21:4b:a2:b2:2d:76:49:0c:cb:ac:03:a8:27:c7: 9c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B1:4A:AA:AC:59:66:DE:E3:92:C6:CC:E7:00:39:32:44:8A:17:30 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PLFKqqxZZt7jksbM5wA5MkSKFzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.223.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:40:f9:b9:95:49:42:59:c2:79:08:e7:1a:7f:54:69:4a:6d: 08:9b:eb:61:6a:7b:d2:98:b0:9a:5d:bc:cc:35:5e:36:34:35: b9:32:96:c9:24:9f:d0:c0:fc:15:da:39:5c:ce:c7:95:e8:78: f0:5f:de:bc:57:77:04:8c:1b:57:5f:d5:fb:6b:64:13:dc:74: 6d:17:d6:2f:98:0c:3e:79:1f:75:db:72:29:73:8f:55:ab:64: e8:cc:b3:12:af:9b:df:b8:2f:4e:4c:27:b2:bb:ed:bd:96:c8: a8:76:95:9f:86:81:15:95:6c:98:87:df:35:f9:e9:9d:49:f1: 5f:6f:0f:fe:0b:fb:98:70:58:7a:ed:f3:97:5b:c6:74:8b:0e: 62:45:4f:5c:44:ff:94:02:c4:fa:7e:df:52:d6:2b:14:f6:93: e0:2c:7e:e3:07:2d:a5:3c:9b:26:b5:2a:9d:2f:44:a1:6e:0e: d6:c7:2e:fe:e4:b4:ee:a2:4f:d2:a8:43:dc:1c:56:d8:fd:41: 40:d0:2c:34:67:c5:b2:41:a3:4f:d7:e6:e9:a8:0c:1c:13:9e: 6e:35:0d:6b:aa:3c:aa:c4:cb:d6:c7:82:4a:37:1c:72:62:61: 71:b0:ab:96:b2:05:06:ba:65:f8:e2:34:b0:cd:e5:82:e3:9f: 08:f7:01:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrVjl+GgILBzlBYCe6WPpUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjUxMTMwMTYxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2IxNGFhYWFjNTk2NmRlZTM5MmM2Y2NlNzAwMzkzMjQ0OGExNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UMEykL8PjGmPjK9iwxyH/JxxSfu rg1AfoeSBUetNqPeIq7KbNehgyR+7/cdoWO/aQusy3aliHowKZQPALDlnxHHXZbx 3cSQxZYV5e/jV9Tse091DjoN6YxORZqqs1KIF3rUxQ1U6i31zA5td4J/klvuOMFE qDEpCNoFBiZprTM9/2T1ZWtK4mEHPenxPBMECOvLTSEvNbEFIrE9YdlTeXSp5Idv 8kRJbIjDOdCezI6EQpyS2Qe5cl3CStJwYjppzcqi+x0eVlVFoV46DAZY5TPZoXrp lo960eUnRmW0nYR4G1Nu07ryXP1iZEk8zfeJIUuisi12SQzLrAOoJ8ec7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDyxSqqsWWbe45LGzOcAOTJEihcwMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvUExGS3FxeFpadDdqa3NiTTV3QTVNa1NLRnpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzfMA0G CSqGSIb3DQEBCwUAA4IBAQBsQPm5lUlCWcJ5COcaf1RpSm0Im+thanvSmLCaXbzM NV42NDW5MpbJJJ/QwPwV2jlczseV6HjwX968V3cEjBtXX9X7a2QT3HRtF9YvmAw+ eR9123Ipc49Vq2TozLMSr5vfuC9OTCeyu+29lsiodpWfhoEVlWyYh981+emdSfFf bw/+C/uYcFh67fOXW8Z0iw5iRU9cRP+UAsT6ft9S1isU9pPgLH7jBy2lPJsmtSqd L0Shbg7Wxy7+5LTuok/SqEPcHFbY/UFA0Cw0Z8WyQaNP1+bpqAwcE55uNQ1rqjyq xMvWx4JKNxxyYmFxsKuWsgUGumX44jSwzeWC458I9wHq -----END CERTIFICATE-----Generated at Sat Dec 6 13:32:47 2025 by rpki-client