This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/me3p8QV58B-KPTyEebXHbUt57F4.roa
File: me3p8QV58B-KPTyEebXHbUt57F4.roa (raw, json)
Hash identifier: RbcsBttE7vNIP3XYdPFTNMZZr81PhLK/Xuu/3kpgyJc=
Subject key identifier: 99:ED:E9:F1:05:79:F0:1F:8A:3D:3C:84:79:B5:C7:6D:4B:79:EC:5E
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019A9416B3EEDA3C58B405E10A9F8A658065
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/me3p8QV58B-KPTyEebXHbUt57F4.roa
Signing time: Mon 17 Nov 2025 23:11:47 +0000
ROA not before: Mon 17 Nov 2025 23:11:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 185.28.60.0/24 maxlen: 24
185.28.61.0/24 maxlen: 24
185.28.63.0/24 maxlen: 24
185.103.196.0/24 maxlen: 24
185.103.197.0/24 maxlen: 24
185.103.198.0/24 maxlen: 24
185.103.199.0/24 maxlen: 24
185.106.20.0/24 maxlen: 24
185.106.21.0/24 maxlen: 24
185.106.22.0/24 maxlen: 24
185.106.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:94:16:b3:ee:da:3c:58:b4:05:e1:0a:9f:8a:65:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Nov 17 23:11:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99ede9f10579f01f8a3d3c8479b5c76d4b79ec5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:1c:a5:23:8e:3d:5f:57:a8:c0:b9:15:d1:
fe:04:52:24:51:0b:73:08:81:45:13:23:50:20:75:
05:97:86:40:fd:7c:bc:4b:0e:11:d2:fb:59:4e:d2:
1c:2a:a7:34:c9:f0:a6:53:2e:0c:17:02:e6:01:b3:
0a:d9:3a:cf:6a:88:c5:2e:11:85:9d:6b:64:84:0f:
4b:19:3c:91:58:2b:2c:11:74:fb:ad:c7:96:b5:91:
0e:9c:37:3f:1b:28:54:ab:54:64:99:c8:f7:12:b9:
cc:07:2a:cc:8d:24:1b:1d:9d:76:f1:84:61:9a:8c:
7e:a7:d8:da:48:c1:70:be:13:32:b3:52:8f:1c:e2:
9a:3e:8f:e9:02:f8:10:7f:0e:20:87:4b:dd:1e:9c:
11:d7:d9:10:1b:ed:73:2d:bd:ba:c6:9b:31:32:dc:
86:4e:f7:40:f9:a5:d4:6b:0e:43:3f:c5:67:99:fb:
8f:6f:08:1d:4b:f1:68:27:10:e3:eb:6a:bf:4a:fc:
21:f5:9b:48:08:62:32:92:b4:12:5e:dc:cd:c7:42:
dc:67:97:7f:20:d1:14:3c:dd:40:2b:ab:a0:96:86:
16:62:74:19:29:57:64:c6:70:38:7b:02:2f:95:3a:
07:43:db:54:72:eb:4a:75:44:b1:c5:03:97:68:c8:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:E9:F1:05:79:F0:1F:8A:3D:3C:84:79:B5:C7:6D:4B:79:EC:5E
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/me3p8QV58B-KPTyEebXHbUt57F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.60.0/23
185.28.63.0/24
185.103.196.0/22
185.106.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:30:ab:bf:ee:cf:b8:71:1d:45:45:e4:a0:2b:d1:6c:ef:ad:
56:8e:3c:83:fd:4d:75:f5:99:0d:17:4b:74:70:de:fc:43:d1:
3c:81:c7:f8:25:5c:b9:ab:7f:85:6c:d9:b1:ca:c0:fb:2f:49:
1a:2b:83:5d:20:c2:c9:a7:ef:ba:20:93:89:97:f6:4d:08:93:
23:b0:70:d2:e3:04:8c:33:b7:d7:2f:ed:e6:d8:54:96:03:30:
e3:e7:e3:e1:56:39:6a:44:0a:af:0f:46:78:c2:e3:12:23:9d:
d4:15:b8:56:3a:d6:22:ad:d3:32:00:85:0c:a3:f0:99:57:21:
9f:b5:49:e5:b5:88:ce:35:68:52:5f:12:d3:b2:cd:8d:be:75:
ff:df:13:30:a9:17:c5:c5:a7:c4:86:a6:bb:e9:c7:8a:51:b6:
ae:ff:c7:2b:fd:61:d0:bd:79:b8:97:19:85:86:ae:2b:85:92:
d4:7b:b2:d3:95:e0:aa:7b:23:e8:ff:ed:40:23:4e:a9:a3:aa:
56:72:72:3a:a1:75:ff:53:f3:33:01:44:c5:1f:62:7e:32:36:
74:d9:fd:11:46:4e:f3:a4:59:5f:f3:6d:12:02:b0:ac:a9:88:
f5:82:e7:6f:c9:30:b0:10:44:c8:0a:0b:71:a3:5f:91:7d:51:
75:4e:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 09:28:54 2025 by rpki-client