This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FuMLmj1EXRbw2TS5reIItMwAvuw.roa
File: FuMLmj1EXRbw2TS5reIItMwAvuw.roa (raw, json)
Hash identifier: gzuK06aFYdw8h7M63f7ZOqJgWjAeWc678r0VRoUsjqs=
Subject key identifier: 16:E3:0B:9A:3D:44:5D:16:F0:D9:34:B9:AD:E2:08:B4:CC:00:BE:EC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019AE844BC2F0686510F2FDB97DA8A1A201D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FuMLmj1EXRbw2TS5reIItMwAvuw.roa
Signing time: Thu 04 Dec 2025 07:30:10 +0000
ROA not before: Thu 04 Dec 2025 07:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 31.57.155.0/24 maxlen: 24
31.57.226.0/24 maxlen: 24
31.59.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e8:44:bc:2f:06:86:51:0f:2f:db:97:da:8a:1a:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 4 07:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16e30b9a3d445d16f0d934b9ade208b4cc00beec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:52:77:21:ee:a6:bc:2b:fb:fc:43:5b:b6:
87:4d:0f:0c:ec:78:ea:db:c9:d7:71:81:25:1f:b8:
77:61:21:4f:b8:6c:db:37:d0:b0:55:97:6c:87:dd:
dc:ea:10:00:50:52:c8:18:58:19:30:a8:25:97:4e:
25:4f:ee:d8:38:34:fe:12:96:32:d9:88:09:09:c6:
fb:90:58:5d:a4:c7:b4:f0:59:97:58:ed:df:b2:ab:
6f:9c:ae:ea:ec:51:68:b4:bf:3c:87:9e:73:de:8d:
d0:33:a1:ad:53:9a:12:ff:3b:fb:3a:49:e4:60:68:
be:48:31:96:e3:95:b7:8c:bf:fc:38:23:0c:9f:8b:
6a:39:c6:5c:12:de:b0:41:96:fb:f5:4b:76:b4:54:
6f:99:6a:06:3e:4d:76:24:39:25:29:44:f2:56:1b:
96:d8:79:1c:e2:fb:8a:01:bf:22:b1:8f:b7:93:61:
c9:4b:50:a1:92:25:3b:b5:e6:23:5f:d5:6a:29:12:
6d:c7:22:b9:35:06:5b:2f:f1:73:ea:2f:79:b6:b2:
6f:14:09:a3:11:3b:c4:6c:b0:b2:71:a3:3b:4d:84:
ba:64:99:bd:88:cc:3a:fb:e0:ef:20:99:3c:13:2e:
9a:62:7e:f2:ae:5a:0f:96:6f:b7:29:ae:86:a6:c6:
20:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E3:0B:9A:3D:44:5D:16:F0:D9:34:B9:AD:E2:08:B4:CC:00:BE:EC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FuMLmj1EXRbw2TS5reIItMwAvuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.155.0/24
31.57.226.0/24
31.59.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:87:bb:95:d1:31:ae:b3:78:fc:93:06:0e:ec:46:94:38:f7:
c1:34:44:f6:cd:bd:e4:4d:c2:7f:28:a6:ec:f4:bf:1e:7d:6d:
90:a7:a9:c4:b1:b9:22:8b:0c:b8:44:1b:be:08:6d:d5:8d:0c:
34:16:95:d3:b8:d7:41:b1:a9:9d:3e:73:8c:55:6a:af:08:60:
e1:51:07:86:44:15:43:49:1a:58:1a:60:1b:61:a0:7e:ca:e5:
f9:95:b2:62:b3:83:1d:4a:dc:09:ae:0d:aa:25:58:8c:26:fa:
eb:17:f3:3a:7b:04:66:22:34:2b:94:01:07:b3:16:0a:80:e8:
b8:0d:df:33:53:eb:d9:31:94:64:54:ea:22:fd:0c:29:4a:bc:
01:c8:09:25:7f:cd:eb:d1:df:67:dd:62:03:fa:b2:ce:c3:41:
2e:e8:aa:16:9a:dc:c5:3d:8d:b7:be:82:c3:6f:54:13:eb:a2:
73:33:cf:fb:14:02:29:2a:70:29:0c:52:61:f7:78:60:98:31:
7d:95:da:69:4b:ce:fe:65:4f:f8:ef:b1:80:30:42:ba:1b:83:
82:bb:dd:4f:68:43:6f:1a:74:5b:68:a4:d3:0c:01:85:e4:c4:
50:a1:47:ba:fe:52:f3:7f:21:26:97:ca:15:09:f3:17:95:73:
02:0a:1a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:04 2025 by rpki-client