This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/GkB4jg3E709DVhHgpuEqovhaDpA.roa File: GkB4jg3E709DVhHgpuEqovhaDpA.roa (raw, json) Hash identifier: gZj4A6skBw93aeGSqOrT4gmf78JuQrNLMnUT+GyBW/8= Subject key identifier: 1A:40:78:8E:0D:C4:EF:4F:43:56:11:E0:A6:E1:2A:A2:F8:5A:0E:90 Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Certificate serial: 019AF0A2744A543F21C5AFC50DC95833B06D Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/GkB4jg3E709DVhHgpuEqovhaDpA.roa Signing time: Fri 05 Dec 2025 22:29:29 +0000 ROA not before: Fri 05 Dec 2025 22:29:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209693 IP address blocks: 95.85.241.0/24 maxlen: 24 95.85.242.0/24 maxlen: 24 95.85.243.0/24 maxlen: 24 95.85.245.0/24 maxlen: 24 95.85.246.0/24 maxlen: 24 95.85.247.0/24 maxlen: 24 95.85.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:a2:74:4a:54:3f:21:c5:af:c5:0d:c9:58:33:b0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Validity Not Before: Dec 5 22:29:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a40788e0dc4ef4f435611e0a6e12aa2f85a0e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:36:ae:8d:a6:66:d6:43:8b:ab:80:f9:b4: 31:00:4c:da:bc:aa:2d:12:f0:bb:f5:5e:af:89:e5: be:04:65:d5:37:ed:f9:f1:b1:96:bd:a7:b5:af:3d: 64:34:aa:e7:33:77:5b:42:bf:7c:64:73:df:3d:67: aa:93:3c:ec:78:9b:00:e2:37:da:b8:01:da:64:e7: 71:d7:92:65:69:4a:7c:72:e3:2b:6a:a9:e8:4d:6d: 04:c9:4d:ba:34:b2:0f:d1:cd:08:1f:30:6d:6b:3f: d9:90:0e:74:51:24:31:34:fe:4d:ce:b7:20:60:43: 00:05:e3:69:4b:65:b4:e5:08:58:3a:c5:50:d9:86: 4c:f3:cd:49:ec:2d:6f:50:f3:79:d0:94:6d:75:61: b4:6e:fd:0b:9e:94:73:cb:83:d5:e5:ea:c6:22:80: ea:2e:63:e5:75:a8:a3:3d:23:c5:c8:b8:36:69:e6: e1:b1:4d:c1:ab:57:87:b8:02:fb:c3:c6:4f:f2:68: fc:d4:2e:50:b9:5a:1d:b0:7b:af:a8:7c:43:66:89: c6:17:57:15:82:d1:d5:cb:e4:fb:7d:2e:f6:98:24: fc:f9:f1:59:39:ee:1d:d7:db:ff:1c:1d:52:ae:d3: e4:49:1c:a6:44:6a:c4:34:a4:fa:a2:da:78:79:c0: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:40:78:8E:0D:C4:EF:4F:43:56:11:E0:A6:E1:2A:A2:F8:5A:0E:90 X509v3 Authority Key Identifier: keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/GkB4jg3E709DVhHgpuEqovhaDpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.241.0-95.85.243.255 95.85.245.0-95.85.248.255 Signature Algorithm: sha256WithRSAEncryption 2c:2c:59:90:f7:de:3a:8b:f6:cd:aa:63:5a:1d:82:bc:25:82: 2d:10:fc:1b:86:91:f6:82:b0:07:24:dc:4e:ab:ba:26:eb:10: 89:61:77:9e:65:ce:d9:84:71:c4:d9:62:8d:72:c3:1e:0b:18: 27:fb:85:31:38:01:c6:d2:5d:6c:9c:32:86:a5:96:6c:8a:2f: d7:55:7a:6e:90:19:99:07:c4:10:da:cc:6c:32:65:d0:15:ea: 3c:ce:26:08:d9:a5:1d:a6:9e:37:2f:c5:32:24:b7:12:87:58: a6:e9:89:e6:4b:71:4f:be:9c:f3:c6:2a:f9:89:52:01:84:18: b4:c6:d8:3a:35:b0:b4:32:56:c2:6c:f0:0c:fa:ce:28:24:9a: 32:64:b0:e0:e3:2e:24:24:dd:8d:40:b4:38:23:4b:a6:33:0f: 65:00:df:d6:d6:af:13:7d:09:a0:54:93:30:62:32:3f:f8:f4: cb:fd:87:1e:2a:80:f4:4e:ac:81:10:54:e9:cc:59:e7:71:46: 65:24:e2:c8:1d:ad:b5:b1:f0:83:d3:b6:c4:02:f3:c8:09:ee: 73:3d:28:2d:7f:0d:6b:07:20:59:2e:82:b9:91:ed:f5:ab:1c: 3c:cb:8b:9f:b6:02:af:d2:7a:a4:62:d0:51:07:8c:63:27:f6: 2c:d6:52:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZrwonRKVD8hxa/FDclYM7BtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk M2FlMTEwHhcNMjUxMjA1MjIyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTQwNzg4ZTBkYzRlZjRmNDM1NjExZTBhNmUxMmFhMmY4NWEwZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3E2ro2mZtZDi6uA+bQxAEzavKot EvC79V6vieW+BGXVN+358bGWvae1rz1kNKrnM3dbQr98ZHPfPWeqkzzseJsA4jfa uAHaZOdx15JlaUp8cuMraqnoTW0EyU26NLIP0c0IHzBtaz/ZkA50USQxNP5Nzrcg YEMABeNpS2W05QhYOsVQ2YZM881J7C1vUPN50JRtdWG0bv0LnpRzy4PV5erGIoDq LmPldaijPSPFyLg2aebhsU3Bq1eHuAL7w8ZP8mj81C5QuVodsHuvqHxDZonGF1cV gtHVy+T7fS72mCT8+fFZOe4d19v/HB1SrtPkSRymRGrENKT6otp4ecDFNwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFBpAeI4NxO9PQ1YR4KbhKqL4Wg6QMB8GA1UdIwQY MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt MGY0ZGJiODkwYmQwLzEvR2tCNGpnM0U3MDlEVmhIZ3B1RXFvdmhhRHBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBABfVfED BAJfVfAwDAMEAF9V9QMEAF9V+DANBgkqhkiG9w0BAQsFAAOCAQEALCxZkPfeOov2 zapjWh2CvCWCLRD8G4aR9oKwByTcTqu6JusQiWF3nmXO2YRxxNlijXLDHgsYJ/uF MTgBxtJdbJwyhqWWbIov11V6bpAZmQfEENrMbDJl0BXqPM4mCNmlHaaeNy/FMiS3 EodYpumJ5ktxT76c88Yq+YlSAYQYtMbYOjWwtDJWwmzwDPrOKCSaMmSw4OMuJCTd jUC0OCNLpjMPZQDf1tavE30JoFSTMGIyP/j0y/2HHiqA9E6sgRBU6cxZ53FGZSTi yB2ttbHwg9O2xALzyAnucz0oLX8NawcgWS6CuZHt9ascPMuLn7YCr9J6pGLQUQeM Yyf2LNZSPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:40:50 2025 by rpki-client