This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/PlJpj7jP73E4zbfMxQODYMcp_7s.roa File: PlJpj7jP73E4zbfMxQODYMcp_7s.roa (raw, json) Hash identifier: 6ejhDKH+4IAoIUxzT6kMmGZlbm0mSbrfcniUm7Rso6I= Subject key identifier: 3E:52:69:8F:B8:CF:EF:71:38:CD:B7:CC:C5:03:83:60:C7:29:FF:BB Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538 Certificate serial: 019B7FF1AE8BECD969FB5103D31CDD265D85 Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/PlJpj7jP73E4zbfMxQODYMcp_7s.roa Signing time: Fri 02 Jan 2026 18:21:43 +0000 ROA not before: Fri 02 Jan 2026 18:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204957 IP address blocks: 91.207.61.0/24 maxlen: 24 91.217.90.0/24 maxlen: 24 193.203.48.0/24 maxlen: 24 193.203.49.0/24 maxlen: 24 2a13:f580:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ae:8b:ec:d9:69:fb:51:03:d3:1c:dd:26:5d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538 Validity Not Before: Jan 2 18:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e52698fb8cfef7138cdb7ccc5038360c729ffbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:09:d6:44:43:6e:dc:f2:11:7b:7a:10:f9: 06:1a:05:3b:f6:4a:6d:a6:d8:55:62:eb:2c:91:fc: b8:3a:7f:43:bb:73:96:73:46:ec:60:68:1c:83:83: 64:01:bf:59:50:2f:6c:e0:d2:c7:d6:c0:8e:f1:25: ef:07:1d:ef:13:bf:07:0b:5d:cb:44:39:fa:0c:df: 84:8c:af:77:fa:94:50:52:77:b1:82:9d:71:8e:f1: e6:b5:72:8f:3a:fd:a1:f1:0f:c5:d8:d7:aa:6e:34: 68:62:d3:ff:a1:84:f0:c5:98:68:d2:cd:73:7d:0a: 26:0a:0c:05:21:e9:ca:73:cd:fd:9d:2d:b3:fa:cf: 05:fc:42:84:6d:de:d3:50:e6:50:42:2e:7c:80:c1: 13:14:e9:86:fa:e7:d6:6d:d1:76:b7:dc:ac:8a:73: 16:cd:f0:51:ea:4f:86:8f:de:9c:54:de:ed:9f:83: 68:8d:7f:92:ac:85:39:b4:a6:db:02:5d:80:02:81: b5:82:14:e8:00:81:20:73:e5:fa:d0:c7:a0:8a:80: c9:90:c6:b4:e0:ec:f5:01:df:8d:69:21:00:78:be: 8b:d3:58:60:85:75:59:a9:b7:f0:92:5e:38:68:57: 1b:cc:ca:68:97:29:7c:24:2e:5a:dd:30:d7:2f:f1: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:52:69:8F:B8:CF:EF:71:38:CD:B7:CC:C5:03:83:60:C7:29:FF:BB X509v3 Authority Key Identifier: keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/PlJpj7jP73E4zbfMxQODYMcp_7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.61.0/24 91.217.90.0/24 193.203.48.0/23 IPv6: 2a13:f580:3::/48 Signature Algorithm: sha256WithRSAEncryption 01:f2:4f:86:23:39:0a:f7:ad:03:3a:a5:8e:ab:c3:f1:27:31: e9:e4:23:dd:f7:60:b8:e4:f8:cf:68:8b:04:42:b7:2a:d2:b7: 8b:f5:02:fb:43:5e:f1:05:b5:bf:b9:10:f2:33:09:d7:98:d9: f9:2c:d1:ac:48:99:71:eb:1f:95:22:62:8a:3d:c7:b8:a4:3d: 7f:dc:5b:29:4e:e4:4d:03:29:33:dd:8e:49:a3:9f:b2:b8:80: 74:49:f7:7f:8e:21:d5:0f:9c:ca:54:39:b4:f2:91:a4:8d:cd: 4f:73:ba:dd:f4:d1:5b:a3:d9:1a:90:5e:b2:2a:17:b0:9e:1d: 2e:fd:4c:fd:b8:ac:cd:12:ad:3a:12:10:c2:8d:73:e0:c5:ed: 5d:40:27:61:19:48:d7:34:53:b5:4b:bc:bb:b7:b5:0e:a0:55: ec:d9:e8:6a:d5:8c:f5:b9:95:07:81:9c:d9:26:a8:ba:e4:96: 2b:e2:19:6c:b4:ef:12:50:fa:4f:84:31:06:6d:07:48:65:ba: 1c:8e:c7:aa:fa:c1:99:33:3a:68:39:57:65:7d:33:7d:50:ec: e7:94:7c:59:06:3f:81:2e:5f:95:49:35:e1:fb:0d:d6:61:4a: 33:e5:8c:a6:69:69:6f:6a:b5:52:2f:d9:5f:1a:f4:b5:9a:d7: 19:72:46:42 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/8a6L7Nlp+1ED0xzdJl2FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw NGU1MzgwHhcNMjYwMTAyMTgyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTUyNjk4ZmI4Y2ZlZjcxMzhjZGI3Y2NjNTAzODM2MGM3MjlmZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jsJ1kRDbtzyEXt6EPkGGgU79kpt pthVYusskfy4On9Du3OWc0bsYGgcg4NkAb9ZUC9s4NLH1sCO8SXvBx3vE78HC13L RDn6DN+EjK93+pRQUnexgp1xjvHmtXKPOv2h8Q/F2NeqbjRoYtP/oYTwxZho0s1z fQomCgwFIenKc839nS2z+s8F/EKEbd7TUOZQQi58gMETFOmG+ufWbdF2t9ysinMW zfBR6k+Gj96cVN7tn4NojX+SrIU5tKbbAl2AAoG1ghToAIEgc+X60MegioDJkMa0 4Oz1Ad+NaSEAeL6L01hghXVZqbfwkl44aFcbzMpolyl8JC5a3TDXL/ExvwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFD5SaY+4z+9xOM23zMUDg2DHKf+7MB8GA1UdIwQY MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt NDIyYWVkM2E3NzAyLzEvUGxKcGo3alA3M0U0emJmTXhRT0RZTWNwXzdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAW889AwQA W9laAwQBwcswMA8EAgACMAkDBwAqE/WAAAMwDQYJKoZIhvcNAQELBQADggEBAAHy T4YjOQr3rQM6pY6rw/EnMenkI933YLjk+M9oiwRCtyrSt4v1AvtDXvEFtb+5EPIz CdeY2fks0axImXHrH5UiYoo9x7ikPX/cWylO5E0DKTPdjkmjn7K4gHRJ93+OIdUP nMpUObTykaSNzU9zut300Vuj2RqQXrIqF7CeHS79TP24rM0SrToSEMKNc+DF7V1A J2EZSNc0U7VLvLu3tQ6gVezZ6GrVjPW5lQeBnNkmqLrkliviGWy07xJQ+k+EMQZt B0hluhyOx6r6wZkzOmg5V2V9M31Q7OeUfFkGP4EuX5VJNeH7DdZhSjPljKZpaW9q tVIv2V8a9LWa1xlyRkI= -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:13 2026 by rpki-client