This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mfh0sg3ejEe7SJSXg8bfr7T7UuQ.roa
File: mfh0sg3ejEe7SJSXg8bfr7T7UuQ.roa (raw, json)
Hash identifier: G38gzSgIF4JJbJM2D3eiNStRKx7h08eHEjlV4sybicw=
Subject key identifier: 99:F8:74:B2:0D:DE:8C:47:BB:48:94:97:83:C6:DF:AF:B4:FB:52:E4
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B357EC6A7B687F312C3C0E0A235206B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mfh0sg3ejEe7SJSXg8bfr7T7UuQ.roa
Signing time: Thu 01 Jan 2026 20:17:42 +0000
ROA not before: Thu 01 Jan 2026 20:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56746
IP address blocks: 81.180.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:7e:c6:a7:b6:87:f3:12:c3:c0:e0:a2:35:20:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99f874b20dde8c47bb48949783c6dfafb4fb52e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:2a:4d:77:e0:a5:f3:8c:98:0e:6e:f7:ca:
6e:82:dc:c3:d5:01:1e:e2:92:cb:6b:c3:35:4a:8d:
9f:01:0f:75:ee:b4:13:f2:bf:71:45:c9:4c:54:6a:
19:07:d8:98:6c:e9:4d:91:13:f5:3b:26:46:77:71:
33:95:76:17:bf:18:33:19:07:a1:20:10:17:7c:14:
6d:42:40:c6:97:05:ac:fb:15:39:38:ff:1d:ba:c5:
85:0d:dc:06:a8:dc:55:23:81:9e:b5:af:fc:ba:ab:
7b:60:84:b0:48:9f:98:3b:2d:0c:dc:20:f6:ae:1b:
09:e3:bd:cc:bb:01:cd:1a:22:1a:ba:d7:5e:b5:ce:
05:39:5b:b4:51:41:14:42:b4:6b:42:6a:0d:46:07:
12:c6:21:86:d3:bc:68:8a:2d:e1:31:c8:7a:2f:ed:
d5:f4:0b:15:74:c4:03:11:66:24:88:a3:9c:99:8f:
cc:a3:7c:71:29:3a:09:3a:de:d4:23:ba:1f:32:43:
a2:f4:29:f6:53:e1:6e:0e:ff:af:27:f5:9e:7a:9c:
a6:04:93:3f:80:7a:3e:84:9b:67:26:fc:88:2a:4b:
3b:90:a5:1a:8d:ec:54:3b:1d:8d:ff:68:2e:4d:05:
d0:a8:b6:b6:83:4e:80:fc:87:ef:24:a8:c4:ac:da:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F8:74:B2:0D:DE:8C:47:BB:48:94:97:83:C6:DF:AF:B4:FB:52:E4
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mfh0sg3ejEe7SJSXg8bfr7T7UuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.232.0/23
Signature Algorithm: sha256WithRSAEncryption
97:56:16:67:12:34:37:f8:3f:72:0f:06:54:48:b0:b2:ae:69:
a0:4b:f1:8c:97:d2:b4:b3:ed:48:2f:52:e3:fc:da:1d:67:f2:
30:53:97:5d:fe:dd:81:ec:dd:6f:81:68:88:1a:1a:b5:52:fc:
19:2f:33:72:a8:e6:98:ec:3f:bb:b6:78:2d:b1:96:cc:94:f7:
77:80:0d:60:78:38:8a:6b:9a:79:fa:20:8e:fa:3c:0b:6a:00:
86:76:fe:67:55:3c:d5:2d:6b:95:09:7f:2b:4b:d4:eb:0d:42:
98:09:76:df:f4:3b:82:e5:90:66:d9:b3:5d:21:5c:bc:1e:a8:
55:7c:ed:1b:a2:1c:ec:52:06:f2:55:2c:35:2c:e0:cf:cd:c4:
6d:65:6f:06:3a:9b:71:b3:84:f2:52:a5:95:53:70:fc:b6:e9:
73:6a:9f:9a:f7:09:0a:94:2d:d7:71:bc:a0:0c:42:ea:c3:e7:
9f:cb:07:e0:f6:ef:07:21:a0:45:13:45:9f:df:d8:90:91:cd:
64:ea:69:b0:55:2b:86:f5:a1:5a:8e:26:2b:9e:c3:97:6d:17:
22:fc:ab:5d:07:9c:1f:c5:38:24:a8:cb:78:27:68:e6:8a:f3:
74:e3:ca:30:4b:ec:ae:0d:63:ab:d9:96:21:14:97:0e:4a:9c:
d6:78:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:51 2026 by rpki-client