This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/me_xjlN7OqecsEb7sp291dkHOUs.roa File: me_xjlN7OqecsEb7sp291dkHOUs.roa (raw, json) Hash identifier: a7dJ3I7SFCqRfl7heuDPnD9kr4G5WHo4CHm7q3AXR74= Subject key identifier: 99:EF:F1:8E:53:7B:3A:A7:9C:B0:46:FB:B2:9D:BD:D5:D9:07:39:4B Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019A9C2F5044197217B69F4045DDD705CB45 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/me_xjlN7OqecsEb7sp291dkHOUs.roa Signing time: Wed 19 Nov 2025 12:55:37 +0000 ROA not before: Wed 19 Nov 2025 12:55:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24863 IP address blocks: 80.15.249.0/24 maxlen: 24 2a01:c9c0:c01e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:2f:50:44:19:72:17:b6:9f:40:45:dd:d7:05:cb:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Nov 19 12:55:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=99eff18e537b3aa79cb046fbb29dbdd5d907394b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:14:70:ee:e1:bd:1d:0a:30:80:5c:2c:67:9e: 00:bd:7f:f3:e7:5a:05:da:68:db:38:48:7f:fb:1c: c7:a9:90:3f:ab:68:68:09:0d:7f:ba:89:34:f0:43: 81:ab:6e:28:f7:f3:9d:24:4a:a9:d0:46:a6:f4:38: 81:76:30:87:cc:67:91:f1:c2:56:72:a5:66:f4:17: ee:bb:38:10:e8:ce:49:ab:db:9f:ef:fb:42:e1:80: ce:62:27:96:0d:96:41:48:23:c9:2f:6a:fd:26:09: 45:23:95:c7:58:2d:3f:9b:f5:f1:02:a0:05:7a:71: 34:0b:7d:a7:ee:84:9f:ff:aa:cc:e1:ef:50:88:ea: ed:fb:44:7d:07:f5:dc:84:47:ff:23:92:94:56:cc: 25:92:1d:9b:38:60:e4:80:aa:ca:08:a6:3a:ee:dd: 28:f0:a8:2d:8e:41:f3:9b:16:92:dd:d2:d8:53:00: 81:95:39:7e:84:75:95:47:6f:cb:22:00:ef:8a:c3: 14:07:f9:96:79:02:99:62:e7:4c:b5:49:d8:ea:42: 53:fc:e7:a1:94:ba:a0:e8:e4:32:5a:28:b5:58:59: 06:33:56:a4:ea:ab:21:00:a9:ba:a4:42:f4:91:e3: 55:03:a9:ed:22:c1:00:be:29:b1:7f:5d:ab:08:31: 39:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EF:F1:8E:53:7B:3A:A7:9C:B0:46:FB:B2:9D:BD:D5:D9:07:39:4B X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/me_xjlN7OqecsEb7sp291dkHOUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.15.249.0/24 IPv6: 2a01:c9c0:c01e::/48 Signature Algorithm: sha256WithRSAEncryption 2a:04:9e:3b:44:f3:e0:a4:bc:b2:c3:5d:e6:b9:de:15:b8:a8: dc:66:2d:43:52:0a:5e:cf:ab:21:22:e5:d8:24:ff:56:20:6c: 09:e6:63:2e:a5:7a:bb:ac:fa:3c:59:00:ec:67:3e:ac:9e:bc: 99:72:f2:00:71:74:53:9a:c0:07:ba:53:c8:03:56:4a:2e:aa: 18:86:3d:81:ce:9c:8b:b7:d3:dc:53:bd:99:eb:83:c3:60:d1: 8b:ca:4e:ba:2a:36:c4:a3:74:9f:57:3a:e0:b1:60:34:0f:06: 07:bf:9e:a2:c4:43:2c:17:6a:f9:b0:55:35:d8:16:bc:3f:78: 2b:dc:73:fa:0d:62:33:02:71:4c:62:95:87:79:8f:34:ee:91: 16:7f:d3:40:51:fc:fc:fb:c3:70:fa:b1:0a:e3:e4:75:1c:b7: 43:7d:29:70:f6:2b:c0:b9:0e:b9:ed:29:7e:22:0e:9f:b0:a8: 05:a9:53:18:16:49:04:77:0e:24:41:28:f9:c1:48:c2:b1:c9: 25:a1:80:cb:98:47:1f:1d:ef:c2:a2:96:ce:16:42:7f:db:ad: 8a:95:90:ee:72:63:45:4e:7a:3b:21:1c:04:d7:3c:2b:2a:5d: a2:e0:33:ba:21:db:66:e8:52:01:14:5c:04:6b:92:17:44:8d: 9f:0c:d1:45 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqcL1BEGXIXtp9ARd3XBctFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjUxMTE5MTI1NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWVmZjE4ZTUzN2IzYWE3OWNiMDQ2ZmJiMjlkYmRkNWQ5MDczOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBRw7uG9HQowgFwsZ54AvX/z51oF 2mjbOEh/+xzHqZA/q2hoCQ1/uok08EOBq24o9/OdJEqp0Eam9DiBdjCHzGeR8cJW cqVm9BfuuzgQ6M5Jq9uf7/tC4YDOYieWDZZBSCPJL2r9JglFI5XHWC0/m/XxAqAF enE0C32n7oSf/6rM4e9QiOrt+0R9B/XchEf/I5KUVswlkh2bOGDkgKrKCKY67t0o 8KgtjkHzmxaS3dLYUwCBlTl+hHWVR2/LIgDvisMUB/mWeQKZYudMtUnY6kJT/Oeh lLqg6OQyWii1WFkGM1ak6qshAKm6pEL0keNVA6ntIsEAvimxf12rCDE5qwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJnv8Y5TezqnnLBG+7KdvdXZBzlLMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvbWVfeGpsTjdPcWVjc0ViN3NwMjkxZGtIT1VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUA/5MA8E AgACMAkDBwAqAcnAwB4wDQYJKoZIhvcNAQELBQADggEBACoEnjtE8+CkvLLDXea5 3hW4qNxmLUNSCl7PqyEi5dgk/1YgbAnmYy6lerus+jxZAOxnPqyevJly8gBxdFOa wAe6U8gDVkouqhiGPYHOnIu309xTvZnrg8Ng0YvKTroqNsSjdJ9XOuCxYDQPBge/ nqLEQywXavmwVTXYFrw/eCvcc/oNYjMCcUxilYd5jzTukRZ/00BR/Pz7w3D6sQrj 5HUct0N9KXD2K8C5DrntKX4iDp+wqAWpUxgWSQR3DiRBKPnBSMKxySWhgMuYRx8d 78Kils4WQn/brYqVkO5yY0VOejshHATXPCsqXaLgM7oh22boUgEUXARrkhdEjZ8M 0UU= -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:25 2025 by rpki-client