This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NCp2dRyECDq1-aGO1LFnNuUHYqs.roa
File: NCp2dRyECDq1-aGO1LFnNuUHYqs.roa (raw, json)
Hash identifier: VmEoNl977NCbes6GuVG4fCMEtK8saXqQUbDMVtl9tzo=
Subject key identifier: 34:2A:76:75:1C:84:08:3A:B5:F9:A1:8E:D4:B1:67:36:E5:07:62:AB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B8ECCBA51D42A21AB8442A16C671800FA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NCp2dRyECDq1-aGO1LFnNuUHYqs.roa
Signing time: Mon 05 Jan 2026 15:35:40 +0000
ROA not before: Mon 05 Jan 2026 15:35:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.211.0/24 maxlen: 24
31.57.96.0/24 maxlen: 24
31.57.200.0/24 maxlen: 24
31.58.180.0/22 maxlen: 24
31.58.184.0/21 maxlen: 24
31.58.192.0/22 maxlen: 24
31.58.239.0/24 maxlen: 24
31.59.84.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.92.0/22 maxlen: 24
94.183.151.0/24 maxlen: 24
94.183.158.0/24 maxlen: 24
94.183.164.0/24 maxlen: 24
94.183.174.0/24 maxlen: 24
94.183.175.0/24 maxlen: 24
94.183.176.0/24 maxlen: 24
94.183.180.0/24 maxlen: 24
94.183.181.0/24 maxlen: 24
217.60.15.0/24 maxlen: 24
217.60.160.0/20 maxlen: 24
217.60.176.0/21 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.199.0/24 maxlen: 24
217.60.208.0/20 maxlen: 24
217.60.224.0/21 maxlen: 24
217.60.232.0/22 maxlen: 24
217.60.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jan 2026 16:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:8e:cc:ba:51:d4:2a:21:ab:84:42:a1:6c:67:18:00:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 5 15:35:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=342a76751c84083ab5f9a18ed4b16736e50762ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:35:00:ca:8a:68:05:15:d3:86:8f:bd:15:
37:4f:ca:dc:5a:81:85:c8:a6:96:4f:48:99:4e:48:
25:88:c1:37:38:89:d1:0b:7e:79:b4:87:07:ff:b4:
04:8d:54:57:39:89:63:bc:67:53:80:70:aa:4a:75:
38:0d:9e:87:2e:b2:6f:8e:62:0b:84:4f:32:8a:c6:
f1:f5:58:03:66:84:1c:ab:25:2f:8d:c2:93:eb:48:
45:51:c5:d5:61:a1:6e:71:2d:35:5d:44:11:6b:f5:
11:f8:81:a4:70:05:35:19:8e:6c:8f:ee:e9:67:50:
cb:63:78:c3:1d:dd:7d:e7:65:9f:e1:67:a5:69:6f:
fa:ad:ce:77:43:db:34:36:2f:5d:48:52:49:79:7c:
29:28:34:93:79:37:56:2b:4a:f7:fb:f4:8c:30:0b:
96:64:cf:ff:32:e9:2b:e4:6b:b3:3d:b0:f3:a5:78:
27:fc:bd:11:1a:83:39:74:7a:8b:b8:fe:2d:f9:bf:
11:dd:7c:8c:7a:ac:fc:3e:c1:ae:bc:d2:a4:b0:58:
7d:72:c0:56:4a:d1:81:dd:9b:81:e8:b6:57:62:2c:
09:b9:74:0b:a2:3b:1c:af:e3:0a:6d:e1:66:6b:33:
14:9e:41:93:21:f7:b3:7a:e7:4f:84:9b:fb:d3:56:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2A:76:75:1C:84:08:3A:B5:F9:A1:8E:D4:B1:67:36:E5:07:62:AB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NCp2dRyECDq1-aGO1LFnNuUHYqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.211.0/24
