This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/43ph7nGnS5tshsgnTVDbzBJbaic.roa File: 43ph7nGnS5tshsgnTVDbzBJbaic.roa (raw, json) Hash identifier: fNt9fxrm2wVLoV58+nopL9DjIu2Us080h8fOBtDhVlI= Subject key identifier: E3:7A:61:EE:71:A7:4B:9B:6C:86:C8:27:4D:50:DB:CC:12:5B:6A:27 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019AB0CFBDEBA33A6A8FE374E78E6F01A614 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/43ph7nGnS5tshsgnTVDbzBJbaic.roa Signing time: Sun 23 Nov 2025 13:03:15 +0000 ROA not before: Sun 23 Nov 2025 13:03:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 185.214.108.0/24 maxlen: 24 185.223.155.0/24 maxlen: 24 194.124.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 01:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:cf:bd:eb:a3:3a:6a:8f:e3:74:e7:8e:6f:01:a6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Nov 23 13:03:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e37a61ee71a74b9b6c86c8274d50dbcc125b6a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:77:ea:3d:41:b6:6d:c8:80:cf:75:ee:fd: 58:d4:74:96:df:d7:24:34:d8:a9:71:ed:21:72:6c: 8e:73:7a:8d:ec:16:cc:37:80:ea:2d:41:9e:fc:4a: 78:6c:8c:e4:0e:a3:d7:8e:58:8e:c1:e9:eb:5b:04: 94:33:74:0e:dd:75:01:42:80:3d:9e:89:f3:19:95: 6f:aa:f9:e8:c1:19:61:8b:58:c8:b0:9f:d5:77:31: b1:06:f0:67:2d:8c:6c:8b:fd:b6:7d:f6:2b:55:92: aa:d9:ea:72:ae:58:62:3d:5a:e5:4c:55:00:17:99: fd:54:ce:f5:1a:c6:86:d9:80:bf:ac:27:84:52:57: 70:7c:f9:d1:d7:d5:39:88:79:b0:74:97:d7:59:ef: 95:83:a8:5a:8b:69:e9:81:04:8b:eb:90:5e:b5:fa: 8c:5b:6f:a5:f2:f9:b7:7d:ab:6d:4c:1c:c2:a7:2d: af:26:e8:b0:66:22:76:64:e0:2b:56:b1:b8:4d:3d: cf:fe:b0:f2:e9:ac:83:9c:63:f6:23:d9:40:25:57: 2d:04:cf:7d:d7:85:2f:55:55:f8:40:ef:21:e4:cf: e8:41:43:90:53:bd:e5:f9:b0:32:81:c7:f4:ff:28: ae:ef:4c:8f:98:15:9d:2d:9e:81:da:6a:4a:40:ef: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7A:61:EE:71:A7:4B:9B:6C:86:C8:27:4D:50:DB:CC:12:5B:6A:27 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/43ph7nGnS5tshsgnTVDbzBJbaic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.108.0/24 185.223.155.0/24 194.124.69.0/24 Signature Algorithm: sha256WithRSAEncryption b8:ef:64:7c:c2:b6:77:8a:b4:2b:3c:09:73:38:67:08:8a:7f: b9:2c:12:43:9c:91:af:37:92:f7:92:6c:61:91:23:95:d1:0f: 9e:94:87:48:11:dc:7b:f0:16:7e:f2:6b:a5:45:82:53:3d:27: 2e:51:4b:6e:6a:0a:c0:c6:ae:32:ea:1b:af:09:72:22:05:9c: 2e:69:41:a9:9f:53:7c:f4:a9:e3:00:fb:a2:1d:64:1b:e1:2f: 7d:7c:58:6b:c8:41:3e:48:09:53:fa:f4:e3:29:04:9f:91:28: 98:8a:26:58:d7:41:8e:3d:91:f8:09:7c:4f:b4:64:db:dc:97: 40:5c:84:43:b0:11:73:26:a8:d8:82:a9:2d:8d:1b:09:aa:a9: f8:eb:c0:23:76:e5:04:85:4b:74:09:0b:bf:27:50:8c:14:d6: f4:ab:dc:14:24:36:28:e0:7e:0b:6c:33:1a:65:6b:96:5f:90: 52:e8:cb:81:1f:61:96:fd:a5:54:a4:14:7f:fd:8c:15:61:21: c1:9a:b9:21:78:b4:1b:fe:e3:0f:27:c8:e7:66:ef:20:23:50: df:c3:d3:f7:ea:63:6d:b7:ca:a3:3b:f1:4a:f3:26:7b:80:51: c7:cd:c9:e0:24:5f:0e:56:fe:6f:ea:e4:3b:5e:e3:ce:b6:ad: 6b:3d:92:08 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqwz73rozpqj+N0545vAaYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMTIzMTMwMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzdhNjFlZTcxYTc0YjliNmM4NmM4Mjc0ZDUwZGJjYzEyNWI2YTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8N36j1Btm3IgM917v1Y1HSW39ck NNipce0hcmyOc3qN7BbMN4DqLUGe/Ep4bIzkDqPXjliOwenrWwSUM3QO3XUBQoA9 nonzGZVvqvnowRlhi1jIsJ/VdzGxBvBnLYxsi/22ffYrVZKq2epyrlhiPVrlTFUA F5n9VM71GsaG2YC/rCeEUldwfPnR19U5iHmwdJfXWe+Vg6hai2npgQSL65BetfqM W2+l8vm3fattTBzCpy2vJuiwZiJ2ZOArVrG4TT3P/rDy6ayDnGP2I9lAJVctBM99 14UvVVX4QO8h5M/oQUOQU73l+bAygcf0/yiu70yPmBWdLZ6B2mpKQO+nVwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFON6Ye5xp0ubbIbIJ01Q28wSW2onMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvNDNwaDduR25TNXRzaHNnblRWRGJ6QkpiYWljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAudZsAwQA ud+bAwQAwnxFMA0GCSqGSIb3DQEBCwUAA4IBAQC472R8wrZ3irQrPAlzOGcIin+5 LBJDnJGvN5L3kmxhkSOV0Q+elIdIEdx78BZ+8mulRYJTPScuUUtuagrAxq4y6huv CXIiBZwuaUGpn1N89KnjAPuiHWQb4S99fFhryEE+SAlT+vTjKQSfkSiYiiZY10GO PZH4CXxPtGTb3JdAXIRDsBFzJqjYgqktjRsJqqn468AjduUEhUt0CQu/J1CMFNb0 q9wUJDYo4H4LbDMaZWuWX5BS6MuBH2GW/aVUpBR//YwVYSHBmrkheLQb/uMPJ8jn Zu8gI1Dfw9P36mNtt8qjO/FK8yZ7gFHHzcngJF8OVv5v6uQ7XuPOtq1rPZII -----END CERTIFICATE-----Generated at Tue Nov 25 08:36:23 2025 by rpki-client