This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WBw0c7HWRvcQIdjP9YxEFmNnCy8.roa
File: WBw0c7HWRvcQIdjP9YxEFmNnCy8.roa (raw, json)
Hash identifier: n0/N+/vDZeNSftfYc+9QgTxkontg15ZcnmxZHqtgG/0=
Subject key identifier: 58:1C:34:73:B1:D6:46:F7:10:21:D8:CF:F5:8C:44:16:63:67:0B:2F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F84B90B3362E19D7F56A41B519AA57A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WBw0c7HWRvcQIdjP9YxEFmNnCy8.roa
Signing time: Fri 02 Jan 2026 16:22:43 +0000
ROA not before: Fri 02 Jan 2026 16:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213930
IP address blocks: 31.57.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:b9:0b:33:62:e1:9d:7f:56:a4:1b:51:9a:a5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=581c3473b1d646f71021d8cff58c441663670b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:59:d7:42:92:47:60:e8:f5:a1:a5:55:fb:
2c:56:16:01:dd:40:7c:49:00:4a:84:f2:9a:99:cd:
99:b8:52:18:d2:75:98:40:84:0f:37:c0:a4:97:fe:
14:c1:1e:f2:48:fe:a1:58:60:1a:6e:a7:2d:08:e0:
e3:1c:70:b2:98:83:48:67:e7:1c:bf:02:90:45:48:
15:82:ae:a0:fd:18:67:1a:b3:87:53:77:52:4e:09:
c2:a6:86:39:0f:72:b6:ce:ac:25:6f:e9:7d:d9:e6:
01:89:58:b6:c3:4e:70:6b:f1:73:2e:17:cb:18:55:
e1:7d:c8:17:d3:75:30:e7:31:1a:94:1f:ca:4b:3c:
b2:1f:a7:f8:41:09:db:43:6c:db:b6:ac:f9:b2:4d:
58:18:ab:38:2d:49:cb:54:a4:5a:1e:f8:f1:c6:a0:
45:2e:8b:34:0f:55:9b:11:8b:e3:4f:d3:1d:a7:6e:
42:57:30:b2:03:35:e7:60:d7:e5:05:5b:bd:38:b0:
3c:10:3b:10:ad:70:c6:09:0c:fe:58:ed:86:94:0a:
39:56:33:c9:eb:5c:b8:e4:25:b2:7b:67:31:7f:cc:
58:86:cb:b9:74:5b:76:9d:f6:bd:4f:8d:5e:f5:68:
36:cc:d2:61:b9:27:49:7a:6b:73:b5:d2:5a:05:46:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1C:34:73:B1:D6:46:F7:10:21:D8:CF:F5:8C:44:16:63:67:0B:2F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WBw0c7HWRvcQIdjP9YxEFmNnCy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.242.0/24
Signature Algorithm: sha256WithRSAEncryption
22:29:4f:85:e8:7b:37:73:1b:96:c5:f9:56:eb:91:05:35:63:
3f:e1:6a:78:4d:16:8c:ce:da:a3:26:56:52:fd:2c:b5:13:f9:
2b:dd:7e:bd:11:18:cb:c1:d8:8a:aa:17:f8:81:f6:18:51:21:
68:1b:99:5b:a4:70:12:a2:0e:bb:51:a6:3b:84:f5:6c:6b:c5:
09:e8:94:32:c4:ca:4a:bb:d2:9a:53:ba:04:39:c1:f2:dd:8a:
e2:bc:bd:56:f2:6e:76:c1:ac:43:29:40:3d:3d:5c:3b:c1:da:
b2:86:30:54:a9:a9:bb:a9:b6:a4:5d:e6:d6:48:a8:f7:5f:3d:
a8:b7:e5:af:c2:f3:e8:ad:8d:99:7d:27:15:54:c1:3b:2d:37:
8d:a5:62:4c:d0:50:1c:65:8b:d0:41:77:3b:0f:1b:53:b4:8f:
d7:50:a6:8f:07:79:29:cb:35:14:62:74:09:cf:fb:38:65:92:
38:c6:28:3f:1f:70:83:e1:47:62:a7:54:9d:04:73:5e:12:84:
26:37:3e:13:25:72:c7:02:6c:37:5b:37:20:14:a4:6d:16:dc:
24:f1:d7:61:80:bc:fd:37:72:fc:68:89:d2:f1:76:cf:30:00:
ee:10:50:17:dd:ad:26:0d:a1:ad:67:18:d4:0c:8e:4d:fa:1f:
42:b9:9f:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hLkLM2LhnX9WpBtRmqV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODFjMzQ3M2IxZDY0NmY3MTAyMWQ4Y2ZmNThjNDQxNjYzNjcwYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZhZ10KSR2Do9aGlVfssVhYB3UB8
SQBKhPKamc2ZuFIY0nWYQIQPN8Ckl/4UwR7ySP6hWGAabqctCODjHHCymINIZ+cc
vwKQRUgVgq6g/RhnGrOHU3dSTgnCpoY5D3K2zqwlb+l92eYBiVi2w05wa/FzLhfL
GFXhfcgX03Uw5zEalB/KSzyyH6f4QQnbQ2zbtqz5sk1YGKs4LUnLVKRaHvjxxqBF
Los0D1WbEYvjT9Mdp25CVzCyAzXnYNflBVu9OLA8EDsQrXDGCQz+WO2GlAo5VjPJ
61y45CWye2cxf8xYhsu5dFt2nfa9T41e9Wg2zNJhuSdJemtztdJaBUZafwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFgcNHOx1kb3ECHYz/WMRBZjZwsvMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvV0J3MGM3SFdSdmNRSWRqUDlZeEVGbU5uQ3k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHznyMA0G
CSqGSIb3DQEBCwUAA4IBAQAiKU+F6Hs3cxuWxflW65EFNWM/4Wp4TRaMztqjJlZS
/Sy1E/kr3X69ERjLwdiKqhf4gfYYUSFoG5lbpHASog67UaY7hPVsa8UJ6JQyxMpK
u9KaU7oEOcHy3YrivL1W8m52waxDKUA9PVw7wdqyhjBUqam7qbakXebWSKj3Xz2o
t+WvwvPorY2ZfScVVME7LTeNpWJM0FAcZYvQQXc7DxtTtI/XUKaPB3kpyzUUYnQJ
z/s4ZZI4xig/H3CD4Udip1SdBHNeEoQmNz4TJXLHAmw3WzcgFKRtFtwk8ddhgLz9
N3L8aInS8XbPMADuEFAX3a0mDaGtZxjUDI5N+h9CuZ/K
-----END CERTIFICATE-----
Generated at Mon Jan 5 14:34:55 2026 by rpki-client