This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/GHe6f9dWFbQBm0VmFlAmWXuACGA.roa
File: GHe6f9dWFbQBm0VmFlAmWXuACGA.roa (raw, json)
Hash identifier: 2ngZfOmKkhCy3pa9kAX4rFjELV8t/vSSQl64k8RHqVo=
Subject key identifier: 18:77:BA:7F:D7:56:15:B4:01:9B:45:66:16:50:26:59:7B:80:08:60
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 019B152A907DC0F6F52AFAF1CE39DEF31BE3
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/GHe6f9dWFbQBm0VmFlAmWXuACGA.roa
Signing time: Sat 13 Dec 2025 00:44:29 +0000
ROA not before: Sat 13 Dec 2025 00:44:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213887
IP address blocks: 95.85.230.0/24 maxlen: 24
95.85.231.0/24 maxlen: 24
95.85.232.0/24 maxlen: 24
95.85.233.0/24 maxlen: 24
95.85.234.0/24 maxlen: 24
95.85.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:15:2a:90:7d:c0:f6:f5:2a:fa:f1:ce:39:de:f3:1b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Dec 13 00:44:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1877ba7fd75615b4019b4566165026597b800860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:11:e9:1e:f0:17:09:43:58:1c:38:5b:75:
44:ab:d8:fc:ec:0c:c7:0a:f3:d6:e3:60:c0:cc:14:
12:36:06:3d:e9:ca:14:4a:41:97:9b:cc:a4:3d:16:
5c:e8:2d:f1:4a:cc:e6:50:32:01:6a:e0:30:9b:d4:
3c:9f:36:49:9b:2b:62:85:48:bf:42:d2:ce:81:f7:
50:50:c2:07:2f:89:1b:62:98:b1:d7:e3:79:1d:76:
79:37:6f:8a:df:45:f5:d9:43:66:56:61:a1:52:c1:
39:0b:65:28:e2:87:5b:30:44:5e:31:0d:f0:3b:15:
58:1f:a0:75:dd:22:d8:ac:43:df:fb:35:a3:f8:76:
a1:1a:53:ea:ad:d6:81:df:c4:56:98:a1:0f:e2:05:
e3:7e:98:e4:92:10:b5:f8:16:78:55:fc:f3:a3:b7:
10:85:e7:22:40:59:38:e9:90:67:7c:ba:ec:00:92:
da:11:51:09:3a:1e:cd:bc:79:26:c5:7d:b6:b9:66:
29:1d:f8:be:fa:16:ef:4d:40:34:89:a4:b3:a1:7f:
01:1e:24:7e:7c:e5:21:4d:86:52:ef:19:fe:80:f5:
4b:87:89:b3:e0:30:6a:6d:7e:fe:d3:be:c3:f7:43:
dd:4f:86:d8:ff:fe:7d:3e:46:38:83:61:5c:bc:a7:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:77:BA:7F:D7:56:15:B4:01:9B:45:66:16:50:26:59:7B:80:08:60
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/GHe6f9dWFbQBm0VmFlAmWXuACGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.230.0-95.85.235.255
Signature Algorithm: sha256WithRSAEncryption
76:86:09:76:2d:0f:93:8f:a5:36:be:55:5b:f5:90:04:52:57:
b5:c2:44:7e:be:6c:22:e5:33:ef:fd:fe:d8:4f:d3:01:92:e5:
64:4b:ad:94:84:21:e4:14:93:18:49:d3:3c:bf:2e:ca:e1:88:
20:fe:2a:f2:cb:9a:a3:aa:3e:ff:b4:44:5a:df:d4:6b:41:33:
6c:c9:0e:4f:51:ed:69:df:b8:94:95:af:32:49:62:cd:0e:12:
15:6c:16:5d:fb:b0:d7:1c:8e:8a:57:8a:95:90:c6:39:b5:df:
43:56:89:7e:f9:7b:73:21:bf:f9:56:97:a8:ca:f9:e8:de:c7:
b6:d3:ce:30:bd:6f:86:e2:44:49:fe:ba:f8:e1:35:37:03:6c:
90:09:e2:30:b7:76:50:3e:cb:5d:15:13:24:71:0b:be:6c:e0:
b7:33:34:b0:70:05:fc:33:0c:c7:2c:58:09:62:00:87:61:19:
d3:09:69:2e:49:51:ba:6d:9d:74:7f:09:22:47:63:e8:8c:de:
85:76:fb:d5:c8:4f:f0:99:01:a4:a9:c4:59:e6:91:3b:0d:ca:
9e:de:1a:af:4a:c0:b4:96:ea:1e:36:ae:4e:12:59:18:fb:d1:
0a:5f:77:72:36:17:65:33:49:d1:89:db:f9:96:78:2f:bb:d6:
5d:77:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:47:26 2025 by rpki-client