This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/szJDTDjk11lPCTowxUuTkr1LOjA.roa
File: szJDTDjk11lPCTowxUuTkr1LOjA.roa (raw, json)
Hash identifier: tZ3E5yp9ifwL77hdiUkOobqFo6CYXkARUapRpbadEZc=
Subject key identifier: B3:32:43:4C:38:E4:D7:59:4F:09:3A:30:C5:4B:93:92:BD:4B:3A:30
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 019B7835558B8F27446452D6DC2F890CA74F
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/szJDTDjk11lPCTowxUuTkr1LOjA.roa
Signing time: Thu 01 Jan 2026 06:18:39 +0000
ROA not before: Thu 01 Jan 2026 06:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12735
IP address blocks: 31.169.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:55:8b:8f:27:44:64:52:d6:dc:2f:89:0c:a7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Jan 1 06:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b332434c38e4d7594f093a30c54b9392bd4b3a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:55:3c:55:af:91:47:62:c8:56:da:93:c6:
76:76:c6:0c:4d:4b:b6:4c:3c:4f:56:d1:2f:1b:ed:
7f:d3:d5:53:d7:cf:06:71:97:60:71:13:74:02:3f:
1f:3d:81:db:d2:fa:aa:d9:60:ad:f1:de:2f:dc:e8:
3b:0f:18:15:a6:81:f5:66:96:3e:49:05:25:43:4a:
4c:80:36:b4:0d:9b:0f:45:46:b0:1e:68:f6:6c:f9:
37:37:0f:53:4f:70:84:cb:31:ab:6a:1e:27:03:ba:
5e:ab:b6:75:76:18:d5:85:4c:ee:b0:76:49:18:51:
3e:f6:88:60:ca:80:03:33:bc:92:93:db:b4:6e:bc:
79:c8:40:0a:49:98:b2:9c:dc:2f:85:c2:18:8a:6c:
6f:28:8c:63:36:73:41:17:5c:4c:84:a6:49:17:13:
ef:60:18:93:65:d5:15:60:d2:4d:81:c8:8a:a2:50:
fc:3e:05:3d:e5:89:09:e2:13:f3:8e:31:59:5a:8e:
6a:c4:00:ed:fb:5a:4e:52:8a:d3:9a:d4:78:20:79:
4a:9a:47:92:85:20:5d:d4:aa:75:55:a2:41:4d:be:
f3:c5:48:b9:be:f5:ad:8a:d8:67:80:bf:45:91:82:
02:ba:85:aa:33:7a:5d:dc:06:cc:6a:36:de:81:2b:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:32:43:4C:38:E4:D7:59:4F:09:3A:30:C5:4B:93:92:BD:4B:3A:30
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/szJDTDjk11lPCTowxUuTkr1LOjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:58:24:11:24:78:58:0c:c3:b5:58:b2:81:60:df:b7:3d:5a:
5d:22:3f:75:38:3f:13:2a:c3:84:28:5c:3f:ee:9c:2b:d8:26:
8e:fb:12:c6:48:d9:17:18:21:14:29:48:30:2b:e4:09:4e:b3:
5b:b1:77:62:a5:f2:11:c6:88:06:25:88:e4:da:20:32:53:07:
ea:19:f1:75:4d:07:ff:4a:bb:d5:6b:7e:ad:f9:d4:7f:4e:ee:
e0:1a:e5:51:cb:a1:70:20:19:70:85:c8:4c:ff:41:fe:b1:2e:
b7:85:d5:20:d2:87:9d:ff:da:40:6f:91:dd:f5:10:eb:09:c6:
05:14:39:10:99:88:5c:c8:48:5f:f1:17:27:20:51:5c:ea:da:
96:f1:2e:0b:60:88:8a:fb:5d:d3:d9:ef:86:c2:98:f9:36:2e:
16:bc:3b:8f:80:60:b3:a0:58:03:ba:72:79:93:6e:a5:bb:ee:
2a:5e:28:1e:9d:5c:11:d3:46:1d:f2:f9:d0:77:79:3a:79:d0:
de:24:c1:cc:2f:d7:05:92:ee:b6:b0:bc:c3:ef:b9:3a:25:44:
b6:b7:4c:eb:15:c8:46:74:2d:26:8c:d6:06:f9:0d:ca:e1:2b:
a8:96:07:fb:f0:45:f2:5e:16:2b:95:eb:e1:4b:8e:7a:06:ac:
d2:f8:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:03:44 2026 by rpki-client