This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/MbqU94NccAUwOqnQFVGY-JB8NWs.roa
File: MbqU94NccAUwOqnQFVGY-JB8NWs.roa (raw, json)
Hash identifier: befsJKRxsU09OTkrfmvxJvEheLnX+laHe6P6sZhiUVE=
Subject key identifier: 31:BA:94:F7:83:5C:70:05:30:3A:A9:D0:15:51:98:F8:90:7C:35:6B
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019B990CD8E8149EA51EFBAF27E9EF696869
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/MbqU94NccAUwOqnQFVGY-JB8NWs.roa
Signing time: Wed 07 Jan 2026 15:21:54 +0000
ROA not before: Wed 07 Jan 2026 15:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213637
IP address blocks: 185.243.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:99:0c:d8:e8:14:9e:a5:1e:fb:af:27:e9:ef:69:68:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 7 15:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31ba94f7835c7005303aa9d0155198f8907c356b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:e7:05:1a:75:39:42:aa:40:c5:86:7d:63:
a8:ad:8e:d7:49:a1:d1:d1:92:94:0c:73:32:7d:72:
b4:c3:c9:42:d4:93:ed:5e:66:93:54:30:8d:47:f8:
a9:16:6a:b0:99:d7:ac:93:fd:d0:69:ac:50:d5:a6:
28:f5:a4:8b:3d:78:8a:53:41:aa:80:e5:5a:3f:7c:
53:ac:1f:3e:40:d3:7d:3d:b6:95:2a:3f:48:dd:9e:
56:b6:e9:b0:d9:6e:a5:1f:30:89:3e:41:91:34:59:
50:a1:20:1b:2b:cc:32:82:de:7b:99:e0:82:a4:56:
05:87:fd:90:9d:bb:b8:63:2e:54:4a:75:dc:3f:1c:
29:b6:ba:d0:2c:bc:cb:d7:0f:cc:94:ad:e9:2f:c5:
4b:51:a3:57:eb:9b:3c:ce:66:24:18:ae:6d:1b:e3:
a1:6c:f3:6b:55:7d:48:4b:11:5a:e8:ba:5a:c8:90:
13:17:10:30:1c:59:d0:03:06:7d:7d:75:2f:bc:c9:
34:20:a4:f8:00:47:79:53:d3:b1:7b:27:c1:d5:fd:
80:68:98:e1:4a:1c:ef:26:21:76:bc:2e:cb:94:73:
b8:b9:38:1c:fa:53:80:a6:1b:cf:ac:8e:e3:f5:83:
1f:91:ce:69:81:e8:21:54:ac:6d:e0:46:5c:b6:30:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:94:F7:83:5C:70:05:30:3A:A9:D0:15:51:98:F8:90:7C:35:6B
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/MbqU94NccAUwOqnQFVGY-JB8NWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.183.0/24
Signature Algorithm: sha256WithRSAEncryption
98:94:28:f1:60:9b:4e:60:7c:f9:08:fc:6e:76:a9:21:2b:08:
ff:19:da:76:ae:ea:b1:ed:0a:2d:ef:39:e6:65:65:bd:0a:4f:
f9:87:0d:34:69:1c:e7:df:f2:8e:5d:25:3a:6e:ba:62:2c:dd:
5c:8f:6b:40:53:a3:a8:1a:99:df:b9:64:25:2d:bc:dd:34:de:
95:18:04:f4:56:d6:fe:18:bf:0d:86:e4:df:99:20:81:ac:b9:
9a:aa:c3:46:23:2e:72:27:2b:c2:08:d1:c0:4b:33:ea:8a:cb:
97:07:93:ba:87:e5:9d:12:11:c7:e2:c3:fb:36:39:82:2e:01:
ac:02:26:bf:bb:46:4c:7c:f7:89:52:d7:ce:20:ef:da:16:a9:
ff:be:9d:56:a0:01:91:ba:34:d1:d9:2d:ad:41:3f:d4:1f:f8:
34:90:ed:fe:4b:9e:4d:6a:70:43:48:e7:d8:e2:a2:35:bb:b3:
c6:1d:23:4d:b3:ff:94:01:c9:88:72:d6:b8:e8:f1:5a:70:6f:
5a:ed:a3:29:a0:50:bb:e2:c2:43:04:f3:3d:6f:5c:1a:87:8f:
a1:2a:8d:9b:46:6f:d5:54:45:00:db:5b:c5:af:af:55:d3:8e:
e1:8b:54:e8:04:2a:e4:c9:e3:69:9b:47:07:d2:4c:a1:2b:59:
ea:6f:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:12:23 2026 by rpki-client