This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/MPhp410gGVKP5mkd7p544bUnjxA.roa File: MPhp410gGVKP5mkd7p544bUnjxA.roa (raw, json) Hash identifier: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4= Subject key identifier: 30:F8:69:E3:5D:20:19:52:8F:E6:69:1D:EE:9E:78:E1:B5:27:8F:10 Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B7E3889B2CF57DC280EFDD47CC6C22CFA Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/MPhp410gGVKP5mkd7p544bUnjxA.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204079 IP address blocks: 46.36.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:89:b2:cf:57:dc:28:0e:fd:d4:7c:c6:c2:2c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30f869e35d2019528fe6691dee9e78e1b5278f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:9d:ed:c2:07:e8:c9:8c:79:10:94:f7:61: 93:06:52:ce:ee:e0:ac:6f:dd:c1:7b:7c:0d:05:f7: a9:ff:58:ee:53:08:63:7d:a6:25:16:06:1e:4d:a6: e7:8a:b9:bc:50:c0:cc:9c:b3:96:9c:34:5f:63:83: 9d:1f:d0:0e:39:da:7c:5f:60:f4:c2:3c:31:58:fd: 07:c4:91:52:81:05:87:32:a7:c4:a2:57:d8:6e:a6: d8:84:15:a0:0c:d8:d2:5f:fb:97:2d:ee:fc:49:85: ef:ea:11:62:4b:3c:85:a1:01:9d:70:1a:97:be:0e: f7:93:1d:ab:3c:3b:7e:37:76:27:04:be:17:17:6c: 57:33:ba:93:7a:83:46:91:6f:6d:dd:08:49:23:07: ea:3e:29:22:ad:00:68:8c:2a:8d:79:1f:a0:39:4b: d7:0e:f8:4a:58:1c:60:63:e9:09:fe:f7:cb:22:21: d2:36:8d:f9:07:2e:34:78:34:3d:ec:20:9d:e9:66: f5:e5:dc:48:eb:40:af:98:d2:55:5f:82:65:f3:d5: 92:d5:07:30:6d:55:03:a6:b7:f9:79:91:fc:38:76: 58:11:ff:6c:9d:d4:b8:f1:90:36:cb:54:cf:f6:ce: a8:b0:ab:d6:08:fa:c7:44:14:9f:a5:72:4a:55:24: ca:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F8:69:E3:5D:20:19:52:8F:E6:69:1D:EE:9E:78:E1:B5:27:8F:10 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/MPhp410gGVKP5mkd7p544bUnjxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.98.0/24 Signature Algorithm: sha256WithRSAEncryption 17:61:c3:fb:8b:58:5c:d4:ea:bd:b2:72:38:6c:29:9a:10:08: 2e:0c:aa:53:2c:fa:89:07:4c:a3:dc:ec:c5:e6:81:b1:de:f3: 14:17:da:ef:2d:7c:83:45:eb:bf:7a:fe:4f:f8:82:de:6a:7e: 7a:16:b2:b9:2f:42:82:46:12:50:d8:ff:bb:68:ab:67:b1:cf: cf:6a:5e:05:44:0e:92:10:28:84:a8:ec:e6:52:12:30:0b:c9: 45:ec:f5:96:c9:6b:35:97:b7:d1:2a:11:24:86:c7:6a:5f:20: a9:36:64:df:01:15:4c:2b:e0:7b:0f:31:6d:60:75:37:b8:d2: 8b:1d:09:73:a9:d5:a9:19:b9:a9:14:ea:3c:00:78:bd:ba:d7: 5a:52:89:78:c1:15:4d:88:8d:17:a1:72:d0:5e:78:cb:a4:6d: aa:a1:45:3c:4f:16:7f:7d:40:2d:56:09:9a:ed:bd:b0:4c:4c: 6e:e1:18:86:b3:2d:64:74:97:53:5f:67:40:cf:a6:b1:a0:f5: f3:d0:dd:60:df:af:9b:0d:80:3e:a0:0c:d9:f8:cb:77:7e:7e: 82:7a:26:77:64:07:d8:89:a1:84:46:8f:ef:bc:58:c5:76:a9: 59:c8:54:c1:0d:fb:34:66:f5:23:6d:e4:43:d2:9f:bf:4a:a5: 24:20:12:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OImyz1fcKA791HzGwiz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGY4NjllMzVkMjAxOTUyOGZlNjY5MWRlZTllNzhlMWI1Mjc4ZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP2d7cIH6MmMeRCU92GTBlLO7uCs b93Be3wNBfep/1juUwhjfaYlFgYeTabnirm8UMDMnLOWnDRfY4OdH9AOOdp8X2D0 wjwxWP0HxJFSgQWHMqfEolfYbqbYhBWgDNjSX/uXLe78SYXv6hFiSzyFoQGdcBqX vg73kx2rPDt+N3YnBL4XF2xXM7qTeoNGkW9t3QhJIwfqPikirQBojCqNeR+gOUvX DvhKWBxgY+kJ/vfLIiHSNo35By40eDQ97CCd6Wb15dxI60CvmNJVX4Jl89WS1Qcw bVUDprf5eZH8OHZYEf9sndS48ZA2y1TP9s6osKvWCPrHRBSfpXJKVSTKIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDD4aeNdIBlSj+ZpHe6eeOG1J48QMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTVBocDQxMGdHVktQNW1rZDdwNTQ0YlVuanhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiRiMA0G CSqGSIb3DQEBCwUAA4IBAQAXYcP7i1hc1Oq9snI4bCmaEAguDKpTLPqJB0yj3OzF 5oGx3vMUF9rvLXyDReu/ev5P+ILean56FrK5L0KCRhJQ2P+7aKtnsc/Pal4FRA6S ECiEqOzmUhIwC8lF7PWWyWs1l7fRKhEkhsdqXyCpNmTfARVMK+B7DzFtYHU3uNKL HQlzqdWpGbmpFOo8AHi9utdaUol4wRVNiI0XoXLQXnjLpG2qoUU8TxZ/fUAtVgma 7b2wTExu4RiGsy1kdJdTX2dAz6axoPXz0N1g36+bDYA+oAzZ+Mt3fn6CeiZ3ZAfY iaGERo/vvFjFdqlZyFTBDfs0ZvUjbeRD0p+/SqUkIBKY -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:57 2026 by rpki-client