This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/MBROwpn7E_P7vCF37T3dw0M4yzM.roa
File: MBROwpn7E_P7vCF37T3dw0M4yzM.roa (raw, json)
Hash identifier: G8TAGfvQzvXZYfrwzR9QmINSRsixI+9H36jSnh0IhZ8=
Subject key identifier: 30:14:4E:C2:99:FB:13:F3:FB:BC:21:77:ED:3D:DD:C3:43:38:CB:33
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019C18CFB0D9D38EBB146B1A3B5A763F68D1
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/MBROwpn7E_P7vCF37T3dw0M4yzM.roa
Signing time: Sun 01 Feb 2026 10:46:30 +0000
ROA not before: Sun 01 Feb 2026 10:46:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47216
IP address blocks: 94.199.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:18:cf:b0:d9:d3:8e:bb:14:6b:1a:3b:5a:76:3f:68:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Feb 1 10:46:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30144ec299fb13f3fbbc2177ed3dddc34338cb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:ba:51:ee:4b:af:27:d5:60:4c:f6:23:77:
35:54:b2:03:0e:00:14:9d:fb:44:9d:f2:11:51:03:
bc:17:18:b4:13:dd:5f:81:bd:f7:05:dc:43:65:bb:
19:79:ca:59:f1:47:18:48:08:6e:8e:a4:d6:e1:33:
60:eb:f9:4c:4c:ef:94:c8:79:b0:f5:3c:c8:1b:17:
1c:4c:78:57:ca:28:5e:8f:df:99:fe:8c:d2:e3:b4:
93:31:c4:94:f9:97:5a:20:f8:e8:ea:6f:21:e8:21:
54:82:3b:f2:b9:36:83:e4:de:7a:5d:c9:02:1e:d4:
b2:71:ec:98:f1:85:c6:21:8f:0b:cc:0b:2e:ba:93:
58:4a:16:e7:92:2b:57:0a:c3:91:1c:11:93:f1:c5:
23:07:d8:f9:42:c7:cd:39:72:0e:81:fe:46:a5:20:
fd:ea:0a:0d:db:c9:fd:08:68:fc:59:6c:66:b8:33:
1c:87:4b:2a:66:dc:7d:55:a8:9b:08:79:97:a2:e6:
ba:c8:d3:29:94:08:6e:69:46:2f:91:a5:f7:00:ec:
8a:20:af:3e:b6:97:fa:a8:88:a5:f5:86:f5:05:57:
63:48:64:16:e8:85:7a:01:93:83:cc:e4:ba:dc:04:
46:d5:81:2e:fa:4f:ed:bd:f4:7a:d7:1f:ed:ef:6d:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:14:4E:C2:99:FB:13:F3:FB:BC:21:77:ED:3D:DD:C3:43:38:CB:33
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/MBROwpn7E_P7vCF37T3dw0M4yzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:09:3d:5c:eb:67:52:4a:d2:70:91:88:70:b0:ca:dc:86:07:
61:1e:92:cf:70:bf:c9:a5:8b:69:b7:fc:f6:01:6c:fa:6a:f5:
43:f5:e6:20:51:7c:1d:5d:45:50:bd:d8:a1:5e:7b:43:a8:52:
ac:9a:6e:56:86:00:56:0a:b4:1f:64:3b:6e:cf:d9:6a:59:b2:
55:5b:26:65:65:37:aa:3d:a9:b2:39:60:9c:4f:6c:37:b8:be:
02:77:9e:a1:e3:03:b6:b1:3e:bc:9a:9d:a9:df:c3:a6:f1:4a:
d9:88:cf:52:65:d0:f4:bd:fd:ef:0c:1d:bf:90:fa:54:ce:0b:
c8:05:15:e8:e1:e4:f4:72:18:7f:69:97:7d:7e:e8:29:1b:b6:
e0:14:6e:26:8f:f0:23:87:e9:e1:91:85:ad:c0:7d:95:9a:41:
7a:a6:90:73:95:78:c6:c3:c4:11:e2:37:4a:fe:3b:96:70:6b:
e6:4b:8a:d2:96:a8:d5:6f:26:d0:95:b3:c6:da:e7:77:59:f2:
11:e2:4d:7c:5d:6d:f0:c0:c8:ad:69:c1:b2:15:4a:24:1c:ec:
20:b4:19:fc:06:ba:66:40:c8:33:25:43:d9:3d:9d:1c:f7:00:
3f:79:a1:3e:d8:e4:ad:9f:55:59:53:c4:06:74:06:76:3b:ff:
c6:02:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:57:24 2026 by rpki-client