This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa
File: MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa (raw, json)
Hash identifier: X0nH2HeW8oMQ0R4XVjts1kBv71dyXZYfSTlTWrarM3g=
Subject key identifier: 33:3C:0B:51:A6:CF:31:5A:56:51:B8:6F:B6:5C:83:F9:0C:D3:55:C4
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 019B7E38D0C6DB30862FA86EA42231E2BBEB
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa
Signing time: Fri 02 Jan 2026 10:20:11 +0000
ROA not before: Fri 02 Jan 2026 10:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202670
IP address blocks: 185.151.4.0/23 maxlen: 23
185.151.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:d0:c6:db:30:86:2f:a8:6e:a4:22:31:e2:bb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Jan 2 10:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=333c0b51a6cf315a5651b86fb65c83f90cd355c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:31:61:78:25:25:7e:d3:04:d5:c7:92:40:
2e:f9:85:dc:14:39:32:00:94:a0:6a:7b:8e:ca:8b:
7e:b3:fc:df:76:a1:1c:ef:cd:2b:d8:18:71:37:37:
f8:37:e3:8d:39:f7:88:81:20:5d:b6:3d:17:ca:02:
77:c5:c8:20:ff:e2:f5:57:5b:51:f6:ca:a0:4f:3f:
3b:c3:79:4a:6d:13:39:c8:6e:71:14:41:0b:4b:9c:
5b:6e:3f:59:ce:0d:f7:3f:a4:47:0b:4d:f1:73:38:
e2:b4:61:ff:2f:f4:b0:96:a1:96:0f:68:ca:91:37:
d1:46:0d:b7:da:38:44:65:57:48:03:23:ff:07:37:
7c:14:d1:da:d8:8c:10:3d:57:f1:b5:2a:f6:9b:9f:
67:34:53:10:90:c6:da:e6:84:f4:e4:c9:73:52:f4:
f5:44:46:c9:25:45:83:85:1b:71:c4:ad:80:24:4c:
18:5e:19:c8:c9:8d:ee:b7:2d:5f:a1:10:e3:e4:d8:
3b:3b:23:ae:06:85:0e:cc:9a:b2:86:65:77:6a:e8:
bd:31:b7:52:9e:bc:43:8d:2e:8e:02:6d:65:bd:3c:
5c:8c:fa:19:85:df:80:38:7b:25:12:a8:a0:77:9c:
18:71:26:b1:d5:7c:63:3f:e7:f3:9c:42:2e:a4:bf:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:0B:51:A6:CF:31:5A:56:51:B8:6F:B6:5C:83:F9:0C:D3:55:C4
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.4.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:f9:a5:06:e7:2b:63:cf:e7:6d:b6:16:2e:74:91:88:f3:44:
4e:ea:dc:4a:42:db:2d:47:ca:a1:9d:62:b3:c7:19:c7:e5:0a:
2d:f2:4c:1f:74:f9:86:e3:3c:fb:60:9c:92:39:8a:8b:e3:8a:
76:00:45:8a:2d:e8:b7:54:7a:c2:86:8a:9e:55:7d:3a:b2:12:
2e:b6:d3:9b:8e:7b:e5:ce:f0:82:91:a5:65:32:34:97:46:1d:
cb:1a:fc:08:4e:8a:54:fe:5b:73:68:1a:f6:13:35:7f:af:1a:
42:a6:5c:c0:3a:ad:ef:9d:e2:7d:68:f7:b8:93:f8:57:19:13:
bc:d2:16:a4:0a:37:78:57:21:be:e7:46:c9:fa:e3:aa:bb:41:
9c:5f:84:4b:df:53:45:98:4b:77:f3:79:50:ca:16:7b:66:9b:
eb:d3:9d:04:17:db:c6:4e:a9:fe:9c:91:b8:6d:fe:e9:a8:b0:
d6:fc:e1:18:8c:06:27:88:15:d8:2e:1a:c6:b8:1e:dc:ce:29:
5c:d0:0e:5e:fa:19:77:5b:f2:00:90:67:09:8d:c4:92:a3:e2:
a6:21:48:a0:16:05:a3:fe:19:3a:2b:3d:01:48:80:82:4c:2b:
19:15:70:65:e7:8e:fb:61:cc:cd:88:b8:e1:c0:60:38:c6:d8:
75:4a:6e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:41 2026 by rpki-client