This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/KURRIyvSM3hpLUtxXN1TS-HrQHs.roa File: KURRIyvSM3hpLUtxXN1TS-HrQHs.roa (raw, json) Hash identifier: ec55tHuCGNRkHYzPL1ZoRnHPtqjcPVMCP4pKo//MckI= Subject key identifier: 29:44:51:23:2B:D2:33:78:69:2D:4B:71:5C:DD:53:4B:E1:EB:40:7B Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Certificate serial: 019B797E0C85823BFB3553521FBFBE6AD7C2 Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/KURRIyvSM3hpLUtxXN1TS-HrQHs.roa Signing time: Thu 01 Jan 2026 12:17:42 +0000 ROA not before: Thu 01 Jan 2026 12:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209693 IP address blocks: 95.85.241.0/24 maxlen: 24 95.85.242.0/24 maxlen: 24 95.85.243.0/24 maxlen: 24 95.85.245.0/24 maxlen: 24 95.85.246.0/24 maxlen: 24 95.85.247.0/24 maxlen: 24 95.85.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0c:85:82:3b:fb:35:53:52:1f:bf:be:6a:d7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Validity Not Before: Jan 1 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=294451232bd23378692d4b715cdd534be1eb407b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:89:48:65:73:27:9e:fe:f3:5b:09:f0:5b: 38:cb:8c:a2:8f:dc:f3:01:52:bf:e2:e5:39:f1:0b: 10:39:76:73:c9:66:87:8d:69:1d:b4:44:01:41:77: 70:e4:b4:ec:4c:41:dd:55:71:f1:16:52:22:69:a0: e5:a4:35:0a:ef:f6:00:f6:09:5c:26:5d:33:36:4a: 18:76:a0:9a:94:81:59:a5:4d:fc:84:f8:aa:3e:53: 4b:b7:d1:0c:56:91:fe:70:d1:76:43:df:eb:ed:80: b1:20:4e:af:86:8b:91:92:70:2e:19:51:1b:32:00: 0b:df:3d:13:c8:48:2e:c0:52:13:70:6c:37:b6:5b: 76:8e:65:ad:77:e3:93:15:5d:6a:62:2d:e8:2d:d8: d9:1b:f2:51:01:5b:c5:de:45:01:6e:21:45:b5:73: 2f:ce:62:82:11:6e:bd:59:a5:fa:d3:4a:29:ff:80: 9f:24:f5:ad:47:7a:ed:10:f6:16:ed:8e:34:1a:bb: 54:cb:7a:89:19:75:2d:69:52:97:a8:c2:79:12:d6: 7e:07:91:5d:bc:e6:b2:13:5d:bd:24:07:01:2b:75: d3:47:83:a3:10:37:0c:48:c6:3c:e6:a4:f2:e7:a7: de:66:66:29:d9:a4:89:18:4a:75:b1:bc:ec:1b:c9: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:44:51:23:2B:D2:33:78:69:2D:4B:71:5C:DD:53:4B:E1:EB:40:7B X509v3 Authority Key Identifier: keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/KURRIyvSM3hpLUtxXN1TS-HrQHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.241.0-95.85.243.255 95.85.245.0-95.85.248.255 Signature Algorithm: sha256WithRSAEncryption b8:7b:96:69:c2:71:2f:41:3e:61:9b:34:3b:e6:bd:5e:0e:a8: 55:1e:2e:61:41:f7:b6:06:c1:02:31:14:f7:9e:43:f6:1d:e3: 35:d0:e8:a8:d9:dd:f5:b8:1d:1e:7a:3a:94:70:5c:10:e0:3e: 5b:82:8e:80:42:1b:e4:85:df:ec:c2:c9:50:9f:01:00:66:50: 3e:f4:d9:3b:c1:8e:7a:7e:4a:ef:71:f6:27:1c:9c:95:0e:b1: f9:4b:88:3a:98:a6:b2:81:39:f3:56:bd:be:06:d1:e3:b9:3a: 86:cc:aa:87:01:7d:c3:63:f0:ac:b1:0b:33:f2:69:d5:ce:57: ed:a0:08:5a:42:23:f5:10:68:ec:7f:c8:17:0d:db:3e:ba:54: e3:8c:41:d8:d6:94:20:4f:5e:7c:14:73:af:2b:a6:f8:38:3e: b7:49:12:af:7e:4d:22:3f:82:75:8e:f2:11:b4:93:66:2a:40: ac:98:d4:83:43:d3:4f:22:e2:59:36:05:e3:cc:d1:56:f6:08: 02:45:b7:24:54:63:02:f5:26:1f:8c:94:6e:c0:9c:db:b1:ad: c4:14:21:07:e5:00:49:93:86:0a:64:e4:4f:9c:84:b8:d0:74: ca:42:05:1e:bb:e7:c1:b7:8e:9d:04:b1:9a:e5:fe:11:89:32: 80:5f:a8:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt5fgyFgjv7NVNSH7++atfCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk M2FlMTEwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTQ0NTEyMzJiZDIzMzc4NjkyZDRiNzE1Y2RkNTM0YmUxZWI0MDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbOJSGVzJ57+81sJ8Fs4y4yij9zz AVK/4uU58QsQOXZzyWaHjWkdtEQBQXdw5LTsTEHdVXHxFlIiaaDlpDUK7/YA9glc Jl0zNkoYdqCalIFZpU38hPiqPlNLt9EMVpH+cNF2Q9/r7YCxIE6vhouRknAuGVEb MgAL3z0TyEguwFITcGw3tlt2jmWtd+OTFV1qYi3oLdjZG/JRAVvF3kUBbiFFtXMv zmKCEW69WaX600op/4CfJPWtR3rtEPYW7Y40GrtUy3qJGXUtaVKXqMJ5EtZ+B5Fd vOayE129JAcBK3XTR4OjEDcMSMY85qTy56feZmYp2aSJGEp1sbzsG8ldPQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFClEUSMr0jN4aS1LcVzdU0vh60B7MB8GA1UdIwQY MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt MGY0ZGJiODkwYmQwLzEvS1VSUkl5dlNNM2hwTFV0eFhOMVRTLUhyUUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBABfVfED BAJfVfAwDAMEAF9V9QMEAF9V+DANBgkqhkiG9w0BAQsFAAOCAQEAuHuWacJxL0E+ YZs0O+a9Xg6oVR4uYUH3tgbBAjEU955D9h3jNdDoqNnd9bgdHno6lHBcEOA+W4KO gEIb5IXf7MLJUJ8BAGZQPvTZO8GOen5K73H2JxyclQ6x+UuIOpimsoE581a9vgbR 47k6hsyqhwF9w2PwrLELM/Jp1c5X7aAIWkIj9RBo7H/IFw3bPrpU44xB2NaUIE9e fBRzryum+Dg+t0kSr35NIj+CdY7yEbSTZipArJjUg0PTTyLiWTYF48zRVvYIAkW3 JFRjAvUmH4yUbsCc27GtxBQhB+UASZOGCmTkT5yEuNB0ykIFHrvnwbeOnQSxmuX+ EYkygF+oPA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:37 2026 by rpki-client