This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RiC69eI-CYyKzIwBntPDgLVu1ts.roa
File: RiC69eI-CYyKzIwBntPDgLVu1ts.roa (raw, json)
Hash identifier: s0v4lVwgO95GgX2XfEtra6c1bVZ3+vPNuuxNzRfULEY=
Subject key identifier: 46:20:BA:F5:E2:3E:09:8C:8A:CC:8C:01:9E:D3:C3:80:B5:6E:D6:DB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019BEC2F237E48256546F7E7D4B8F920873A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RiC69eI-CYyKzIwBntPDgLVu1ts.roa
Signing time: Fri 23 Jan 2026 18:47:50 +0000
ROA not before: Fri 23 Jan 2026 18:47:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202051
IP address blocks: 31.58.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 18:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ec:2f:23:7e:48:25:65:46:f7:e7:d4:b8:f9:20:87:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 23 18:47:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4620baf5e23e098c8acc8c019ed3c380b56ed6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:c3:3c:e7:6f:f5:f9:53:ad:72:5d:e6:89:
2c:7c:a2:fb:63:36:c4:7c:87:79:17:1c:fa:c9:fc:
7b:e3:5c:7f:8b:71:e5:a1:9d:34:9b:c0:25:04:4a:
91:43:00:1f:7f:c7:11:85:4b:bf:0a:b4:96:e4:74:
9c:65:fd:3a:88:e2:15:dc:ea:c0:f5:6f:26:8d:0f:
3d:1d:db:75:19:0b:ef:3b:86:0e:08:5e:46:57:1e:
e8:c7:34:b1:1d:b2:e2:be:b2:cb:45:f5:ca:02:9b:
c2:ba:c6:11:78:ab:b3:83:f3:cf:81:31:51:4c:06:
e8:75:29:6a:11:59:6e:80:69:85:42:e2:af:1a:82:
67:bd:f9:57:bb:d3:0f:b4:8b:90:45:ce:9c:69:15:
89:ae:b9:12:b4:b0:ab:ae:86:0d:7c:d1:73:31:f8:
e9:b3:4a:f6:7b:49:b3:cb:19:b7:4a:bb:92:21:4d:
52:15:47:28:ba:3a:0b:13:67:f4:e7:f8:67:f3:04:
bf:82:86:41:e7:99:c2:e0:1d:25:55:c8:99:57:64:
97:45:1c:9e:9e:d8:d1:90:f9:b0:5e:e0:74:2b:5d:
1b:4e:77:3c:a4:a6:d7:67:ba:76:b8:53:25:5a:e0:
1d:55:bd:41:da:88:4e:33:d0:d8:4a:5b:a3:6f:76:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:20:BA:F5:E2:3E:09:8C:8A:CC:8C:01:9E:D3:C3:80:B5:6E:D6:DB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RiC69eI-CYyKzIwBntPDgLVu1ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.44.0/22
Signature Algorithm: sha256WithRSAEncryption
90:3a:e6:e4:fb:60:bb:ad:97:67:aa:ce:6b:5e:cb:9b:66:3c:
1e:60:9d:af:8b:7f:ae:ef:63:7d:f7:10:69:89:eb:c2:ed:7a:
2c:be:52:a4:f2:1a:f9:5b:95:32:28:8f:38:74:4f:04:80:fc:
8d:3d:af:d0:9f:6a:78:e6:8b:6c:42:72:4a:4f:58:e5:ca:42:
5c:36:f2:d0:6b:23:73:ba:c0:07:60:94:c2:22:e9:cb:d0:b9:
1d:ae:1b:95:62:34:b9:c2:7c:c1:89:be:10:b6:ce:57:33:9e:
60:ad:03:f5:4c:3a:a9:20:0a:92:61:ab:0a:25:b8:30:50:c7:
0c:ab:6c:a9:4c:cc:0d:0d:5b:d0:ab:19:bb:f8:c9:5d:18:d6:
0b:73:f2:af:b7:c3:bb:28:65:97:f2:c7:27:29:49:99:79:30:
79:f0:64:d3:a6:00:5c:74:7f:f4:be:0e:0b:b6:fb:9d:02:40:
7f:df:4c:24:8e:85:41:e0:e0:77:47:42:89:0d:bb:51:79:be:
4d:d7:6f:82:eb:5d:f8:72:22:97:d7:95:00:e1:15:46:ea:3d:
85:72:b9:18:71:f8:9f:fe:a7:56:7b:f7:d3:b3:99:ef:4f:5e:
b8:5f:77:46:e8:b9:b4:d5:16:f9:e0:26:84:08:f2:db:47:c0:
ef:e1:83:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZvsLyN+SCVlRvfn1Lj5IIc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMTIzMTg0NzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjIwYmFmNWUyM2UwOThjOGFjYzhjMDE5ZWQzYzM4MGI1NmVkNmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit3DPOdv9flTrXJd5oksfKL7YzbE
fId5Fxz6yfx741x/i3HloZ00m8AlBEqRQwAff8cRhUu/CrSW5HScZf06iOIV3OrA
9W8mjQ89Hdt1GQvvO4YOCF5GVx7oxzSxHbLivrLLRfXKApvCusYReKuzg/PPgTFR
TAbodSlqEVlugGmFQuKvGoJnvflXu9MPtIuQRc6caRWJrrkStLCrroYNfNFzMfjp
s0r2e0mzyxm3SruSIU1SFUcoujoLE2f05/hn8wS/goZB55nC4B0lVciZV2SXRRye
ntjRkPmwXuB0K10bTnc8pKbXZ7p2uFMlWuAdVb1B2ohOM9DYSlujb3auMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEYguvXiPgmMisyMAZ7Tw4C1btbbMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUmlDNjllSS1DWXlLekl3Qm50UERnTFZ1MXRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHzosMA0G
CSqGSIb3DQEBCwUAA4IBAQCQOubk+2C7rZdnqs5rXsubZjweYJ2vi3+u72N99xBp
ievC7XosvlKk8hr5W5UyKI84dE8EgPyNPa/Qn2p45otsQnJKT1jlykJcNvLQayNz
usAHYJTCIunL0LkdrhuVYjS5wnzBib4Qts5XM55grQP1TDqpIAqSYasKJbgwUMcM
q2ypTMwNDVvQqxm7+MldGNYLc/Kvt8O7KGWX8scnKUmZeTB58GTTpgBcdH/0vg4L
tvudAkB/30wkjoVB4OB3R0KJDbtReb5N12+C6134ciKX15UA4RVG6j2FcrkYcfif
/qdWe/fTs5nvT164X3dG6Lm01Rb54CaECPLbR8Dv4YPo
-----END CERTIFICATE-----
Generated at Sat Jan 24 03:48:16 2026 by rpki-client