This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/zz-BSpcb3-Xu501LEqm9wOtR6k8.roa File: zz-BSpcb3-Xu501LEqm9wOtR6k8.roa (raw, json) Hash identifier: EgMkKLDyyNbVBAATUGcsAMhPzggOppilXHhb/tpqUi0= Subject key identifier: CF:3F:81:4A:97:1B:DF:E5:EE:E7:4D:4B:12:A9:BD:C0:EB:51:EA:4F Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Certificate serial: 019B797E0D65F8922454EFFA8EDB352F8315 Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/zz-BSpcb3-Xu501LEqm9wOtR6k8.roa Signing time: Thu 01 Jan 2026 12:17:42 +0000 ROA not before: Thu 01 Jan 2026 12:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 95.85.192.0/22 maxlen: 22 95.85.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0d:65:f8:92:24:54:ef:fa:8e:db:35:2f:83:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Validity Not Before: Jan 1 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf3f814a971bdfe5eee74d4b12a9bdc0eb51ea4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:f6:8a:a2:4d:92:0e:3a:0c:a7:eb:5e:cc: 88:8b:98:ca:ad:43:8d:72:83:54:64:70:e8:bd:e7: 37:78:72:a7:c1:73:9c:5c:f2:43:13:e2:72:c1:0c: e9:4a:18:a6:ec:77:31:65:67:64:e8:d8:4e:6f:a8: a4:49:ef:a2:81:bd:68:6c:e5:86:c0:6f:4d:6e:85: 59:95:1b:a6:fc:57:06:b7:56:a4:4c:8f:f9:a5:ef: 49:61:8c:d4:55:e5:3f:7a:9f:cd:2e:f3:9c:33:cd: 16:51:81:43:07:fa:d1:7b:40:75:e5:12:24:e4:54: 60:2c:05:d9:8c:62:e1:4f:45:90:c7:e6:ed:06:a4: 20:6d:f7:bb:d8:16:fd:f6:de:0a:d0:6c:71:0e:8e: 3d:86:3f:43:00:30:45:88:b2:58:23:68:17:01:82: b2:46:e6:e5:ad:26:52:6b:95:c7:2b:92:9c:1a:5f: fc:d7:03:cc:0d:e9:67:bc:10:d2:f2:c9:3d:c7:ff: 70:3b:e3:1a:06:48:35:f6:d1:7f:99:78:75:15:d4: b5:72:46:73:a7:f6:0c:07:3a:80:a6:ed:a4:af:c6: f3:35:4c:3e:a5:fb:f6:cc:11:d2:c9:a9:47:28:86: 7e:6c:c7:72:b6:5b:9f:eb:86:aa:24:a5:71:8a:e6: a4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3F:81:4A:97:1B:DF:E5:EE:E7:4D:4B:12:A9:BD:C0:EB:51:EA:4F X509v3 Authority Key Identifier: keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/zz-BSpcb3-Xu501LEqm9wOtR6k8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.192.0/22 95.85.216.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:be:19:84:9a:d9:6a:d9:df:46:4b:56:90:b5:12:f2:8c:9f: 84:64:fe:69:32:f7:a4:3e:71:4c:59:35:99:c6:e3:26:20:98: 70:be:17:97:bf:19:e6:42:32:f5:40:f4:43:a1:c8:46:11:f6: 62:72:2a:2e:41:06:eb:51:24:19:e0:91:e8:de:44:5c:df:ad: 98:14:4a:2d:9b:49:2e:c4:d3:d6:44:88:67:03:00:1c:a0:39: bf:ea:4a:a4:b0:b1:0e:10:d1:38:35:da:38:73:01:7f:95:4e: 40:37:4c:ee:52:87:e9:19:be:8c:85:b5:19:e1:cb:7f:08:a3: 4d:f6:ba:9c:88:6f:e7:d2:23:8f:ee:9a:ae:1e:95:9b:b6:85: 17:75:bb:79:7c:28:6d:b3:45:a5:c1:84:94:d2:56:b5:15:34: 14:f1:ce:b1:d2:fc:9c:1c:d1:37:03:9f:8d:61:8c:52:98:25: c4:a2:fb:0a:39:66:79:9e:f4:73:b7:46:d1:d0:04:09:e5:a7: f3:f7:58:9d:b8:a0:ce:6d:f6:b0:d9:bd:0e:73:1f:3d:1e:c6: ce:c0:44:a4:d9:f3:64:ba:10:fe:c0:1c:ae:11:74:32:32:3f: f9:95:53:a2:ef:c9:5a:dc:c2:89:39:f5:2e:1d:61:04:f3:32: fd:5b:c1:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fg1l+JIkVO/6jts1L4MVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk M2FlMTEwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjNmODE0YTk3MWJkZmU1ZWVlNzRkNGIxMmE5YmRjMGViNTFlYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTb2iqJNkg46DKfrXsyIi5jKrUON coNUZHDovec3eHKnwXOcXPJDE+JywQzpShim7HcxZWdk6NhOb6ikSe+igb1obOWG wG9NboVZlRum/FcGt1akTI/5pe9JYYzUVeU/ep/NLvOcM80WUYFDB/rRe0B15RIk 5FRgLAXZjGLhT0WQx+btBqQgbfe72Bb99t4K0GxxDo49hj9DADBFiLJYI2gXAYKy RublrSZSa5XHK5KcGl/81wPMDelnvBDS8sk9x/9wO+MaBkg19tF/mXh1FdS1ckZz p/YMBzqApu2kr8bzNUw+pfv2zBHSyalHKIZ+bMdytluf64aqJKVxiuakawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM8/gUqXG9/l7udNSxKpvcDrUepPMB8GA1UdIwQY MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt MGY0ZGJiODkwYmQwLzEvenotQlNwY2IzLVh1NTAxTEVxbTl3T3RSNms4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCX1XAAwQC X1XYMA0GCSqGSIb3DQEBCwUAA4IBAQAuvhmEmtlq2d9GS1aQtRLyjJ+EZP5pMvek PnFMWTWZxuMmIJhwvheXvxnmQjL1QPRDochGEfZiciouQQbrUSQZ4JHo3kRc362Y FEotm0kuxNPWRIhnAwAcoDm/6kqksLEOENE4Ndo4cwF/lU5AN0zuUofpGb6MhbUZ 4ct/CKNN9rqciG/n0iOP7pquHpWbtoUXdbt5fChts0WlwYSU0la1FTQU8c6x0vyc HNE3A5+NYYxSmCXEovsKOWZ5nvRzt0bR0AQJ5afz91iduKDObfaw2b0Ocx89HsbO wESk2fNkuhD+wByuEXQyMj/5lVOi78la3MKJOfUuHWEE8zL9W8Ey -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:35 2026 by rpki-client