This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SKquyt0mSLTBy_j8gzysoVVQBAg.roa
File: SKquyt0mSLTBy_j8gzysoVVQBAg.roa (raw, json)
Hash identifier: GcEOV1T8j/YeMN0yY98WxJ433JIylsIpCcvZ2xi+Rtc=
Subject key identifier: 48:AA:AE:CA:DD:26:48:B4:C1:CB:F8:FC:83:3C:AC:A1:55:50:04:08
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B0896AF1E41A76E593A87F4A333EE6D76
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SKquyt0mSLTBy_j8gzysoVVQBAg.roa
Signing time: Wed 10 Dec 2025 14:07:31 +0000
ROA not before: Wed 10 Dec 2025 14:07:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135682
IP address blocks: 31.56.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:08:96:af:1e:41:a7:6e:59:3a:87:f4:a3:33:ee:6d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 10 14:07:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48aaaecadd2648b4c1cbf8fc833caca155500408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:5c:59:05:3c:c1:71:a1:3d:f0:f5:df:e7:
7f:00:22:66:d2:01:bc:02:b1:c7:f1:38:ba:22:42:
95:85:59:87:4d:e8:6b:18:05:76:0c:4b:72:d0:a4:
de:03:a9:61:90:f3:4e:88:7d:2e:23:20:58:6f:df:
b9:16:e9:87:57:b1:e5:8e:07:12:83:0e:1a:5a:76:
91:7a:5b:2f:f4:79:c0:7a:a7:5f:35:e8:9a:36:de:
4c:4d:4a:77:46:37:13:fc:e9:93:d9:86:0b:2f:ec:
8c:8e:a7:7e:98:9b:1c:83:ff:c6:80:1f:02:ca:12:
6d:50:fc:d2:4b:29:5f:f8:d5:cf:3c:e5:be:53:98:
08:56:72:4f:91:7b:37:a6:03:6d:c5:c5:d9:4e:e6:
7f:ba:07:ae:bb:1a:f5:51:c1:21:e8:56:31:a1:2b:
e9:2e:55:93:ec:7b:ef:b5:80:0e:24:1e:ad:9f:76:
f8:fa:d2:52:ec:b1:0b:0c:43:7a:4d:d7:4c:99:93:
6c:72:9d:0b:c6:0e:73:a4:3d:d9:7f:3f:d5:e6:44:
40:e4:d6:d4:fd:84:78:41:dd:8c:1b:98:71:f0:ed:
b5:e3:e5:40:53:88:73:bd:63:5e:25:92:e6:bf:60:
87:90:91:9c:76:a9:1b:a8:a6:b3:2f:7f:29:2e:22:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AA:AE:CA:DD:26:48:B4:C1:CB:F8:FC:83:3C:AC:A1:55:50:04:08
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SKquyt0mSLTBy_j8gzysoVVQBAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.96.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2b:51:e6:94:b7:c1:e4:b0:fb:d9:10:88:be:4d:b9:7e:11:
4e:10:50:5f:2d:6e:17:72:51:ed:8f:e5:65:08:42:1c:ef:1f:
00:9a:e7:12:78:4c:89:09:08:94:0f:b9:f7:1d:c0:53:4d:2b:
9d:15:4c:10:32:53:b7:8c:11:d8:59:d4:63:b2:7b:b5:00:7e:
7a:0b:40:e3:da:72:e9:e8:c1:7c:f5:74:05:4b:48:86:98:45:
cf:9c:1c:b0:b1:15:01:26:e0:f0:ef:3a:a5:c9:25:21:f9:8d:
42:72:0f:38:75:0d:ca:28:79:95:b2:fc:96:83:b4:d5:57:4a:
e5:20:f5:14:2e:59:05:b6:47:d4:75:26:ff:a3:44:a7:7e:0d:
3f:f6:dc:e7:ec:f4:2b:86:86:fb:ef:4f:cb:e3:96:36:7b:b5:
7d:5f:79:e0:2e:56:29:2c:40:8f:1f:9b:ce:57:fc:33:5e:91:
fb:17:0e:8d:42:5c:a8:17:7d:37:0d:a2:33:38:70:9e:71:c7:
10:40:60:4a:73:72:50:61:80:05:4c:72:1b:1e:3e:d9:34:87:
59:0a:f2:69:03:5f:2e:75:09:bb:11:5f:d2:2b:07:92:00:b6:
47:cc:de:08:34:ce:75:d6:66:39:b1:91:08:20:23:05:bf:27:
15:30:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:23:00 2025 by rpki-client