This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/gBVXncZpX6dJXVFqEp6midsazlI.roa
File: gBVXncZpX6dJXVFqEp6midsazlI.roa (raw, json)
Hash identifier: Ru3Jn14vwmud6LNKKX7IA9Gb2z/pNd90VBCQpUm5b1o=
Subject key identifier: 80:15:57:9D:C6:69:5F:A7:49:5D:51:6A:12:9E:A6:89:DB:1A:CE:52
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 019A5825CB74936C8829B9D66FAA1EDA77C0
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/gBVXncZpX6dJXVFqEp6midsazlI.roa
Signing time: Thu 06 Nov 2025 07:51:03 +0000
ROA not before: Thu 06 Nov 2025 07:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8245
IP address blocks: 195.26.192.0/19 maxlen: 19
195.26.198.0/24 maxlen: 24
195.26.216.0/22 maxlen: 24
195.26.220.0/22 maxlen: 22
212.236.0.0/16 maxlen: 24
212.236.0.0/18 maxlen: 18
212.236.0.0/24 maxlen: 24
212.236.1.0/24 maxlen: 24
212.236.2.0/24 maxlen: 24
212.236.11.0/24 maxlen: 24
212.236.12.0/24 maxlen: 24
212.236.160.0/19 maxlen: 19
212.236.192.0/18 maxlen: 18
2a02:2750::/32 maxlen: 48
2a02:2750:40::/42 maxlen: 42
2a02:2750:80::/42 maxlen: 42
2a02:2750:cafe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:25:cb:74:93:6c:88:29:b9:d6:6f:aa:1e:da:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Nov 6 07:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8015579dc6695fa7495d516a129ea689db1ace52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:0d:e5:9c:1e:c4:bb:b2:af:43:b7:8f:10:
ce:7b:99:1c:b6:b8:3c:c2:6f:6b:16:d2:ba:ba:05:
ee:be:15:a7:d6:5a:44:12:e5:6c:e1:10:f4:48:d4:
10:3d:2a:4d:78:1b:ad:68:0c:e9:f7:6f:3a:31:84:
a9:35:07:4b:0d:6e:7b:d6:32:21:a7:6a:21:47:6e:
cd:3c:83:d0:e3:ac:b0:dd:a0:fe:38:ed:47:dd:a5:
25:ab:a7:a0:9f:56:b7:e0:47:01:2c:f9:86:9d:f7:
96:7a:ae:b1:27:f4:43:77:40:fd:cb:b2:ae:88:b9:
59:3d:b8:b1:22:93:cd:3e:be:ab:6d:cf:a7:03:ba:
d3:41:5e:4e:4e:ca:cf:80:b7:3f:13:3e:bb:b2:43:
94:97:6b:59:05:f2:3f:4f:86:76:e6:c7:95:88:9d:
e6:db:c1:c7:a6:2a:64:8b:79:e1:2a:cc:a0:06:2f:
b4:d5:fe:ea:73:bb:0c:8f:e7:10:58:0f:87:8a:b5:
6a:62:98:79:ff:3c:69:53:82:c7:52:ac:21:c0:83:
03:ef:1e:cd:b6:15:5c:d7:c8:b9:67:a7:6a:63:b7:
8d:c0:68:4e:a5:d7:6e:6f:29:d9:df:95:73:94:5e:
ab:ed:3f:f8:08:28:18:e3:88:c4:5d:f0:24:73:21:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:57:9D:C6:69:5F:A7:49:5D:51:6A:12:9E:A6:89:DB:1A:CE:52
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/gBVXncZpX6dJXVFqEp6midsazlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.192.0/19
212.236.0.0/16
IPv6:
2a02:2750::/32
Signature Algorithm: sha256WithRSAEncryption
94:de:c5:4e:ac:02:ed:f2:66:15:96:ef:1f:5c:3a:c4:c8:50:
a2:80:80:c7:d5:84:b1:b4:4d:b7:db:2e:36:73:b7:d1:00:49:
fb:98:11:66:df:53:2a:6e:fa:a6:d4:84:76:fd:90:fb:22:39:
95:8d:ab:74:87:1a:11:ad:16:0a:02:f2:71:13:11:a9:66:e8:
cf:84:c5:05:8b:13:f1:24:06:a6:60:3e:9f:1b:ef:c9:c4:3d:
78:51:9c:a8:5c:52:c2:17:a8:4f:81:37:48:35:70:86:6a:6c:
8a:68:15:2e:c6:ee:15:36:7c:98:ad:f2:c2:97:89:32:4e:86:
55:9d:9b:2c:d3:dc:99:2b:0a:54:4b:3f:14:e7:5d:83:51:d2:
c9:0f:b0:be:29:c6:2a:99:8c:ca:0a:3b:16:58:26:08:ce:29:
5c:3a:82:2a:4c:58:b4:b2:33:82:7d:e6:56:9e:8b:e9:cf:3f:
95:93:8c:0f:53:3e:66:3c:25:f7:56:dd:e5:af:62:fd:14:57:
49:51:3a:6a:f3:75:21:ed:4a:d1:b9:97:c4:ad:71:d7:ae:a0:
ed:4e:93:aa:f2:e2:e8:4e:19:26:3d:34:67:a5:b5:92:e8:80:
0a:bb:04:ef:3b:f4:ba:cd:15:23:d2:61:dc:95:ad:e1:c2:e4:
2b:13:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:51:10 2025 by rpki-client