This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/GHe6f9dWFbQBm0VmFlAmWXuACGA.roa File: GHe6f9dWFbQBm0VmFlAmWXuACGA.roa (raw, json) Hash identifier: 2ngZfOmKkhCy3pa9kAX4rFjELV8t/vSSQl64k8RHqVo= Subject key identifier: 18:77:BA:7F:D7:56:15:B4:01:9B:45:66:16:50:26:59:7B:80:08:60 Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Certificate serial: 019B152A907DC0F6F52AFAF1CE39DEF31BE3 Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/GHe6f9dWFbQBm0VmFlAmWXuACGA.roa Signing time: Sat 13 Dec 2025 00:44:29 +0000 ROA not before: Sat 13 Dec 2025 00:44:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213887 IP address blocks: 95.85.230.0/24 maxlen: 24 95.85.231.0/24 maxlen: 24 95.85.232.0/24 maxlen: 24 95.85.233.0/24 maxlen: 24 95.85.234.0/24 maxlen: 24 95.85.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:2a:90:7d:c0:f6:f5:2a:fa:f1:ce:39:de:f3:1b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Validity Not Before: Dec 13 00:44:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1877ba7fd75615b4019b4566165026597b800860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:11:e9:1e:f0:17:09:43:58:1c:38:5b:75: 44:ab:d8:fc:ec:0c:c7:0a:f3:d6:e3:60:c0:cc:14: 12:36:06:3d:e9:ca:14:4a:41:97:9b:cc:a4:3d:16: 5c:e8:2d:f1:4a:cc:e6:50:32:01:6a:e0:30:9b:d4: 3c:9f:36:49:9b:2b:62:85:48:bf:42:d2:ce:81:f7: 50:50:c2:07:2f:89:1b:62:98:b1:d7:e3:79:1d:76: 79:37:6f:8a:df:45:f5:d9:43:66:56:61:a1:52:c1: 39:0b:65:28:e2:87:5b:30:44:5e:31:0d:f0:3b:15: 58:1f:a0:75:dd:22:d8:ac:43:df:fb:35:a3:f8:76: a1:1a:53:ea:ad:d6:81:df:c4:56:98:a1:0f:e2:05: e3:7e:98:e4:92:10:b5:f8:16:78:55:fc:f3:a3:b7: 10:85:e7:22:40:59:38:e9:90:67:7c:ba:ec:00:92: da:11:51:09:3a:1e:cd:bc:79:26:c5:7d:b6:b9:66: 29:1d:f8:be:fa:16:ef:4d:40:34:89:a4:b3:a1:7f: 01:1e:24:7e:7c:e5:21:4d:86:52:ef:19:fe:80:f5: 4b:87:89:b3:e0:30:6a:6d:7e:fe:d3:be:c3:f7:43: dd:4f:86:d8:ff:fe:7d:3e:46:38:83:61:5c:bc:a7: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:77:BA:7F:D7:56:15:B4:01:9B:45:66:16:50:26:59:7B:80:08:60 X509v3 Authority Key Identifier: keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/GHe6f9dWFbQBm0VmFlAmWXuACGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.230.0-95.85.235.255 Signature Algorithm: sha256WithRSAEncryption 76:86:09:76:2d:0f:93:8f:a5:36:be:55:5b:f5:90:04:52:57: b5:c2:44:7e:be:6c:22:e5:33:ef:fd:fe:d8:4f:d3:01:92:e5: 64:4b:ad:94:84:21:e4:14:93:18:49:d3:3c:bf:2e:ca:e1:88: 20:fe:2a:f2:cb:9a:a3:aa:3e:ff:b4:44:5a:df:d4:6b:41:33: 6c:c9:0e:4f:51:ed:69:df:b8:94:95:af:32:49:62:cd:0e:12: 15:6c:16:5d:fb:b0:d7:1c:8e:8a:57:8a:95:90:c6:39:b5:df: 43:56:89:7e:f9:7b:73:21:bf:f9:56:97:a8:ca:f9:e8:de:c7: b6:d3:ce:30:bd:6f:86:e2:44:49:fe:ba:f8:e1:35:37:03:6c: 90:09:e2:30:b7:76:50:3e:cb:5d:15:13:24:71:0b:be:6c:e0: b7:33:34:b0:70:05:fc:33:0c:c7:2c:58:09:62:00:87:61:19: d3:09:69:2e:49:51:ba:6d:9d:74:7f:09:22:47:63:e8:8c:de: 85:76:fb:d5:c8:4f:f0:99:01:a4:a9:c4:59:e6:91:3b:0d:ca: 9e:de:1a:af:4a:c0:b4:96:ea:1e:36:ae:4e:12:59:18:fb:d1: 0a:5f:77:72:36:17:65:33:49:d1:89:db:f9:96:78:2f:bb:d6: 5d:77:e5:2c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsVKpB9wPb1Kvrxzjne8xvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk M2FlMTEwHhcNMjUxMjEzMDA0NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODc3YmE3ZmQ3NTYxNWI0MDE5YjQ1NjYxNjUwMjY1OTdiODAwODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz38R6R7wFwlDWBw4W3VEq9j87AzH CvPW42DAzBQSNgY96coUSkGXm8ykPRZc6C3xSszmUDIBauAwm9Q8nzZJmytihUi/ QtLOgfdQUMIHL4kbYpix1+N5HXZ5N2+K30X12UNmVmGhUsE5C2Uo4odbMEReMQ3w OxVYH6B13SLYrEPf+zWj+HahGlPqrdaB38RWmKEP4gXjfpjkkhC1+BZ4Vfzzo7cQ heciQFk46ZBnfLrsAJLaEVEJOh7NvHkmxX22uWYpHfi++hbvTUA0iaSzoX8BHiR+ fOUhTYZS7xn+gPVLh4mz4DBqbX7+077D90PdT4bY//59PkY4g2FcvKenSQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBh3un/XVhW0AZtFZhZQJll7gAhgMB8GA1UdIwQY MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt MGY0ZGJiODkwYmQwLzEvR0hlNmY5ZFdGYlFCbTBWbUZsQW1XWHVBQ0dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFfVeYD BAJfVegwDQYJKoZIhvcNAQELBQADggEBAHaGCXYtD5OPpTa+VVv1kARSV7XCRH6+ bCLlM+/9/thP0wGS5WRLrZSEIeQUkxhJ0zy/LsrhiCD+KvLLmqOqPv+0RFrf1GtB M2zJDk9R7WnfuJSVrzJJYs0OEhVsFl37sNccjopXipWQxjm130NWiX75e3Mhv/lW l6jK+ejex7bTzjC9b4biREn+uvjhNTcDbJAJ4jC3dlA+y10VEyRxC75s4LczNLBw BfwzDMcsWAliAIdhGdMJaS5JUbptnXR/CSJHY+iM3oV2+9XIT/CZAaSpxFnmkTsN yp7eGq9KwLSW6h42rk4SWRj70Qpfd3I2F2UzSdGJ2/mWeC+71l135Sw= -----END CERTIFICATE-----Generated at Sat Dec 20 13:50:12 2025 by rpki-client