This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/PLZ1UvYELfgIKPLrh6OHNKK9acc.roa File: PLZ1UvYELfgIKPLrh6OHNKK9acc.roa (raw, json) Hash identifier: Shni7jpvErA8s5MzWpDHouyJxJ3M6Tbya9IWgb+KMM8= Subject key identifier: 3C:B6:75:52:F6:04:2D:F8:08:28:F2:EB:87:A3:87:34:A2:BD:69:C7 Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Certificate serial: 019B7834F5AE15AA302D11020001DE9D73E4 Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/PLZ1UvYELfgIKPLrh6OHNKK9acc.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208059 IP address blocks: 46.149.109.0/24 maxlen: 24 2a10:200::/36 maxlen: 48 2a10:200:affe::/48 maxlen: 48 2a10:200:ffa1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f5:ae:15:aa:30:2d:11:02:00:01:de:9d:73:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cb67552f6042df80828f2eb87a38734a2bd69c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:4c:54:93:b8:fb:1c:ca:d3:14:dd:03:2c: b7:35:3f:76:2d:2a:5a:87:4b:4d:6d:ee:5f:20:3d: 1c:ce:2d:59:2d:40:ec:36:8b:23:c5:b6:b7:6a:70: 17:aa:d6:9c:1f:c4:68:ae:0f:95:e6:9c:7f:61:1b: fb:04:9d:51:93:21:86:0f:fe:73:ac:6c:8b:dd:ad: da:b4:71:99:20:71:72:d8:8e:dc:d6:7f:54:60:80: fb:30:81:d7:8b:e5:35:08:a3:32:31:a3:9d:a5:b1: d0:ff:ac:16:b4:51:6a:cc:b3:43:1f:1e:de:1a:f6: 5b:1d:d7:60:84:cb:e0:d6:7d:4a:5b:75:c6:e7:86: ac:2f:97:91:80:1e:a3:03:b5:3b:a3:5d:29:9f:74: 09:c6:77:e1:98:9d:f0:fb:a2:b5:04:59:28:48:cf: e3:ff:5b:dc:c2:7e:86:07:5a:d1:22:d3:2f:d4:c6: 0b:3b:c8:0d:85:2a:19:0b:6a:8f:92:e9:28:39:36: b6:72:a7:e3:df:87:d5:b3:83:1c:f1:b8:9b:94:99: 7b:ad:b5:61:95:55:b6:45:cb:89:e4:96:cc:ce:be: 65:01:14:f1:18:f1:d2:9d:48:1f:23:41:5e:41:20: 58:7b:8a:2b:ac:9e:1d:ee:b1:8d:11:95:5f:82:35: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B6:75:52:F6:04:2D:F8:08:28:F2:EB:87:A3:87:34:A2:BD:69:C7 X509v3 Authority Key Identifier: keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/PLZ1UvYELfgIKPLrh6OHNKK9acc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.109.0/24 IPv6: 2a10:200::/36 2a10:200:affe::/48 2a10:200:ffa1::/48 Signature Algorithm: sha256WithRSAEncryption 9c:df:9b:cc:57:51:3e:14:c9:86:32:24:89:15:69:72:15:44: 0a:e5:50:3c:34:0d:68:90:a7:bf:a7:87:ed:c2:98:83:a9:fc: a4:6b:53:a7:1d:8b:5c:56:71:a7:f6:cb:19:26:d8:f1:ec:ec: c5:80:fe:7b:01:85:af:f6:0f:59:1e:5b:fa:4c:3b:df:f4:5b: 04:3f:a9:6b:07:cc:d8:ad:ac:35:17:17:c2:26:32:c3:ad:65: 4d:eb:64:05:0e:d5:87:85:8e:3e:73:f2:12:03:0d:f4:10:ac: b0:dc:e2:41:57:17:e1:46:c5:f7:38:d3:6a:0d:d5:45:97:08: 93:eb:68:41:26:7c:92:5c:31:3a:11:c1:64:a0:79:4a:35:28: ae:04:bd:39:c7:33:20:e8:fb:42:82:f6:ce:9e:60:f1:17:cb: 8d:e9:56:12:2c:10:3a:80:ad:03:c4:b4:12:a8:1c:8a:20:02: 3c:94:fd:43:b3:a3:94:42:39:2a:8b:8e:d5:54:b4:8e:91:75: 8c:70:8c:84:e7:f9:46:34:02:7e:90:a2:c3:5b:9c:68:09:2f: 05:4d:70:df:d6:12:b3:52:4e:64:49:e5:3c:ac:47:82:20:c3: 9e:75:71:9b:d1:8d:fe:68:de:43:13:c0:94:00:74:29:ea:d0: 5e:18:d0:76 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt4NPWuFaowLRECAAHenXPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGJjNzE1NmE0ZWU3YzY3ZDllNjg0NzY3YTJmNGJhZjhh MzViYWIwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2I2NzU1MmY2MDQyZGY4MDgyOGYyZWI4N2EzODczNGEyYmQ2OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mJMVJO4+xzK0xTdAyy3NT92LSpa h0tNbe5fID0czi1ZLUDsNosjxba3anAXqtacH8Rorg+V5px/YRv7BJ1RkyGGD/5z rGyL3a3atHGZIHFy2I7c1n9UYID7MIHXi+U1CKMyMaOdpbHQ/6wWtFFqzLNDHx7e GvZbHddghMvg1n1KW3XG54asL5eRgB6jA7U7o10pn3QJxnfhmJ3w+6K1BFkoSM/j /1vcwn6GB1rRItMv1MYLO8gNhSoZC2qPkukoOTa2cqfj34fVs4Mc8biblJl7rbVh lVW2RcuJ5JbMzr5lARTxGPHSnUgfI0FeQSBYe4orrJ4d7rGNEZVfgjVQ7wIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFDy2dVL2BC34CCjy64ejhzSivWnHMB8GA1UdIwQY MBaAFInbxxVqTufGfZ5oR2ei9Lr4o1urMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2It NDk1MDFhNzY5NGM0LzEvUExaMVV2WUVMZmdJS1BMcmg2T0hOS0s5YWNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2ItNDk1MDFhNzY5NGM0 LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAMBAIAATAGAwQALpVtMCAE AgACMBoDBgQqEAIAAAMHACoQAgCv/gMHACoQAgD/oTANBgkqhkiG9w0BAQsFAAOC AQEAnN+bzFdRPhTJhjIkiRVpchVECuVQPDQNaJCnv6eH7cKYg6n8pGtTpx2LXFZx p/bLGSbY8ezsxYD+ewGFr/YPWR5b+kw73/RbBD+pawfM2K2sNRcXwiYyw61lTetk BQ7Vh4WOPnPyEgMN9BCssNziQVcX4UbF9zjTag3VRZcIk+toQSZ8klwxOhHBZKB5 SjUorgS9OcczIOj7QoL2zp5g8RfLjelWEiwQOoCtA8S0EqgciiACPJT9Q7OjlEI5 KouO1VS0jpF1jHCMhOf5RjQCfpCiw1ucaAkvBU1w39YSs1JOZEnlPKxHgiDDnnVx m9GN/mjeQxPAlAB0KerQXhjQdg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:39 2026 by rpki-client