This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/plT9sGpYwtx51hS52NQppAnrW3E.roa File: plT9sGpYwtx51hS52NQppAnrW3E.roa (raw, json) Hash identifier: s6yoUoG4+g3SpuQlWtBKVieuVvU6+S/6oM2dAh1J0BI= Subject key identifier: A6:54:FD:B0:6A:58:C2:DC:79:D6:14:B9:D8:D4:29:A4:09:EB:5B:71 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B16E782A7EEE0CC0C18AD6554FA6B1B56 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/plT9sGpYwtx51hS52NQppAnrW3E.roa Signing time: Sat 13 Dec 2025 08:50:29 +0000 ROA not before: Sat 13 Dec 2025 08:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34984 IP address blocks: 84.17.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:e7:82:a7:ee:e0:cc:0c:18:ad:65:54:fa:6b:1b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Dec 13 08:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a654fdb06a58c2dc79d614b9d8d429a409eb5b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:6f:39:6f:87:38:24:be:29:05:01:46:49: 63:c1:1e:f0:a7:ca:98:94:89:1b:21:dc:14:5d:e7: 9c:34:76:b6:36:20:47:0a:55:e8:09:c1:69:43:7b: 65:33:f1:15:ef:76:78:8f:77:7c:62:76:29:96:8b: c8:73:1c:d6:a6:57:99:13:2b:ec:5e:26:e4:cc:1b: 57:b7:de:d9:76:51:a4:09:60:ea:d1:64:62:17:09: 83:62:9a:42:4f:32:07:8d:b8:6c:25:f4:a5:6b:1d: bf:09:7b:ea:4c:a5:fe:23:5c:d3:4f:43:51:3e:c7: 76:a2:64:c8:78:4e:95:66:95:34:f3:b7:55:33:d7: e3:b9:1d:23:72:9f:c3:ed:3d:13:70:62:5a:bb:6f: 35:db:33:61:7a:60:32:ac:f6:6c:8c:4b:07:f1:9d: 7d:67:ec:b0:8a:61:e2:71:fa:99:90:c5:7f:b4:af: b9:84:46:f0:53:9f:f5:9a:48:9d:1a:d4:68:52:37: 48:5b:d3:6e:ed:8d:9a:c5:60:e5:b9:f7:f7:45:7f: 67:45:70:13:f0:29:a6:8f:e1:2f:78:a1:b3:4e:fb: 5a:71:71:1c:d9:df:c2:7f:0e:7f:d9:e2:41:a8:62: f8:b4:48:1c:ac:55:a2:8d:09:59:ba:d0:fa:95:61: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:54:FD:B0:6A:58:C2:DC:79:D6:14:B9:D8:D4:29:A4:09:EB:5B:71 X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/plT9sGpYwtx51hS52NQppAnrW3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.17.66.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:b6:96:78:6e:e1:0c:d2:b7:38:7d:68:b7:9c:a8:9a:6e:87: 2d:d0:bc:c6:ed:5b:8d:75:e1:b0:51:1b:58:a3:00:22:83:4a: 4e:d3:42:3d:a4:7b:aa:49:b2:aa:1c:7e:1f:56:91:c7:9b:61: d2:38:1f:fe:11:66:69:ca:11:05:39:44:01:b8:26:e7:67:36: e6:b6:60:7d:87:bd:bf:b2:da:75:54:8c:af:10:2f:76:8a:e3: 8a:17:a1:e8:5c:98:8a:c6:7a:b4:43:3e:a7:de:f4:32:68:11: 94:26:99:58:17:37:84:3c:9f:fa:f9:f6:9d:aa:7c:3e:d5:c8: 36:6f:9c:c0:7f:6b:bd:1a:77:fd:95:8c:03:2a:7b:24:f6:b0: 9b:a2:57:ff:58:4d:ed:19:a4:ae:6f:73:b8:1a:8f:09:f4:08: da:50:82:6a:9a:9c:64:0e:7d:5e:16:db:8e:48:78:00:ff:e8: c7:e6:db:4a:32:c5:2d:1b:95:ac:59:e8:ac:62:58:54:f3:81: 15:f4:94:77:0d:1d:a5:09:25:20:c6:82:5b:42:0a:9a:e9:43: 6e:90:93:6c:6e:d9:8b:4e:ac:87:f6:3e:21:4c:81:9b:23:f4: 0b:48:30:8a:17:b7:e4:ff:71:42:0a:58:d0:2d:7b:d2:08:7b: 08:47:12:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsW54Kn7uDMDBitZVT6axtWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjUxMjEzMDg1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjU0ZmRiMDZhNThjMmRjNzlkNjE0YjlkOGQ0MjlhNDA5ZWI1YjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5hvOW+HOCS+KQUBRkljwR7wp8qY lIkbIdwUXeecNHa2NiBHClXoCcFpQ3tlM/EV73Z4j3d8YnYplovIcxzWpleZEyvs XibkzBtXt97ZdlGkCWDq0WRiFwmDYppCTzIHjbhsJfSlax2/CXvqTKX+I1zTT0NR Psd2omTIeE6VZpU087dVM9fjuR0jcp/D7T0TcGJau2812zNhemAyrPZsjEsH8Z19 Z+ywimHicfqZkMV/tK+5hEbwU5/1mkidGtRoUjdIW9Nu7Y2axWDluff3RX9nRXAT 8Cmmj+EveKGzTvtacXEc2d/Cfw5/2eJBqGL4tEgcrFWijQlZutD6lWEwNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKZU/bBqWMLcedYUudjUKaQJ61txMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvcGxUOXNHcFl3dHg1MWhTNTJOUXBwQW5yVzNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVBFCMA0G CSqGSIb3DQEBCwUAA4IBAQActpZ4buEM0rc4fWi3nKiaboct0LzG7VuNdeGwURtY owAig0pO00I9pHuqSbKqHH4fVpHHm2HSOB/+EWZpyhEFOUQBuCbnZzbmtmB9h72/ stp1VIyvEC92iuOKF6HoXJiKxnq0Qz6n3vQyaBGUJplYFzeEPJ/6+fadqnw+1cg2 b5zAf2u9Gnf9lYwDKnsk9rCbolf/WE3tGaSub3O4Go8J9AjaUIJqmpxkDn1eFtuO SHgA/+jH5ttKMsUtG5WsWeisYlhU84EV9JR3DR2lCSUgxoJbQgqa6UNukJNsbtmL TqyH9j4hTIGbI/QLSDCKF7fk/3FCCljQLXvSCHsIRxKT -----END CERTIFICATE-----Generated at Thu Dec 18 00:20:09 2025 by rpki-client