This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EnEEfSouh8PgNyoyyyTXisFiVDc.roa
File: EnEEfSouh8PgNyoyyyTXisFiVDc.roa (raw, json)
Hash identifier: l3uh9rbVZFyT1PXtYOymX0ALTRdCQeZfsRGG1HSrjJA=
Subject key identifier: 12:71:04:7D:2A:2E:87:C3:E0:37:2A:32:CB:24:D7:8A:C1:62:54:37
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F84CF32CFF8ABFE2410FCC9C6DE9204
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EnEEfSouh8PgNyoyyyTXisFiVDc.roa
Signing time: Fri 02 Jan 2026 16:22:48 +0000
ROA not before: Fri 02 Jan 2026 16:22:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215492
IP address blocks: 31.56.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:cf:32:cf:f8:ab:fe:24:10:fc:c9:c6:de:92:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1271047d2a2e87c3e0372a32cb24d78ac1625437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:4f:1c:28:8e:bd:c2:f6:09:e4:df:bf:7c:
5c:d5:dd:e9:bb:48:81:fa:ad:fd:e9:73:28:ef:c3:
d1:87:2e:61:f3:c6:56:72:f2:43:30:a9:72:02:b8:
70:ae:10:0a:7a:51:e7:d4:d8:65:15:2c:f2:14:d5:
9d:3f:0c:91:c3:25:92:ae:0f:e9:ad:d6:3b:79:ca:
36:7f:dc:60:79:00:cf:59:e5:c8:cb:d5:ce:c2:2b:
53:2d:81:40:4d:b0:f7:be:2c:43:e3:bd:28:a2:ac:
0c:26:7c:1c:8c:b8:16:b7:f3:c9:76:71:b2:7c:a5:
ba:85:db:fc:01:44:bc:f4:b5:e0:87:c7:c6:9d:3b:
90:42:26:90:fb:4f:b2:8c:45:55:19:5a:3f:19:94:
c4:1b:f1:46:04:43:af:bf:32:59:6f:2a:ca:c4:34:
89:9d:1c:ff:7d:f2:d1:b4:6a:6f:cf:5f:13:c0:52:
3d:1a:80:34:57:10:fe:0a:d9:bd:08:0e:64:d4:b5:
ee:84:66:f8:46:d7:48:51:fb:cb:3c:f0:44:91:35:
66:0f:97:02:f2:3e:84:dc:7a:85:67:45:40:71:97:
ab:54:a7:9e:25:32:67:8d:81:39:07:c9:d4:92:4f:
d2:1e:3e:b6:dc:f6:40:60:ea:09:e2:f9:3c:41:eb:
a5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:71:04:7D:2A:2E:87:C3:E0:37:2A:32:CB:24:D7:8A:C1:62:54:37
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EnEEfSouh8PgNyoyyyTXisFiVDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.50.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:82:f0:b3:ef:2b:83:e6:ff:5b:69:5d:c0:01:c2:61:e0:6b:
4b:2b:00:54:de:6d:2a:c0:45:ea:b3:33:ab:95:5f:12:61:16:
b3:77:e1:4a:fb:5f:f2:4b:8d:d2:81:bd:f4:6d:fd:6b:4a:39:
d0:5d:57:7e:99:78:a4:ed:d6:55:1f:22:f9:e2:ae:df:40:b9:
21:c2:7a:a9:c6:0a:d4:73:76:aa:5d:09:2e:72:49:3f:16:23:
5f:da:2c:e3:55:99:55:60:e9:22:64:e5:68:b4:76:68:cd:f4:
e1:7e:b4:50:ba:4c:b6:e5:53:fc:87:5c:77:f1:fd:59:29:d6:
99:48:97:2f:14:d5:4f:f3:1f:2b:51:3b:f8:72:91:ab:8b:7f:
f4:a0:e2:7b:b7:a2:48:08:8e:c1:4e:f7:e2:58:4c:f4:bf:17:
3c:13:f4:d0:20:13:35:4b:61:c2:18:b3:03:4d:dd:d4:f3:76:
4b:a3:34:b2:ea:d8:dc:2c:d6:d3:a3:b0:34:36:42:80:fa:c5:
94:b7:eb:90:60:32:a8:53:27:2f:7e:57:67:7c:43:02:4f:2b:
08:cf:5a:06:a4:3c:f9:83:95:81:c1:81:a9:47:6f:7d:75:cf:
8a:26:d0:08:4d:ed:6b:3d:03:ff:7b:5c:0d:bc:de:4a:50:56:
94:86:c2:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hM8yz/ir/iQQ/MnG3pIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjcxMDQ3ZDJhMmU4N2MzZTAzNzJhMzJjYjI0ZDc4YWMxNjI1NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2phPHCiOvcL2CeTfv3xc1d3pu0iB
+q396XMo78PRhy5h88ZWcvJDMKlyArhwrhAKelHn1NhlFSzyFNWdPwyRwyWSrg/p
rdY7eco2f9xgeQDPWeXIy9XOwitTLYFATbD3vixD470ooqwMJnwcjLgWt/PJdnGy
fKW6hdv8AUS89LXgh8fGnTuQQiaQ+0+yjEVVGVo/GZTEG/FGBEOvvzJZbyrKxDSJ
nRz/ffLRtGpvz18TwFI9GoA0VxD+Ctm9CA5k1LXuhGb4RtdIUfvLPPBEkTVmD5cC
8j6E3HqFZ0VAcZerVKeeJTJnjYE5B8nUkk/SHj623PZAYOoJ4vk8Qeul7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJxBH0qLofD4DcqMssk14rBYlQ3MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRW5FRWZTb3VoOFBnTnlveXl5VFhpc0ZpVkRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzgyMA0G
CSqGSIb3DQEBCwUAA4IBAQCKgvCz7yuD5v9baV3AAcJh4GtLKwBU3m0qwEXqszOr
lV8SYRazd+FK+1/yS43Sgb30bf1rSjnQXVd+mXik7dZVHyL54q7fQLkhwnqpxgrU
c3aqXQkuckk/FiNf2izjVZlVYOkiZOVotHZozfThfrRQuky25VP8h1x38f1ZKdaZ
SJcvFNVP8x8rUTv4cpGri3/0oOJ7t6JICI7BTvfiWEz0vxc8E/TQIBM1S2HCGLMD
Td3U83ZLozSy6tjcLNbTo7A0NkKA+sWUt+uQYDKoUycvfldnfEMCTysIz1oGpDz5
g5WBwYGpR299dc+KJtAITe1rPQP/e1wNvN5KUFaUhsJj
-----END CERTIFICATE-----
Generated at Mon Jan 5 14:34:37 2026 by rpki-client