This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/vXWQiVlj8bRLEl6GEqOXSiDpftY.roa File: vXWQiVlj8bRLEl6GEqOXSiDpftY.roa (raw, json) Hash identifier: uGw+AebdlHNkgG6wGO/aqpLovyyukr8sKcMS9tjTpms= Subject key identifier: BD:75:90:89:59:63:F1:B4:4B:12:5E:86:12:A3:97:4A:20:E9:7E:D6 Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Certificate serial: 019B797E0F024C1263523EBD27FB26F4A332 Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/vXWQiVlj8bRLEl6GEqOXSiDpftY.roa Signing time: Thu 01 Jan 2026 12:17:43 +0000 ROA not before: Thu 01 Jan 2026 12:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216246 IP address blocks: 95.85.224.0/24 maxlen: 24 95.85.225.0/24 maxlen: 24 95.85.226.0/24 maxlen: 24 95.85.227.0/24 maxlen: 24 95.85.228.0/24 maxlen: 24 95.85.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0f:02:4c:12:63:52:3e:bd:27:fb:26:f4:a3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Validity Not Before: Jan 1 12:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd7590895963f1b44b125e8612a3974a20e97ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f0:11:fd:8c:5b:9f:40:d5:aa:07:bb:54:07: 17:db:fe:99:a0:1b:ea:f1:c5:a6:d0:2c:e1:e0:ea: 8b:10:4c:fe:67:6c:da:fb:67:33:e1:b7:41:be:c0: 6e:ab:ef:e7:29:96:0c:eb:33:4b:34:c1:e4:24:f4: da:c2:99:40:e6:8b:f8:a6:3a:4c:c6:01:3a:94:46: 8f:a1:c1:5b:8b:a4:74:8d:93:52:d4:33:4e:58:e2: 85:fb:63:27:7e:9d:6d:62:9d:3e:c8:82:e4:15:27: ce:5f:ce:99:3e:c6:63:5f:34:66:5d:9b:2c:95:a1: 41:60:24:dc:cf:3b:bb:01:06:cf:09:81:f4:62:71: de:50:8f:d1:74:e4:bc:27:25:f0:ce:77:97:03:70: 30:1f:4f:32:c5:d6:36:53:14:56:6c:fc:5d:a7:39: 7d:95:53:2b:9c:1b:be:ce:81:cf:0c:b9:07:13:4c: bb:94:17:8d:46:d7:f0:3f:60:88:56:d0:2d:55:59: e7:d8:78:04:02:fd:a1:47:36:75:e6:67:07:63:f1: 92:e2:11:da:f1:de:c6:ad:fa:a6:86:dc:1d:e1:51: 1d:3a:80:99:c5:b3:68:7c:20:af:0f:2f:0e:f0:c4: 9d:62:d9:e2:ed:81:d8:c0:8f:4c:33:8f:ce:f3:81: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:75:90:89:59:63:F1:B4:4B:12:5E:86:12:A3:97:4A:20:E9:7E:D6 X509v3 Authority Key Identifier: keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/vXWQiVlj8bRLEl6GEqOXSiDpftY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.224.0-95.85.229.255 Signature Algorithm: sha256WithRSAEncryption 72:fc:24:b8:5e:4b:09:53:06:2f:62:47:82:ce:32:79:8e:61: 3c:37:8b:87:e5:48:e6:bc:d9:b1:c7:69:54:fd:cf:20:c8:f1: 06:8a:8f:75:15:fe:29:b7:1d:52:06:60:3e:a3:1f:96:64:37: bc:50:92:32:b9:e1:10:03:32:2b:e4:6a:18:cd:0b:29:49:0e: 2b:b2:9b:29:66:35:9d:10:7d:52:fc:69:fc:cc:06:55:c4:27: c6:4d:4f:16:10:f5:3d:0d:f5:b4:78:73:84:23:20:15:d8:13: c6:52:f4:86:7e:c0:ed:e4:86:e3:ea:56:55:39:66:e4:80:99: c0:f3:7c:a3:19:4a:cd:a4:95:f1:8d:9f:22:ca:b9:c2:5e:9b: d0:ae:2a:a5:6e:a5:04:d1:bb:d0:30:c1:25:16:ad:3d:3f:70: ee:63:18:56:15:c2:cc:6e:56:c7:fe:2c:99:ce:07:74:6f:85: 96:75:0d:c1:4d:b7:17:9d:62:be:06:b3:ef:dd:89:01:22:23: 85:16:17:5b:cd:61:96:70:60:c8:cb:0b:e0:e1:bf:2c:0f:8a: 4c:03:71:ca:d7:64:dd:bb:de:ec:dc:3c:33:0f:f5:f1:c2:08: 5a:81:d9:9e:65:dd:aa:67:56:93:a6:bc:bc:c9:5e:46:fa:21: 15:7e:df:2c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fg8CTBJjUj69J/sm9KMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk M2FlMTEwHhcNMjYwMTAxMTIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDc1OTA4OTU5NjNmMWI0NGIxMjVlODYxMmEzOTc0YTIwZTk3ZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vAR/Yxbn0DVqge7VAcX2/6ZoBvq 8cWm0Czh4OqLEEz+Z2za+2cz4bdBvsBuq+/nKZYM6zNLNMHkJPTawplA5ov4pjpM xgE6lEaPocFbi6R0jZNS1DNOWOKF+2Mnfp1tYp0+yILkFSfOX86ZPsZjXzRmXZss laFBYCTczzu7AQbPCYH0YnHeUI/RdOS8JyXwzneXA3AwH08yxdY2UxRWbPxdpzl9 lVMrnBu+zoHPDLkHE0y7lBeNRtfwP2CIVtAtVVnn2HgEAv2hRzZ15mcHY/GS4hHa 8d7Grfqmhtwd4VEdOoCZxbNofCCvDy8O8MSdYtni7YHYwI9MM4/O84FtuwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFL11kIlZY/G0SxJehhKjl0og6X7WMB8GA1UdIwQY MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt MGY0ZGJiODkwYmQwLzEvdlhXUWlWbGo4YlJMRWw2R0VxT1hTaURwZnRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVfVeAD BAFfVeQwDQYJKoZIhvcNAQELBQADggEBAHL8JLheSwlTBi9iR4LOMnmOYTw3i4fl SOa82bHHaVT9zyDI8QaKj3UV/im3HVIGYD6jH5ZkN7xQkjK54RADMivkahjNCylJ DiuymylmNZ0QfVL8afzMBlXEJ8ZNTxYQ9T0N9bR4c4QjIBXYE8ZS9IZ+wO3khuPq VlU5ZuSAmcDzfKMZSs2klfGNnyLKucJem9CuKqVupQTRu9AwwSUWrT0/cO5jGFYV wsxuVsf+LJnOB3RvhZZ1DcFNtxedYr4Gs+/diQEiI4UWF1vNYZZwYMjLC+DhvywP ikwDccrXZN273uzcPDMP9fHCCFqB2Z5l3apnVpOmvLzJXkb6IRV+3yw= -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:49 2026 by rpki-client