This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/SLONluzu2xwR72NqplrGtpQrZpo.roa
File: SLONluzu2xwR72NqplrGtpQrZpo.roa (raw, json)
Hash identifier: NPfEmtRHn9vSpI84XMYUKyQXNZvZB0z0PHOCtt/9Ui4=
Subject key identifier: 48:B3:8D:96:EC:EE:DB:1C:11:EF:63:6A:A6:5A:C6:B6:94:2B:66:9A
Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial: 019B7C801A20B9E732768259BA7B4A4377CD
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/SLONluzu2xwR72NqplrGtpQrZpo.roa
Signing time: Fri 02 Jan 2026 02:18:48 +0000
ROA not before: Fri 02 Jan 2026 02:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50978
IP address blocks: 194.30.167.0/24 maxlen: 24
195.93.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:1a:20:b9:e7:32:76:82:59:ba:7b:4a:43:77:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Validity
Not Before: Jan 2 02:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48b38d96eceedb1c11ef636aa65ac6b6942b669a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:9b:49:02:b0:74:a7:2d:43:a8:f7:65:8b:
89:1a:d4:33:1b:d9:83:81:d3:1b:26:6f:41:81:ac:
e6:80:fc:9e:70:d0:1c:54:89:c3:2e:a6:b6:16:b1:
42:6f:c0:a2:33:95:f1:63:c6:a5:10:8d:16:d1:05:
f3:95:c9:40:b6:3b:89:a9:8d:66:2d:bd:66:8f:e2:
14:bf:6d:07:43:dc:fa:79:26:5b:ed:81:94:14:0e:
aa:95:9a:e3:55:c2:86:ae:1b:52:ba:40:9c:eb:b6:
2b:46:aa:c8:47:a1:e8:8b:fc:68:c1:72:5d:5e:5a:
4d:7b:c5:60:e9:04:4c:00:e8:6c:f5:6a:67:e6:6c:
42:e2:10:3b:89:10:c7:7c:c8:d0:e1:28:b3:70:30:
4f:85:b2:3c:2e:c6:26:39:e6:48:28:c1:6d:29:d9:
79:c8:9e:69:ba:dc:c2:77:9a:db:73:27:82:c7:8f:
24:6a:65:e8:1a:5e:26:4e:cc:d5:c8:82:ab:f5:6f:
10:21:be:20:7c:5f:84:ac:b7:6d:a9:3a:0a:a3:38:
85:54:c1:75:6d:af:1c:cd:fe:0c:3a:3e:e8:1a:f9:
c9:d7:ba:a5:12:de:3e:26:54:06:04:d2:fc:34:6d:
8c:e3:74:c1:f5:f4:d7:0a:64:9b:3b:f8:74:8f:c1:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B3:8D:96:EC:EE:DB:1C:11:EF:63:6A:A6:5A:C6:B6:94:2B:66:9A
X509v3 Authority Key Identifier:
keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/SLONluzu2xwR72NqplrGtpQrZpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.167.0/24
195.93.166.0/23
Signature Algorithm: sha256WithRSAEncryption
26:fb:88:4c:93:9b:4c:79:53:1e:8d:da:85:bd:fe:2d:b5:26:
85:78:cf:58:2b:14:ba:c6:ba:e0:81:0c:75:8f:3c:01:29:36:
1f:4d:7e:b5:98:96:46:8b:53:2b:7b:74:b2:bb:22:32:69:10:
59:33:d9:5c:69:00:a8:56:79:cf:80:0a:58:c1:eb:06:29:12:
a0:aa:b7:27:9c:1d:c1:57:93:8d:ac:21:59:07:70:ec:fe:87:
95:76:8b:77:13:13:ab:68:a0:23:f7:45:04:a4:aa:39:15:32:
04:67:3a:2b:f7:92:8d:85:95:b5:16:47:02:b9:8f:1e:d7:d2:
b9:d6:7d:9f:a0:a6:d6:f1:73:43:dd:dd:8a:59:f7:10:20:82:
ae:6e:1d:06:f0:58:22:82:05:47:5c:21:2c:2f:8e:95:a8:16:
1f:db:92:fb:ed:dd:0e:dd:bc:51:97:df:05:77:82:0a:1e:24:
27:bf:99:dd:0b:07:be:72:4b:fc:51:d1:7b:3d:cb:44:3b:c1:
09:40:52:2a:8c:7d:d0:96:0d:41:f9:3f:36:0d:db:d9:01:6a:
87:df:9b:fc:3e:42:ec:7c:c2:0a:57:8b:57:f0:84:05:3f:70:
c0:f1:e2:76:b9:4a:52:be:3c:a0:78:ae:c5:3a:32:aa:06:51:
dd:15:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:53 2026 by rpki-client