This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wcj93ZnnO__8_WYrDW4iTlN5myU.roa
File: wcj93ZnnO__8_WYrDW4iTlN5myU.roa (raw, json)
Hash identifier: MCA1FwUyB9/CLHfeyTTFDFSMKpOZDYuxY+WXGBzYcWg=
Subject key identifier: C1:C8:FD:DD:99:E7:3B:FF:FC:FD:66:2B:0D:6E:22:4E:53:79:9B:25
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F84A47C23546F315BE4DF7BED7342A7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wcj93ZnnO__8_WYrDW4iTlN5myU.roa
Signing time: Fri 02 Jan 2026 16:22:37 +0000
ROA not before: Fri 02 Jan 2026 16:22:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209854
IP address blocks: 31.57.0.0/24 maxlen: 24
31.57.1.0/24 maxlen: 24
31.57.2.0/24 maxlen: 24
31.57.3.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.5.0/24 maxlen: 24
31.57.6.0/24 maxlen: 24
31.57.7.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:a4:7c:23:54:6f:31:5b:e4:df:7b:ed:73:42:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1c8fddd99e73bfffcfd662b0d6e224e53799b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:4a:9a:8c:7f:4b:c1:50:73:07:7f:b9:93:
13:03:af:58:10:a7:37:07:05:8f:0a:75:ac:e3:0b:
5c:7f:f5:95:69:66:a7:30:68:3e:d9:2f:0c:6f:ab:
de:cd:37:bb:26:91:66:56:e5:c2:1a:bd:6c:b9:53:
e0:70:ec:77:35:3c:55:1f:ae:a8:bb:76:2a:dd:f1:
1d:98:3d:c2:a8:b9:2d:ba:98:83:79:b9:db:84:05:
a1:ee:ad:5f:64:74:82:88:30:9e:e1:95:bd:5d:c0:
4a:c8:f8:4b:7c:89:60:03:89:33:b0:4d:6c:c2:b2:
93:8c:95:c2:3a:84:f8:b1:69:c0:ec:f3:78:98:d2:
10:09:db:c0:1b:c8:05:c4:4c:bf:72:de:9b:0c:bb:
8b:a6:ba:69:3b:0e:34:3f:67:d6:94:74:73:8e:b8:
3c:23:e1:40:b7:69:94:e6:9c:b3:af:19:9b:24:30:
a1:e7:e1:31:2e:01:4a:96:4d:51:54:12:ef:aa:88:
eb:5c:92:f6:c2:f3:09:67:29:87:43:18:a2:94:d0:
4f:4f:a2:d9:fd:fa:33:94:e4:c0:38:27:c7:fb:15:
55:72:e6:9c:38:67:5d:b6:f5:42:9a:91:51:66:70:
b6:2d:b2:21:9e:1d:9b:69:1d:51:2b:d3:ae:cc:c2:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C8:FD:DD:99:E7:3B:FF:FC:FD:66:2B:0D:6E:22:4E:53:79:9B:25
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wcj93ZnnO__8_WYrDW4iTlN5myU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.0.0-31.57.9.255
Signature Algorithm: sha256WithRSAEncryption
09:df:0d:59:f3:00:00:4f:b8:a1:5a:b5:b3:a3:70:95:df:1a:
6c:39:8e:61:74:d9:65:da:79:35:5e:8e:be:42:2e:dc:3f:49:
34:6f:8c:b3:7f:17:1c:02:06:a7:31:b0:a0:39:c6:20:06:ff:
63:97:ba:25:ad:55:f7:53:4c:0d:0f:27:e1:36:68:8a:c9:10:
3f:e0:2b:b6:e5:aa:aa:85:da:b3:a5:d0:8a:3b:73:97:58:c8:
9f:f3:0c:01:42:f7:97:e8:d6:5b:e9:94:38:06:5b:69:47:02:
66:e1:1f:ee:42:bc:1b:a1:2c:e7:05:23:ec:e2:d8:55:6a:36:
bf:43:03:8f:d8:11:a1:d2:4f:7b:c6:17:b8:49:c5:56:6c:c6:
67:c7:af:84:7f:71:55:85:7a:c9:52:d5:fa:b9:79:8c:00:fe:
ac:ea:f9:39:3f:9c:a2:38:25:4a:20:bd:49:f5:30:2c:9c:38:
3a:89:ac:f4:a1:38:a0:0f:88:1c:d5:e8:09:2a:a3:80:cd:bb:
e7:e0:39:5d:76:e8:de:80:85:55:76:1a:e1:7d:56:5e:b4:66:
69:f6:8a:a5:9e:36:f3:51:78:25:76:82:42:76:52:2e:36:61:
61:4f:a2:bb:31:da:1f:4e:cf:39:a2:4d:aa:0b:e8:f3:0a:91:
51:cd:7e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:36:33 2026 by rpki-client