This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FTtGNISyPjI5xgPyTU9yvM3ZmX8.roa
File: FTtGNISyPjI5xgPyTU9yvM3ZmX8.roa (raw, json)
Hash identifier: T2CDHFIvqKU3LQgVwlnoU19gS/B37fkH7/yi0NURH2s=
Subject key identifier: 15:3B:46:34:84:B2:3E:32:39:C6:03:F2:4D:4F:72:BC:CD:D9:99:7F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F847CA50C5257A577941021AB746A93
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FTtGNISyPjI5xgPyTU9yvM3ZmX8.roa
Signing time: Fri 02 Jan 2026 16:22:27 +0000
ROA not before: Fri 02 Jan 2026 16:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135040
IP address blocks: 31.56.66.0/24 maxlen: 24
31.57.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:7c:a5:0c:52:57:a5:77:94:10:21:ab:74:6a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=153b463484b23e3239c603f24d4f72bccdd9997f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:ea:23:5d:7b:f1:7f:b6:8d:6f:13:d4:cd:
33:10:93:35:46:a3:56:dd:59:ee:d7:5c:99:2c:e4:
d6:a6:0a:b0:6a:a0:c5:07:44:7a:3a:1b:5c:a5:6b:
45:81:8d:11:1a:98:f4:ff:28:72:62:8b:51:23:a8:
67:23:13:ed:4e:1c:13:e2:29:86:23:01:e1:50:f2:
97:ba:68:40:b2:42:e7:4f:a4:8d:a1:1d:4d:c1:76:
15:ec:db:d7:2f:98:9b:1f:3d:d3:1f:c7:15:b3:af:
85:fd:71:3e:d2:84:c2:1f:6e:82:33:f4:db:b0:4c:
a8:d8:b2:c2:6a:19:62:57:8e:eb:1d:38:20:af:5b:
0a:70:ef:a1:21:8b:cc:f0:9d:ef:3d:94:48:57:df:
11:e8:e7:72:dc:2c:ad:5c:4c:a5:21:93:c1:09:fa:
fd:b4:34:86:c7:a1:e7:24:14:93:10:69:f8:1f:fb:
13:20:0a:34:61:da:96:fe:ef:03:ca:36:ae:93:91:
b7:44:fe:50:87:a0:9c:fd:4d:c7:20:ab:62:72:2f:
25:a2:b4:26:9e:81:0d:67:0d:9d:64:2d:62:22:40:
ae:0d:85:8a:e3:41:af:f4:88:66:65:aa:b5:4f:69:
af:30:ee:1d:27:a5:d2:08:d8:62:71:1b:d0:7e:c3:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3B:46:34:84:B2:3E:32:39:C6:03:F2:4D:4F:72:BC:CD:D9:99:7F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FTtGNISyPjI5xgPyTU9yvM3ZmX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.66.0/24
31.57.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:46:7c:d8:62:13:6b:69:33:71:8b:89:4e:68:07:09:21:9b:
1c:88:39:22:01:3e:35:d6:76:0a:31:46:91:7c:09:2d:79:be:
ef:91:83:f8:c0:6c:69:95:c5:b0:52:46:23:c4:7c:94:f5:5c:
4d:7b:6b:0e:8c:f7:e6:f7:7e:0f:e5:56:ec:37:40:d9:8f:18:
af:de:89:42:5d:b0:7c:1d:d9:b0:42:e2:be:e3:53:50:26:ab:
d4:50:be:21:72:11:37:8e:dd:1f:1c:6d:9c:f7:71:1e:1f:bf:
c9:fb:30:9e:f9:85:30:4a:b7:9a:53:96:fd:7b:da:f4:da:e1:
2a:33:4f:24:41:c1:2c:c6:20:47:bc:58:c1:c2:a6:29:b4:55:
2d:ce:51:0a:1c:93:d4:fc:25:43:2e:d4:79:8d:75:e6:09:e6:
af:38:ec:f8:6a:ab:e5:91:1a:c0:c3:67:94:d0:2e:46:92:d6:
3d:7f:6b:a4:f3:f9:55:3e:7e:26:b8:99:7f:6a:d2:f9:25:49:
49:c6:b7:6a:53:49:82:37:94:67:36:61:3a:00:38:1c:07:e0:
eb:2e:28:10:cf:ab:94:37:23:b6:6b:9f:f1:df:c8:2b:84:25:
b9:f7:aa:b0:e3:81:4b:26:bd:5e:89:cc:39:ab:4b:bd:5f:36:
f9:e5:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:33:15 2026 by rpki-client