This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mwBeCjAV8HblHrXuCixjY4t88Ew.roa
File: mwBeCjAV8HblHrXuCixjY4t88Ew.roa (raw, json)
Hash identifier: xcANaR4uD6XqULJSs7YHNG3et3uHGZNavHJVpHoqpTY=
Subject key identifier: 9B:00:5E:0A:30:15:F0:76:E5:1E:B5:EE:0A:2C:63:63:8B:7C:F0:4C
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019B7C8019E6B3B83DD51D2E3C48A90CC91B
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mwBeCjAV8HblHrXuCixjY4t88Ew.roa
Signing time: Fri 02 Jan 2026 02:18:48 +0000
ROA not before: Fri 02 Jan 2026 02:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36925
IP address blocks: 80.15.243.0/24 maxlen: 32
2a01:c9c0:c012::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Jan 2026 16:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:19:e6:b3:b8:3d:d5:1d:2e:3c:48:a9:0c:c9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 2 02:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b005e0a3015f076e51eb5ee0a2c63638b7cf04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:ca:14:5b:cc:17:7d:2c:c0:1a:f6:91:5c:
f8:6a:cc:97:1e:f4:a9:fa:09:47:22:45:b5:28:ee:
1c:29:2b:67:ea:d3:73:fd:b9:af:3a:85:43:69:54:
d5:52:aa:c4:57:46:b8:9e:64:69:8d:92:57:6b:2b:
3b:2d:a5:bb:c8:42:be:3a:8e:c5:cf:f8:ef:34:19:
ac:33:a4:b6:6f:4d:bc:a9:94:21:07:1f:af:93:a8:
d1:08:29:8e:99:80:d8:b8:8a:71:a1:01:7c:ce:f6:
00:2e:d1:7d:8e:9a:c2:1c:e9:e9:90:42:69:60:a9:
06:1b:33:80:df:50:eb:f8:ea:2b:35:7e:60:b6:2f:
71:a7:2c:44:0f:cd:99:cd:a5:ef:a8:b8:a0:fc:94:
0b:4d:4c:6f:06:57:86:cb:71:e1:b4:da:29:b7:60:
2a:15:ea:75:4b:c9:49:3c:89:71:36:92:90:e4:2c:
1f:7c:a2:31:62:d8:d5:80:a2:d7:59:ea:7b:5b:df:
e4:43:04:9f:b6:ef:69:ce:c0:37:f6:64:5d:3a:41:
bc:85:88:e6:f6:1d:71:aa:c7:cd:a9:ef:14:b9:95:
a9:45:bf:5a:6d:00:ec:86:47:6b:f3:92:b9:a2:49:
a1:f1:3b:6c:36:dd:36:9f:96:da:ea:29:9d:0e:5e:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:00:5E:0A:30:15:F0:76:E5:1E:B5:EE:0A:2C:63:63:8B:7C:F0:4C
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mwBeCjAV8HblHrXuCixjY4t88Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.15.243.0/24
IPv6:
2a01:c9c0:c012::/48
Signature Algorithm: sha256WithRSAEncryption
30:e6:f5:0d:a1:3f:cc:b5:31:80:35:cf:2a:2e:1e:a2:3a:6f:
f9:4a:dc:37:74:16:11:f4:96:ec:e4:20:a0:24:5e:fa:44:53:
0a:48:1d:bd:f6:d0:07:25:93:75:af:0e:47:52:b4:10:b2:ef:
84:bb:b6:46:c5:5d:3a:12:e0:ca:f6:61:c0:ac:2c:f9:82:45:
eb:f3:45:ff:b2:c9:b0:25:bd:63:71:0b:9a:40:dc:c9:73:15:
63:5b:6b:b6:50:53:f3:30:e1:b5:30:d9:8d:e8:6d:16:54:ed:
02:e7:2b:49:ae:92:49:fb:1f:d5:26:cf:fd:35:f4:17:a9:46:
4b:fc:51:9e:d0:4b:34:d8:9f:04:72:9a:ef:49:d5:eb:8d:b4:
d8:88:76:ed:f3:3a:65:86:e4:c9:e7:69:37:af:49:a8:f2:6c:
fa:76:19:13:c2:c4:ca:2c:b6:5c:c8:f2:7a:eb:48:97:76:04:
a2:2a:31:3f:81:d5:9e:47:f0:aa:b7:c8:de:27:71:92:8f:28:
37:dc:15:94:7e:08:52:57:ad:6c:6a:95:46:e7:70:af:28:d5:
71:ac:4f:df:57:64:a4:3c:d2:14:d7:9a:a4:b4:e0:8d:22:d1:
ac:af:01:c6:34:3e:50:13:f2:f8:01:1e:4d:60:a1:1e:05:80:
12:21:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 23:34:21 2026 by rpki-client