This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/PLcdq8HBbATb33TrLOZuRDuXEVQ.roa File: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (raw, json) Hash identifier: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk= Subject key identifier: 3C:B7:1D:AB:C1:C1:6C:04:DB:DF:74:EB:2C:E6:6E:44:3B:97:11:54 Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a Certificate serial: 019B783504744D83FA6BDB6A8945B14A00D7 Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/PLcdq8HBbATb33TrLOZuRDuXEVQ.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43957 IP address blocks: 46.245.200.0/21 maxlen: 21 79.170.208.0/21 maxlen: 21 92.61.48.0/21 maxlen: 21 92.61.56.0/22 maxlen: 22 92.63.144.0/20 maxlen: 20 94.102.96.0/20 maxlen: 20 185.31.28.0/22 maxlen: 22 185.52.20.0/22 maxlen: 22 185.93.214.0/23 maxlen: 23 194.50.151.0/24 maxlen: 24 2a00:b220::/32 maxlen: 32 2a02:4140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:04:74:4d:83:fa:6b:db:6a:89:45:b1:4a:00:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cb71dabc1c16c04dbdf74eb2ce66e443b971154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:da:8d:ad:c6:4f:6d:53:ba:d4:eb:e7:b1:7d: 14:90:66:14:9c:e9:ad:b5:f4:23:ea:16:6a:5a:bb: d7:31:3a:e7:8b:58:10:3f:41:71:80:f3:27:0e:25: 0b:6d:e6:4c:8a:d6:d3:05:f1:e1:8e:5b:18:b5:1e: 21:ad:92:75:5e:de:d5:d0:ef:c9:53:fd:7c:3b:de: 01:d6:9d:de:85:2f:48:40:ac:90:ad:f8:e0:fd:41: 06:b8:83:67:2a:99:39:8f:bb:9b:00:44:0a:f4:5e: 03:6e:98:8c:b7:ba:b3:10:f1:18:2f:70:a1:30:f7: c6:a9:ec:6a:9f:98:2d:ef:4c:ce:b3:58:ad:15:ed: 81:ed:4f:44:86:fb:10:af:d6:f4:cc:a4:c9:b8:3d: 65:b2:b6:f4:65:32:49:74:03:0f:6c:a7:c5:03:bc: af:4d:f5:06:b2:a0:1c:35:43:a9:0e:c9:30:cf:ad: db:73:be:19:26:a4:0f:1f:a9:41:85:6c:f0:c3:49: d1:cc:dd:51:7b:f6:da:67:fe:0b:1a:65:f6:f0:cc: 1b:ff:3c:cc:80:a8:cd:e1:f9:df:c5:90:40:9b:d5: bc:7a:f7:d4:f5:3b:36:20:1a:4b:96:4d:49:2b:d9: 39:fc:ed:5d:eb:b7:3c:5a:53:65:b4:82:a5:cc:b6: 61:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B7:1D:AB:C1:C1:6C:04:DB:DF:74:EB:2C:E6:6E:44:3B:97:11:54 X509v3 Authority Key Identifier: keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/PLcdq8HBbATb33TrLOZuRDuXEVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.200.0/21 79.170.208.0/21 92.61.48.0-92.61.59.255 92.63.144.0/20 94.102.96.0/20 185.31.28.0/22 185.52.20.0/22 185.93.214.0/23 194.50.151.0/24 IPv6: 2a00:b220::/32 2a02:4140::/32 Signature Algorithm: sha256WithRSAEncryption 