This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/D0C23jVYIlHI4wry1GPahkZ5S3s.roa File: D0C23jVYIlHI4wry1GPahkZ5S3s.roa (raw, json) Hash identifier: bkCQ9M49akDV1H+PJXsZ7D5k+3z0Ob4Hx/rpHuXFPPY= Subject key identifier: 0F:40:B6:DE:35:58:22:51:C8:E3:0A:F2:D4:63:DA:86:46:79:4B:7B Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Certificate serial: 019AAD75E2FF234E2566FA53630C5E4C2320 Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/D0C23jVYIlHI4wry1GPahkZ5S3s.roa Signing time: Sat 22 Nov 2025 21:26:15 +0000 ROA not before: Sat 22 Nov 2025 21:26:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214891 IP address blocks: 95.85.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:75:e2:ff:23:4e:25:66:fa:53:63:0c:5e:4c:23:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Validity Not Before: Nov 22 21:26:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0f40b6de35582251c8e30af2d463da8646794b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:1a:33:8e:8d:9c:4d:ce:e0:68:96:71:7d: 42:d5:67:d8:64:26:9b:23:c2:65:d4:d8:c4:cd:0a: 68:0a:6d:64:e4:c8:37:87:06:ec:03:4e:4d:19:6a: 63:0f:06:5d:fa:81:a5:34:88:1a:ab:90:c8:23:76: d7:01:9e:73:2e:f1:bf:bb:48:eb:46:8e:d7:e5:cf: fa:9f:d9:66:84:bd:28:eb:99:39:8a:59:de:d6:cd: e9:3f:85:2c:96:4d:10:b0:df:8b:07:c2:bd:43:06: 1e:97:c8:9a:af:cb:c4:9d:fb:8a:59:9c:f8:2f:35: cd:14:7c:b4:2e:82:40:db:35:09:df:2d:18:12:5f: cb:30:08:b8:f6:2f:84:17:5e:8e:52:f2:7f:db:1b: fe:77:25:58:41:bf:91:3b:ba:c2:f0:b8:b4:30:fb: 3a:ef:2b:54:96:ab:0e:03:8b:9c:0c:22:09:d0:5d: cf:e8:b3:ec:f8:99:99:d7:cd:bc:c5:24:5a:47:c1: 62:90:06:1e:df:7f:b3:16:c5:57:0d:a6:45:9f:80: 1b:f3:5f:96:ac:d4:70:b7:7d:ff:c0:6f:b4:52:ec: ae:01:7e:bd:0d:5d:86:5c:08:8c:e2:6a:7f:49:6e: d8:8a:f6:44:6a:59:eb:75:65:85:bb:26:37:05:2c: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:40:B6:DE:35:58:22:51:C8:E3:0A:F2:D4:63:DA:86:46:79:4B:7B X509v3 Authority Key Identifier: keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/D0C23jVYIlHI4wry1GPahkZ5S3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.240.0/24 Signature Algorithm: sha256WithRSAEncryption 40:57:4e:35:de:0b:6a:d2:04:8a:7f:3b:12:60:60:b5:c4:53: 10:69:49:e7:01:af:c2:9d:37:68:8d:56:75:ee:c1:bb:75:6f: 4c:87:bd:bc:bc:f2:8c:ad:68:93:2e:06:d1:a0:ce:05:9a:f8: 4c:fb:d7:6c:cc:05:d6:94:ed:56:c6:97:d8:d7:90:c9:60:a5: 87:e3:de:02:3d:b5:e9:db:47:6b:17:34:cc:c8:3c:3e:ff:67: f8:35:a0:b5:b4:4c:37:57:c7:6f:15:ee:31:9f:ed:a1:a2:84: 07:88:8b:d3:b9:74:f7:86:3e:ba:cb:39:54:6c:7e:7d:c3:6b: 02:6a:5c:a8:f6:f5:3a:da:0d:f0:79:ef:a3:b3:64:96:31:61: 89:4a:d3:83:14:ac:af:88:9e:a3:49:a0:48:b9:b6:d8:01:6c: b4:07:12:db:63:63:e4:31:df:64:11:03:32:71:c8:5a:41:e9: e7:72:89:a8:f3:66:70:66:92:fd:f4:e8:36:f3:74:29:9d:1b: 90:1a:ec:80:04:a0:c7:dc:d2:06:a2:8d:d4:95:fa:56:05:84: 33:be:c8:ba:b4:82:36:7d:45:cb:55:2a:af:80:08:11:b9:be: 36:da:b0:b3:55:88:a1:ed:13:3d:19:bc:d1:e3:ba:ba:fd:8f: 9e:ad:03:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqtdeL/I04lZvpTYwxeTCMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk M2FlMTEwHhcNMjUxMTIyMjEyNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjQwYjZkZTM1NTgyMjUxYzhlMzBhZjJkNDYzZGE4NjQ2Nzk0YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu4aM46NnE3O4GiWcX1C1WfYZCab I8Jl1NjEzQpoCm1k5Mg3hwbsA05NGWpjDwZd+oGlNIgaq5DII3bXAZ5zLvG/u0jr Ro7X5c/6n9lmhL0o65k5ilne1s3pP4Uslk0QsN+LB8K9QwYel8iar8vEnfuKWZz4 LzXNFHy0LoJA2zUJ3y0YEl/LMAi49i+EF16OUvJ/2xv+dyVYQb+RO7rC8Li0MPs6 7ytUlqsOA4ucDCIJ0F3P6LPs+JmZ1828xSRaR8FikAYe33+zFsVXDaZFn4Ab81+W rNRwt33/wG+0UuyuAX69DV2GXAiM4mp/SW7YivZEalnrdWWFuyY3BSz8uwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA9Att41WCJRyOMK8tRj2oZGeUt7MB8GA1UdIwQY MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt MGY0ZGJiODkwYmQwLzEvRDBDMjNqVllJbEhJNHdyeTFHUGFoa1o1UzNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1XwMA0G CSqGSIb3DQEBCwUAA4IBAQBAV0413gtq0gSKfzsSYGC1xFMQaUnnAa/CnTdojVZ1 7sG7dW9Mh728vPKMrWiTLgbRoM4FmvhM+9dszAXWlO1WxpfY15DJYKWH494CPbXp 20drFzTMyDw+/2f4NaC1tEw3V8dvFe4xn+2hooQHiIvTuXT3hj66yzlUbH59w2sC alyo9vU62g3wee+js2SWMWGJStODFKyviJ6jSaBIubbYAWy0BxLbY2PkMd9kEQMy cchaQenncomo82ZwZpL99Og283QpnRuQGuyABKDH3NIGoo3UlfpWBYQzvsi6tII2 fUXLVSqvgAgRub422rCzVYih7RM9GbzR47q6/Y+erQNt -----END CERTIFICATE-----Generated at Sat Dec 6 20:52:27 2025 by rpki-client