This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/pl4G0drpVsiUnTNv0aNJRxAq40Y.roa File: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (raw, json) Hash identifier: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig= Subject key identifier: A6:5E:06:D1:DA:E9:56:C8:94:9D:33:6F:D1:A3:49:47:10:2A:E3:46 Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c Certificate serial: 019B7EA53EAE3A7B4A88AFA656649762DE1B Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/pl4G0drpVsiUnTNv0aNJRxAq40Y.roa Signing time: Fri 02 Jan 2026 12:18:37 +0000 ROA not before: Fri 02 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199284 IP address blocks: 217.17.206.0/23 maxlen: 23 2001:4bd8:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:3e:ae:3a:7b:4a:88:af:a6:56:64:97:62:de:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c Validity Not Before: Jan 2 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a65e06d1dae956c8949d336fd1a34947102ae346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:ab:0a:81:c7:8e:bc:0d:9f:fb:4e:7b:1d: e0:d2:01:20:0f:59:17:e7:d8:28:6a:99:bb:a6:ff: 20:90:a4:e4:ad:b4:42:ce:4e:3a:35:78:73:0a:92: 96:6d:76:b0:58:ff:26:53:16:6b:5b:4b:90:b8:2f: c2:79:2e:f6:43:e3:13:47:b8:9f:73:93:00:f6:34: e7:45:83:65:71:96:9a:c1:56:df:43:16:e7:77:e2: 8b:e7:a6:d4:2f:d9:89:48:55:c3:f1:3d:85:df:29: df:42:ce:e7:9f:42:96:f4:14:08:03:33:af:71:8d: 8c:fe:38:e5:ef:65:31:38:00:6b:ef:61:42:76:45: ed:c2:6c:a4:84:4b:06:99:39:5f:ab:0c:14:26:89: fa:b0:8b:ce:de:40:e8:0c:38:f1:5a:89:db:b0:27: 8e:01:6e:3e:ba:17:e1:21:e4:fa:b2:f5:cf:d8:1b: 7a:b5:1e:dc:9f:e5:cd:bc:98:a4:2b:e9:d6:02:88: 63:c3:8a:7c:ac:3c:0a:1b:97:5d:f8:5b:58:01:a4: 5a:08:a1:96:ab:e2:c3:dd:46:98:15:1c:5a:2d:05: f5:84:51:5b:66:d8:73:1a:52:f4:9e:8f:4c:4f:3e: 7a:bd:c5:15:f4:73:78:5c:50:81:44:8e:1e:74:37: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5E:06:D1:DA:E9:56:C8:94:9D:33:6F:D1:A3:49:47:10:2A:E3:46 X509v3 Authority Key Identifier: keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/pl4G0drpVsiUnTNv0aNJRxAq40Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.17.206.0/23 IPv6: 2001:4bd8:52::/48 Signature Algorithm: sha256WithRSAEncryption 37:3a:1a:d8:e9:e0:45:85:7d:b1:9b:1f:58:c4:00:9b:74:9f: 78:b4:fd:36:4a:56:18:b0:b6:d2:a2:b7:20:ec:23:87:d7:1b: 6e:e0:f8:8c:2b:6f:75:52:0b:22:aa:bf:e7:02:3c:8e:d8:1a: c9:07:33:e6:6b:f6:87:2b:78:c9:04:36:19:a7:5a:64:64:a1: c8:64:f8:b6:8c:ce:93:d3:52:5d:48:89:d9:b4:0c:a1:d4:a5: 09:3e:b6:3b:5b:42:88:97:0d:74:53:e1:6f:c6:c4:b0:cc:e0: c0:13:f0:a7:8a:46:5d:be:5c:bd:47:1f:47:77:a3:6d:08:3e: d2:0c:60:ab:70:b6:ea:f3:4d:70:43:84:cd:4e:b2:81:0a:48: 36:0b:9a:14:ed:8c:c1:31:68:69:8e:8c:8a:d5:63:9f:c1:b2: 9c:22:96:75:2d:3a:10:50:b1:8a:05:0c:9a:c8:df:41:a1:56: 2a:12:23:94:37:6d:65:c8:a1:b3:95:b9:12:5a:e5:59:6e:6d: b0:d8:eb:b8:0d:63:a6:ca:37:93:f6:b5:f5:3f:80:67:b2:b8: ba:63:81:3c:d8:45:5b:c0:3e:e1:15:98:b1:1d:07:73:ec:91: 68:da:dc:f9:45:39:cd:bc:73:28:de:b0:ca:22:fd:a3:d6:6d: e2:e0:26:4f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pT6uOntKiK+mVmSXYt4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDY0NDc2YzJjNDdmNzc4NDc0YTE0ODE2YzFlMDZhNDA4 MTNlNWMwHhcNMjYwMTAyMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjVlMDZkMWRhZTk1NmM4OTQ5ZDMzNmZkMWEzNDk0NzEwMmFlMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D+rCoHHjrwNn/tOex3g0gEgD1kX 59goapm7pv8gkKTkrbRCzk46NXhzCpKWbXawWP8mUxZrW0uQuC/CeS72Q+MTR7if c5MA9jTnRYNlcZaawVbfQxbnd+KL56bUL9mJSFXD8T2F3ynfQs7nn0KW9BQIAzOv cY2M/jjl72UxOABr72FCdkXtwmykhEsGmTlfqwwUJon6sIvO3kDoDDjxWonbsCeO AW4+uhfhIeT6svXP2Bt6tR7cn+XNvJikK+nWAohjw4p8rDwKG5dd+FtYAaRaCKGW q+LD3UaYFRxaLQX1hFFbZthzGlL0no9MTz56vcUV9HN4XFCBRI4edDdvfQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKZeBtHa6VbIlJ0zb9GjSUcQKuNGMB8GA1UdIwQY MBaAFMQGRHbCxH93hHShSBbB4GpAgT5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEt NzQ2Nzc3ZTIxYzViLzEvcGw0RzBkcnBWc2lVblROdjBhTkpSeEFxNDBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEtNzQ2Nzc3ZTIxYzVi LzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQB2RHOMA8E AgACMAkDBwAgAUvYAFIwDQYJKoZIhvcNAQELBQADggEBADc6Gtjp4EWFfbGbH1jE AJt0n3i0/TZKVhiwttKityDsI4fXG27g+Iwrb3VSCyKqv+cCPI7YGskHM+Zr9ocr eMkENhmnWmRkochk+LaMzpPTUl1Iidm0DKHUpQk+tjtbQoiXDXRT4W/GxLDM4MAT 8KeKRl2+XL1HH0d3o20IPtIMYKtwturzTXBDhM1OsoEKSDYLmhTtjMExaGmOjIrV Y5/BspwilnUtOhBQsYoFDJrI30GhVioSI5Q3bWXIobOVuRJa5VlubbDY67gNY6bK N5P2tfU/gGeyuLpjgTzYRVvAPuEVmLEdB3PskWja3PlFOc28cyjesMoi/aPWbeLg Jk8= -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:44 2026 by rpki-client