This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ve6zewET-v_jsts1QvZSSHLYcA0.roa
File: Ve6zewET-v_jsts1QvZSSHLYcA0.roa (raw, json)
Hash identifier: TwxNG2obhKbPFxfF8wLbATiwew3D33IAnlVuvXVjNiU=
Subject key identifier: 55:EE:B3:7B:01:13:FA:FF:E3:B2:DB:35:42:F6:52:48:72:D8:70:0D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B834ECFCAF9E29B7D71AEAD107381A164
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ve6zewET-v_jsts1QvZSSHLYcA0.roa
Signing time: Sat 03 Jan 2026 10:02:18 +0000
ROA not before: Sat 03 Jan 2026 10:02:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 24
31.57.164.0/23 maxlen: 24
31.57.180.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:83:4e:cf:ca:f9:e2:9b:7d:71:ae:ad:10:73:81:a1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 3 10:02:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55eeb37b0113faffe3b2db3542f6524872d8700d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:ad:d7:ea:ad:24:45:b6:f3:b6:d7:7b:2a:
0c:14:a8:6b:5c:1e:5a:ce:c9:f1:1f:a5:7a:69:72:
8d:b8:5b:9b:1c:87:f7:37:ce:46:39:99:84:96:85:
6f:dd:05:12:c6:3a:c2:59:8c:41:54:00:50:6e:e1:
5d:ed:69:3f:ed:d2:9f:d8:fa:aa:f0:47:41:8a:67:
75:d9:b3:99:3c:e3:82:86:04:98:74:81:79:f1:56:
06:c2:1b:6f:62:f8:9e:cb:d1:88:26:ea:35:fe:f7:
34:a9:cf:a0:1c:5a:a4:e0:34:23:3a:dd:0c:5a:3f:
1d:db:17:35:a0:67:8f:bd:0a:93:d2:d9:c9:38:51:
99:d9:0b:8f:e9:0e:b5:9c:94:d2:00:17:9b:5c:10:
8d:48:84:74:b3:12:e5:9f:3b:46:e1:7a:a9:c7:ed:
68:96:7a:a6:16:48:76:40:7f:07:a1:ff:23:11:13:
97:36:e9:a1:db:b2:85:78:86:22:48:3f:79:3b:fd:
da:e1:89:04:b7:25:ad:19:a2:e0:19:1c:8c:07:58:
61:ff:28:7d:48:7e:b2:fb:ff:a6:4a:cd:4c:00:c4:
a5:1e:d3:10:2c:d0:b0:9c:64:ad:d2:72:8f:bb:50:
41:e2:44:4f:00:6b:36:20:91:d0:31:3c:d2:42:7a:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EE:B3:7B:01:13:FA:FF:E3:B2:DB:35:42:F6:52:48:72:D8:70:0D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ve6zewET-v_jsts1QvZSSHLYcA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.58.42.0/24
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ce:ed:31:e9:6e:e5:a2:a4:dd:de:16:a4:20:1a:29:5e:4b:
2e:f8:b3:10:de:bb:23:8d:13:5d:f7:76:7e:17:48:5d:c2:9a:
85:d5:65:af:15:45:da:97:a7:a8:ed:d1:4c:c8:b5:cb:8b:09:
01:d4:47:9c:2f:74:9b:34:9d:98:06:eb:dd:02:b6:84:40:e4:
e8:1a:fe:bc:c8:6a:28:50:88:f2:d3:93:df:59:2b:b0:c9:39:
3f:c9:b4:1f:23:90:18:d9:2b:6d:9a:d9:29:55:d0:01:ee:b0:
86:72:79:7b:35:df:21:20:e0:9d:4f:42:71:35:9e:c4:15:2b:
62:19:b1:7a:32:e0:bc:01:83:c9:26:3b:0d:89:d2:c3:ab:35:
4f:6c:a6:a5:c8:c9:6f:46:70:22:35:35:25:88:46:dd:7b:51:
61:ad:64:23:fc:07:bf:35:6b:c0:7b:3f:54:3f:eb:31:98:95:
a9:fb:e4:7b:02:03:9b:ef:6f:f3:16:ca:99:38:3a:19:15:a6:
b1:d5:57:a4:01:d8:c2:b1:c1:1e:1a:57:97:8f:db:72:a8:e7:
6d:a7:f7:65:07:2f:bf:a7:d4:6b:a0:ad:e7:d4:a4:b3:9d:8f:
74:b6:b3:5d:ef:73:c7:b1:fb:20:cd:68:95:2a:a6:40:84:aa:
0c:fb:25:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:35:51 2026 by rpki-client