This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/PLMbYZg-ZJoMJXEwD_dNPsS7CC8.roa File: PLMbYZg-ZJoMJXEwD_dNPsS7CC8.roa (raw, json) Hash identifier: KUJkUeg6zm3w35+L+38+PiwvNkQMV/2nX08/uGAy2lM= Subject key identifier: 3C:B3:1B:61:98:3E:64:9A:0C:25:71:30:0F:F7:4D:3E:C4:BB:08:2F Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6CD539211B60B015252E71F69D0AC Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/PLMbYZg-ZJoMJXEwD_dNPsS7CC8.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209294 IP address blocks: 2a01:e281:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cd:53:92:11:b6:0b:01:52:52:e7:1f:69:d0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cb31b61983e649a0c2571300ff74d3ec4bb082f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:7f:9c:fc:38:af:2a:45:26:06:15:30:f1: c3:53:7e:60:68:2f:6c:53:98:be:c4:82:81:f5:67: 16:5e:1a:fb:12:8c:8d:7f:37:8d:89:c4:61:22:35: 11:43:ab:90:a2:49:8d:08:28:ff:69:28:18:68:1b: 73:37:c2:e2:ea:23:eb:80:cf:f8:ba:97:46:88:ca: ee:d2:a0:11:e4:e5:fb:ae:4f:d5:b1:b4:ee:c9:f6: f9:69:9d:62:e4:ab:4d:c8:4b:34:23:fa:c5:ec:46: f0:2b:b4:bc:55:35:4c:7a:39:ee:09:c4:8a:a9:a5: 22:4d:d1:55:30:f7:4b:9a:d6:af:55:9d:8a:7c:de: 15:fd:b6:19:d3:fe:f8:bb:c0:46:f5:5a:ac:43:c0: 09:07:9f:22:92:bd:ff:60:df:5a:d0:fd:00:64:93: aa:4b:e7:86:00:c6:e4:db:20:ec:4f:52:74:4d:c2: cc:cf:b1:4e:9f:04:66:74:93:e0:74:3d:6b:0a:48: 0e:f2:1c:b8:09:4e:5f:bb:96:4b:df:20:08:6c:44: c7:57:82:52:29:02:1e:a7:ec:03:93:97:ef:b8:1b: 7a:ec:7b:3a:ec:54:87:11:1c:63:ce:da:0b:02:61: da:5c:a8:17:f0:2a:ec:57:ed:d7:29:fd:1a:b9:20: 27:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B3:1B:61:98:3E:64:9A:0C:25:71:30:0F:F7:4D:3E:C4:BB:08:2F X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/PLMbYZg-ZJoMJXEwD_dNPsS7CC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e281:a400::/40 Signature Algorithm: sha256WithRSAEncryption 92:57:07:f9:7e:b6:f9:d4:0b:f4:cf:c9:80:54:ff:71:aa:71: c1:97:49:56:cc:11:0d:fe:55:8b:7a:e4:61:95:49:7a:33:ad: 27:5b:9e:0f:2f:e6:98:f4:65:55:c4:fc:40:da:40:f8:60:5d: 7f:8d:bf:82:96:dd:58:1e:ee:52:68:2a:91:88:fb:8c:e5:87: 84:78:66:fa:c2:5a:01:ff:da:6b:9f:51:48:d3:60:3d:31:75: 47:44:92:3b:60:9b:eb:31:2a:5e:83:cc:0a:5d:85:cf:9c:7e: f5:db:5d:2b:42:a9:35:ec:fb:1f:bf:88:7a:71:dc:86:9a:dd: 39:a2:33:c5:72:0a:12:ad:99:7d:58:39:3c:b4:da:26:a1:7a: 1d:ce:2a:33:67:0d:e8:94:25:60:f7:ee:d7:2c:2d:f3:7a:1e: 2e:8a:d4:d2:18:7b:53:a2:c4:2d:91:5a:ae:47:de:bb:e1:0b: 44:69:9f:b9:6b:0a:94:4c:23:a1:e7:d3:4c:d2:d5:2d:c8:56: b1:7c:d1:3f:04:aa:47:c0:93:4e:aa:c4:c5:2b:c5:ac:94:92: 4f:ae:fe:03:69:dd:7c:0a:45:7f:60:4b:e2:e2:f3:78:16:b2: 9b:47:75:ba:dd:49:aa:0d:d1:c7:4c:31:7f:c6:4e:b6:c1:01: 52:fa:45:97 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+ps1TkhG2CwFSUucfadCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2IzMWI2MTk4M2U2NDlhMGMyNTcxMzAwZmY3NGQzZWM0YmIwODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM5/nPw4rypFJgYVMPHDU35gaC9s U5i+xIKB9WcWXhr7EoyNfzeNicRhIjURQ6uQokmNCCj/aSgYaBtzN8Li6iPrgM/4 updGiMru0qAR5OX7rk/VsbTuyfb5aZ1i5KtNyEs0I/rF7EbwK7S8VTVMejnuCcSK qaUiTdFVMPdLmtavVZ2KfN4V/bYZ0/74u8BG9VqsQ8AJB58ikr3/YN9a0P0AZJOq S+eGAMbk2yDsT1J0TcLMz7FOnwRmdJPgdD1rCkgO8hy4CU5fu5ZL3yAIbETHV4JS KQIep+wDk5fvuBt67Hs67FSHERxjztoLAmHaXKgX8CrsV+3XKf0auSAn5QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDyzG2GYPmSaDCVxMA/3TT7EuwgvMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvUExNYllaZy1aSm9NSlhFd0RfZE5Qc1M3Q0M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHigaQw DQYJKoZIhvcNAQELBQADggEBAJJXB/l+tvnUC/TPyYBU/3GqccGXSVbMEQ3+VYt6 5GGVSXozrSdbng8v5pj0ZVXE/EDaQPhgXX+Nv4KW3Vge7lJoKpGI+4zlh4R4ZvrC WgH/2mufUUjTYD0xdUdEkjtgm+sxKl6DzApdhc+cfvXbXStCqTXs+x+/iHpx3Iaa 3TmiM8VyChKtmX1YOTy02iaheh3OKjNnDeiUJWD37tcsLfN6Hi6K1NIYe1OixC2R Wq5H3rvhC0Rpn7lrCpRMI6Hn00zS1S3IVrF80T8EqkfAk06qxMUrxayUkk+u/gNp 3XwKRX9gS+Li83gWsptHdbrdSaoN0cdMMX/GTrbBAVL6RZc= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:40 2026 by rpki-client