This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/xMne1SAMH-NmiH2AwUzcwkdTgl8.roa File: xMne1SAMH-NmiH2AwUzcwkdTgl8.roa (raw, json) Hash identifier: 2xRNoJJDPdFtBinldE8KCt/I2UuqqqoHmvwM/zMncZ4= Subject key identifier: C4:C9:DE:D5:20:0C:1F:E3:66:88:7D:80:C1:4C:DC:C2:47:53:82:5F Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93 Certificate serial: 019B7C806CA11173984BACB64F5C7F5FA6DA Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/xMne1SAMH-NmiH2AwUzcwkdTgl8.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205591 IP address blocks: 45.154.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6c:a1:11:73:98:4b:ac:b6:4f:5c:7f:5f:a6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4c9ded5200c1fe366887d80c14cdcc24753825f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:d2:69:7b:8d:93:8a:1c:01:8e:16:28:7a: f6:11:cb:e4:c5:fb:0a:cd:2f:9b:19:17:84:93:be: 14:f6:4c:e9:02:ac:54:b1:55:ce:79:ed:75:97:e6: ba:c0:3d:82:bd:e5:a1:9b:a6:31:40:c7:c6:a0:61: 81:55:45:9d:29:b9:34:d6:fe:69:83:76:e6:5c:a3: ac:f4:2e:58:89:89:e1:34:23:63:c0:8f:da:9a:0d: 7a:f5:49:b6:a7:7d:29:54:d7:fc:18:60:6b:af:bf: 13:b4:9c:54:dc:0b:b2:47:82:46:c9:13:71:f5:46: 8a:0f:26:5d:ed:61:8b:74:5a:60:0b:fd:d1:6d:2d: f0:c0:86:82:d8:ca:a3:44:01:c4:cf:56:9a:dc:15: 4e:0a:27:b3:ad:5d:76:e9:86:45:cc:b6:df:fe:c5: ec:6f:20:ad:32:13:84:ee:81:b1:c7:b6:4b:74:68: 5a:9d:d0:07:f8:5d:0f:69:87:77:2c:8a:df:d7:17: ae:20:4a:2d:db:3e:5c:87:97:0f:73:67:27:5e:3f: 90:a2:46:08:64:d0:6a:1a:9c:2d:8f:71:c4:b7:3a: 54:64:d5:f5:00:64:c9:ef:a0:99:52:43:62:78:15: 3f:4b:29:53:d7:e2:07:48:45:72:f9:96:6c:e1:75: 61:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C9:DE:D5:20:0C:1F:E3:66:88:7D:80:C1:4C:DC:C2:47:53:82:5F X509v3 Authority Key Identifier: keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/xMne1SAMH-NmiH2AwUzcwkdTgl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.110.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:95:89:23:1c:eb:fc:66:45:95:e9:73:7e:d2:bf:02:8c:b5: ca:f7:09:de:67:93:41:92:ad:be:49:06:a4:62:4b:37:5e:b9: cb:66:4a:47:b4:80:58:94:f1:76:8c:03:f7:1d:0c:b8:be:b7: df:de:97:a0:5c:95:52:ce:54:26:a4:e7:6b:84:af:94:da:70: 9f:d6:40:a2:45:91:7e:ed:fd:17:63:e7:7d:56:22:9f:ee:c0: 6c:fd:60:db:a0:72:e1:01:54:ab:53:8c:5c:86:c2:6e:7c:dd: 51:a9:e4:27:d7:66:b5:18:ae:0b:50:99:bc:ee:63:b9:1f:a6: 34:e9:a9:ab:32:0c:a1:57:87:5f:99:aa:d3:52:08:06:22:52: 19:19:64:2b:02:3e:fe:89:73:94:5b:e1:06:88:b8:32:93:f6: 4a:b9:7e:63:57:f9:15:79:f5:da:72:51:82:d8:cc:a0:1e:84: bf:1f:bf:a4:c4:5a:41:31:4b:17:b2:b3:2b:18:25:e5:4e:ba: ee:90:2d:b0:ba:2e:b8:4e:10:54:6e:cf:ad:73:d3:2f:2a:4c: 67:f8:14:1a:c4:1a:29:38:8c:ef:9a:e8:d6:8c:e0:09:55:a7: 8b:fc:c0:01:e4:9c:a5:71:93:a0:36:5e:5f:7f:2c:0d:7b:15: f3:0c:64:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGyhEXOYS6y2T1x/X6baMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm OWZjOTMwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGM5ZGVkNTIwMGMxZmUzNjY4ODdkODBjMTRjZGNjMjQ3NTM4MjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+3SaXuNk4ocAY4WKHr2EcvkxfsK zS+bGReEk74U9kzpAqxUsVXOee11l+a6wD2CveWhm6YxQMfGoGGBVUWdKbk01v5p g3bmXKOs9C5YiYnhNCNjwI/amg169Um2p30pVNf8GGBrr78TtJxU3AuyR4JGyRNx 9UaKDyZd7WGLdFpgC/3RbS3wwIaC2MqjRAHEz1aa3BVOCiezrV126YZFzLbf/sXs byCtMhOE7oGxx7ZLdGhandAH+F0PaYd3LIrf1xeuIEot2z5ch5cPc2cnXj+QokYI ZNBqGpwtj3HEtzpUZNX1AGTJ76CZUkNieBU/SylT1+IHSEVy+ZZs4XVh+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTJ3tUgDB/jZoh9gMFM3MJHU4JfMB8GA1UdIwQY MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt M2YxMmFmZjI3NGRhLzEveE1uZTFTQU1ILU5taUgyQXdVemN3a2RUZ2w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZpuMA0G CSqGSIb3DQEBCwUAA4IBAQA6lYkjHOv8ZkWV6XN+0r8CjLXK9wneZ5NBkq2+SQak Yks3XrnLZkpHtIBYlPF2jAP3HQy4vrff3pegXJVSzlQmpOdrhK+U2nCf1kCiRZF+ 7f0XY+d9ViKf7sBs/WDboHLhAVSrU4xchsJufN1RqeQn12a1GK4LUJm87mO5H6Y0 6amrMgyhV4dfmarTUggGIlIZGWQrAj7+iXOUW+EGiLgyk/ZKuX5jV/kVefXaclGC 2MygHoS/H7+kxFpBMUsXsrMrGCXlTrrukC2wui64ThBUbs+tc9MvKkxn+BQaxBop OIzvmujWjOAJVaeL/MAB5JylcZOgNl5ffywNexXzDGS+ -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:45 2026 by rpki-client