This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/YVhvwLU4Xh0njB-eir3g-pXbFSg.roa File: YVhvwLU4Xh0njB-eir3g-pXbFSg.roa (raw, json) Hash identifier: 5cozEpP/MsdFXRpSq7vkLHuXE8286MGsbEZfYZ4OF3g= Subject key identifier: 61:58:6F:C0:B5:38:5E:1D:27:8C:1F:9E:8A:BD:E0:FA:95:DB:15:28 Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Certificate serial: 019B152A918E23A642DDB2408F6ADCDD9958 Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/YVhvwLU4Xh0njB-eir3g-pXbFSg.roa Signing time: Sat 13 Dec 2025 00:44:29 +0000 ROA not before: Sat 13 Dec 2025 00:44:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215826 IP address blocks: 95.85.236.0/24 maxlen: 24 95.85.237.0/24 maxlen: 24 95.85.238.0/24 maxlen: 24 95.85.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:2a:91:8e:23:a6:42:dd:b2:40:8f:6a:dc:dd:99:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11 Validity Not Before: Dec 13 00:44:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=61586fc0b5385e1d278c1f9e8abde0fa95db1528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8c:17:54:4d:1a:a4:63:25:d8:6c:2f:30:16: 14:77:5b:2e:52:8c:91:5a:91:bb:22:3d:8a:0d:fa: c7:99:10:66:17:c9:23:f3:aa:8f:71:11:cd:4e:06: 4e:69:02:6d:29:dd:be:58:dc:a2:02:8e:2f:b6:86: 87:4b:30:a9:1a:9e:39:82:fe:7c:8e:fe:f7:0b:56: 87:7b:e9:12:63:2c:66:22:4b:9d:e0:3f:28:a6:69: 74:51:17:30:92:b9:38:76:70:cd:c9:73:ba:89:e7: f7:1b:66:1e:0f:6c:20:b5:be:d2:24:50:3d:2d:d4: 9a:38:0c:8e:92:10:ec:3a:75:10:0d:bd:c4:42:99: 91:9f:65:27:57:e0:0f:6c:88:03:01:59:e7:f2:39: 45:cc:31:f8:c6:c6:0b:1a:bd:12:73:df:3b:19:3e: 26:96:a4:7d:8a:3c:1c:1e:6c:ec:a8:3e:65:90:c7: 92:ce:1d:3b:7c:07:48:1e:da:1d:ac:28:8e:c6:29: 90:3b:ae:ee:14:bb:6c:8d:61:d1:cb:ce:f8:c7:bf: ca:58:8e:90:27:24:6d:a9:be:3f:88:cf:36:2b:ba: cf:fd:4c:bd:aa:56:38:73:52:99:f9:25:48:cd:e0: 99:ed:84:53:b1:cf:8d:36:ba:2a:07:49:91:ba:a5: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:58:6F:C0:B5:38:5E:1D:27:8C:1F:9E:8A:BD:E0:FA:95:DB:15:28 X509v3 Authority Key Identifier: keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/YVhvwLU4Xh0njB-eir3g-pXbFSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.85.236.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:41:bb:90:81:ff:f4:d4:4a:0e:7b:65:5a:44:fd:6e:cd:d8: fe:4a:b7:2e:b3:d5:05:f4:54:51:20:eb:f3:c1:14:ce:0c:86: f7:7d:02:67:89:c2:3b:f6:2c:24:a4:a4:4d:d3:9d:20:be:34: df:7f:55:12:db:53:d9:6d:65:aa:df:0d:81:d3:28:d5:48:ab: de:0f:5c:c2:71:64:19:5b:b8:02:82:1d:fd:e1:d3:55:cd:19: 0e:f3:bc:09:0a:4a:f1:de:9d:71:e5:d8:fb:1a:be:7d:b3:3e: 3b:47:52:07:a1:78:de:4c:88:94:f3:72:13:44:05:8b:fe:b5: e4:d2:8f:fb:b8:d4:d2:28:91:eb:e8:a5:7a:0c:79:4e:c8:32: 06:a8:68:8e:46:96:18:ec:f2:73:ab:98:45:c2:03:cc:b0:54: 4e:55:ad:50:91:51:5c:9d:b3:de:93:60:cc:05:53:20:63:5c: 4a:ba:8e:5b:68:11:28:aa:9c:7e:59:c1:b6:24:b9:e1:12:cc: 83:7b:b1:cd:3c:ac:cb:ae:e0:c1:65:ba:71:79:8a:91:d9:f2: 67:03:4b:09:45:e1:b2:6b:ed:21:d3:97:d8:b7:f4:ee:e1:3d: b3:2b:0f:7a:9e:66:bf:b0:bf:3c:18:2d:a6:82:6f:a6:f0:cd: 11:c9:0a:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsVKpGOI6ZC3bJAj2rc3ZlYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk M2FlMTEwHhcNMjUxMjEzMDA0NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTU4NmZjMGI1Mzg1ZTFkMjc4YzFmOWU4YWJkZTBmYTk1ZGIxNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6owXVE0apGMl2GwvMBYUd1suUoyR WpG7Ij2KDfrHmRBmF8kj86qPcRHNTgZOaQJtKd2+WNyiAo4vtoaHSzCpGp45gv58 jv73C1aHe+kSYyxmIkud4D8opml0URcwkrk4dnDNyXO6ief3G2YeD2wgtb7SJFA9 LdSaOAyOkhDsOnUQDb3EQpmRn2UnV+APbIgDAVnn8jlFzDH4xsYLGr0Sc987GT4m lqR9ijwcHmzsqD5lkMeSzh07fAdIHtodrCiOximQO67uFLtsjWHRy874x7/KWI6Q JyRtqb4/iM82K7rP/Uy9qlY4c1KZ+SVIzeCZ7YRTsc+NNroqB0mRuqU5DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGFYb8C1OF4dJ4wfnoq94PqV2xUoMB8GA1UdIwQY MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt MGY0ZGJiODkwYmQwLzEvWVZodndMVTRYaDBuakItZWlyM2ctcFhiRlNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX1XsMA0G CSqGSIb3DQEBCwUAA4IBAQBOQbuQgf/01EoOe2VaRP1uzdj+Srcus9UF9FRRIOvz wRTODIb3fQJnicI79iwkpKRN050gvjTff1US21PZbWWq3w2B0yjVSKveD1zCcWQZ W7gCgh394dNVzRkO87wJCkrx3p1x5dj7Gr59sz47R1IHoXjeTIiU83ITRAWL/rXk 0o/7uNTSKJHr6KV6DHlOyDIGqGiORpYY7PJzq5hFwgPMsFROVa1QkVFcnbPek2DM BVMgY1xKuo5baBEoqpx+WcG2JLnhEsyDe7HNPKzLruDBZbpxeYqR2fJnA0sJReGy a+0h05fYt/Tu4T2zKw96nma/sL88GC2mgm+m8M0RyQrf -----END CERTIFICATE-----Generated at Sat Dec 20 09:32:52 2025 by rpki-client