42:3f:5e:a3:fe:f0:a2:d2:ee:38:15:8f:b1:a8:e8:fa:30:f7: 41:6e:15:7c:c6:c2:b4:a8:76:04:aa:56:ef:1d:21:a0:11:01: a5:83:4e:dc:31:27:c8:e7:7d:04:d5:1f:a1:d5:ae:b1:eb:8f: b6:e2:59:7e:6c:de:ef:31:46:43:c2:92:43:ce:d6:1a:86:45: 31:eb:e0:f6:ce:76:a3:56:be:eb:8c:6f:b6:ff:c1:71:4d:fd: 51:84:55:5b:6d:d8:54:38:70:d5:c7:e5:ac:eb:1a:0b:2a:5d: b4:f3:e3:b3:0c:dd:48:3e:e3:75:de:84:f8:e6:07:18:57:47: 66:b6:94:e8:25:2e:7a:90:4d:d0:1e:a8:1f:bd:87:0b:27:f3: 7b:21:16:a0:15:78:09:45:9b:6c:13:06:6c:e7:73:f0:67:13: 38:5e:70:ba:e4:c5:6f:97:36:b6:a9:18:e7:3d:9a:2d:ae:36: 03:53:f2:63:37:5c:68:07:1c:b1:2c:08:2d:47:d9:86:b1:69: db:ef:9d:d2:62:dc:62:5f:a1:59:65:15:15:62:6f:a1:56:50: 63:7e:27:82:ce:6a:16:a5:b0:2d:0b:90:66:01:35:80:5c:51: bf:c2:2d:a9:ea:c7:59:b4:44:61:d0:2a:4a:f8:2e:a8:b9:7d: 2c:41:30:a9 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt4NQR0TYP6a9tqiUWxSgDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMWM4OTk3YTM1NGJjN2Q0ZTVhNjBhOWY0MjQzOGExODJm YTk5OGEwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2I3MWRhYmMxYzE2YzA0ZGJkZjc0ZWIyY2U2NmU0NDNiOTcxMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9qNrcZPbVO61OvnsX0UkGYUnOmt tfQj6hZqWrvXMTrni1gQP0FxgPMnDiULbeZMitbTBfHhjlsYtR4hrZJ1Xt7V0O/J U/18O94B1p3ehS9IQKyQrfjg/UEGuINnKpk5j7ubAEQK9F4DbpiMt7qzEPEYL3Ch MPfGqexqn5gt70zOs1itFe2B7U9EhvsQr9b0zKTJuD1lsrb0ZTJJdAMPbKfFA7yv TfUGsqAcNUOpDskwz63bc74ZJqQPH6lBhWzww0nRzN1Re/baZ/4LGmX28Mwb/zzM gKjN4fnfxZBAm9W8evfU9Ts2IBpLlk1JK9k5/O1d67c8WlNltIKlzLZhtQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFDy3HavBwWwE29906yzmbkQ7lxFUMB8GA1UdIwQY MBaAFPAciZejVLx9TlpgqfQkOKGC+pmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMt YzI3YzRhNjEwYmQzLzEvUExjZHE4SEJiQVRiMzNUckxPWnVSRHVYRVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMtYzI3YzRhNjEwYmQz LzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+AwQDLvXIAwQD T6rQMAwDBARcPTADBAJcPTgDBARcP5ADBAReZmADBAK5HxwDBAK5NBQDBAG5XdYD BADCMpcwFAQCAAIwDgMFACoAsiADBQAqAkFAMA0GCSqGSIb3DQEBCwUAA4IBAQBC P16j/vCi0u44FY+xqOj6MPdBbhV8xsK0qHYEqlbvHSGgEQGlg07cMSfI530E1R+h 1a6x64+24ll+bN7vMUZDwpJDztYahkUx6+D2znajVr7rjG+2/8FxTf1RhFVbbdhU OHDVx+Ws6xoLKl208+OzDN1IPuN13oT45gcYV0dmtpToJS56kE3QHqgfvYcLJ/N7 IRagFXgJRZtsEwZs53PwZxM4XnC65MVvlza2qRjnPZotrjYDU/JjN1xoBxyxLAgt R9mGsWnb753SYtxiX6FZZRUVYm+hVlBjfieCzmoWpbAtC5BmATWAXFG/wi2p6sdZ tERh0CpK+C6ouX0sQTCp -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:43 2026 by rpki-client