This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/PlsiMfuzdWpqdixRpsnKJmUJVkc.roa File: PlsiMfuzdWpqdixRpsnKJmUJVkc.roa (raw, json) Hash identifier: CxXKI5RjYT9e0ognC8RxQ8YSCNVURmz/JyThW8Kz5Ew= Subject key identifier: 3E:5B:22:31:FB:B3:75:6A:6A:76:2C:51:A6:C9:CA:26:65:09:56:47 Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019B7E372520423B73FF1A1EA92ADAE4A1DE Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/PlsiMfuzdWpqdixRpsnKJmUJVkc.roa Signing time: Fri 02 Jan 2026 10:18:21 +0000 ROA not before: Fri 02 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212093 IP address blocks: 91.196.139.0/24 maxlen: 24 93.179.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:25:20:42:3b:73:ff:1a:1e:a9:2a:da:e4:a1:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Jan 2 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e5b2231fbb3756a6a762c51a6c9ca2665095647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:8a:50:a5:fe:d8:df:5c:fc:e6:0d:3b:e7: ec:5f:e3:0c:63:d0:6a:21:79:06:ae:3e:56:7f:c7: ea:9c:71:13:a7:df:9b:1f:fd:c3:dc:a5:fc:0b:c9: 42:ee:29:94:77:cf:20:6b:92:4d:ec:62:34:36:78: ba:93:7c:a7:8a:5d:9d:20:dd:df:98:a5:59:e5:21: 2e:8b:27:fb:c9:b4:80:51:be:be:49:0b:17:c1:e9: 40:e5:cc:00:cf:71:cb:dc:df:ad:c9:d0:74:54:da: f2:31:b3:36:99:5f:94:d1:ed:60:c4:1f:13:83:0d: 2f:09:94:5f:0b:ea:09:25:c5:49:4d:9d:0b:7b:12: 5f:90:f4:0b:1d:70:88:f4:79:82:97:e1:c2:aa:62: a5:97:bc:c6:94:96:b3:90:49:a5:89:17:da:c4:a8: 0a:53:d0:d2:3d:0a:da:d3:c9:8f:31:63:c1:5f:7a: 3e:cd:f0:12:58:d4:3a:41:52:e3:7c:f7:f5:3c:15: 89:f6:fa:da:f9:c0:30:b4:6f:0b:7a:de:62:cc:f0: b7:0c:4f:d5:9d:40:07:fd:40:f5:18:b2:78:1b:c4: d7:34:12:95:bd:1f:89:a7:c2:c2:58:d5:54:fe:3c: fc:5f:e2:31:f6:77:a2:97:f7:6f:66:68:11:75:43: c7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5B:22:31:FB:B3:75:6A:6A:76:2C:51:A6:C9:CA:26:65:09:56:47 X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/PlsiMfuzdWpqdixRpsnKJmUJVkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.139.0/24 93.179.66.0/24 Signature Algorithm: sha256WithRSAEncryption 71:5c:ac:8a:54:d2:6c:77:27:b8:12:6f:55:db:9e:bb:27:1e: b7:73:48:73:14:d7:88:95:bc:e0:4e:d2:9d:58:8f:8d:c2:59: f5:f1:99:df:ce:62:70:0a:3f:85:a0:79:b7:56:9a:57:04:fa: 05:10:30:48:db:39:6b:c4:41:5c:b1:a3:6b:1c:d4:e0:55:51: 6b:1e:36:59:aa:05:d4:14:da:9b:12:ae:3a:c2:2f:33:90:12: d2:7b:14:ff:80:96:e2:dc:e4:5f:7c:59:ed:65:51:4e:e2:ab: e0:cc:b7:d4:f0:83:59:0d:41:f7:14:cc:44:e7:b6:29:86:12: 6a:52:63:77:df:de:bc:95:e6:fe:af:85:fe:df:a0:5d:07:e6: 92:3b:dc:e7:5d:20:f3:c9:36:26:7e:e4:f0:a5:b7:34:79:55: e9:bd:49:4f:05:69:50:49:8c:e1:ae:50:70:11:eb:64:44:44: 14:18:fb:17:89:e1:95:51:77:24:6c:ab:40:44:d6:09:84:11: 91:8f:ea:b2:fa:5c:2a:33:56:f9:6c:09:08:13:72:c2:69:ea: 38:57:69:ff:b2:30:c7:a6:88:9a:78:61:66:0b:a4:49:6b:bd: 64:0a:eb:4d:44:e0:e5:7b:30:e1:66:bb:9d:eb:ae:ef:9d:64: 23:d2:77:1a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+NyUgQjtz/xoeqSra5KHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjYwMTAyMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTViMjIzMWZiYjM3NTZhNmE3NjJjNTFhNmM5Y2EyNjY1MDk1NjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0OKUKX+2N9c/OYNO+fsX+MMY9Bq IXkGrj5Wf8fqnHETp9+bH/3D3KX8C8lC7imUd88ga5JN7GI0Nni6k3ynil2dIN3f mKVZ5SEuiyf7ybSAUb6+SQsXwelA5cwAz3HL3N+tydB0VNryMbM2mV+U0e1gxB8T gw0vCZRfC+oJJcVJTZ0LexJfkPQLHXCI9HmCl+HCqmKll7zGlJazkEmliRfaxKgK U9DSPQra08mPMWPBX3o+zfASWNQ6QVLjfPf1PBWJ9vra+cAwtG8Let5izPC3DE/V nUAH/UD1GLJ4G8TXNBKVvR+Jp8LCWNVU/jz8X+Ix9neil/dvZmgRdUPHhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD5bIjH7s3VqanYsUabJyiZlCVZHMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvUGxzaU1mdXpkV3BxZGl4UnBzbktKbVVKVmtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8SLAwQA XbNCMA0GCSqGSIb3DQEBCwUAA4IBAQBxXKyKVNJsdye4Em9V2567Jx63c0hzFNeI lbzgTtKdWI+Nwln18ZnfzmJwCj+FoHm3VppXBPoFEDBI2zlrxEFcsaNrHNTgVVFr HjZZqgXUFNqbEq46wi8zkBLSexT/gJbi3ORffFntZVFO4qvgzLfU8INZDUH3FMxE 57YphhJqUmN33968leb+r4X+36BdB+aSO9znXSDzyTYmfuTwpbc0eVXpvUlPBWlQ SYzhrlBwEetkREQUGPsXieGVUXckbKtARNYJhBGRj+qy+lwqM1b5bAkIE3LCaeo4 V2n/sjDHpoiaeGFmC6RJa71kCutNRODlezDhZrud667vnWQj0nca -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:09 2026 by rpki-client