This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/meUCphlLcVef4neFn3ylQe4DVDQ.roa File: meUCphlLcVef4neFn3ylQe4DVDQ.roa (raw, json) Hash identifier: 5CYVKv4qrJgExzQq6wIuhoJtM1IO9x+r+OALZmkFJXQ= Subject key identifier: 99:E5:02:A6:19:4B:71:57:9F:E2:77:85:9F:7C:A5:41:EE:03:54:34 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019A691E7FB1F4277C295FF36716681E80BE Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/meUCphlLcVef4neFn3ylQe4DVDQ.roa Signing time: Sun 09 Nov 2025 14:56:37 +0000 ROA not before: Sun 09 Nov 2025 14:56:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19318 IP address blocks: 45.128.244.0/24 maxlen: 24 45.128.245.0/24 maxlen: 24 45.128.246.0/24 maxlen: 24 45.128.247.0/24 maxlen: 24 2a0f:1207::/32 maxlen: 32 2a10:6d00::/29 maxlen: 29 2a11:7440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:69:1e:7f:b1:f4:27:7c:29:5f:f3:67:16:68:1e:80:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 9 14:56:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=99e502a6194b71579fe277859f7ca541ee035434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:37:f3:a0:37:58:1e:b5:01:16:cc:27:39: d1:1d:f6:87:7b:e2:6f:12:a3:0d:e2:1f:4d:f6:11: 88:e2:7f:e3:bb:cf:ea:f4:bb:72:5e:e7:ef:4b:f2: 70:12:cb:7e:e1:e8:61:b3:9e:21:0a:fa:f4:f4:65: 3d:9a:4a:d6:af:57:02:60:08:41:53:73:aa:ac:10: 22:ee:1c:57:5e:32:03:7c:f1:a1:63:39:c9:cf:2b: ab:c8:17:ea:6f:72:aa:1f:09:c3:95:9e:28:8a:f1: 2b:1d:ee:06:8c:a0:d3:5f:60:ae:ac:80:2c:ac:c6: 79:75:4e:22:62:11:90:a1:9a:39:23:38:c0:a8:70: 72:0f:f3:7c:69:75:7b:e9:f3:44:75:3e:6a:90:d3: dd:49:2c:92:23:fc:53:5b:d7:d2:e7:91:8e:96:c9: 90:ef:24:d8:60:16:d5:89:e7:92:cb:ef:72:fc:fe: 4a:8d:11:16:e2:2c:14:f6:b1:a6:a4:3e:45:dd:09: 32:e7:8c:14:d2:10:42:aa:a4:15:1d:18:27:e5:ec: 5c:ed:1f:59:dc:05:b4:06:3e:26:58:41:37:ff:2e: d1:72:68:fc:12:21:c0:ff:23:73:93:2a:ae:82:41: ef:7d:16:ab:71:ef:42:be:e2:37:64:e0:c3:73:3a: 9b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E5:02:A6:19:4B:71:57:9F:E2:77:85:9F:7C:A5:41:EE:03:54:34 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/meUCphlLcVef4neFn3ylQe4DVDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.244.0/22 IPv6: 2a0f:1207::/32 2a10:6d00::/29 2a11:7440::/29 Signature Algorithm: sha256WithRSAEncryption 08:de:03:3f:33:66:d8:fe:80:dd:9b:1c:71:c3:5f:4d:ba:61: 2a:c3:91:78:7f:7b:40:83:72:75:ae:0f:0c:0d:d1:1f:3e:8f: 55:ba:fc:f2:01:70:96:f9:3c:d0:2b:53:10:a5:25:e7:93:49: fa:51:cb:e3:e1:b6:86:0e:99:59:51:aa:ea:54:df:f1:a6:11: b4:78:7c:92:78:ba:98:6d:04:15:d2:bf:79:31:46:6c:aa:6b: 8a:95:d1:aa:98:2a:68:60:d6:8c:ec:66:3e:1d:16:f6:e2:73: e6:4e:f9:2e:83:ab:76:5f:ee:17:1d:bf:be:e6:34:35:c1:7a: 5d:80:8b:6b:db:d5:cc:8d:cb:a5:02:7d:1c:e6:35:49:73:4f: 58:9e:7d:bd:d4:5f:2a:18:c9:a6:eb:d2:aa:ba:29:a6:ca:44: a5:dc:53:59:ac:ca:e1:18:96:5d:8c:fc:76:d0:56:61:7c:12: 28:37:a8:7e:f1:33:4d:48:1b:b0:e2:a5:52:c9:e5:ef:89:33: cb:1f:59:b9:3d:15:81:fb:a1:fd:ed:bb:6d:27:b1:a9:ac:c9: e9:99:63:4c:c0:8e:8c:95:26:6e:9f:f7:60:cf:94:49:62:31: f6:05:ea:4e:33:da:ca:19:38:6b:47:95:80:2f:6f:07:7c:51: b4:c2:f1:13 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZppHn+x9Cd8KV/zZxZoHoC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTA5MTQ1NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWU1MDJhNjE5NGI3MTU3OWZlMjc3ODU5ZjdjYTU0MWVlMDM1NDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw88386A3WB61ARbMJznRHfaHe+Jv EqMN4h9N9hGI4n/ju8/q9LtyXufvS/JwEst+4ehhs54hCvr09GU9mkrWr1cCYAhB U3OqrBAi7hxXXjIDfPGhYznJzyuryBfqb3KqHwnDlZ4oivErHe4GjKDTX2CurIAs rMZ5dU4iYhGQoZo5IzjAqHByD/N8aXV76fNEdT5qkNPdSSySI/xTW9fS55GOlsmQ 7yTYYBbVieeSy+9y/P5KjREW4iwU9rGmpD5F3Qky54wU0hBCqqQVHRgn5exc7R9Z 3AW0Bj4mWEE3/y7Rcmj8EiHA/yNzkyqugkHvfRarce9CvuI3ZODDczqbKwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJnlAqYZS3FXn+J3hZ98pUHuA1Q0MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvbWVVQ3BobExjVmVmNG5lRm4zeWxRZTREVkRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAMBAIAATAGAwQCLYD0MBsE AgACMBUDBQAqDxIHAwUDKhBtAAMFAyoRdEAwDQYJKoZIhvcNAQELBQADggEBAAje Az8zZtj+gN2bHHHDX026YSrDkXh/e0CDcnWuDwwN0R8+j1W6/PIBcJb5PNArUxCl JeeTSfpRy+PhtoYOmVlRqupU3/GmEbR4fJJ4uphtBBXSv3kxRmyqa4qV0aqYKmhg 1ozsZj4dFvbic+ZO+S6Dq3Zf7hcdv77mNDXBel2Ai2vb1cyNy6UCfRzmNUlzT1ie fb3UXyoYyabr0qq6KabKRKXcU1msyuEYll2M/HbQVmF8Eig3qH7xM01IG7DipVLJ 5e+JM8sfWbk9FYH7of3tu20nsamsyemZY0zAjoyVJm6f92DPlEliMfYF6k4z2soZ OGtHlYAvbwd8UbTC8RM= -----END CERTIFICATE-----Generated at Fri Dec 5 15:39:49 2025 by rpki-client