This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa
File: Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa (raw, json)
Hash identifier: 4BYNISLW+6a1Rm7fYvPimlxLy4jJM2Fwgwu5hoZNF4o=
Subject key identifier: 16:7C:34:CC:7B:F3:A1:AB:7B:18:7A:64:4E:2E:CA:FC:62:3C:06:EC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 019B7E37705E5C88BF991BC9AD0D911CB0E8
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa
Signing time: Fri 02 Jan 2026 10:18:41 +0000
ROA not before: Fri 02 Jan 2026 10:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204824
IP address blocks: 185.218.48.0/22 maxlen: 24
2a0b:d340::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:70:5e:5c:88:bf:99:1b:c9:ad:0d:91:1c:b0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jan 2 10:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=167c34cc7bf3a1ab7b187a644e2ecafc623c06ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:59:9f:24:ea:f8:89:d2:b1:6f:da:11:6b:
c7:a0:d7:b5:d2:8c:8f:61:92:ac:74:68:d0:44:23:
0f:71:f7:e1:72:29:e0:d8:a5:81:0d:78:29:bb:42:
cc:39:2d:90:b9:09:58:17:38:76:94:bb:b1:d4:59:
0c:3c:33:f0:95:2a:ba:ec:c2:2f:c8:fc:29:1d:92:
b7:7b:d6:11:b3:35:ee:c7:30:2e:26:47:9f:d1:74:
76:b1:a2:d0:23:42:81:2c:41:8a:03:76:80:3e:ef:
c9:15:da:13:ab:a9:11:ee:6f:fd:fa:16:7b:ec:7e:
ed:56:e7:dd:d9:2c:b5:07:e9:09:59:43:0e:bd:b6:
08:c3:14:6b:5c:4c:21:b1:6e:9a:6d:77:6a:46:70:
36:0f:57:18:c8:7a:41:55:ae:b0:15:76:1b:57:17:
8f:a4:0c:51:61:25:3b:36:3d:63:5d:e7:3b:f6:13:
f3:c1:11:6e:10:ad:87:45:ca:3e:fc:6d:a6:69:77:
0a:53:65:63:b0:65:b0:8e:29:44:ea:e0:e2:fb:0a:
81:3d:45:d0:94:1c:2f:c0:f8:53:38:f5:30:d6:46:
4e:a4:f8:2f:a1:66:64:bc:67:b1:2e:58:54:be:ae:
22:04:db:a3:10:d8:00:09:92:6c:d3:5e:2a:72:60:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7C:34:CC:7B:F3:A1:AB:7B:18:7A:64:4E:2E:CA:FC:62:3C:06:EC
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.48.0/22
IPv6:
2a0b:d340::/29
Signature Algorithm: sha256WithRSAEncryption
48:72:71:11:63:f5:6e:e6:20:ca:8d:9e:9e:0c:7b:88:f7:92:
fd:7e:47:9c:12:21:98:f9:32:e7:d4:c5:2d:97:7c:20:db:d3:
0f:65:db:2f:be:a7:a2:33:80:22:28:95:56:72:85:ef:1d:e9:
6e:ad:d4:a6:59:21:38:aa:2f:b7:f5:33:1e:fb:56:1c:e0:54:
ac:e2:25:66:4d:98:93:7a:ca:11:9c:e7:a7:f2:f9:0f:03:f6:
c9:fd:d0:bd:3e:d2:47:fc:4c:17:07:0d:54:62:08:d0:82:37:
45:44:80:1d:fd:3d:a8:58:3e:86:bb:51:da:5e:5e:ea:5b:57:
21:c4:6d:89:87:7c:bc:95:85:cb:0b:2f:98:8d:70:9e:e5:b5:
da:cf:57:00:73:7c:7b:55:14:07:57:1e:9f:1b:40:d4:0b:24:
96:6a:04:15:75:3b:4a:85:de:81:02:9e:c8:82:d1:bf:a5:0f:
e0:11:96:a3:64:88:17:43:1e:c3:ec:19:fa:05:8b:b0:f5:33:
92:e9:94:2a:ae:d5:90:4f:b8:dd:d6:e8:2d:a7:bd:da:08:37:
40:41:61:03:3c:56:1b:d0:64:77:89:4f:f2:fb:88:77:c1:53:
86:ae:6d:d7:d0:1e:67:f8:24:de:23:ec:51:b6:38:64:f2:b2:
a2:e0:98:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:29:17 2026 by rpki-client