This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/31LqXCpHojYx6Rt887DjR163xxo.roa
File: 31LqXCpHojYx6Rt887DjR163xxo.roa (raw, json)
Hash identifier: Fk0wJvz9kNK6jsX7wBhWeVOLH39ghJFDMdON8iP/W5M=
Subject key identifier: DF:52:EA:5C:2A:47:A2:36:31:E9:1B:7C:F3:B0:E3:47:5E:B7:C7:1A
Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial: 019ACECED717EDDF5BF2B06415BAC969C1C9
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/31LqXCpHojYx6Rt887DjR163xxo.roa
Signing time: Sat 29 Nov 2025 08:50:53 +0000
ROA not before: Sat 29 Nov 2025 08:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 185.155.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ce:ce:d7:17:ed:df:5b:f2:b0:64:15:ba:c9:69:c1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Validity
Not Before: Nov 29 08:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df52ea5c2a47a23631e91b7cf3b0e3475eb7c71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:29:7a:29:a3:c8:7e:66:5d:18:df:88:06:33:
99:71:cb:90:b6:13:cd:8c:2c:76:f9:4e:cf:2d:85:
c9:f8:0f:1c:de:a3:67:bb:e7:a8:6a:26:93:ea:36:
de:fb:e0:25:57:09:c0:c0:36:71:75:20:9d:b6:1b:
2e:32:d4:27:af:6b:35:1b:c8:dc:88:c0:d3:c0:d4:
e3:b7:18:cc:89:ab:f8:31:89:05:11:f1:f2:ca:ff:
d9:83:50:58:93:b2:f5:8e:93:69:3a:ba:82:c3:99:
2d:51:e2:84:99:d3:72:69:04:ef:4c:1f:86:78:be:
b2:77:d0:fd:a9:d1:63:fa:04:cd:b6:37:8d:5e:88:
83:71:9e:20:5e:01:b7:6c:f1:3d:e4:64:b6:f7:f9:
75:94:fd:5a:63:a2:62:bf:c9:38:82:8a:1b:72:cb:
18:52:bf:c8:29:f5:d9:45:aa:9b:61:e2:5b:06:cc:
66:bb:4c:83:c7:a3:10:8c:89:da:e4:ca:af:e7:e4:
56:7d:80:f3:07:6b:04:f3:c0:60:e3:bb:a3:56:46:
05:5f:f7:8d:a7:ae:b9:1d:7b:f5:c8:7e:72:06:76:
ad:4d:09:b0:95:18:5c:8b:f5:52:32:d8:87:2d:2b:
68:cf:2e:22:2a:04:eb:01:b0:e7:df:0b:2c:50:b0:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:52:EA:5C:2A:47:A2:36:31:E9:1B:7C:F3:B0:E3:47:5E:B7:C7:1A
X509v3 Authority Key Identifier:
keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/31LqXCpHojYx6Rt887DjR163xxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.229.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c8:a1:11:e0:be:46:d2:93:36:22:f5:b8:f2:38:1d:13:1e:
ec:24:2a:72:42:3b:da:3d:9c:93:45:6e:46:2e:3c:52:3c:86:
73:a7:d9:89:d1:4e:26:c0:f4:29:f9:75:2d:31:af:17:f2:ee:
e0:9c:d8:0a:8c:2c:47:35:7d:91:09:a6:f6:62:06:ea:ca:aa:
bd:e7:05:60:b7:4f:90:b0:18:66:12:0a:6a:21:3f:fe:ff:d7:
b6:37:e9:d4:ee:5a:d7:70:b7:df:82:9c:99:08:66:c4:3f:46:
73:d8:ff:41:0d:c7:fe:46:0c:16:5c:19:2e:38:0e:be:1b:cf:
3e:31:25:50:51:00:2d:0a:c1:66:5b:0f:f6:79:55:95:fd:76:
79:b4:d2:ef:78:3e:ec:cf:42:d8:d4:dd:99:df:6c:3a:8f:81:
2f:7b:66:08:7a:63:ac:aa:7f:3f:32:f0:4f:d1:59:03:35:20:
08:59:e3:83:f3:ff:0c:cd:f1:95:3c:69:20:8a:55:9b:36:8c:
a0:6d:e4:12:29:a6:62:dc:59:21:d4:b8:48:81:dc:da:a9:8c:
1c:16:9d:88:e3:1f:71:6c:2e:93:a3:38:8f:41:99:e5:83:fe:
0c:e3:e2:be:c2:d4:b5:6d:aa:a7:6e:d4:a5:99:d1:bb:33:0d:
74:4c:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:58 2025 by rpki-client