This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p52tLDatAJH4wCdlkHsetoSZiLM.roa
File: p52tLDatAJH4wCdlkHsetoSZiLM.roa (raw, json)
Hash identifier: wI3LLSzBaQ64pw6iC6w94/R8vIchLlZZmh36SNi7H60=
Subject key identifier: A7:9D:AD:2C:36:AD:00:91:F8:C0:27:65:90:7B:1E:B6:84:99:88:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F84C0697D2CFBFCD4E241197F8E5F4C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p52tLDatAJH4wCdlkHsetoSZiLM.roa
Signing time: Fri 02 Jan 2026 16:22:44 +0000
ROA not before: Fri 02 Jan 2026 16:22:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214279
IP address blocks: 31.57.240.0/22 maxlen: 24
31.57.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:c0:69:7d:2c:fb:fc:d4:e2:41:19:7f:8e:5f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a79dad2c36ad0091f8c02765907b1eb6849988b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:82:6a:53:8d:3b:b3:6d:7c:fd:12:75:de:
e8:60:cf:53:df:11:29:36:bd:da:fe:d8:59:6d:32:
01:09:f8:10:6d:0d:ab:f5:89:1c:99:01:0e:0f:c9:
c1:ac:a6:e9:79:84:6f:b1:5f:de:c0:1a:e7:1a:0d:
a4:57:c4:5b:2d:6f:18:b6:87:72:0c:dd:12:57:da:
a7:d1:e0:76:d9:7a:82:8f:ec:1e:2d:e3:17:ca:5a:
db:56:b3:4e:3c:23:fa:f9:c2:3c:09:6f:60:7d:db:
72:cb:bf:b4:23:c0:16:6c:3a:ae:78:56:7c:ec:c0:
4d:6b:d7:ab:9a:5a:ed:70:3b:fe:d6:78:59:ab:09:
45:fd:df:96:2a:d2:aa:f7:df:a4:17:5a:07:27:4a:
56:d2:a1:f0:dd:aa:5c:ba:8b:e9:c5:dd:35:ee:1e:
a9:98:67:8a:f6:ac:0b:c2:f9:c7:96:7e:ce:ff:a6:
20:01:14:7b:be:d1:6f:bb:42:c2:4a:21:36:f5:1c:
60:e2:b1:87:0f:47:0d:a4:2e:fd:ad:1c:2d:0c:ed:
cb:e7:a7:4b:8e:6c:c4:a3:f0:87:b8:dc:45:37:f1:
95:5f:ba:c8:5e:51:e7:be:13:59:55:da:81:3c:5a:
6f:fc:12:fe:16:5f:77:82:92:79:b2:5a:63:7d:d3:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9D:AD:2C:36:AD:00:91:F8:C0:27:65:90:7B:1E:B6:84:99:88:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p52tLDatAJH4wCdlkHsetoSZiLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:8d:e4:12:d1:16:fb:4d:9d:31:c7:33:2a:a4:59:c5:ba:e3:
f0:87:4c:b4:65:85:0a:53:33:ee:64:02:48:b0:d0:b8:70:ed:
44:ef:fa:4e:51:73:7f:79:46:f3:23:c0:39:d3:ff:f0:ac:3d:
60:8e:07:ba:9b:36:5c:28:f3:c5:46:c4:b6:45:a7:af:8b:55:
ff:6a:3c:28:0a:52:6c:6c:e1:0e:dd:53:72:67:86:e0:00:0d:
64:bd:15:0c:2d:56:b7:b0:23:aa:30:a5:d3:38:6f:f2:ea:1e:
53:26:b9:fd:10:af:5b:bb:fb:3e:79:a0:b8:6d:06:62:a0:c0:
14:ee:e4:43:52:23:a8:8b:7b:7d:0a:fe:e0:cb:d3:68:68:e5:
d5:74:76:04:96:ab:b1:d5:8c:2d:92:b7:0f:35:59:9e:f7:a8:
88:6c:17:95:2a:a6:fd:7e:c9:3e:79:3b:b6:ef:44:f5:db:4b:
e8:79:2e:43:ff:d3:f8:f4:ea:0b:e1:51:9f:f1:5e:0c:d8:11:
cf:b5:c5:26:6b:be:9c:63:86:55:c7:29:d4:90:0b:2b:ae:6a:
8c:52:0b:e6:1d:d6:3c:97:5a:3c:69:dc:8b:f2:b4:26:26:d5:
97:f9:d9:e9:81:df:9a:a4:02:66:9d:24:3c:ea:b1:e2:7f:49:
f0:7d:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:33:25 2026 by rpki-client