This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/M1xpquK399A5wByDEtKHq_wqClk.roa
File: M1xpquK399A5wByDEtKHq_wqClk.roa (raw, json)
Hash identifier: zVgRyEKABrkhckv/3fAzW08qm0hqJsbaTBszAR7kayA=
Subject key identifier: 33:5C:69:AA:E2:B7:F7:D0:39:C0:1C:83:12:D2:87:AB:FC:2A:0A:59
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 019B7F158BA2D00B059B10BBCA74350C8ED4
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/M1xpquK399A5wByDEtKHq_wqClk.roa
Signing time: Fri 02 Jan 2026 14:21:17 +0000
ROA not before: Fri 02 Jan 2026 14:21:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137443
IP address blocks: 185.243.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:8b:a2:d0:0b:05:9b:10:bb:ca:74:35:0c:8e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Jan 2 14:21:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=335c69aae2b7f7d039c01c8312d287abfc2a0a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:a9:7b:e9:14:bc:73:1b:55:b0:7b:79:31:
e0:07:7c:ea:18:94:87:5b:17:5a:7d:66:21:53:ba:
9b:bb:29:df:54:2c:3f:25:4d:8a:34:c4:b3:b6:23:
08:79:ad:77:d9:a8:ca:71:1e:97:dc:47:39:1f:e6:
42:21:ab:73:4a:2f:0c:30:79:e3:57:90:d7:04:04:
6c:0f:be:38:a2:93:1e:1e:b5:db:85:4a:a1:82:51:
02:a6:b9:04:a5:fa:a8:41:e0:0d:b5:54:9c:e5:60:
09:74:82:71:68:a3:ec:ac:67:15:f8:0c:88:36:ab:
9f:a5:02:57:c5:13:39:60:b3:1c:5d:24:82:d0:d1:
73:86:3c:79:05:13:1f:d7:d8:49:b5:4c:ff:c6:fa:
5b:8d:2e:93:38:14:4b:14:2d:13:97:41:cf:c4:8a:
d1:e3:28:9c:6a:86:35:41:4f:73:9c:46:d8:0c:c3:
10:d8:82:12:19:cf:49:e6:2b:bc:17:28:48:66:06:
14:57:5c:03:ae:f4:13:10:d1:b2:bb:da:63:f6:cb:
68:7e:b4:d8:03:86:84:40:46:c7:23:eb:80:b8:1f:
80:b1:80:cb:2e:4e:1e:31:77:ca:9b:1b:e9:b4:40:
ef:7b:ee:80:82:94:2e:03:b3:b9:63:64:45:ba:8e:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5C:69:AA:E2:B7:F7:D0:39:C0:1C:83:12:D2:87:AB:FC:2A:0A:59
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/M1xpquK399A5wByDEtKHq_wqClk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.43.0/24
Signature Algorithm: sha256WithRSAEncryption
17:7f:06:52:7c:c4:f0:e9:f8:74:23:fc:3d:53:69:af:9f:6e:
bd:72:83:9d:dc:34:26:39:3b:64:13:27:1d:60:2d:e1:21:03:
93:34:71:23:b2:1c:ac:f1:3f:b5:26:80:99:4e:46:f2:a0:8a:
37:b1:91:0c:37:73:82:1a:11:61:cf:d6:be:5e:97:f6:4d:8d:
6b:4a:ae:f1:fa:29:9a:04:9f:ea:63:cb:4c:92:32:42:34:9f:
62:31:d4:98:c8:46:3e:7f:40:c9:22:8f:54:2a:ff:9d:bc:a4:
20:50:4d:24:4e:14:2a:45:c9:c9:67:9f:55:13:42:22:09:cb:
3f:f2:c1:2a:3e:ef:a6:ce:a7:7e:1c:3b:a0:e1:14:05:da:6e:
06:43:19:07:33:31:65:5d:2c:3f:61:db:68:88:b0:be:9c:f0:
99:fc:20:2b:24:37:7f:eb:99:f8:76:5e:50:e1:7b:98:cc:26:
3c:20:60:08:fd:c4:72:80:e8:52:7b:d6:e8:b7:96:63:9f:94:
ad:0a:5e:10:c1:a6:9e:3b:eb:a1:0a:bb:89:fe:a4:cf:05:63:
7b:b6:85:01:c3:c5:60:54:84:5e:52:26:2a:8c:f0:f1:83:a7:
2c:f9:96:8d:90:c1:b4:af:70:de:76:f4:36:97:61:9a:7f:2b:
91:90:26:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FYui0AsFmxC7ynQ1DI7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjBkZDJiOTJkYTI4NGM2M2NlYzQ2ZjZmNmE0MWMwMTNh
OWM4ODEwHhcNMjYwMTAyMTQyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzVjNjlhYWUyYjdmN2QwMzljMDFjODMxMmQyODdhYmZjMmEwYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8epe+kUvHMbVbB7eTHgB3zqGJSH
WxdafWYhU7qbuynfVCw/JU2KNMSztiMIea132ajKcR6X3Ec5H+ZCIatzSi8MMHnj
V5DXBARsD744opMeHrXbhUqhglECprkEpfqoQeANtVSc5WAJdIJxaKPsrGcV+AyI
NqufpQJXxRM5YLMcXSSC0NFzhjx5BRMf19hJtUz/xvpbjS6TOBRLFC0Tl0HPxIrR
4yicaoY1QU9znEbYDMMQ2IISGc9J5iu8FyhIZgYUV1wDrvQTENGyu9pj9stofrTY
A4aEQEbHI+uAuB+AsYDLLk4eMXfKmxvptEDve+6AgpQuA7O5Y2RFuo4LwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDNcaarit/fQOcAcgxLSh6v8KgpZMB8GA1UdIwQY
MBaAFBIg3SuS2ihMY87Eb29qQcATqciBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWIt
YTg1ODU4NDliZTE0LzEvTTF4cHF1SzM5OUE1d0J5REV0S0hxX3dxQ2xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWItYTg1ODU4NDliZTE0
LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufMrMA0G
CSqGSIb3DQEBCwUAA4IBAQAXfwZSfMTw6fh0I/w9U2mvn269coOd3DQmOTtkEycd
YC3hIQOTNHEjshys8T+1JoCZTkbyoIo3sZEMN3OCGhFhz9a+Xpf2TY1rSq7x+ima
BJ/qY8tMkjJCNJ9iMdSYyEY+f0DJIo9UKv+dvKQgUE0kThQqRcnJZ59VE0IiCcs/
8sEqPu+mzqd+HDug4RQF2m4GQxkHMzFlXSw/YdtoiLC+nPCZ/CArJDd/65n4dl5Q
4XuYzCY8IGAI/cRygOhSe9bot5Zjn5StCl4QwaaeO+uhCruJ/qTPBWN7toUBw8Vg
VIReUiYqjPDxg6cs+ZaNkMG0r3DedvQ2l2GafyuRkCaH
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:09:29 2026 by rpki-client