This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/MHchnxV8uLs8pcvJTcOPLL-Bbbc.roa File: MHchnxV8uLs8pcvJTcOPLL-Bbbc.roa (raw, json) Hash identifier: vPV8+4NZsXrCq8XvABi4c8I9ILlUiPMubO8YOy17XOc= Subject key identifier: 30:77:21:9F:15:7C:B8:BB:3C:A5:CB:C9:4D:C3:8F:2C:BF:81:6D:B7 Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451 Certificate serial: 019B7E374859FC1660FF6FF8FF3677FC7C74 Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/MHchnxV8uLs8pcvJTcOPLL-Bbbc.roa Signing time: Fri 02 Jan 2026 10:18:30 +0000 ROA not before: Fri 02 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.149.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:48:59:fc:16:60:ff:6f:f8:ff:36:77:fc:7c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451 Validity Not Before: Jan 2 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3077219f157cb8bb3ca5cbc94dc38f2cbf816db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:14:7d:0f:0e:9c:72:5c:cd:b8:31:90:00: 18:7e:19:a4:71:9f:0f:12:34:d3:ad:6a:9f:6a:6d: f8:32:1e:70:fa:81:a3:25:76:91:57:15:f5:04:d5: 53:19:b3:62:9d:8d:d7:bc:d6:6c:74:42:54:66:14: 89:af:19:46:d9:32:00:46:ec:36:7a:db:fe:ab:1a: 40:dc:8c:ab:fa:03:98:ac:40:49:40:72:e9:26:a9: 3b:3f:9e:62:a2:a7:61:da:e5:0f:d5:a0:72:12:c1: f1:c0:db:39:ce:04:8c:55:43:39:ad:d0:4f:7f:72: 53:40:67:08:8d:04:f3:6c:82:3e:3e:07:64:a3:82: 1e:ba:47:50:1e:20:bf:26:2c:83:20:49:96:4d:da: e2:21:8e:5a:93:e5:8a:d5:e9:ba:8e:0b:7a:8f:97: 8a:08:11:7d:02:ae:c4:49:f4:67:7b:f2:2d:5c:02: 41:d7:b6:ce:99:18:fa:8d:c6:71:62:69:cc:3b:91: b8:21:7e:cf:aa:78:79:32:6a:cc:30:05:c2:ef:91: 62:e6:3e:41:40:c7:88:1b:71:80:7b:6f:b3:ac:6d: ee:c4:fa:f1:f4:ca:a3:e4:f6:67:54:2a:70:61:0c: 91:10:b3:bd:ae:80:9d:46:b9:5f:f4:e5:3e:ba:de: f6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:77:21:9F:15:7C:B8:BB:3C:A5:CB:C9:4D:C3:8F:2C:BF:81:6D:B7 X509v3 Authority Key Identifier: keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/MHchnxV8uLs8pcvJTcOPLL-Bbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.108.0/22 Signature Algorithm: sha256WithRSAEncryption 27:7f:cb:6a:cd:8f:df:06:d2:32:29:ca:f5:a1:f4:11:15:1a: e3:38:4e:15:2f:37:65:34:51:2f:96:7a:5c:b0:11:0b:ec:ee: de:7b:14:9b:41:32:4e:ee:0e:43:49:ce:6d:65:4b:05:8b:60: 79:43:96:13:39:c1:f1:bf:b0:87:fe:5e:98:2c:80:74:07:1d: 27:a2:e5:43:ec:8b:2e:1b:8c:85:ca:53:35:a2:bb:6e:50:8c: 36:b5:72:5a:25:f6:98:71:7f:2d:13:bf:1b:ab:97:00:e9:0f: 4d:3c:43:50:b0:fa:09:f7:83:17:43:9f:ba:e2:2b:28:fc:7c: 6a:f7:35:28:4b:fc:66:74:8b:0c:d8:a5:5d:94:24:88:e7:e9: 1a:e9:62:4b:a0:e2:bc:9e:6c:f6:52:7e:cd:76:b1:72:3a:48: c3:69:6a:79:a3:bb:03:3d:c2:d8:e8:1e:b7:1c:11:c9:67:f3: 41:70:08:29:70:54:b0:ef:96:3a:56:92:b0:28:a8:ae:45:05: be:89:52:80:71:a4:d6:ba:e7:6f:e5:b3:ac:f2:30:cc:45:d1: d6:7c:e6:f6:7d:5d:6a:bf:2d:66:c1:fe:e0:7b:23:30:d2:e7: a6:11:c4:e7:c7:ca:bc:e5:39:a7:c9:fb:bc:30:82:9c:11:2e: 83:9d:42:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N0hZ/BZg/2/4/zZ3/Hx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YWRkNWJhNzY2MmI3MzFkZDA4YmNmODczOGYxMzVkOTNh ZWQ0NTEwHhcNMjYwMTAyMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDc3MjE5ZjE1N2NiOGJiM2NhNWNiYzk0ZGMzOGYyY2JmODE2ZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8oUfQ8OnHJczbgxkAAYfhmkcZ8P EjTTrWqfam34Mh5w+oGjJXaRVxX1BNVTGbNinY3XvNZsdEJUZhSJrxlG2TIARuw2 etv+qxpA3Iyr+gOYrEBJQHLpJqk7P55ioqdh2uUP1aByEsHxwNs5zgSMVUM5rdBP f3JTQGcIjQTzbII+Pgdko4IeukdQHiC/JiyDIEmWTdriIY5ak+WK1em6jgt6j5eK CBF9Aq7ESfRne/ItXAJB17bOmRj6jcZxYmnMO5G4IX7Pqnh5MmrMMAXC75Fi5j5B QMeIG3GAe2+zrG3uxPrx9Mqj5PZnVCpwYQyRELO9roCdRrlf9OU+ut72wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDB3IZ8VfLi7PKXLyU3Djyy/gW23MB8GA1UdIwQY MBaAFMSt1bp2Yrcx3Qi8+HOPE12TrtRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zNDZhMjMtMTE4MS00YTgwLTlmNTUt ZGQ3ZDQ3Y2Y1YzE4LzEvTUhjaG54Vjh1THM4cGN2SlRjT1BMTC1CYmJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8zNDZhMjMtMTE4MS00YTgwLTlmNTUtZGQ3ZDQ3Y2Y1YzE4 LzEveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZVsMA0G CSqGSIb3DQEBCwUAA4IBAQAnf8tqzY/fBtIyKcr1ofQRFRrjOE4VLzdlNFEvlnpc sBEL7O7eexSbQTJO7g5DSc5tZUsFi2B5Q5YTOcHxv7CH/l6YLIB0Bx0nouVD7Isu G4yFylM1ortuUIw2tXJaJfaYcX8tE78bq5cA6Q9NPENQsPoJ94MXQ5+64iso/Hxq 9zUoS/xmdIsM2KVdlCSI5+ka6WJLoOK8nmz2Un7NdrFyOkjDaWp5o7sDPcLY6B63 HBHJZ/NBcAgpcFSw75Y6VpKwKKiuRQW+iVKAcaTWuudv5bOs8jDMRdHWfOb2fV1q vy1mwf7geyMw0uemEcTnx8q85Tmnyfu8MIKcES6DnUIQ -----END CERTIFICATE-----Generated at Sat Jan 17 06:45:56 2026 by rpki-client