This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PLIxOGwNx3c8Pq_uw264rVEtmG0.roa File: PLIxOGwNx3c8Pq_uw264rVEtmG0.roa (raw, json) Hash identifier: p/Jz+hiXxG8qMBDmsNQ6aRAkWpEh3GcYKquryP1QGqM= Subject key identifier: 3C:B2:31:38:6C:0D:C7:77:3C:3E:AF:EE:C3:6E:B8:AD:51:2D:98:6D Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019B0D08A776CA74E61A9DF0D51DB1A677B2 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PLIxOGwNx3c8Pq_uw264rVEtmG0.roa Signing time: Thu 11 Dec 2025 10:50:29 +0000 ROA not before: Thu 11 Dec 2025 10:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 80.174.114.0/24 maxlen: 24 80.174.125.0/24 maxlen: 24 80.174.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:08:a7:76:ca:74:e6:1a:9d:f0:d5:1d:b1:a6:77:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Dec 11 10:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3cb231386c0dc7773c3eafeec36eb8ad512d986d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:e5:41:55:f6:5e:64:5a:27:32:81:a0:35: b0:87:9e:65:2d:f7:69:f7:d0:03:75:5e:fa:1c:24: 55:02:b6:a6:fc:88:d0:cc:4e:67:21:0d:19:15:c1: 1d:81:0b:49:1d:40:f9:bb:25:3d:99:fe:53:94:ac: 47:ce:4a:89:d6:96:db:9d:26:8c:2c:f7:6b:d1:8a: d1:a2:e1:b7:44:6a:7e:a1:cd:71:4d:87:22:11:28: fd:d4:e5:98:81:04:9f:1f:be:1b:ab:dc:46:69:9b: 2f:28:35:3f:21:b8:8c:84:75:48:8d:df:b3:28:91: 76:c6:bc:70:37:aa:19:bf:a1:c7:81:4b:1a:53:82: 91:67:e4:f5:aa:68:22:8f:97:bb:75:9d:de:90:ae: 3d:75:e2:40:93:b0:bf:26:63:19:a7:5e:9f:a0:66: 41:a4:d0:9d:eb:df:e7:37:8a:f7:ea:ff:ee:1a:3d: ff:80:74:d9:cd:79:dc:bf:8e:ac:e4:9e:5e:b1:85: 73:21:07:4e:37:25:e3:f6:60:3d:d9:42:d6:56:d4: 05:28:80:bb:2b:43:97:fd:ee:fe:c0:64:63:34:36: 89:64:2d:d0:3e:78:5a:6e:c2:09:3b:df:ea:e4:db: f3:e8:c3:ac:da:b1:38:58:4f:5f:f2:01:5c:e9:ef: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B2:31:38:6C:0D:C7:77:3C:3E:AF:EE:C3:6E:B8:AD:51:2D:98:6D X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/PLIxOGwNx3c8Pq_uw264rVEtmG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.114.0/24 80.174.125.0-80.174.126.255 Signature Algorithm: sha256WithRSAEncryption a3:8c:27:b1:54:d9:da:f5:e8:49:66:84:05:c0:e7:5b:35:21: 23:e3:ab:a8:0f:27:4a:dc:25:43:fa:ea:e2:a0:21:18:79:25: 5c:76:2e:62:a1:d0:5b:82:0c:9d:cb:65:d6:3d:39:c4:54:8f: b0:1f:30:a5:4b:a1:e0:6c:0c:d9:c1:8d:e1:7c:1f:bf:64:3c: 6f:9c:f2:b0:3a:3a:0b:45:27:5b:a6:f3:9d:f9:ec:9b:44:20: fd:29:20:b2:9a:29:7c:c2:45:35:b5:02:19:6a:de:98:bd:98: c2:bf:b3:06:9b:49:08:69:af:a6:80:a0:6d:cf:bf:09:ca:92: 69:9e:57:8c:43:fb:0b:38:01:52:f5:a3:06:ff:e4:93:88:a5: c2:e6:42:77:5a:80:2f:30:c2:a9:ff:f8:cd:ad:52:3e:cd:57: af:ce:65:5d:b1:e9:0a:e5:30:98:cc:62:19:05:fd:86:57:16: 9b:22:3b:cc:f5:a3:45:f0:a5:95:24:74:18:8a:16:d9:e5:3d: 85:b1:93:d6:87:2e:1c:1d:56:26:dd:ba:80:ea:6f:25:e8:49: 8d:28:01:c3:2d:13:e6:17:ee:5d:f8:7d:85:62:4a:68:6d:c0: 9d:15:c2:5a:f9:ef:d6:83:89:a8:6f:20:1d:0e:6d:a9:7a:1a: e0:19:26:98 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZsNCKd2ynTmGp3w1R2xpneyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMjExMTA1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2IyMzEzODZjMGRjNzc3M2MzZWFmZWVjMzZlYjhhZDUxMmQ5ODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjrlQVX2XmRaJzKBoDWwh55lLfdp 99ADdV76HCRVAram/IjQzE5nIQ0ZFcEdgQtJHUD5uyU9mf5TlKxHzkqJ1pbbnSaM LPdr0YrRouG3RGp+oc1xTYciESj91OWYgQSfH74bq9xGaZsvKDU/IbiMhHVIjd+z KJF2xrxwN6oZv6HHgUsaU4KRZ+T1qmgij5e7dZ3ekK49deJAk7C/JmMZp16foGZB pNCd69/nN4r36v/uGj3/gHTZzXncv46s5J5esYVzIQdONyXj9mA92ULWVtQFKIC7 K0OX/e7+wGRjNDaJZC3QPnhabsIJO9/q5Nvz6MOs2rE4WE9f8gFc6e+GmwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDyyMThsDcd3PD6v7sNuuK1RLZhtMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvUExJeE9Hd054M2M4UHFfdXcyNjRyVkV0bUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAUK5yMAwD BABQrn0DBABQrn4wDQYJKoZIhvcNAQELBQADggEBAKOMJ7FU2dr16ElmhAXA51s1 ISPjq6gPJ0rcJUP66uKgIRh5JVx2LmKh0FuCDJ3LZdY9OcRUj7AfMKVLoeBsDNnB jeF8H79kPG+c8rA6OgtFJ1um85357JtEIP0pILKaKXzCRTW1Ahlq3pi9mMK/swab SQhpr6aAoG3PvwnKkmmeV4xD+ws4AVL1owb/5JOIpcLmQndagC8wwqn/+M2tUj7N V6/OZV2x6QrlMJjMYhkF/YZXFpsiO8z1o0XwpZUkdBiKFtnlPYWxk9aHLhwdVibd uoDqbyXoSY0oAcMtE+YX7l34fYViSmhtwJ0Vwlr579aDiahvIB0Obal6GuAZJpg= -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:39 2025 by rpki-client