This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gNP9nvclYfsEVeg_1M6KOye4oBs.roa File: gNP9nvclYfsEVeg_1M6KOye4oBs.roa (raw, json) Hash identifier: P55Eur7uk50G0tqzjhb1GKRCl6Z0R8RmxvWHrfkn9bY= Subject key identifier: 80:D3:FD:9E:F7:25:61:FB:04:55:E8:3F:D4:CE:8A:3B:27:B8:A0:1B Certificate issuer: /CN=8303792890ada2ba387e39b314b77035d5fb315b Certificate serial: 019B7CECDD23B19F4BC18FB192C310B7459F Authority key identifier: 83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gNP9nvclYfsEVeg_1M6KOye4oBs.roa Signing time: Fri 02 Jan 2026 04:17:36 +0000 ROA not before: Fri 02 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50496 IP address blocks: 195.191.100.0/23 maxlen: 23 195.191.100.0/24 maxlen: 24 195.191.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:dd:23:b1:9f:4b:c1:8f:b1:92:c3:10:b7:45:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8303792890ada2ba387e39b314b77035d5fb315b Validity Not Before: Jan 2 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80d3fd9ef72561fb0455e83fd4ce8a3b27b8a01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:74:d8:9c:9b:7b:7a:ff:a3:a2:d7:c1:9b:5c: 75:85:da:85:e5:d7:e6:6e:09:f7:a9:27:b3:2b:a9: 35:18:05:ff:01:c0:1e:cd:53:ce:d2:45:15:12:58: e4:13:7a:a6:fa:3e:7e:44:67:88:64:7e:1f:f9:26: 8f:43:83:4a:96:45:61:04:df:ca:e7:22:58:8d:81: bf:55:43:f5:9d:87:b3:c7:ad:81:fb:87:d0:11:61: 45:59:fa:e7:42:71:58:06:7f:90:cd:86:11:cf:0f: ea:b9:ff:a1:25:f3:a6:b2:0f:4a:2d:9b:29:08:ef: 5b:b7:87:c3:3e:0e:67:cf:99:22:16:79:ec:ed:fd: 4a:4c:82:83:6c:be:37:78:c3:41:e3:73:a2:0f:34: 02:a2:bb:37:6b:49:a0:a8:62:11:07:84:85:14:16: 12:f5:64:c3:d5:6c:4f:cc:e5:1e:07:19:b0:3e:2a: 85:25:b8:73:43:9c:50:73:56:0e:8a:94:68:49:6c: 4f:b3:46:d5:70:0c:3f:b0:73:94:4d:36:e6:d9:fa: f3:80:51:e6:97:75:fd:a5:55:8e:53:fe:08:65:87: be:7e:08:d3:f5:b2:d7:7e:c9:fb:44:ec:cc:38:21: 51:65:15:dd:a7:6d:20:17:5d:00:a0:17:14:ac:a3: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D3:FD:9E:F7:25:61:FB:04:55:E8:3F:D4:CE:8A:3B:27:B8:A0:1B X509v3 Authority Key Identifier: keyid:83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gNP9nvclYfsEVeg_1M6KOye4oBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.100.0/23 Signature Algorithm: sha256WithRSAEncryption 36:e9:d7:56:db:54:d2:d9:6a:1f:be:1b:5a:d4:59:75:0a:e5: 62:f6:33:ca:ae:78:f2:0e:51:19:d1:e3:46:56:ed:98:41:f6: 45:6a:af:a6:dd:ee:9d:f9:f9:a6:6a:20:ca:cb:7e:6a:47:af: 41:01:91:02:46:ec:0e:13:c0:d2:c5:1e:0c:bd:e0:05:79:fd: 05:3a:3c:b1:99:1d:b2:19:b0:2d:80:bd:c2:df:0a:eb:49:95: 2c:aa:45:9f:db:42:e0:07:f8:22:c2:6a:90:2e:8c:75:37:33: ee:d1:4b:99:6f:83:0a:ee:f4:a3:0f:d2:75:f8:ab:d6:b3:92: 33:7a:fb:48:6e:c5:96:96:65:f4:a9:6c:57:ec:db:66:27:1b: d2:80:3d:05:91:75:09:ae:4e:96:0e:eb:58:58:3c:38:a8:7d: e1:ce:01:3e:e7:08:5d:43:e8:d6:e8:2e:62:09:16:3f:4a:6b: 3e:d4:86:53:4e:be:38:cd:a1:6d:0d:2d:cc:ea:e6:76:85:8e: 01:81:e8:8e:9c:69:2a:b5:4a:a9:3d:ac:7c:91:94:8c:4f:15: 1e:a3:b3:1b:e0:b5:1b:80:d1:f6:a2:31:61:14:c4:07:84:42: df:b5:a7:24:cf:f8:3c:ad:ad:5d:43:16:7d:66:a5:48:0a:5b: 0f:58:35:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87N0jsZ9LwY+xksMQt0WfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDM3OTI4OTBhZGEyYmEzODdlMzliMzE0Yjc3MDM1ZDVm YjMxNWIwHhcNMjYwMTAyMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGQzZmQ5ZWY3MjU2MWZiMDQ1NWU4M2ZkNGNlOGEzYjI3YjhhMDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHTYnJt7ev+jotfBm1x1hdqF5dfm bgn3qSezK6k1GAX/AcAezVPO0kUVEljkE3qm+j5+RGeIZH4f+SaPQ4NKlkVhBN/K 5yJYjYG/VUP1nYezx62B+4fQEWFFWfrnQnFYBn+QzYYRzw/quf+hJfOmsg9KLZsp CO9bt4fDPg5nz5kiFnns7f1KTIKDbL43eMNB43OiDzQCors3a0mgqGIRB4SFFBYS 9WTD1WxPzOUeBxmwPiqFJbhzQ5xQc1YOipRoSWxPs0bVcAw/sHOUTTbm2frzgFHm l3X9pVWOU/4IZYe+fgjT9bLXfsn7ROzMOCFRZRXdp20gF10AoBcUrKPYkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDT/Z73JWH7BFXoP9TOijsnuKAbMB8GA1UdIwQY MBaAFIMDeSiQraK6OH45sxS3cDXV+zFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dONUtKQ3Rvcm80ZmptekZMZHdOZFg3TVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMTljZGMtYjViYy00MTNhLWJlZTct N2U4NDdhMzQxNDFhLzEvZ05QOW52Y2xZZnNFVmVnXzFNNktPeWU0b0JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zMTljZGMtYjViYy00MTNhLWJlZTctN2U4NDdhMzQxNDFh LzEvZ3dONUtKQ3Rvcm80ZmptekZMZHdOZFg3TVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79kMA0G CSqGSIb3DQEBCwUAA4IBAQA26ddW21TS2Wofvhta1Fl1CuVi9jPKrnjyDlEZ0eNG Vu2YQfZFaq+m3e6d+fmmaiDKy35qR69BAZECRuwOE8DSxR4MveAFef0FOjyxmR2y GbAtgL3C3wrrSZUsqkWf20LgB/giwmqQLox1NzPu0UuZb4MK7vSjD9J1+KvWs5Iz evtIbsWWlmX0qWxX7NtmJxvSgD0FkXUJrk6WDutYWDw4qH3hzgE+5whdQ+jW6C5i CRY/Sms+1IZTTr44zaFtDS3M6uZ2hY4BgeiOnGkqtUqpPax8kZSMTxUeo7Mb4LUb gNH2ojFhFMQHhELftackz/g8ra1dQxZ9ZqVIClsPWDUF -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:32 2026 by rpki-client