This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jWoDh40dbdLh8IRx0e9wi9FJGLc.roa
File: jWoDh40dbdLh8IRx0e9wi9FJGLc.roa (raw, json)
Hash identifier: lEyqV1ucn+nOLCXdbfYdDFSYb8YZyb3sQCcj3yBiGDs=
Subject key identifier: 8D:6A:03:87:8D:1D:6D:D2:E1:F0:84:71:D1:EF:70:8B:D1:49:18:B7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019AED7A1D13CB9240CFAC41E8ADA78971CD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jWoDh40dbdLh8IRx0e9wi9FJGLc.roa
Signing time: Fri 05 Dec 2025 07:46:34 +0000
ROA not before: Fri 05 Dec 2025 07:46:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 31.56.89.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.183.150.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.169.0/24 maxlen: 24
217.60.199.0/24 maxlen: 24
217.60.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ed:7a:1d:13:cb:92:40:cf:ac:41:e8:ad:a7:89:71:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 5 07:46:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d6a03878d1d6dd2e1f08471d1ef708bd14918b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:17:f8:e4:36:34:de:75:1c:26:85:9e:78:
c6:02:20:c7:39:37:a3:09:f1:7c:1b:3a:c5:22:de:
89:17:b8:6c:d3:70:80:56:c9:ac:a1:33:48:77:ad:
de:84:65:48:de:9c:0a:84:1f:cc:c7:68:67:b4:55:
0c:2e:6c:83:03:4d:5d:f6:35:63:22:53:4b:8f:f4:
c4:35:75:83:86:68:77:9d:e5:7a:c8:b5:bb:29:70:
c4:b6:e6:e7:52:98:71:66:42:8a:58:d7:12:fd:87:
16:dd:65:0e:7b:7e:f5:5b:79:65:14:b8:92:f6:a4:
01:72:1c:6f:a9:68:bb:bc:93:4e:21:00:5e:e8:95:
d1:c9:ed:51:74:77:a1:4c:ba:9b:c3:d4:25:15:99:
d3:ed:84:7a:40:27:37:5a:98:8f:8d:e1:d8:d7:fd:
ba:bd:fa:53:a4:48:68:24:2c:1b:ff:68:a5:8b:1b:
82:2f:6b:88:cd:5b:99:e1:f4:55:f6:3a:69:f1:74:
37:bf:44:81:b7:b6:2c:62:26:16:2e:ea:d5:6a:ec:
5b:2d:61:ef:6f:31:b3:e8:55:e1:48:4c:77:bb:5a:
f9:48:73:b2:5b:ca:05:d2:8a:90:d3:ed:fb:38:6d:
0c:da:53:97:d2:08:a6:c0:75:c6:b7:a9:dc:3d:1f:
fc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:03:87:8D:1D:6D:D2:E1:F0:84:71:D1:EF:70:8B:D1:49:18:B7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jWoDh40dbdLh8IRx0e9wi9FJGLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.89.0/24
31.58.237.0/24
94.183.150.0/24
94.183.162.0/24
94.183.169.0/24
217.60.199.0/24
217.60.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:16:f9:9a:a5:35:5b:2a:0f:ad:bf:ce:cc:5d:18:cb:cd:38:
2a:4c:5d:59:ec:46:41:2e:b2:f0:34:70:00:f1:35:6b:42:39:
05:8d:19:ce:b6:c1:dc:f4:bb:43:53:27:29:3c:e6:dc:48:75:
7c:f2:fb:52:cf:96:32:b5:ea:67:b0:9d:25:a9:fc:51:6b:8f:
35:a4:c7:f0:1a:2a:8d:0f:ab:c6:ff:2c:76:97:3a:77:1d:c1:
dd:cb:79:18:a8:2c:68:87:f5:cc:09:09:51:63:ac:31:24:40:
a8:fd:dd:22:25:9a:ab:8c:f9:9a:09:c0:b9:92:40:06:4c:75:
96:36:47:05:58:b6:99:2d:da:20:27:eb:c5:59:e4:52:1b:8b:
f9:7a:5f:84:a2:93:73:9a:a2:98:ef:bc:44:27:3f:8b:9e:67:
4b:1a:aa:86:c5:d8:5d:05:f8:09:1d:d3:c5:64:ae:95:3f:6e:
e4:cf:aa:73:75:c1:e3:92:05:91:01:08:87:b1:6f:f8:b0:c5:
95:1c:c0:9b:71:eb:13:83:4c:ed:f7:8b:83:5a:fa:ee:23:a5:
7d:21:91:fd:06:bd:8c:d9:90:b0:55:5a:29:82:47:1a:83:7c:
1d:4a:ab:ee:88:72:e4:40:3a:c0:2d:4c:c8:ea:c4:6d:c9:61:
c7:a6:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:37:13 2025 by rpki-client