This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zOzaMU5X6wnV6Ms1Fd_BOgUHU5s.roa
File: zOzaMU5X6wnV6Ms1Fd_BOgUHU5s.roa (raw, json)
Hash identifier: QpPJ1Nm8XvjoUwVkpz3uLgnjCJjC/44C/LHPYDF50aI=
Subject key identifier: CC:EC:DA:31:4E:57:EB:09:D5:E8:CB:35:15:DF:C1:3A:05:07:53:9B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F84D17C2FADFE73E963850D81CAA3C5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zOzaMU5X6wnV6Ms1Fd_BOgUHU5s.roa
Signing time: Fri 02 Jan 2026 16:22:49 +0000
ROA not before: Fri 02 Jan 2026 16:22:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215727
IP address blocks: 31.57.206.0/24 maxlen: 24
31.59.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:d1:7c:2f:ad:fe:73:e9:63:85:0d:81:ca:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccecda314e57eb09d5e8cb3515dfc13a0507539b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:25:9e:3d:da:30:81:c6:93:b8:53:4c:2f:
5a:e0:38:74:cf:bf:38:09:b2:9f:4b:3c:ca:99:d5:
54:48:fe:93:41:fe:f9:3e:16:8c:85:0c:2a:4a:6a:
c3:21:d9:27:1f:e8:6e:86:40:b8:ab:f9:02:28:4b:
26:5c:81:fb:9a:c6:e9:39:da:73:ec:4c:35:7d:df:
1d:37:56:0d:39:8f:d0:61:c5:dd:93:1b:53:d2:6d:
93:37:35:ac:ed:8b:0d:e7:37:36:a9:87:4d:f2:00:
c3:14:f4:c4:6d:83:bf:47:29:d1:a8:8c:51:f1:17:
f9:47:ab:8d:69:05:c2:8a:e7:4a:6a:bd:11:98:4c:
6f:c2:e7:38:7a:e0:f8:71:9c:1b:57:ab:c9:b2:5e:
c9:ab:90:7a:71:d9:64:c7:47:4b:e0:e7:d4:9c:ab:
af:12:df:e1:98:76:2c:ba:89:57:65:5a:84:cd:07:
ba:fa:a9:89:7e:87:12:2c:a6:96:ed:6f:a9:e6:38:
74:12:b4:b7:e7:98:fb:7e:2d:9d:99:5e:e5:56:b3:
d7:f1:54:cd:63:58:77:77:3c:90:f1:2f:fe:92:49:
a7:68:ec:e5:e7:55:25:3e:7e:21:46:47:79:08:db:
ce:91:8c:c7:50:54:82:c6:9f:54:91:6e:fc:b6:dc:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EC:DA:31:4E:57:EB:09:D5:E8:CB:35:15:DF:C1:3A:05:07:53:9B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zOzaMU5X6wnV6Ms1Fd_BOgUHU5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.206.0/24
31.59.99.0/24
Signature Algorithm: sha256WithRSAEncryption
99:97:bc:b7:25:41:b0:0d:04:e2:2a:0d:d7:86:bd:f0:14:9f:
30:35:62:05:68:38:ac:89:bf:ef:48:c5:c1:0f:50:6f:9d:7e:
d2:5e:b0:e8:57:1a:52:5b:7c:fe:1c:78:4e:94:64:03:d2:3d:
82:bf:07:49:98:dd:88:20:60:ea:c0:1a:77:3c:b3:07:14:31:
ae:b0:3f:e9:62:77:4a:21:d7:7f:c1:66:27:79:34:da:6d:db:
17:93:f7:a6:5a:18:72:59:34:a9:c5:f5:49:0a:a7:47:1c:ac:
cb:d6:09:1f:b6:f1:03:42:db:85:c9:ee:20:23:20:ba:45:c4:
e1:24:e3:bf:b3:d1:f3:c5:c6:28:1f:fa:17:05:e0:f9:7c:ef:
b9:ad:51:34:38:12:92:95:f0:25:27:5c:e9:db:e4:05:e1:35:
67:1e:b7:cb:d4:5c:db:96:96:2c:95:7d:2b:55:11:5a:00:f5:
da:fd:39:00:33:a2:88:b5:81:5f:8e:e2:b3:f3:e6:51:3b:fc:
ec:66:ca:74:1d:94:70:c7:f4:c5:f1:05:74:bc:cf:95:72:4f:
a7:e3:22:ef:60:11:56:d5:97:96:ae:ea:15:68:ba:64:31:e0:
a8:0e:db:6e:28:19:28:30:a2:3f:ba:73:78:43:e8:f7:12:04:
f3:51:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:39:16 2026 by rpki-client