This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa File: PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa (raw, json) Hash identifier: tkN/efywA+5kpM31KV+mqm28OwLiTj+XO+01vH0nfrA= Subject key identifier: 3C:C2:CF:10:43:1E:0D:A0:9A:F4:6D:1B:BC:41:98:16:66:E4:CF:85 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019B7F83A7244CA0B169DD8867C21F93ABEB Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa Signing time: Fri 02 Jan 2026 16:21:33 +0000 ROA not before: Fri 02 Jan 2026 16:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 5.22.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:a7:24:4c:a0:b1:69:dd:88:67:c2:1f:93:ab:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Jan 2 16:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cc2cf10431e0da09af46d1bbc41981666e4cf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:b4:4b:e4:55:1a:4e:29:33:0d:0e:a9:93: 8b:5c:9b:ce:8c:02:d9:76:02:68:af:60:79:38:ca: 33:3e:90:e6:f0:ff:52:45:9a:71:87:36:2d:9d:37: f2:b3:d1:b8:61:e4:6d:76:c3:f7:98:56:a3:03:00: 66:95:4b:ae:5d:ba:60:5d:aa:24:06:31:f9:50:04: 31:78:4f:5a:17:69:9e:0d:21:d6:97:19:8c:3c:eb: 2b:35:25:9f:e0:9f:4e:dc:cf:1a:05:0a:1a:ba:0e: 70:3c:0d:4a:a8:52:e5:63:18:35:f6:e4:1b:61:52: 07:62:73:7a:14:6d:5c:24:9a:5f:ac:27:e8:4f:84: 84:0c:0a:f7:27:24:ef:50:d0:1e:3e:0a:c4:dc:10: f3:b0:02:09:7a:3f:4c:b8:7e:a1:d2:f6:f5:c1:2d: 11:c2:d9:de:eb:a9:aa:10:2f:79:6e:04:14:46:ae: f4:9a:1c:8d:53:9e:0c:e5:73:0d:49:d4:e8:57:3b: 19:11:4b:14:cf:49:72:b0:6d:25:8f:cb:53:54:c9: 83:88:a1:2b:35:aa:38:e4:6d:a8:f4:86:9e:a1:9d: 71:28:15:e3:ad:9e:40:a6:6f:71:d1:af:94:7a:c4: 81:69:4e:95:a3:d1:8a:0f:c7:17:e2:d2:b6:cb:a5: f6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C2:CF:10:43:1E:0D:A0:9A:F4:6D:1B:BC:41:98:16:66:E4:CF:85 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.204.0/22 Signature Algorithm: sha256WithRSAEncryption 68:aa:09:2f:bf:54:60:c0:7e:fd:f3:ef:05:f0:13:cf:d0:fa: 84:99:51:51:83:f6:8b:f0:c3:a8:2d:c1:9b:f6:20:ec:18:fb: 8f:cd:08:f3:56:63:07:96:36:14:52:96:bb:bf:d2:e3:68:b4: e3:ed:17:23:d3:02:44:67:15:82:3c:a1:11:c2:52:a1:54:40: 73:a5:09:96:7d:36:7f:90:ad:e9:64:0b:4b:8b:16:eb:76:4e: bc:ce:e6:84:76:41:a1:63:7f:44:1a:03:a5:cd:89:9f:ea:1d: fb:fa:0f:2c:7e:5c:0f:ef:0e:81:c2:3b:1c:ee:48:e5:3f:9e: 18:18:a1:1f:82:53:0c:12:ed:1e:07:fb:ba:12:3c:cd:f5:c7: 01:36:95:27:80:51:44:8d:9c:4b:7a:98:4e:53:b6:dc:04:3c: 31:90:bf:7d:87:74:ca:fd:a0:5f:60:ef:4c:7c:10:ad:44:48: 2a:19:e2:cf:bc:3f:c0:8a:d1:ae:d1:93:08:d6:a7:dd:09:34: d8:cd:fa:77:61:42:83:de:cb:4e:d2:29:cf:1b:87:d2:76:6d: 8d:bb:7f:fc:07:50:73:1d:86:5d:5d:f9:5a:d9:ce:36:c6:ef: a2:2d:d8:86:43:0f:e3:37:ff:82:36:ca:4e:0f:89:9b:d2:2b: a2:b3:c4:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6ckTKCxad2IZ8Ifk6vrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjYwMTAyMTYyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2MyY2YxMDQzMWUwZGEwOWFmNDZkMWJiYzQxOTgxNjY2ZTRjZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPW0S+RVGk4pMw0OqZOLXJvOjALZ dgJor2B5OMozPpDm8P9SRZpxhzYtnTfys9G4YeRtdsP3mFajAwBmlUuuXbpgXaok BjH5UAQxeE9aF2meDSHWlxmMPOsrNSWf4J9O3M8aBQoaug5wPA1KqFLlYxg19uQb YVIHYnN6FG1cJJpfrCfoT4SEDAr3JyTvUNAePgrE3BDzsAIJej9MuH6h0vb1wS0R wtne66mqEC95bgQURq70mhyNU54M5XMNSdToVzsZEUsUz0lysG0lj8tTVMmDiKEr Nao45G2o9IaeoZ1xKBXjrZ5Apm9x0a+UesSBaU6Vo9GKD8cX4tK2y6X2gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDzCzxBDHg2gmvRtG7xBmBZm5M+FMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvUE1MUEVFTWVEYUNhOUcwYnZFR1lGbWJrejRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBRbMMA0G CSqGSIb3DQEBCwUAA4IBAQBoqgkvv1RgwH798+8F8BPP0PqEmVFRg/aL8MOoLcGb 9iDsGPuPzQjzVmMHljYUUpa7v9LjaLTj7Rcj0wJEZxWCPKERwlKhVEBzpQmWfTZ/ kK3pZAtLixbrdk68zuaEdkGhY39EGgOlzYmf6h37+g8sflwP7w6Bwjsc7kjlP54Y GKEfglMMEu0eB/u6EjzN9ccBNpUngFFEjZxLephOU7bcBDwxkL99h3TK/aBfYO9M fBCtREgqGeLPvD/AitGu0ZMI1qfdCTTYzfp3YUKD3stO0inPG4fSdm2Nu3/8B1Bz HYZdXfla2c42xu+iLdiGQw/jN/+CNspOD4mb0iuis8ST -----END CERTIFICATE-----Generated at Sun Jan 25 13:31:12 2026 by rpki-client