This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/miBlynDoqDLsCIf9yWirQ-D8sms.roa
File: miBlynDoqDLsCIf9yWirQ-D8sms.roa (raw, json)
Hash identifier: yLkNVxRiKq9j9Wrvb74ANbHn174mfB0C2HOs94frpAQ=
Subject key identifier: 9A:20:65:CA:70:E8:A8:32:EC:08:87:FD:C9:68:AB:43:E0:FC:B2:6B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F8460FBE59989197C9020FE287188F7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/miBlynDoqDLsCIf9yWirQ-D8sms.roa
Signing time: Fri 02 Jan 2026 16:22:20 +0000
ROA not before: Fri 02 Jan 2026 16:22:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 31.56.230.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:60:fb:e5:99:89:19:7c:90:20:fe:28:71:88:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a2065ca70e8a832ec0887fdc968ab43e0fcb26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:af:88:46:8f:93:03:58:78:3b:cb:f9:40:
92:5d:bb:08:ce:fa:d9:6b:79:ad:66:7e:24:d5:01:
97:fe:63:64:31:1c:52:1b:50:20:2a:a3:18:72:8d:
6b:ec:3e:3c:e8:9c:92:e0:a5:a7:35:88:5b:ff:b2:
d3:2c:37:84:ca:da:26:d9:88:2f:a1:db:14:11:5c:
9e:a1:e7:f8:a2:e0:46:77:da:3a:1b:c3:d8:ed:26:
60:f5:a5:28:ec:be:b2:87:34:32:6f:74:8e:67:e2:
48:53:0b:6b:2b:00:ed:2e:ad:52:5a:b2:3e:de:46:
54:0d:70:5b:c7:bd:9e:fb:52:ef:0b:5e:00:7e:76:
88:0a:b6:dd:a5:7a:31:64:de:3a:4f:f9:05:be:06:
8a:93:4d:44:63:ac:99:92:24:c2:49:5f:0a:41:c1:
d5:cb:bb:90:1c:8c:b5:ef:8d:4c:b0:28:7b:f2:d2:
e2:2d:b8:2c:90:f7:dd:fb:43:4c:a6:c1:92:15:a5:
93:03:e9:d4:28:48:02:12:47:3b:d8:8a:8a:14:14:
ef:1e:d3:cf:17:7a:aa:c7:e1:76:9e:0b:a3:2a:4a:
7a:81:6f:69:03:11:d2:f6:a7:cf:ac:35:e4:5c:67:
6b:d8:11:e6:bb:06:2c:45:18:bb:73:4c:1f:6c:d3:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:20:65:CA:70:E8:A8:32:EC:08:87:FD:C9:68:AB:43:E0:FC:B2:6B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/miBlynDoqDLsCIf9yWirQ-D8sms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.230.0/24
31.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2a:8d:40:ca:29:e6:b5:d4:d9:06:01:4f:04:6e:32:98:09:
ad:09:ca:e3:3f:9a:93:40:22:b4:bb:9a:10:09:5a:b9:6b:c5:
5a:ce:f0:20:35:4e:fc:3a:e0:4b:e0:a4:44:d9:7e:ef:eb:96:
3c:f1:d8:68:ec:80:88:d8:44:54:e8:c6:5b:18:c0:66:e1:be:
05:f7:76:5d:ed:05:8e:26:76:d9:d3:13:77:3e:cc:e7:1e:ee:
69:b0:20:0d:ce:5a:0f:03:b1:c5:0f:a0:f4:01:87:f5:be:c2:
78:97:4e:04:97:b4:37:65:3c:f7:5b:e2:e8:40:2e:96:6f:d7:
a8:fb:b6:1d:e6:5b:ea:7d:64:9f:7a:f6:3a:cf:49:8a:65:0d:
16:7a:be:59:3b:1c:bb:0d:75:06:ac:99:67:9a:3e:b6:9f:a6:
0b:fb:15:7b:ff:15:94:11:1a:69:47:67:41:64:a2:1c:b9:a3:
73:c0:9b:59:09:ce:1e:23:d3:ab:81:c3:26:07:c2:85:37:98:
a9:67:42:df:0a:c3:6d:ea:5f:77:e9:0c:c4:7b:96:b6:05:5d:
7c:03:ea:0a:a2:40:75:cb:c6:15:09:a1:4c:2e:a2:63:1c:a8:
2f:70:7b:8b:f4:38:75:9b:09:23:50:3c:b2:ba:20:ab:33:3c:
70:5b:0d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:33:10 2026 by rpki-client