This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6wv53FlBwDn2FrDE6zyqGGKSis.roa
File: n6wv53FlBwDn2FrDE6zyqGGKSis.roa (raw, json)
Hash identifier: cI8irfznY59qlhdzJv/exKuxSTDI5YVkYvtFc2+h+iM=
Subject key identifier: 9F:AC:2F:E7:71:65:07:00:E7:D8:5A:C3:13:AC:F2:A8:61:8A:4A:2B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B4A48004B76C3EF744DBB02962793CB3C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6wv53FlBwDn2FrDE6zyqGGKSis.roa
Signing time: Tue 23 Dec 2025 08:16:31 +0000
ROA not before: Tue 23 Dec 2025 08:16:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213613
IP address blocks: 31.57.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 17:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4a:48:00:4b:76:c3:ef:74:4d:bb:02:96:27:93:cb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 23 08:16:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fac2fe771650700e7d85ac313acf2a8618a4a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:b0:cd:ba:93:2e:75:bb:96:7f:eb:96:53:
a3:aa:3f:c0:e6:6f:63:95:3d:e9:8a:3f:a6:9d:11:
fc:e4:1a:2c:08:82:eb:80:8e:3d:f5:9c:ed:52:94:
f1:cf:bd:6f:76:dc:8e:87:81:2f:df:31:47:83:12:
16:0f:e8:53:0a:bc:bb:9e:7d:14:44:f4:c0:5e:23:
f4:f0:f2:4d:c9:e8:05:66:6d:37:e4:9c:b3:78:47:
16:a2:c3:63:9e:da:90:b6:30:fe:19:b5:64:ff:f6:
af:1c:d0:b8:40:ce:88:6a:e4:37:cc:dd:88:d6:68:
5a:f6:2a:73:c5:4f:2d:a6:8b:d8:7a:70:51:71:52:
5c:12:7f:27:23:a8:7b:30:f0:52:ab:71:86:b1:6d:
17:15:73:ee:47:ae:7c:c1:a5:e8:e6:78:6a:14:e6:
59:72:4e:0c:0d:2d:d5:10:a6:3a:66:b7:c5:fb:22:
2c:22:c6:86:bf:c1:50:7b:5a:40:b0:4f:d7:37:1d:
ea:a7:b4:a3:4c:9c:40:88:a5:2b:c9:48:68:ec:e8:
e6:19:15:8a:40:d1:8a:84:61:c8:a9:1b:ba:6d:92:
5b:f1:50:fa:4f:05:1a:55:f6:36:9f:ed:bc:e5:a6:
91:2e:7e:a5:d8:bc:90:49:78:88:84:07:55:e0:95:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AC:2F:E7:71:65:07:00:E7:D8:5A:C3:13:AC:F2:A8:61:8A:4A:2B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6wv53FlBwDn2FrDE6zyqGGKSis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.13.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ce:1e:8c:22:d4:92:0f:05:68:ff:c2:16:43:d9:47:59:15:
8b:fe:e1:9b:df:78:af:ab:d5:91:5c:fe:b1:78:71:4c:8d:0d:
b1:18:60:7a:57:ba:9f:fa:0b:94:1e:d5:f4:b1:dc:2d:ed:77:
5c:06:47:ec:4b:11:72:cc:cc:f3:0b:df:7a:7d:83:48:ee:c4:
5d:92:6d:c0:c8:c4:5c:91:7c:5b:fd:b8:e0:64:fe:4b:09:0c:
76:68:42:74:03:ba:bd:7b:39:7b:c1:9c:d7:2e:df:c0:11:e2:
c7:ba:f5:bf:8b:dd:f4:9b:1d:46:fe:a5:ca:0b:44:50:1b:62:
b1:08:c7:7c:dc:90:5a:b6:98:07:7c:1a:f2:e4:43:66:38:61:
7b:2b:1a:e6:7e:2b:08:f9:a0:77:1d:ac:91:46:1f:5a:49:95:
3b:07:4a:2b:73:d8:3e:39:5a:2f:27:cf:47:c0:a4:a7:3d:3d:
b0:1c:4c:c4:b7:8d:15:fc:66:ea:ec:4c:c0:1a:5c:2d:43:c6:
8d:91:af:5b:ad:08:95:d5:8f:9a:56:20:9e:2c:18:e1:21:c2:
9b:5d:b0:2a:04:b2:86:ca:ee:04:b6:5d:4c:58:08:a6:19:34:
95:c1:a6:d4:e0:b0:05:6e:8c:05:23:56:b0:17:19:30:38:8b:
ec:85:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 01:16:57 2025 by rpki-client