This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/MxXFFNbnKeVGQoJUUSPIFAh3HFE.roa File: MxXFFNbnKeVGQoJUUSPIFAh3HFE.roa (raw, json) Hash identifier: jJ9eXrKVZallfBng8qzQIoukBNtwZT2XORL8UeAPSWU= Subject key identifier: 33:15:C5:14:D6:E7:29:E5:46:42:82:54:51:23:C8:14:08:77:1C:51 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F838D829C939556BEBBC46DAACF0249 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/MxXFFNbnKeVGQoJUUSPIFAh3HFE.roa Signing time: Fri 02 Jan 2026 16:21:26 +0000 ROA not before: Fri 02 Jan 2026 16:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.11.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:8d:82:9c:93:95:56:be:bb:c4:6d:aa:cf:02:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3315c514d6e729e5464282545123c81408771c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:41:96:da:cd:51:db:14:58:b4:ac:ca:8d:4d: 6f:35:5f:77:6b:91:02:0b:d5:62:51:9c:52:2f:76: 3c:a1:a9:07:18:b1:47:aa:89:a1:2a:95:5a:56:d0: 16:84:cd:32:29:ec:9e:b1:b2:f6:63:0f:b8:18:15: f0:4b:2c:d8:64:37:0b:aa:cb:2b:39:bd:47:59:70: a6:15:a7:87:60:b2:5e:63:37:a4:15:45:6b:9a:98: 9b:d3:48:cf:60:64:c3:e6:79:3e:18:32:d0:74:a2: 36:f1:e5:14:88:09:35:38:a6:84:fb:f9:ce:a3:4e: 53:47:ce:ff:51:b5:8b:e5:2e:19:12:4e:4f:16:dd: c9:da:ed:98:02:68:66:41:05:2f:a3:b5:04:18:e5: ab:f0:93:69:67:16:48:64:6d:22:10:f3:38:04:ec: bf:b5:18:9b:da:27:c3:fa:25:70:d4:79:5d:c9:09: 25:07:f3:63:6a:7e:2a:0c:e3:9c:69:d3:e2:3b:3f: 25:f5:f8:af:b2:bb:fc:9a:74:4e:38:28:95:4f:09: dc:a4:7c:f1:03:fe:08:84:94:57:c0:1e:38:fb:3e: 1f:72:98:ea:1f:0a:9c:0d:6c:00:22:a6:45:42:0c: cd:e5:90:dd:cc:f4:13:24:aa:9b:34:57:06:47:fa: 47:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:15:C5:14:D6:E7:29:E5:46:42:82:54:51:23:C8:14:08:77:1C:51 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/MxXFFNbnKeVGQoJUUSPIFAh3HFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.189.0/24 Signature Algorithm: sha256WithRSAEncryption 40:ef:fc:98:38:2c:3c:a9:1b:7b:da:a3:45:8e:e0:dd:e6:2e: 90:b5:0a:89:e5:3c:d8:2a:19:74:0e:b3:2e:c3:e8:ed:cd:77: 46:a2:79:8b:04:11:34:74:6c:fa:db:b6:d6:83:07:2a:92:f4: 2a:af:0f:34:a3:bc:3a:b6:ab:6f:bf:d2:63:34:eb:15:44:e8: fc:00:61:5b:c6:98:61:dd:d6:8b:c1:bd:6e:c6:34:b1:65:b6: c4:ea:76:73:ca:2e:47:f6:dd:62:2a:84:01:4a:a9:46:1f:6f: f3:55:e2:80:7e:86:9e:bc:80:69:b1:81:01:f7:43:4a:04:f1: 00:7c:0b:23:0e:82:1b:23:40:e7:9e:67:28:01:ed:27:93:19: 5f:51:dd:6e:e3:38:9f:f8:30:12:df:17:dc:76:50:55:84:67: fc:d0:37:24:bf:a8:ae:5d:78:43:6b:ce:2c:97:a4:da:45:2a: 95:89:aa:0b:50:cb:0d:54:5f:26:e4:fd:ce:53:cb:d9:06:5a: dc:78:58:c8:6f:6a:38:85:f3:3d:58:0b:6b:85:63:2b:a3:9b: f7:cb:02:ca:dd:fc:3b:c4:9a:1e:e1:2a:62:9d:6b:f0:65:73: b4:8a:70:55:a9:5d:71:1c:90:4f:31:70:d5:34:e3:42:af:12: 6f:78:12:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g42CnJOVVr67xG2qzwJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzE1YzUxNGQ2ZTcyOWU1NDY0MjgyNTQ1MTIzYzgxNDA4NzcxYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkGW2s1R2xRYtKzKjU1vNV93a5EC C9ViUZxSL3Y8oakHGLFHqomhKpVaVtAWhM0yKeyesbL2Yw+4GBXwSyzYZDcLqssr Ob1HWXCmFaeHYLJeYzekFUVrmpib00jPYGTD5nk+GDLQdKI28eUUiAk1OKaE+/nO o05TR87/UbWL5S4ZEk5PFt3J2u2YAmhmQQUvo7UEGOWr8JNpZxZIZG0iEPM4BOy/ tRib2ifD+iVw1HldyQklB/Njan4qDOOcadPiOz8l9fivsrv8mnROOCiVTwncpHzx A/4IhJRXwB44+z4fcpjqHwqcDWwAIqZFQgzN5ZDdzPQTJKqbNFcGR/pHRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDMVxRTW5ynlRkKCVFEjyBQIdxxRMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvTXhYRkZOYm5LZVZHUW9KVVVTUElGQWgzSEZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu9MA0G CSqGSIb3DQEBCwUAA4IBAQBA7/yYOCw8qRt72qNFjuDd5i6QtQqJ5TzYKhl0DrMu w+jtzXdGonmLBBE0dGz627bWgwcqkvQqrw80o7w6tqtvv9JjNOsVROj8AGFbxphh 3daLwb1uxjSxZbbE6nZzyi5H9t1iKoQBSqlGH2/zVeKAfoaevIBpsYEB90NKBPEA fAsjDoIbI0DnnmcoAe0nkxlfUd1u4zif+DAS3xfcdlBVhGf80Dckv6iuXXhDa84s l6TaRSqViaoLUMsNVF8m5P3OU8vZBlrceFjIb2o4hfM9WAtrhWMro5v3ywLK3fw7 xJoe4SpinWvwZXO0inBVqV1xHJBPMXDVNONCrxJveBKe -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:17 2026 by rpki-client