This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/VL-lnxlE6fflxqRRlw7b9MCnGvo.roa File: VL-lnxlE6fflxqRRlw7b9MCnGvo.roa (raw, json) Hash identifier: GtOH60oIJtJHnm++7YABJtPUhpfnGJz3iJ4jvFL6ZBk= Subject key identifier: 54:BF:A5:9F:19:44:E9:F7:E5:C6:A4:51:97:0E:DB:F4:C0:A7:1A:FA Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8 Certificate serial: 019C046F04DCD0214348C208E8A3F42FAEF9 Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/VL-lnxlE6fflxqRRlw7b9MCnGvo.roa Signing time: Wed 28 Jan 2026 11:48:30 +0000 ROA not before: Wed 28 Jan 2026 11:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208570 IP address blocks: 87.236.149.0/24 maxlen: 24 91.217.133.0/24 maxlen: 24 195.69.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:6f:04:dc:d0:21:43:48:c2:08:e8:a3:f4:2f:ae:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8 Validity Not Before: Jan 28 11:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54bfa59f1944e9f7e5c6a451970edbf4c0a71afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e8:a6:d2:5d:fa:6b:26:01:df:e6:b2:f2:07: 9e:a8:90:2b:a6:5c:4e:2f:67:0c:59:ee:7f:61:c6: 36:ec:ac:be:c7:8f:d9:d5:d9:09:37:f2:79:42:1a: ce:40:7e:ec:f4:6a:9a:0e:1f:90:81:8b:5e:f8:ab: 3a:4a:c0:49:b8:59:fc:6e:a7:4c:96:38:30:be:d5: 3e:15:13:67:4e:60:dc:60:9d:a2:c6:8c:a7:bc:c3: 25:5f:98:10:ad:1b:e9:07:bf:c2:a3:39:80:57:87: 47:77:a6:f9:08:8c:29:db:15:39:71:07:65:98:cd: 88:01:5c:9b:3b:29:7e:44:a5:0a:90:d0:42:05:0b: 96:d9:35:76:f2:ef:2a:0f:72:e3:92:88:d9:68:53: 05:02:79:f7:73:7d:a4:bf:ef:39:9a:14:93:85:59: 2e:9c:c2:f3:46:05:52:96:00:16:fe:97:65:1d:31: 2f:df:f2:0a:cc:34:0b:8f:be:91:8c:6f:4f:0d:ea: 6a:64:dd:94:ba:5f:ba:7a:98:26:15:c3:81:89:fe: 3c:8f:92:9a:bf:2c:b8:dc:11:87:58:cb:cf:e2:09: 26:b2:13:53:17:e5:fb:1a:10:74:3f:f3:93:2a:e9: f1:8d:3d:1e:c7:3c:69:f6:59:4b:8c:a2:5b:f2:65: a8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BF:A5:9F:19:44:E9:F7:E5:C6:A4:51:97:0E:DB:F4:C0:A7:1A:FA X509v3 Authority Key Identifier: keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/VL-lnxlE6fflxqRRlw7b9MCnGvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.149.0/24 91.217.133.0/24 195.69.228.0/24 Signature Algorithm: sha256WithRSAEncryption 48:ed:e6:c6:98:bf:68:dd:76:ab:b1:8d:4a:09:33:5f:5f:98: 46:45:18:55:7b:94:ea:90:60:02:d9:e3:77:63:f8:bc:a3:9a: 25:0b:44:a5:61:a5:d0:6b:8b:74:81:cc:13:e6:64:0a:a1:98: dc:0b:af:26:03:89:73:6b:27:51:60:58:71:23:79:6b:42:5b: d3:04:40:ce:79:e4:45:e1:83:d0:56:c4:d9:d9:b0:d6:be:43: 85:e2:1c:02:9d:03:d0:57:9b:8a:47:13:c7:6d:84:1d:e2:dd: bc:51:53:cd:d8:62:61:0f:f1:7d:dc:fa:ca:6c:cb:e0:61:87: 70:55:f3:72:8b:e9:41:63:ba:93:ed:9f:36:04:05:65:7f:f8: 0c:51:98:7a:7f:9b:6d:08:2f:25:a2:12:0a:a2:e1:8c:72:f6: 86:d0:cc:5f:19:3c:e6:d6:47:92:c6:e8:31:bd:14:d1:88:b7: 1b:e3:cc:0b:3a:03:6e:00:52:fa:d3:29:14:f2:63:8f:c8:6b: 8c:23:5c:c0:51:d0:71:e7:80:3f:6c:8f:4d:7a:8e:aa:10:8b: 58:6f:e5:b5:4b:08:6b:66:4a:d8:20:c7:5a:d5:e5:48:c7:ff: 6c:b7:66:78:44:8c:49:b4:1f:89:88:ac:e7:ad:32:b0:be:e8: c3:b2:64:5c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwEbwTc0CFDSMII6KP0L675MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl MTQ2YTgwHhcNMjYwMTI4MTE0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGJmYTU5ZjE5NDRlOWY3ZTVjNmE0NTE5NzBlZGJmNGMwYTcxYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquim0l36ayYB3+ay8geeqJArplxO L2cMWe5/YcY27Ky+x4/Z1dkJN/J5QhrOQH7s9GqaDh+QgYte+Ks6SsBJuFn8bqdM ljgwvtU+FRNnTmDcYJ2ixoynvMMlX5gQrRvpB7/CozmAV4dHd6b5CIwp2xU5cQdl mM2IAVybOyl+RKUKkNBCBQuW2TV28u8qD3LjkojZaFMFAnn3c32kv+85mhSThVku nMLzRgVSlgAW/pdlHTEv3/IKzDQLj76RjG9PDepqZN2Uul+6epgmFcOBif48j5Ka vyy43BGHWMvP4gkmshNTF+X7GhB0P/OTKunxjT0exzxp9llLjKJb8mWocwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFS/pZ8ZROn35cakUZcO2/TApxr6MB8GA1UdIwQY MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt ODgyNmU4NzdkMTQzLzEvVkwtbG54bEU2ZmZseHFSUmx3N2I5TUNuR3ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV+yVAwQA W9mFAwQAw0XkMA0GCSqGSIb3DQEBCwUAA4IBAQBI7ebGmL9o3XarsY1KCTNfX5hG RRhVe5TqkGAC2eN3Y/i8o5olC0SlYaXQa4t0gcwT5mQKoZjcC68mA4lzaydRYFhx I3lrQlvTBEDOeeRF4YPQVsTZ2bDWvkOF4hwCnQPQV5uKRxPHbYQd4t28UVPN2GJh D/F93PrKbMvgYYdwVfNyi+lBY7qT7Z82BAVlf/gMUZh6f5ttCC8lohIKouGMcvaG 0MxfGTzm1keSxugxvRTRiLcb48wLOgNuAFL60ykU8mOPyGuMI1zAUdBx54A/bI9N eo6qEItYb+W1SwhrZkrYIMda1eVIx/9st2Z4RIxJtB+JiKznrTKwvujDsmRc -----END CERTIFICATE-----Generated at Wed Jan 28 23:43:49 2026 by rpki-client