This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/MNvipI6k91242S53W3jqVcArQhc.roa
File: MNvipI6k91242S53W3jqVcArQhc.roa (raw, json)
Hash identifier: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=
Subject key identifier: 30:DB:E2:A4:8E:A4:F7:5D:B8:D9:2E:77:5B:78:EA:55:C0:2B:42:17
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 019B7E38D7F70100E9888F96E608571081D6
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/MNvipI6k91242S53W3jqVcArQhc.roa
Signing time: Fri 02 Jan 2026 10:20:13 +0000
ROA not before: Fri 02 Jan 2026 10:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60707
IP address blocks: 91.151.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:d7:f7:01:00:e9:88:8f:96:e6:08:57:10:81:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 2 10:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30dbe2a48ea4f75db8d92e775b78ea55c02b4217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:30:74:a0:e5:68:eb:b5:cc:d9:44:0c:81:
49:bf:bf:61:40:f1:22:7a:0a:24:87:56:48:18:02:
b5:38:0e:68:0c:f6:4d:78:43:90:cd:46:c3:e0:c6:
4a:2b:a7:33:6a:0d:04:5c:96:47:2f:8f:27:be:57:
9b:27:05:65:22:09:f0:ba:bf:a0:29:a2:71:33:b6:
32:b6:6c:58:b1:a9:6e:f3:92:eb:80:82:e4:f7:d7:
80:cd:d6:a3:6b:46:bc:2b:68:bc:f7:41:ba:51:47:
c9:0d:38:d7:29:0c:a8:3c:bc:f0:47:ac:bd:31:36:
41:06:81:a1:92:58:df:a3:8c:19:76:e9:b7:30:19:
ec:08:d6:b1:8f:ab:ae:17:60:28:b0:1b:d2:02:d8:
03:3c:24:56:03:3e:d9:b2:1c:d0:45:f2:65:fb:11:
c4:64:a4:f6:5f:3d:6d:8f:c4:eb:aa:15:f8:13:bd:
5a:f0:02:ff:4c:23:d1:f4:59:53:50:dd:03:b1:f3:
5f:c8:f3:70:b6:65:97:33:d7:e6:3a:60:79:b6:8d:
b1:6d:3e:ae:72:d8:33:66:33:fd:d4:41:59:80:d5:
e3:28:ee:f0:31:4a:f7:78:7a:09:d4:36:02:3a:94:
31:4d:ad:6f:9a:94:db:02:32:15:a5:0d:e8:0e:07:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DB:E2:A4:8E:A4:F7:5D:B8:D9:2E:77:5B:78:EA:55:C0:2B:42:17
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/MNvipI6k91242S53W3jqVcArQhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:17:ee:c6:27:92:dc:62:0c:d7:e7:25:50:ca:d1:aa:2c:89:
8d:65:f3:42:10:64:1c:59:62:77:18:02:ba:db:f4:54:bb:88:
bd:1c:ae:01:e1:22:38:f6:fa:81:fe:9e:c7:06:d5:e8:64:9d:
f6:8c:5c:97:5f:89:f4:55:17:f1:5c:75:b2:a1:dd:f9:52:b8:
05:59:0b:64:dd:51:d4:b0:b4:81:1d:81:81:a8:aa:3a:e4:d0:
18:83:3c:e2:3a:61:58:24:86:f9:00:4b:1a:c8:27:10:5e:90:
3e:0e:91:25:a9:95:6b:9a:bf:64:8b:25:68:39:c6:ad:98:79:
87:29:d6:29:29:78:3b:26:0f:b5:6d:49:25:6a:74:6c:f7:02:
79:2e:4f:c4:1b:c1:41:a8:5d:d3:52:7d:61:cf:ca:5c:a6:9b:
43:41:b7:90:6b:b8:8f:77:f4:fd:cb:47:35:00:a2:8b:93:e5:
f4:b3:63:76:28:20:9b:15:97:e4:10:7f:cd:46:11:ca:97:7c:
e0:30:14:d2:bd:cc:51:7b:58:73:ac:ee:16:09:ec:21:b6:75:
ae:8e:1b:02:61:43:be:99:83:be:66:c4:75:5a:14:01:3b:bf:
87:fa:c9:a2:5c:f7:34:a9:dd:8f:3c:0f:86:57:8b:53:58:2a:
7f:32:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:55:35 2026 by rpki-client