This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/FaUuFS6TDX1zSostpasPm7Qvifc.roa
File: FaUuFS6TDX1zSostpasPm7Qvifc.roa (raw, json)
Hash identifier: AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=
Subject key identifier: 15:A5:2E:15:2E:93:0D:7D:73:4A:8B:2D:A5:AB:0F:9B:B4:2F:89:F7
Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial: 019B7C13200205448C232CDDC0B83C60DE6A
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/FaUuFS6TDX1zSostpasPm7Qvifc.roa
Signing time: Fri 02 Jan 2026 00:19:46 +0000
ROA not before: Fri 02 Jan 2026 00:19:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213686
IP address blocks: 185.184.172.0/22 maxlen: 22
185.184.172.0/23 maxlen: 23
185.184.172.0/24 maxlen: 24
185.184.173.0/24 maxlen: 24
185.184.174.0/23 maxlen: 23
185.184.174.0/24 maxlen: 24
185.184.175.0/24 maxlen: 24
185.191.252.0/22 maxlen: 22
185.191.252.0/23 maxlen: 23
185.191.252.0/24 maxlen: 24
185.191.253.0/24 maxlen: 24
185.191.254.0/23 maxlen: 23
185.191.254.0/24 maxlen: 24
185.191.255.0/24 maxlen: 24
185.236.244.0/22 maxlen: 22
185.236.244.0/23 maxlen: 23
185.236.244.0/24 maxlen: 24
185.236.245.0/24 maxlen: 24
185.236.246.0/23 maxlen: 23
185.236.246.0/24 maxlen: 24
185.236.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:20:02:05:44:8c:23:2c:dd:c0:b8:3c:60:de:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Validity
Not Before: Jan 2 00:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15a52e152e930d7d734a8b2da5ab0f9bb42f89f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:2a:97:fb:c9:33:14:a4:e7:92:7e:22:64:
1e:e4:6b:a9:be:06:c3:e3:3d:a3:67:48:7e:0b:78:
f5:47:3a:fd:e2:84:d6:ca:2c:3a:74:b0:ec:a2:c1:
ca:84:0c:d5:0b:e7:25:c2:90:1d:08:e4:e2:b1:dd:
f5:4b:8b:a9:97:03:5d:8b:df:cb:d0:e2:02:65:36:
f9:09:c8:fc:14:8d:40:05:5d:c7:05:76:89:cb:d6:
e7:bf:5d:ee:a8:ea:6d:28:e5:fc:df:7a:84:ea:41:
1b:13:3d:ef:c6:c5:69:1f:ce:ad:60:49:3d:46:6b:
07:8e:24:4d:8b:2f:fd:a9:e6:06:50:30:c5:e5:4f:
39:59:99:8a:1e:54:c7:b2:c2:61:10:8f:11:8e:f7:
7e:b3:0b:61:f8:96:35:1e:fd:d7:61:ad:9c:40:c3:
b0:88:cc:db:38:3d:2a:b6:da:54:32:0e:e4:e7:6f:
e0:d0:54:4d:4f:d2:f8:5a:ed:1e:cc:9d:f3:87:68:
42:ba:b5:2c:53:8a:9f:db:c8:1d:83:53:24:fd:08:
df:37:16:0c:b1:53:ee:fd:23:e4:51:62:15:6f:2f:
d0:03:b6:28:ab:0b:3b:0e:63:46:c4:52:28:0e:06:
c4:ed:b7:64:0a:c9:77:a6:db:33:2b:6b:8c:f4:6e:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:2E:15:2E:93:0D:7D:73:4A:8B:2D:A5:AB:0F:9B:B4:2F:89:F7
X509v3 Authority Key Identifier:
keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/FaUuFS6TDX1zSostpasPm7Qvifc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.172.0/22
185.191.252.0/22
185.236.244.0/22
Signature Algorithm: sha256WithRSAEncryption
13:23:f0:bb:e7:c8:84:39:d3:22:e8:34:3b:05:cb:f4:58:a4:
99:a6:56:45:7e:2a:64:b4:c9:cc:bc:79:c6:9d:5c:11:be:89:
08:2c:d2:a1:3e:83:13:88:57:2a:28:28:00:ad:00:5e:b9:2a:
aa:eb:d0:38:08:b0:1a:2c:5e:82:4b:af:84:ba:9e:c5:65:ab:
56:5c:68:53:bf:b3:ff:10:a7:a4:5e:66:97:a0:b6:38:f2:9f:
5a:b2:ee:b4:f7:bf:79:12:97:3a:f4:4c:be:4c:d9:dc:11:88:
44:d8:00:fc:9b:37:5d:89:de:ed:4e:95:9e:8a:d2:63:6c:9f:
1f:d0:aa:62:61:62:f7:4b:de:54:6b:2c:75:fe:64:86:2f:0b:
0e:11:bd:ad:71:09:ea:29:99:25:d3:25:d6:5e:7e:3c:9e:11:
ca:76:d7:b0:9d:5f:ef:55:1e:99:72:bf:ba:91:84:25:96:08:
39:45:3c:39:e2:43:84:31:86:05:77:7b:43:ad:d8:c9:b1:25:
f2:67:c1:49:2b:d3:46:f6:82:ab:23:c6:d4:0a:25:f5:5c:f4:
71:a9:32:d7:7a:29:19:53:39:02:e1:8b:a5:99:de:31:b1:c6:
03:b1:b0:87:3f:9e:d7:4c:7f:57:04:7e:33:ab:20:bf:df:60:
af:d8:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:59 2026 by rpki-client