This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wG-z3vPJsgxEYMYlyqfWPIeyVnM.roa
File: wG-z3vPJsgxEYMYlyqfWPIeyVnM.roa (raw, json)
Hash identifier: IqDPmuofO+gvc1EMJqgW0UaQmJKV61Phz+M4VT4qzrc=
Subject key identifier: C0:6F:B3:DE:F3:C9:B2:0C:44:60:C6:25:CA:A7:D6:3C:87:B2:56:73
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B515E93804C2EA3434405C508489125C6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wG-z3vPJsgxEYMYlyqfWPIeyVnM.roa
Signing time: Wed 24 Dec 2025 17:18:30 +0000
ROA not before: Wed 24 Dec 2025 17:18:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205896
IP address blocks: 31.57.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:51:5e:93:80:4c:2e:a3:43:44:05:c5:08:48:91:25:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 24 17:18:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c06fb3def3c9b20c4460c625caa7d63c87b25673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:ee:54:4d:2c:f8:da:0b:48:4f:22:1a:c6:
ec:64:4c:a6:9c:74:d4:4b:8c:9b:12:e7:7e:f2:e8:
4d:7e:98:3d:61:d6:b2:33:a3:59:75:ba:72:dd:c7:
16:f8:d4:5b:94:4a:6b:8a:ec:fc:e4:cf:e2:c5:cc:
d4:d5:b3:04:84:79:5c:cd:e4:9f:92:34:5e:df:dd:
df:02:ff:a8:24:86:4f:84:1d:ce:eb:83:8a:80:c1:
de:f8:1f:9f:21:36:d1:c8:cb:e1:0d:df:45:66:27:
b4:18:f7:d5:e0:a3:22:0a:5b:ea:5d:3e:6d:c3:25:
cf:47:02:34:e3:73:f1:30:55:9a:81:d9:53:73:9b:
21:8f:29:94:7d:0c:b4:24:0b:a6:fb:b9:f7:71:9b:
70:ee:d5:48:e8:7b:61:61:bb:34:6b:ba:1e:f0:cc:
2c:11:82:42:28:29:db:2b:1c:d2:78:30:df:e2:60:
fa:cc:57:93:61:2c:37:4b:4c:30:db:bd:1b:8b:80:
82:27:55:f3:2d:94:b4:39:5f:17:d3:65:88:a6:34:
d9:8f:fe:f2:8b:c6:ea:ef:64:40:67:83:ef:27:36:
da:6d:15:3d:3a:3a:30:15:72:8d:b2:34:5f:ec:be:
a9:af:83:e4:c0:55:fe:a1:62:7b:dc:e5:83:f7:5e:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6F:B3:DE:F3:C9:B2:0C:44:60:C6:25:CA:A7:D6:3C:87:B2:56:73
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wG-z3vPJsgxEYMYlyqfWPIeyVnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:dd:32:21:06:f5:db:eb:4d:bb:1a:67:89:d0:6a:dd:a6:ec:
25:74:ae:61:e4:4f:b2:2a:1c:9a:b8:31:57:b3:73:d5:91:65:
1a:28:e9:13:45:a4:ae:db:5b:9d:e8:d8:0c:9e:f5:fa:1c:f9:
d9:8e:0a:30:10:9f:b4:be:77:5d:af:71:50:8e:09:61:1a:15:
af:be:6d:9b:c6:22:6e:ab:2a:e8:02:15:a3:6f:d3:76:2c:55:
f8:0d:73:11:a7:db:13:1b:1e:08:a2:5b:07:0b:99:70:30:9c:
49:59:14:9c:26:b2:ea:91:ff:00:bf:8c:dc:a2:e0:36:a8:d1:
53:6d:e3:ff:4f:65:d4:a2:8b:6e:9f:ac:4d:d3:a4:e1:7e:1d:
cf:09:08:53:c1:eb:db:3d:2e:92:6e:ce:da:6c:b9:12:a9:69:
6c:db:fb:aa:ce:85:97:d2:56:a5:f5:4d:3a:1b:4a:9a:5b:95:
e5:60:46:d7:d0:77:22:fb:90:3a:fa:9c:b6:8f:47:9b:97:9a:
a5:2d:db:d6:98:4a:e8:85:fc:05:c2:c6:a1:17:cd:a6:06:56:
ec:75:e7:11:41:4c:c7:68:db:03:17:ef:3d:ff:98:13:08:6e:
07:12:3c:b4:ca:68:42:eb:d0:8a:3c:d4:6a:b7:a2:22:b3:1c:
05:9e:b5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 10:43:59 2025 by rpki-client