This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/g6xdz3iSuoUX2CcSah5vyYZEKro.roa File: g6xdz3iSuoUX2CcSah5vyYZEKro.roa (raw, json) Hash identifier: brEeCADe5lRYK04mBm0QJYCwS0t2bjFdQR6S5yPoRUQ= Subject key identifier: 83:AC:5D:CF:78:92:BA:85:17:D8:27:12:6A:1E:6F:C9:86:44:2A:BA Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Certificate serial: 019AC68DB9FACB504E60E2993E1B0191E64E Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/g6xdz3iSuoUX2CcSah5vyYZEKro.roa Signing time: Thu 27 Nov 2025 18:22:48 +0000 ROA not before: Thu 27 Nov 2025 18:22:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215826 IP address blocks: 95.85.238.0/24 maxlen: 24 95.85.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:8d:b9:fa:cb:50:4e:60:e2:99:3e:1b:01:91:e6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Validity Not Before: Nov 27 18:22:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=83ac5dcf7892ba8517d827126a1e6fc986442aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:ec:0d:5e:51:a5:f8:2b:9d:94:c3:04:d1: 53:bd:c1:21:5f:9f:4d:4c:1e:1b:bf:af:e5:0d:c0: d5:78:b6:c3:f8:59:26:f6:24:ad:5a:99:de:cb:43: e4:ee:1c:f8:21:97:d7:35:69:81:19:95:77:2f:51: 95:97:ea:25:23:22:31:1e:ba:74:48:3a:c5:6c:23: f9:b2:60:f1:82:71:0f:f1:64:1f:47:0a:05:3d:6c: e7:81:26:f6:6b:32:99:68:2c:81:cb:4b:c8:63:20: 20:4a:9f:6a:f6:a9:17:0a:b4:e0:02:c5:76:c3:6a: 63:3d:bd:7a:0e:db:ec:94:92:07:4c:25:7e:71:73: 08:df:34:3b:42:86:f9:ee:03:d4:fb:d3:be:72:24: 8c:76:0a:0e:44:72:3b:35:86:5f:99:68:d6:ed:2a: 9d:17:75:e0:9d:60:d7:66:6c:89:17:6e:7b:ec:56: 19:e4:e4:f9:86:ea:ce:a0:01:25:44:64:d9:11:23: 3f:4c:11:21:05:8b:e1:38:91:c5:02:40:24:2e:b2: f5:8d:6d:29:f8:40:00:bd:7d:05:9a:60:6c:10:af: b1:c7:dd:71:9e:f2:6f:87:e4:7a:05:e6:38:66:a3: 7a:c9:89:a3:0f:17:39:49:08:6f:76:94:df:78:ed: 5b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AC:5D:CF:78:92:BA:85:17:D8:27:12:6A:1E:6F:C9:86:44:2A:BA X509v3 Authority Key Identifier: keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/g6xdz3iSuoUX2CcSah5vyYZEKro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.238.0/23 Signature Algorithm: sha256WithRSAEncryption bb:c9:77:89:28:ae:4d:41:32:5e:eb:24:13:b4:2a:01:25:e1: 95:33:af:13:db:ee:2f:20:9d:43:93:d5:18:01:42:f0:bb:16: a8:2c:09:6e:9b:3c:60:99:e1:22:02:7a:b8:29:22:c5:b6:c6: ae:e8:7d:c0:cd:01:53:ae:56:ff:5f:db:87:75:c6:b5:6a:30: 56:bb:d9:b2:8e:79:ca:84:4d:18:92:7d:f2:bd:20:f5:e6:d8: 81:54:c9:06:38:7f:77:7c:cd:f8:f4:7c:59:ec:2d:9f:1a:50: fd:e3:bd:b8:e4:f2:36:c7:c7:e2:14:f9:17:12:e0:08:64:bd: 8a:f6:e6:b6:ec:b0:a4:70:f3:84:59:19:07:65:5c:9a:41:b8: fa:0d:50:8f:7c:dc:2e:ee:7b:e2:1b:9c:50:c1:15:00:5f:dd: 46:d2:b1:9b:51:9c:bc:46:78:71:db:ed:d8:ee:1e:9f:3e:f4: 2d:b7:d1:fd:79:a1:05:ce:ca:c3:3e:2d:8b:08:a2:df:0e:07: a3:49:2a:53:ba:8a:a1:91:96:1b:49:f7:de:4f:fe:84:9c:77: e8:fd:3e:42:d5:9e:d6:97:a3:e6:43:e4:86:fb:17:b2:d8:eb: b9:70:e5:34:a3:42:83:d0:3c:24:72:98:d6:fe:2a:d0:8e:97: 53:00:9c:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrGjbn6y1BOYOKZPhsBkeZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk M2FlMTEwHhcNMjUxMTI3MTgyMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2FjNWRjZjc4OTJiYTg1MTdkODI3MTI2YTFlNmZjOTg2NDQyYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHrsDV5RpfgrnZTDBNFTvcEhX59N TB4bv6/lDcDVeLbD+Fkm9iStWpney0Pk7hz4IZfXNWmBGZV3L1GVl+olIyIxHrp0 SDrFbCP5smDxgnEP8WQfRwoFPWzngSb2azKZaCyBy0vIYyAgSp9q9qkXCrTgAsV2 w2pjPb16DtvslJIHTCV+cXMI3zQ7Qob57gPU+9O+ciSMdgoORHI7NYZfmWjW7Sqd F3XgnWDXZmyJF2577FYZ5OT5hurOoAElRGTZESM/TBEhBYvhOJHFAkAkLrL1jW0p +EAAvX0FmmBsEK+xx91xnvJvh+R6BeY4ZqN6yYmjDxc5SQhvdpTfeO1bEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIOsXc94krqFF9gnEmoeb8mGRCq6MB8GA1UdIwQY MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt MGY0ZGJiODkwYmQwLzEvZzZ4ZHozaVN1b1VYMkNjU2FoNXZ5WVpFS3JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX1XuMA0G CSqGSIb3DQEBCwUAA4IBAQC7yXeJKK5NQTJe6yQTtCoBJeGVM68T2+4vIJ1Dk9UY AULwuxaoLAlumzxgmeEiAnq4KSLFtsau6H3AzQFTrlb/X9uHdca1ajBWu9myjnnK hE0Ykn3yvSD15tiBVMkGOH93fM349HxZ7C2fGlD947245PI2x8fiFPkXEuAIZL2K 9ua27LCkcPOEWRkHZVyaQbj6DVCPfNwu7nviG5xQwRUAX91G0rGbUZy8Rnhx2+3Y 7h6fPvQtt9H9eaEFzsrDPi2LCKLfDgejSSpTuoqhkZYbSffeT/6EnHfo/T5C1Z7W l6PmQ+SG+xey2Ou5cOU0o0KD0DwkcpjW/irQjpdTAJxk -----END CERTIFICATE-----Generated at Sat Dec 6 22:12:22 2025 by rpki-client