This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-2fkXjWb-MiPKoqBI0QxAx-Emac.roa
File: 1-2fkXjWb-MiPKoqBI0QxAx-Emac.roa (raw, json)
Hash identifier: Ujn9FQpXSjK7UkVNAshgOgMXvwFl1WpZlQLy5mKV1Wg=
Subject key identifier: FB:67:E4:5E:35:9B:F8:C8:8F:2A:8A:81:23:44:31:03:1F:84:99:A7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019AD98DEFED796CEAC3080DDB0782C5F1B4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-2fkXjWb-MiPKoqBI0QxAx-Emac.roa
Signing time: Mon 01 Dec 2025 10:55:49 +0000
ROA not before: Mon 01 Dec 2025 10:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.6.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.231.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.25.0/24 maxlen: 24
31.57.53.0/24 maxlen: 24
31.57.59.0/24 maxlen: 24
31.57.120.0/24 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.146.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.170.0/24 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
31.58.213.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:d9:8d:ef:ed:79:6c:ea:c3:08:0d:db:07:82:c5:f1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 1 10:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb67e45e359bf8c88f2a8a81234431031f8499a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:b6:1d:32:2a:45:3e:3c:41:1c:47:65:fa:
cb:c2:a5:e0:cd:7b:4c:eb:d4:6a:6e:0e:8d:13:91:
68:9f:e2:b6:b6:bb:ae:f9:40:9a:2a:c8:b1:69:07:
8e:5a:05:8c:9b:c2:22:6c:90:46:4e:f7:bb:42:cb:
66:ad:ea:86:41:5b:23:5a:cf:74:52:15:ac:eb:50:
37:33:75:37:ea:37:95:b5:3b:e6:67:7c:28:7b:bc:
18:a3:ed:d6:7f:eb:ad:bb:f3:15:21:13:eb:76:35:
1a:0c:1a:aa:5f:c0:48:f3:3e:02:88:c6:f8:a7:c7:
c9:6b:85:78:8f:3a:65:c6:77:b3:5a:00:aa:44:91:
b3:a7:27:a4:8f:9d:6f:93:62:cb:f3:10:e0:b4:5f:
03:e2:e6:97:7d:bd:bc:2e:e6:3a:5f:4a:57:77:25:
33:6c:c0:94:d2:21:01:06:a0:b4:b9:84:0d:59:42:
52:20:16:80:b5:d5:75:9a:a6:22:3f:18:b2:2b:7d:
a2:4b:b3:4f:a1:74:65:15:31:2c:44:45:93:71:d5:
16:92:ab:00:5c:aa:c3:87:71:41:54:1c:90:74:fe:
08:5f:f8:da:07:cd:7f:4d:cd:4b:ef:73:98:5c:9c:
d4:72:11:73:b9:3e:33:75:01:e5:c6:66:a8:c4:de:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:67:E4:5E:35:9B:F8:C8:8F:2A:8A:81:23:44:31:03:1F:84:99:A7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-2fkXjWb-MiPKoqBI0QxAx-Emac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.6.0/24
31.56.34.0/23
31.56.231.0/24
31.57.11.0/24
31.57.25.0/24
31.57.53.0/24
31.57.59.0/24
31.57.120.0/24
31.57.129.0/24
31.57.142.0/24
31.57.146.0/24
31.57.151.0/24
31.57.170.0/23
31.57.249.0/24
31.58.213.0/24
31.59.108.0-31.59.110.255
Signature Algorithm: sha256WithRSAEncryption
84:99:09:e3:a5:0e:d2:3c:e7:b1:f5:42:20:2c:41:17:56:0b:
95:35:72:9d:7b:11:75:7b:55:85:f5:d2:6a:4a:0e:f1:ea:cf:
0c:ce:e9:c9:15:d9:89:27:84:04:01:a7:42:93:96:a6:4d:b4:
a6:74:ff:ad:06:f8:cd:26:6c:a3:fd:b7:4c:4e:f1:f5:67:9e:
5d:b4:38:3a:09:f7:ef:8c:f9:27:7a:c9:e1:25:e2:be:ea:d0:
2d:31:d1:47:6a:a2:77:91:ce:9f:2b:ba:98:a5:64:49:8e:f7:
7c:e1:2f:9a:29:9c:5a:db:d8:d1:fd:f7:c1:bb:6e:a5:f2:3f:
80:b8:e1:4d:71:27:a0:60:74:95:e8:b6:8b:a4:46:9c:89:d1:
02:52:c9:22:b0:4b:fd:58:e8:10:60:3d:1e:db:3d:b5:77:fb:
2d:53:58:7f:27:26:bf:db:76:46:70:a9:84:d9:40:8a:49:5c:
cf:b8:a3:1f:6e:a8:6b:5d:cb:29:56:36:b3:43:16:eb:32:34:
ac:6d:63:d2:00:1e:54:43:7f:e2:eb:e7:d7:42:a6:ad:cc:2d:
d9:8d:69:60:b5:ad:0c:74:70:db:64:de:3d:4a:78:4b:89:d2:
6f:7d:08:f1:6c:34:a1:da:d1:02:ba:39:57:8e:94:e2:93:06:
fb:ba:b1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 04:21:31 2025 by rpki-client