This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/Ejb3tjE4LEg5ecS_49GbcsFwR50.roa File: Ejb3tjE4LEg5ecS_49GbcsFwR50.roa (raw, json) Hash identifier: EyotTnEwgT79+j4yAfyY9Id69/0PTNxo5lXejO2U6VM= Subject key identifier: 12:36:F7:B6:31:38:2C:48:39:79:C4:BF:E3:D1:9B:72:C1:70:47:9D Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Certificate serial: 019B797E0E7DA163C07D77632B025A72034C Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/Ejb3tjE4LEg5ecS_49GbcsFwR50.roa Signing time: Thu 01 Jan 2026 12:17:42 +0000 ROA not before: Thu 01 Jan 2026 12:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215826 IP address blocks: 95.85.236.0/24 maxlen: 24 95.85.237.0/24 maxlen: 24 95.85.238.0/24 maxlen: 24 95.85.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0e:7d:a1:63:c0:7d:77:63:2b:02:5a:72:03:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Validity Not Before: Jan 1 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1236f7b631382c483979c4bfe3d19b72c170479d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:fe:5d:0f:ee:5d:57:59:e3:85:2f:b9:2f: 4e:08:94:52:2c:9e:c4:65:3d:1b:77:63:cf:25:30: 61:f7:cc:4d:cb:d7:7e:e8:b7:8c:5e:84:19:4d:71: 86:f9:0f:b8:ce:7c:a1:f0:21:82:41:bf:ca:de:c6: 33:ef:49:1f:cd:f9:96:ea:86:6d:be:2d:76:8c:33: ac:ce:39:f1:1c:a2:f6:fd:55:7a:dd:2d:12:61:24: dd:29:ef:6d:95:46:10:36:bd:9d:c3:e4:b6:9a:d8: b0:36:56:68:1c:b9:8c:52:0a:6c:aa:0d:e2:52:95: c6:f7:e9:a6:cf:62:7a:b6:dd:73:88:49:6a:7e:4b: f4:d1:2c:2b:46:07:32:90:50:86:3b:13:c1:69:fb: 52:c2:97:95:3e:7e:99:69:d9:eb:da:bf:43:db:aa: 51:71:28:78:a1:d4:49:c1:10:be:b9:ab:e4:51:aa: e0:92:c9:80:41:7b:a1:82:8f:b1:5c:7b:12:ce:a5: a1:d2:6f:ca:07:d0:88:24:ad:72:97:07:bf:9c:03: 92:10:c3:a1:c4:fa:23:84:8d:5b:29:f1:f5:e2:78: 85:74:45:11:05:0e:b8:c2:51:a3:25:62:b1:7e:22: 68:9c:bc:d6:a7:71:5e:d7:c5:9b:b7:bd:bb:71:9d: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:36:F7:B6:31:38:2C:48:39:79:C4:BF:E3:D1:9B:72:C1:70:47:9D X509v3 Authority Key Identifier: keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/Ejb3tjE4LEg5ecS_49GbcsFwR50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.236.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:9b:61:85:ff:40:0a:1a:78:ee:b9:f9:f0:e7:43:54:12:38: 1f:77:f6:ef:76:c5:6e:db:23:f8:79:f3:d8:32:88:e8:67:86: 93:60:82:11:92:27:09:d9:75:6e:f6:89:bb:14:7e:e5:ed:c8: a9:9b:d3:df:86:5e:eb:30:d9:bf:0a:28:46:dd:8a:e8:92:74: ba:d4:8d:3f:b6:e9:b0:04:61:2f:22:3a:f8:a8:84:36:46:c3: 60:b2:d5:3e:8d:f6:ae:dd:65:3e:c5:fe:55:6f:ee:1b:ec:64: 4c:c0:98:45:1b:25:0c:d1:26:3d:a6:f7:0b:9a:7b:ad:28:fb: 73:7b:6f:2b:ef:51:07:97:20:8f:d9:e5:ef:c9:57:65:4d:3f: c9:d1:80:a4:f8:13:61:fd:70:e8:95:c5:22:26:fb:95:f5:cf: aa:7b:3a:0a:da:64:40:85:94:69:49:a3:1e:da:94:33:ee:1f: c1:7e:28:a0:7d:0b:18:64:b8:4b:85:d0:f1:3d:02:0a:16:dd: 86:3b:a3:1a:fd:85:26:0f:24:a9:8f:91:13:4c:09:2b:1e:ed: 5a:f3:93:c9:b2:d8:92:b5:48:a0:80:c4:98:50:30:e6:81:63: e9:ee:23:0a:60:2c:82:75:2d:c6:be:a6:08:c1:fd:0b:06:45: ce:08:ed:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fg59oWPAfXdjKwJacgNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk M2FlMTEwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjM2ZjdiNjMxMzgyYzQ4Mzk3OWM0YmZlM2QxOWI3MmMxNzA0NzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ7+XQ/uXVdZ44UvuS9OCJRSLJ7E ZT0bd2PPJTBh98xNy9d+6LeMXoQZTXGG+Q+4znyh8CGCQb/K3sYz70kfzfmW6oZt vi12jDOszjnxHKL2/VV63S0SYSTdKe9tlUYQNr2dw+S2mtiwNlZoHLmMUgpsqg3i UpXG9+mmz2J6tt1ziElqfkv00SwrRgcykFCGOxPBaftSwpeVPn6Zadnr2r9D26pR cSh4odRJwRC+uavkUargksmAQXuhgo+xXHsSzqWh0m/KB9CIJK1ylwe/nAOSEMOh xPojhI1bKfH14niFdEURBQ64wlGjJWKxfiJonLzWp3Fe18Wbt727cZ36yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBI297YxOCxIOXnEv+PRm3LBcEedMB8GA1UdIwQY MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt MGY0ZGJiODkwYmQwLzEvRWpiM3RqRTRMRWc1ZWNTXzQ5R2Jjc0Z3UjUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX1XsMA0G CSqGSIb3DQEBCwUAA4IBAQCcm2GF/0AKGnjuufnw50NUEjgfd/bvdsVu2yP4efPY MojoZ4aTYIIRkicJ2XVu9om7FH7l7cipm9Pfhl7rMNm/CihG3YroknS61I0/tumw BGEvIjr4qIQ2RsNgstU+jfau3WU+xf5Vb+4b7GRMwJhFGyUM0SY9pvcLmnutKPtz e28r71EHlyCP2eXvyVdlTT/J0YCk+BNh/XDolcUiJvuV9c+qezoK2mRAhZRpSaMe 2pQz7h/BfiigfQsYZLhLhdDxPQIKFt2GO6Ma/YUmDySpj5ETTAkrHu1a85PJstiS tUiggMSYUDDmgWPp7iMKYCyCdS3GvqYIwf0LBkXOCO0I -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:39 2026 by rpki-client