This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/61Wpf7EatKp4olgmBaVmqQu8boM.roa
File: 61Wpf7EatKp4olgmBaVmqQu8boM.roa (raw, json)
Hash identifier: Hpzf+0qdP9lAYaqdJcbA+M7h4DvpvC/yq7LOfFAMgSQ=
Subject key identifier: EB:55:A9:7F:B1:1A:B4:AA:78:A2:58:26:05:A5:66:A9:0B:BC:6E:83
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F8489020B4DA200E8CB79F00D8A8AD3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/61Wpf7EatKp4olgmBaVmqQu8boM.roa
Signing time: Fri 02 Jan 2026 16:22:30 +0000
ROA not before: Fri 02 Jan 2026 16:22:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153100
IP address blocks: 31.59.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:89:02:0b:4d:a2:00:e8:cb:79:f0:0d:8a:8a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb55a97fb11ab4aa78a2582605a566a90bbc6e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:67:fc:d4:26:13:0f:dd:66:5d:44:1d:40:
6a:5c:41:a4:7d:94:52:d7:0a:cd:04:21:cc:27:a3:
67:dc:76:5f:7a:12:65:58:31:f3:d5:08:b8:60:a8:
d3:5d:b6:e2:43:25:e0:76:81:f8:7e:a6:09:e0:95:
01:98:07:88:38:7c:bc:72:d1:76:99:6f:05:b4:ff:
86:7b:9e:bd:76:da:b4:36:bd:90:5f:14:eb:ce:a8:
42:46:b3:30:f4:c7:c7:8d:ad:83:bc:fd:8a:dd:68:
f0:64:75:df:83:17:7e:6f:32:70:02:6f:80:66:c7:
14:8b:93:51:79:b5:20:ca:7b:6d:89:9b:35:6b:4e:
f9:c7:40:30:ea:3f:9a:20:2b:55:4f:04:bf:74:b3:
b0:e4:f1:76:19:ae:b2:e0:50:95:ab:e5:15:34:01:
be:bb:a7:6b:9c:7b:04:0d:6c:44:99:a0:08:05:57:
58:c6:da:70:10:c2:a0:fb:6e:9f:22:83:1a:55:5f:
66:58:5d:d5:c7:7e:b7:ca:88:40:77:9d:ad:30:41:
f4:d6:47:cc:c4:8f:ad:28:db:3d:42:3d:7e:d0:c7:
36:66:4b:52:86:fd:05:e7:23:6a:3d:27:2d:51:df:
26:57:fd:6e:c0:43:50:b8:06:82:02:ad:86:7e:ee:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:A9:7F:B1:1A:B4:AA:78:A2:58:26:05:A5:66:A9:0B:BC:6E:83
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/61Wpf7EatKp4olgmBaVmqQu8boM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.96.0/24
Signature Algorithm: sha256WithRSAEncryption
82:15:1a:73:e3:ea:cc:7d:73:14:81:a2:b1:d5:39:37:dd:63:
91:24:0d:17:8a:82:60:4c:79:45:9b:09:3f:3f:24:97:7f:a4:
0f:ed:81:ab:45:a8:2a:39:3c:82:d7:5a:a4:57:22:36:8a:1e:
fa:32:bb:24:ee:3b:e8:97:3e:a8:49:0f:89:9e:a8:b8:ee:a7:
03:7e:ca:00:a5:80:70:ff:6f:bb:62:f9:d8:f8:a3:96:aa:3a:
5f:cc:c7:7b:b4:c7:93:f9:e9:ad:78:33:fc:f6:da:95:2b:7d:
5a:1f:f2:8b:e8:ff:d4:18:72:54:99:45:2f:ba:90:ff:fb:12:
51:20:20:44:83:6d:d9:3d:9c:a7:1d:be:09:7a:6a:7c:38:cd:
2a:54:72:1d:36:04:97:7e:c2:56:56:77:45:06:80:70:9b:c5:
f5:c8:f8:cf:d2:db:fa:79:66:72:d1:14:53:0c:ac:1f:e5:3c:
ad:7d:e5:08:cc:c8:74:8d:f2:61:60:68:ea:6c:f7:f7:21:d7:
d9:6b:98:1d:db:c1:56:77:22:57:6c:24:99:8c:d1:c9:d6:58:
08:9e:37:98:a8:f5:ac:15:51:93:e7:2f:d0:97:c4:c0:a2:49:
80:41:51:16:70:03:a7:fa:bc:7f:f2:d9:0c:33:9b:75:fc:cc:
80:a3:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:33:27 2026 by rpki-client