This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/VLujB7yFiHinNLFQrBnwY5M5C5I.roa File: VLujB7yFiHinNLFQrBnwY5M5C5I.roa (raw, json) Hash identifier: CRa7Mo3U10BpG0ciSJutDorcHnsSRI8g2W8zd6kWfdk= Subject key identifier: 54:BB:A3:07:BC:85:88:78:A7:34:B1:50:AC:19:F0:63:93:39:0B:92 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019A9BDB163083C4DBEEDC4DB7D9CE243C6A Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/VLujB7yFiHinNLFQrBnwY5M5C5I.roa Signing time: Wed 19 Nov 2025 11:23:37 +0000 ROA not before: Wed 19 Nov 2025 11:23:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 86.110.46.0/24 maxlen: 24 86.110.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:db:16:30:83:c4:db:ee:dc:4d:b7:d9:ce:24:3c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Nov 19 11:23:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54bba307bc858878a734b150ac19f06393390b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:b8:34:15:0b:17:c0:4d:72:8b:a0:09:d1: d4:fe:03:6e:16:3b:1b:db:29:9b:83:5d:5b:6c:61: 5e:25:a4:9a:dd:81:6e:d0:ab:79:62:34:ad:2a:a7: 64:48:aa:86:f1:e9:2f:f3:5a:8e:de:ab:9a:42:a1: f2:16:45:d3:8d:54:45:69:74:f9:75:58:d7:14:a4: 1c:be:49:81:59:da:30:f0:67:4c:f0:fe:03:8f:c2: 94:c3:13:fd:f7:42:01:34:47:af:4f:f0:de:21:bc: a3:e7:12:1e:ef:a0:b2:1d:39:94:54:9d:39:d8:72: ba:20:56:39:9d:66:00:80:f2:43:29:48:d5:11:67: 1d:be:66:e5:2d:8f:d6:c1:9f:a2:5a:73:da:1b:dc: 36:a4:5d:9e:ff:ac:97:7f:9f:9a:2f:80:19:b5:ba: ee:c6:7c:83:40:58:22:03:65:e2:74:ab:6d:43:d0: 83:47:a9:a8:ca:b9:26:c0:ef:48:9b:bc:52:6e:0e: 14:01:53:1d:e1:6a:12:71:68:a6:a1:dd:aa:0c:8a: ff:86:fc:f6:4e:d9:55:70:cf:ed:96:82:c2:8d:d0: ba:b5:34:5c:ef:b6:a8:14:cf:b4:d1:87:18:a6:92: 6e:8d:7f:34:68:d3:35:93:54:63:33:33:3f:08:b2: 40:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BB:A3:07:BC:85:88:78:A7:34:B1:50:AC:19:F0:63:93:39:0B:92 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/VLujB7yFiHinNLFQrBnwY5M5C5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.46.0/24 86.110.52.0/24 Signature Algorithm: sha256WithRSAEncryption 24:56:ff:7b:6f:2e:a0:c8:79:42:b9:29:ae:fe:57:69:a4:a2: e0:5d:b1:08:e7:03:16:09:27:41:7d:84:81:9f:cc:87:2f:0a: 99:a3:43:ac:5a:a7:f1:f9:0b:b1:63:cb:d9:e6:95:ae:53:3d: 84:f1:59:ea:2f:62:e0:66:36:bd:73:5c:78:24:a2:9f:cd:e7: 1b:c7:71:a2:47:ca:d1:e3:f3:2b:98:e6:0d:67:b9:f6:09:5e: 52:dc:5b:91:28:75:82:e7:99:3b:dc:9b:df:64:e3:47:14:81: 79:e4:d4:52:c7:6e:00:e0:df:bc:ce:82:ea:1f:84:75:de:cd: a3:08:74:a7:c2:7e:6e:f9:fc:58:5d:60:3e:95:c1:90:7e:6d: d9:c9:e0:85:8e:35:22:85:a4:d4:e5:a1:94:fb:b4:a9:71:d1: 82:b5:69:b8:45:e8:60:0c:ab:11:de:b5:1c:37:d8:91:f9:d9: ae:00:62:b1:f8:df:f5:67:b4:de:c0:4c:e2:66:8b:80:d4:bb: c5:8e:c7:9c:4f:15:97:23:3b:e9:df:50:e3:6b:3e:70:18:33: ba:6e:54:15:e6:11:45:ee:c0:b9:fb:24:9a:74:3f:c1:3a:33: 89:21:ca:09:4e:c6:d4:f9:b1:fe:f3:79:7b:40:50:e6:b2:2b: c8:16:eb:3f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqb2xYwg8Tb7txNt9nOJDxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUxMTE5MTEyMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGJiYTMwN2JjODU4ODc4YTczNGIxNTBhYzE5ZjA2MzkzMzkwYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHy4NBULF8BNcougCdHU/gNuFjsb 2ymbg11bbGFeJaSa3YFu0Kt5YjStKqdkSKqG8ekv81qO3quaQqHyFkXTjVRFaXT5 dVjXFKQcvkmBWdow8GdM8P4Dj8KUwxP990IBNEevT/DeIbyj5xIe76CyHTmUVJ05 2HK6IFY5nWYAgPJDKUjVEWcdvmblLY/WwZ+iWnPaG9w2pF2e/6yXf5+aL4AZtbru xnyDQFgiA2XidKttQ9CDR6moyrkmwO9Im7xSbg4UAVMd4WoScWimod2qDIr/hvz2 TtlVcM/tloLCjdC6tTRc77aoFM+00YcYppJujX80aNM1k1RjMzM/CLJAzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFS7owe8hYh4pzSxUKwZ8GOTOQuSMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvVkx1akI3eUZpSGluTkxGUXJCbndZNU01QzVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVm4uAwQA Vm40MA0GCSqGSIb3DQEBCwUAA4IBAQAkVv97by6gyHlCuSmu/ldppKLgXbEI5wMW CSdBfYSBn8yHLwqZo0OsWqfx+QuxY8vZ5pWuUz2E8VnqL2LgZja9c1x4JKKfzecb x3GiR8rR4/MrmOYNZ7n2CV5S3FuRKHWC55k73JvfZONHFIF55NRSx24A4N+8zoLq H4R13s2jCHSnwn5u+fxYXWA+lcGQfm3ZyeCFjjUihaTU5aGU+7SpcdGCtWm4Rehg DKsR3rUcN9iR+dmuAGKx+N/1Z7TewEziZouA1LvFjsecTxWXIzvp31Djaz5wGDO6 blQV5hFF7sC5+ySadD/BOjOJIcoJTsbU+bH+83l7QFDmsivIFus/ -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:39 2025 by rpki-client