This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RuN78eqjMuJRWrMpbBVeGXDRjAw.roa
File: RuN78eqjMuJRWrMpbBVeGXDRjAw.roa (raw, json)
Hash identifier: hFLOCKj3WJCXUaIpDTEd/0TLPwOEs50aJlRBBEwx4Fc=
Subject key identifier: 46:E3:7B:F1:EA:A3:32:E2:51:5A:B3:29:6C:15:5E:19:70:D1:8C:0C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F84E13FBD99A2D7415231549487B808
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RuN78eqjMuJRWrMpbBVeGXDRjAw.roa
Signing time: Fri 02 Jan 2026 16:22:53 +0000
ROA not before: Fri 02 Jan 2026 16:22:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398465
IP address blocks: 31.57.226.0/24 maxlen: 24
31.57.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:e1:3f:bd:99:a2:d7:41:52:31:54:94:87:b8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46e37bf1eaa332e2515ab3296c155e1970d18c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:a7:08:c8:03:48:de:ea:75:f1:d0:c6:ad:
77:94:22:e5:06:2a:26:a5:61:19:69:00:21:3c:36:
48:92:09:80:d5:49:c6:38:e5:63:c3:75:3a:a7:25:
93:e6:69:7a:ff:30:63:2f:74:46:13:94:8c:4c:b7:
97:95:58:25:72:c6:2c:9c:6b:06:2f:8f:ce:2f:e9:
53:ec:5f:ce:6d:bb:ec:91:0d:cd:f0:be:4c:51:c9:
f5:42:97:69:27:04:da:51:11:1c:42:71:78:da:63:
17:10:71:b9:21:d8:97:ae:6b:89:63:76:1d:10:03:
0b:76:76:a8:4b:a5:07:b9:0a:d8:59:03:83:3a:a5:
56:36:12:fb:1b:19:b3:7d:64:f9:79:cc:34:bf:f7:
7e:87:ce:3d:c8:18:a3:5d:64:ea:cb:c3:a2:ce:aa:
c0:bc:47:26:67:af:41:34:e9:9a:3e:a7:cf:29:2e:
d0:0b:18:95:80:d7:cf:a5:2b:56:25:c8:e2:df:b1:
9f:93:54:66:fa:ce:96:f0:17:95:0f:76:87:03:be:
bf:5c:72:54:a6:3b:de:da:d6:64:03:5c:0f:38:8d:
af:be:04:4e:b3:c7:74:72:8d:c2:7e:d5:6b:64:87:
8b:ec:3d:0f:18:3b:58:c7:53:49:f4:af:69:b0:fc:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:7B:F1:EA:A3:32:E2:51:5A:B3:29:6C:15:5E:19:70:D1:8C:0C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RuN78eqjMuJRWrMpbBVeGXDRjAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.226.0/24
31.57.246.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:78:8b:1a:a3:f2:c1:0d:7a:b1:34:de:f3:57:69:34:96:86:
23:a5:6d:83:e3:ff:5b:78:87:77:85:db:89:9a:cc:9a:23:4c:
d9:da:c1:e1:ca:a3:1c:b4:09:a4:66:d9:b8:45:63:e1:bf:ed:
bb:d3:0d:ab:8e:24:e9:ea:5e:8f:f8:25:bf:ec:f9:3c:2c:c6:
8d:ed:56:10:ca:1c:7b:28:05:94:6a:51:c3:93:43:52:a3:fb:
41:a2:4a:9b:d3:9c:01:e2:ee:06:be:66:33:7a:f0:00:75:ab:
5c:c5:36:48:44:2e:4b:66:cb:10:c2:97:e6:c6:05:04:55:3a:
98:bc:22:ee:e2:54:68:50:fb:13:8d:dc:7c:70:28:a5:3b:ad:
77:28:66:07:34:e7:7d:b6:e9:99:d0:59:65:aa:00:e9:d0:33:
ac:e0:03:dc:dd:86:d5:83:84:78:95:7c:08:21:52:42:68:61:
b6:0b:ef:77:8c:9c:02:7f:28:73:0f:50:b4:39:97:42:42:b1:
d8:01:5f:04:93:06:95:c1:8e:b3:77:15:95:de:d4:09:21:8f:
5c:e2:71:db:42:16:81:29:b8:ca:18:11:cb:1d:62:db:3e:f0:
73:56:b0:7b:67:9f:59:de:08:07:90:7a:94:1b:33:b5:5a:0a:
c7:c7:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:33:03 2026 by rpki-client