This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/StZhxvY-_B_ub526V9QQALd4w7E.roa
File: StZhxvY-_B_ub526V9QQALd4w7E.roa (raw, json)
Hash identifier: ve5eF14IRyN96T89d5MXEUgCQmWW2I4SzJGG8hXG6FA=
Subject key identifier: 4A:D6:61:C6:F6:3E:FC:1F:EE:6F:9D:BA:57:D4:10:00:B7:78:C3:B1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F84DFA62C155098242E9EF2B1F00B13
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/StZhxvY-_B_ub526V9QQALd4w7E.roa
Signing time: Fri 02 Jan 2026 16:22:52 +0000
ROA not before: Fri 02 Jan 2026 16:22:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395878
IP address blocks: 31.56.46.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:df:a6:2c:15:50:98:24:2e:9e:f2:b1:f0:0b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ad661c6f63efc1fee6f9dba57d41000b778c3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:18:51:16:28:16:c0:ed:b8:9c:2c:0c:00:
83:f5:05:6a:dc:c3:9f:4a:f8:ef:cb:b5:43:c1:2d:
db:31:e8:79:94:6d:bf:73:b6:b5:ef:d8:0d:73:c0:
40:43:9c:c4:fd:66:21:59:d6:67:9c:ff:1c:a6:8c:
ad:5d:5f:45:31:42:6e:e3:95:a9:13:ce:9e:00:2c:
33:ab:c3:15:fa:44:82:e3:34:e2:c2:32:1d:66:fa:
d0:00:15:6c:2d:c7:82:03:84:b0:ef:7a:19:53:06:
a3:12:25:6b:d7:af:cd:60:48:af:6a:23:c4:a0:d9:
8f:a6:d0:84:36:66:53:1e:ac:01:59:10:e7:f0:e2:
00:d7:19:27:1f:bf:9e:19:3e:fb:4f:d5:e9:fb:54:
ff:8b:76:e3:5b:62:e3:b2:87:54:be:b3:eb:4b:54:
70:5d:50:5e:f9:6f:c1:a6:bc:7d:23:88:39:0c:17:
e3:9f:55:98:0b:5e:b5:aa:1e:51:1b:20:1a:16:98:
7d:21:32:8f:1e:81:81:f3:7a:4d:b5:4e:a7:7f:ab:
ad:17:fc:f2:4d:68:83:ba:c4:82:61:d4:26:ff:b1:
75:b5:23:b2:bc:74:3e:86:82:33:79:e8:c5:a4:54:
0c:24:eb:bc:9f:27:95:84:64:ab:c7:a9:0f:ad:be:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D6:61:C6:F6:3E:FC:1F:EE:6F:9D:BA:57:D4:10:00:B7:78:C3:B1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/StZhxvY-_B_ub526V9QQALd4w7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.46.0/24
31.56.87.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:25:f4:9e:40:80:fe:75:64:55:5f:42:17:9a:c0:a6:14:eb:
34:e0:ba:81:20:24:23:af:6a:ec:75:00:5d:04:1f:ee:cb:ac:
92:d1:d3:ec:4e:2e:a5:0b:cb:c0:ef:f3:16:68:e0:52:00:fc:
6b:b2:a4:0a:43:58:23:9d:bf:0d:34:58:de:d0:0f:e3:9c:6c:
7c:4f:00:ed:1a:a9:d8:06:c2:9f:03:a3:cb:3a:38:4b:10:b0:
7a:b4:9b:0c:a5:9b:1d:6e:8d:16:3b:86:42:92:bc:12:49:61:
ff:e5:c5:07:34:fe:9f:71:de:4d:fe:0f:2b:60:eb:c6:43:da:
e7:cb:19:db:be:04:78:f3:44:0f:7e:fe:cf:af:0c:a2:78:7c:
3f:7f:10:d2:1c:aa:4f:9d:bc:50:f1:13:be:89:b0:46:f6:4c:
3f:9a:d2:cd:f7:fe:dc:f2:66:cd:c3:39:13:88:0f:da:84:b9:
7a:fe:ef:b5:e7:2b:19:86:6e:8b:f4:27:7f:fe:db:43:b8:67:
b7:b3:8e:3b:7b:fc:c0:d5:ab:fc:b1:be:a7:3b:dd:1e:ba:b2:
ef:89:2d:5a:eb:b4:24:ba:c0:d6:7e:b8:f8:3f:7b:32:c9:36:
87:69:cd:39:37:14:79:2b:b2:e2:bf:4c:a0:f8:09:6f:72:5e:
46:55:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:34:45 2026 by rpki-client