This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bDZ7rQGPZmqPOzFu6zxUC-gp-sc.roa
File: bDZ7rQGPZmqPOzFu6zxUC-gp-sc.roa (raw, json)
Hash identifier: X8RwFdXNNCaMQE4uvhJSCNVkqHZ4AIA9LI0/LwANrS8=
Subject key identifier: 6C:36:7B:AD:01:8F:66:6A:8F:3B:31:6E:EB:3C:54:0B:E8:29:FA:C7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B9F7DB984BD7BC7473963C08854EF6191
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bDZ7rQGPZmqPOzFu6zxUC-gp-sc.roa
Signing time: Thu 08 Jan 2026 21:22:55 +0000
ROA not before: Thu 08 Jan 2026 21:22:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135682
IP address blocks: 31.56.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Jan 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:9f:7d:b9:84:bd:7b:c7:47:39:63:c0:88:54:ef:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 8 21:22:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c367bad018f666a8f3b316eeb3c540be829fac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:10:97:ce:fa:f1:78:72:b8:16:bb:2a:70:f6:
8a:87:6b:ae:db:1f:67:97:85:61:6c:c9:ab:6b:a7:
06:d1:32:6c:a9:30:c0:4d:c2:3b:35:71:35:f4:e4:
db:56:d7:be:15:d7:47:84:d6:58:ec:3e:62:5b:bf:
7e:e2:c2:48:51:57:8d:54:8b:4b:48:c2:74:f5:48:
e0:e5:d7:19:b3:36:31:47:8d:dd:a3:bc:69:d5:45:
ad:7a:02:ec:b9:c0:77:f5:41:b5:1f:c1:f8:3d:df:
fe:89:06:8c:7e:f3:44:30:f9:98:a9:84:9c:71:88:
61:8f:fe:75:7d:51:38:c4:b6:ec:9a:2f:17:a3:1c:
2b:4d:eb:4f:2e:0f:e8:e5:9a:dd:11:bb:79:9c:59:
c6:3b:4f:65:ed:80:ea:d9:60:0b:64:42:d6:6c:16:
17:62:81:ad:11:cf:ad:44:5f:1d:f9:2c:df:22:1f:
63:9a:50:1a:00:86:ed:23:56:61:97:40:36:b4:27:
ab:0b:0b:a6:36:02:3c:c9:93:b1:d9:e6:97:72:ed:
f7:0b:3f:d1:ec:0b:95:87:84:3b:f3:08:4b:c1:29:
56:c4:15:6d:d5:be:66:54:76:68:f1:69:be:b7:15:
9c:fd:a8:24:9f:36:92:da:03:6b:50:d9:09:08:ca:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:36:7B:AD:01:8F:66:6A:8F:3B:31:6E:EB:3C:54:0B:E8:29:FA:C7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bDZ7rQGPZmqPOzFu6zxUC-gp-sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.96.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:e9:f9:cf:84:4a:34:19:4e:c1:a7:47:d9:90:fc:18:0e:e5:
26:97:e8:bd:ee:1e:52:64:94:1b:65:3d:27:59:ed:22:45:dc:
f0:a3:c9:da:8b:7f:bd:f6:df:ec:4e:8a:21:00:21:3b:9c:49:
1e:5d:1d:02:ec:59:1f:3d:b2:70:dc:c1:36:ad:5b:01:08:39:
29:4f:74:d6:e9:2f:16:b8:fb:f7:38:f8:c2:9f:e3:c0:4a:4f:
9d:29:63:17:4d:1a:87:8e:5c:a4:b1:b1:a0:3b:d3:70:68:56:
c7:c9:1c:2b:80:55:8f:b1:d2:83:7d:e8:6c:0b:45:c9:92:8f:
4f:0f:8d:35:f1:4d:d8:0a:22:06:89:fa:3d:66:35:7c:7f:74:
c7:52:3a:aa:56:f1:da:34:63:73:dd:99:91:75:a8:0c:09:ce:
88:97:3a:0d:88:4f:18:1d:52:0c:62:80:e7:6e:27:fa:62:d9:
c0:f1:56:9d:f0:f4:66:b5:7f:08:b6:4d:76:8c:92:78:f8:56:
b4:43:ba:55:07:50:2f:20:67:fd:6e:06:1d:c1:b0:e9:2f:25:
a6:62:01:7d:84:7a:4e:f5:4d:36:f4:c4:bd:a4:59:46:5f:22:
dd:cf:e6:c3:b5:e5:6b:ce:5e:c2:ba:98:be:d2:0b:95:dc:88:
52:b1:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 09:45:18 2026 by rpki-client