This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/CfTlDdDd9fUccs84Vtim4lBdQVM.roa File: CfTlDdDd9fUccs84Vtim4lBdQVM.roa (raw, json) Hash identifier: AMCgXBD3sCwaxrXVtCm5XzDfwDDG4bLnZrmvNZvKg2U= Subject key identifier: 09:F4:E5:0D:D0:DD:F5:F5:1C:72:CF:38:56:D8:A6:E2:50:5D:41:53 Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Certificate serial: 019AC68DB9AC7F721095EDFF46EAD51249A0 Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/CfTlDdDd9fUccs84Vtim4lBdQVM.roa Signing time: Thu 27 Nov 2025 18:22:48 +0000 ROA not before: Thu 27 Nov 2025 18:22:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213887 IP address blocks: 95.85.230.0/24 maxlen: 24 95.85.231.0/24 maxlen: 24 95.85.232.0/24 maxlen: 24 95.85.233.0/24 maxlen: 24 95.85.234.0/24 maxlen: 24 95.85.235.0/24 maxlen: 24 95.85.236.0/24 maxlen: 24 95.85.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:8d:b9:ac:7f:72:10:95:ed:ff:46:ea:d5:12:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Validity Not Before: Nov 27 18:22:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=09f4e50dd0ddf5f51c72cf3856d8a6e2505d4153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:db:e4:50:c8:09:d2:6a:c1:e1:e3:4e:49:b2: 11:cc:0c:92:a3:83:a9:11:e6:33:70:ac:c7:10:9e: e3:a6:ad:56:c9:13:f8:a7:4b:0e:bf:be:04:68:27: 9d:0c:ab:4a:7b:18:4f:e6:fc:3b:7a:fd:ef:42:01: 40:e2:80:d3:95:79:b2:87:c7:87:17:9c:a9:d2:ae: 38:11:08:36:d7:c1:9a:b2:1b:8e:02:73:4a:bb:f2: c4:79:24:f4:2e:59:1d:c0:a4:3f:91:6f:4f:f5:a2: 09:8d:82:7e:68:0d:44:4c:46:bf:c1:04:ee:ff:e4: c0:6f:69:75:52:67:13:1c:69:30:42:8a:bb:94:8c: b5:6f:0f:b3:e1:89:b2:bd:c2:d8:f0:14:62:02:0d: 6a:6a:a2:b0:f0:92:34:ba:1b:dd:c7:88:ec:9a:dd: 5b:34:9a:2c:fc:d5:37:fb:3b:a4:6c:7d:0a:12:8c: 4b:97:d4:80:b8:b4:c9:cd:9a:ea:26:83:15:ca:f4: 97:3e:99:ee:85:f8:c7:64:8a:12:09:af:e5:d8:9c: 27:0d:f5:cc:d8:75:c6:5d:f5:05:e5:d4:ef:fe:98: 9f:2a:0e:ac:cb:c5:83:b0:b3:c3:6d:9a:29:05:c8: 9f:f3:2a:bb:8c:72:b6:eb:df:7e:66:ef:5c:74:57: 8a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F4:E5:0D:D0:DD:F5:F5:1C:72:CF:38:56:D8:A6:E2:50:5D:41:53 X509v3 Authority Key Identifier: keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/CfTlDdDd9fUccs84Vtim4lBdQVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.230.0-95.85.237.255 Signature Algorithm: sha256WithRSAEncryption 98:6f:98:79:09:a9:f2:e3:9a:6f:93:d4:cd:ee:8f:89:a6:ea: e1:72:83:04:36:01:22:04:f5:ea:09:9e:6d:57:47:db:82:ee: 06:b6:76:db:41:eb:4e:f8:04:b7:ea:b7:2c:db:4a:a3:dc:48: 4e:86:bc:e0:a9:86:96:71:84:a4:b7:99:fb:39:68:11:0a:bb: 51:76:ba:8c:dd:04:06:50:36:bf:60:ef:4f:2b:54:f3:48:c9: ac:04:8c:bf:9b:2e:a9:40:d6:e9:5d:f9:e0:38:fd:e5:f4:de: 6b:4c:ca:5d:60:22:60:77:ee:1f:03:1d:79:16:a6:4b:3f:f5: 54:e6:84:51:ff:a8:f0:3d:81:c6:f1:8c:e9:46:c6:99:25:4e: e6:e6:a7:a0:92:10:d1:c4:b0:87:9f:b4:66:dc:c1:59:ac:a2: bf:06:c1:5a:6d:6c:86:dc:43:d0:e9:39:06:a6:ea:e1:e9:91: dc:29:80:55:2a:41:5c:49:73:b5:b1:61:0e:a1:fb:55:ae:25: 3a:41:40:86:d2:79:00:c7:e8:67:b9:f8:5d:c6:5a:9c:9a:72: 97:47:a0:01:1c:cc:f0:04:a3:2f:37:fc:68:e8:7a:42:6d:db: 9d:aa:53:4c:f5:f0:49:9d:5f:79:0c:e9:db:e5:d1:0b:db:77: 57:e0:a1:18 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZrGjbmsf3IQle3/RurVEkmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk M2FlMTEwHhcNMjUxMTI3MTgyMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWY0ZTUwZGQwZGRmNWY1MWM3MmNmMzg1NmQ4YTZlMjUwNWQ0MTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49vkUMgJ0mrB4eNOSbIRzAySo4Op EeYzcKzHEJ7jpq1WyRP4p0sOv74EaCedDKtKexhP5vw7ev3vQgFA4oDTlXmyh8eH F5yp0q44EQg218GashuOAnNKu/LEeST0LlkdwKQ/kW9P9aIJjYJ+aA1ETEa/wQTu /+TAb2l1UmcTHGkwQoq7lIy1bw+z4YmyvcLY8BRiAg1qaqKw8JI0uhvdx4jsmt1b NJos/NU3+zukbH0KEoxLl9SAuLTJzZrqJoMVyvSXPpnuhfjHZIoSCa/l2JwnDfXM 2HXGXfUF5dTv/pifKg6sy8WDsLPDbZopBcif8yq7jHK2699+Zu9cdFeKpwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAn05Q3Q3fX1HHLPOFbYpuJQXUFTMB8GA1UdIwQY MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt MGY0ZGJiODkwYmQwLzEvQ2ZUbERkRGQ5ZlVjY3M4NFZ0aW00bEJkUVZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFfVeYD BAFfVewwDQYJKoZIhvcNAQELBQADggEBAJhvmHkJqfLjmm+T1M3uj4mm6uFygwQ2 ASIE9eoJnm1XR9uC7ga2dttB6074BLfqtyzbSqPcSE6GvOCphpZxhKS3mfs5aBEK u1F2uozdBAZQNr9g708rVPNIyawEjL+bLqlA1uld+eA4/eX03mtMyl1gImB37h8D HXkWpks/9VTmhFH/qPA9gcbxjOlGxpklTubmp6CSENHEsIeftGbcwVmsor8GwVpt bIbcQ9DpOQam6uHpkdwpgFUqQVxJc7WxYQ6h+1WuJTpBQIbSeQDH6Ge5+F3GWpya cpdHoAEczPAEoy83/GjoekJt252qU0z18EmdX3kM6dvl0Qvbd1fgoRg= -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:03 2025 by rpki-client