31.57.96.0/24
31.57.200.0/24
31.58.180.0-31.58.195.255
31.58.239.0/24
31.59.84.0/22
31.59.90.0-31.59.95.255
94.183.151.0/24
94.183.158.0/24
94.183.164.0/24
94.183.174.0-94.183.176.255
94.183.180.0/23
217.60.15.0/24
217.60.160.0-217.60.183.255
217.60.188.0/22
217.60.199.0/24
217.60.208.0-217.60.235.255
217.60.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f1:37:37:62:2e:e4:92:f2:a7:3e:fb:34:40:05:bc:dc:8e:
81:55:8c:88:69:aa:de:b3:4e:aa:24:83:11:26:cb:df:86:6a:
a0:92:da:3a:85:b7:2f:12:c1:c1:86:d3:99:7b:b6:ab:ed:b8:
fa:f9:d6:79:30:fd:ac:0b:e1:60:dd:ab:4a:b5:73:17:9e:2f:
06:66:e5:86:cc:39:48:27:c5:12:fc:3d:3f:d8:52:d2:a9:24:
44:48:4a:93:9d:b6:5d:7d:e8:8c:ba:d6:11:f0:f5:ca:44:5f:
9b:04:5a:ed:68:e5:65:ea:68:86:ae:1a:0d:c9:0c:47:b4:03:
e8:74:1b:68:5d:13:0f:a7:bc:14:41:e0:0f:e3:94:33:95:88:
b4:86:b2:38:96:f3:e0:53:ff:3c:ca:50:44:9a:98:b9:4b:ae:
a9:b4:92:ed:b7:1c:da:9b:f0:23:69:ed:fe:5b:29:e4:2c:39:
7b:20:90:eb:09:cd:6e:45:da:77:5a:c1:c7:75:19:9d:c8:91:
87:8a:25:13:9b:7c:fa:6d:ac:02:4c:2e:b0:da:22:7c:a5:01:
e2:05:7c:0c:e9:92:c4:ef:fd:fb:b9:de:ff:37:4a:7f:5c:77:
85:82:39:42:ce:05:99:17:fc:cf:42:09:96:eb:6e:47:54:62:
cd:06:29:2b
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAZuOzLpR1Cohq4RCoWxnGAD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMTA1MTUzNTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDJhNzY3NTFjODQwODNhYjVmOWExOGVkNGIxNjczNmU1MDc2MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp201AMqKaAUV04aPvRU3T8rcWoGF
yKaWT0iZTkgliME3OInRC355tIcH/7QEjVRXOYljvGdTgHCqSnU4DZ6HLrJvjmIL
hE8yisbx9VgDZoQcqyUvjcKT60hFUcXVYaFucS01XUQRa/UR+IGkcAU1GY5sj+7p
Z1DLY3jDHd1952Wf4WelaW/6rc53Q9s0Ni9dSFJJeXwpKDSTeTdWK0r3+/SMMAuW
ZM//Mukr5GuzPbDzpXgn/L0RGoM5dHqLuP4t+b8R3XyMeqz8PsGuvNKksFh9csBW
StGB3ZuB6LZXYiwJuXQLojscr+MKbeFmazMUnkGTIfezeudPhJv701ZTNQIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFDQqdnUchAg6tfmhjtSxZzblB2KrMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTkNwMmRSeUVDRHExLWFHTzFMRm5OdVVIWXFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBAAf
ONMDBAAfOWADBAAfOcgwDAMEAh86tAMEAh86wAMEAB867wMEAh87VDAMAwQBHzta
AwQFHztAAwQAXreXAwQAXreeAwQAXrekMAwDBAFet64DBABet7ADBAFet7QDBADZ
PA8wDAMEBdk8oAMEA9k8sAMEAtk8vAMEANk8xzAMAwQE2TzQAwQC2TzoAwQA2Tzt
MA0GCSqGSIb3DQEBCwUAA4IBAQBK8Tc3Yi7kkvKnPvs0QAW83I6BVYyIaares06q
JIMRJsvfhmqgkto6hbcvEsHBhtOZe7ar7bj6+dZ5MP2sC+Fg3atKtXMXni8GZuWG
zDlIJ8US/D0/2FLSqSRESEqTnbZdfeiMutYR8PXKRF+bBFrtaOVl6miGrhoNyQxH
tAPodBtoXRMPp7wUQeAP45QzlYi0hrI4lvPgU/88ylBEmpi5S66ptJLttxzam/Aj
ae3+WynkLDl7IJDrCc1uRdp3WsHHdRmdyJGHiiUTm3z6bawCTC6w2iJ8pQHiBXwM
6ZLE7/37ud7/N0p/XHeFgjlCzgWZF/zPQgmW625HVGLNBikr
-----END CERTIFICATE-----
Generated at Fri Jan 9 00:57:56 2026 by rpki-client