This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-tR7-TgSOtu0ZRV1-2PpwJXoUbU.roa
File: 1-tR7-TgSOtu0ZRV1-2PpwJXoUbU.roa (raw, json)
Hash identifier: wINxqyEJDVGL0bLsK1CqeFIPcy/cWcxQsRJwYi3/e0g=
Subject key identifier: FA:D4:7B:F9:38:12:3A:DB:B4:65:15:75:FB:63:E9:C0:95:E8:51:B5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A92C77D13A186CD3AB59EFCA9FFEE9116
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-tR7-TgSOtu0ZRV1-2PpwJXoUbU.roa
Signing time: Mon 17 Nov 2025 17:05:38 +0000
ROA not before: Mon 17 Nov 2025 17:05:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 24
31.57.164.0/23 maxlen: 24
31.57.180.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
31.58.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Nov 2025 07:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:92:c7:7d:13:a1:86:cd:3a:b5:9e:fc:a9:ff:ee:91:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 17 17:05:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fad47bf938123adbb4651575fb63e9c095e851b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:03:ea:0c:3c:0a:53:e4:7c:76:4f:10:93:
35:da:de:91:d0:06:61:b9:51:e6:d6:ae:64:5f:b7:
97:46:93:56:f8:6c:b9:e5:15:b2:f6:36:f6:23:b7:
a4:a8:88:5e:bc:6f:e1:d9:86:ba:be:d6:ff:95:51:
ef:26:0f:d9:d1:81:91:aa:c4:7a:cd:cb:f4:de:91:
40:aa:ad:cc:de:f8:ed:2b:f1:66:8d:a2:08:cb:75:
d9:ae:4e:84:4a:ee:ce:6a:1b:0d:27:97:4c:df:0e:
d5:77:5d:46:0b:a3:5a:80:73:3b:1f:3f:63:5c:8f:
1a:69:eb:da:3a:93:48:84:5d:47:e6:6f:ea:19:bc:
a7:c2:dd:0d:2f:e6:4f:31:6c:1d:67:f7:63:ef:dc:
bf:04:ee:6e:09:8f:02:4f:61:59:8e:e9:dc:c0:ae:
93:98:5d:f3:49:13:84:84:25:b0:3e:7b:50:d3:8a:
f1:87:32:24:dc:0e:a7:c4:30:77:07:1b:81:fc:91:
e4:cf:2d:ae:0c:44:06:2f:38:65:a4:5a:b1:fb:fe:
94:52:43:8c:0a:79:ea:f9:4b:9b:7c:c5:15:a3:08:
29:5a:ea:bb:3f:a3:8e:c6:7f:31:07:4d:00:b3:44:
a2:00:ad:8f:73:79:49:67:af:18:60:37:60:08:77:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D4:7B:F9:38:12:3A:DB:B4:65:15:75:FB:63:E9:C0:95:E8:51:B5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-tR7-TgSOtu0ZRV1-2PpwJXoUbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.58.42.0/24
31.58.48.0/24
31.58.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e0:86:9f:98:f1:7b:54:bc:c0:c3:c9:17:46:c6:b7:ad:be:
b6:98:74:92:66:d9:23:5e:b9:2e:2e:84:77:4a:46:00:29:11:
5d:a6:46:15:69:af:4a:51:42:4f:68:c5:c5:1e:35:ec:7e:8d:
a8:63:12:7e:90:bb:60:71:2e:9f:16:12:f8:3a:f1:dd:2d:11:
fe:8e:01:04:0a:45:ad:5e:5a:4b:fd:71:49:5d:c7:b9:71:d4:
94:60:9b:0f:91:ea:28:8a:54:f7:5c:0f:36:41:54:81:46:1c:
f7:ab:09:ee:ad:b4:20:fb:15:47:77:e9:35:98:05:f0:10:f4:
f0:99:d9:bc:fd:4d:76:24:83:9f:3f:90:73:1b:2a:2d:4d:99:
08:3e:f5:9d:bb:a7:1b:7f:31:3c:53:c6:d4:13:88:2d:95:06:
92:64:53:02:5d:f2:81:8f:81:a4:e6:8d:e4:23:fd:cc:dd:05:
35:53:e9:5c:e9:c0:22:b5:04:8f:24:a9:13:ca:b0:89:4d:66:
fb:ba:3b:b2:53:4e:2a:86:89:2d:9f:9a:5d:61:26:b9:a1:7e:
3c:f5:89:ae:19:cc:d7:c8:af:41:ec:9d:53:36:90:13:1e:5f:
14:ba:4c:f3:9e:90:e3:d3:d0:36:00:7f:14:da:d7:aa:0a:cf:
fd:eb:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 19 13:28:30 2025 by rpki-client