This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/feCP8G1rOsiDGV_31T8ad25eIV0.roa File: feCP8G1rOsiDGV_31T8ad25eIV0.roa (raw, json) Hash identifier: OcSJG+zxoWACf7RhIIzRYo2CaCQzZQPxCKv7b8lIU9I= Subject key identifier: 7D:E0:8F:F0:6D:6B:3A:C8:83:19:5F:F7:D5:3F:1A:77:6E:5E:21:5D Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019AE4DFE34013DFAEC07C88ADE35AF114E8 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/feCP8G1rOsiDGV_31T8ad25eIV0.roa Signing time: Wed 03 Dec 2025 15:41:09 +0000 ROA not before: Wed 03 Dec 2025 15:41:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 185.227.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:df:e3:40:13:df:ae:c0:7c:88:ad:e3:5a:f1:14:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 3 15:41:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7de08ff06d6b3ac883195ff7d53f1a776e5e215d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:6a:0b:d0:7e:f0:8e:f7:25:b8:89:1b:79: d8:ef:fb:86:5b:1e:4c:41:1b:46:47:67:75:ec:1e: f5:5a:9e:be:0e:2d:72:80:ce:eb:f1:1d:03:ae:3b: 64:3d:7a:77:37:62:36:25:ff:26:b6:f9:7c:85:ca: 0b:be:d8:39:ab:60:b1:28:05:03:28:c1:da:59:ab: 22:a7:bf:84:94:14:b3:f1:d6:f5:da:b1:a0:34:d1: 3c:fd:be:8e:ec:15:6a:74:67:71:08:da:46:25:d2: 51:6c:46:b7:8b:c0:a4:41:9f:7b:c0:43:f0:e9:fe: 65:0d:c0:6d:43:86:01:07:f5:a0:1e:c2:eb:dc:d0: 16:6c:4e:b8:bf:64:d5:1d:c9:c5:13:32:66:44:fb: 06:b4:7e:68:b9:d1:3c:16:95:b7:f6:57:b7:f8:28: a6:7e:b2:6c:e8:eb:00:9f:a2:db:14:ce:8f:5b:51: e7:09:41:a0:30:8e:7b:1b:ab:1f:61:05:e8:f0:78: 7a:07:a9:c9:6e:41:6e:09:98:67:e7:58:fe:69:ee: 91:e5:48:f3:44:ba:aa:a1:68:14:c3:1c:7f:52:9f: bc:f1:6e:f5:97:cf:8f:0e:f5:aa:32:b6:09:10:aa: 28:b4:ba:68:4b:bf:1e:d5:c4:6c:a1:dc:9c:b4:19: 96:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E0:8F:F0:6D:6B:3A:C8:83:19:5F:F7:D5:3F:1A:77:6E:5E:21:5D X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/feCP8G1rOsiDGV_31T8ad25eIV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.144.0/24 Signature Algorithm: sha256WithRSAEncryption 94:58:bd:b7:75:f3:f9:9e:a0:6f:09:86:56:d4:a9:33:48:e9: a2:b3:81:04:84:b5:84:e2:19:75:ce:85:7e:3e:be:12:f4:8a: b6:d8:19:09:0e:ba:8f:a4:80:34:17:e3:c7:79:20:00:ab:7f: c5:ae:db:84:e0:90:d6:b3:f0:0f:5b:08:21:19:84:70:09:8f: 4b:18:57:fd:57:4a:6c:4c:3a:50:43:13:8b:d6:fc:3e:36:ea: ad:7c:02:33:fc:cb:e6:2f:43:4d:bf:96:4a:b2:48:ce:72:1c: 22:62:65:6d:07:87:ef:28:10:39:e7:54:6f:b3:aa:ca:c2:34: 52:cf:d7:ed:0d:5f:b0:ff:47:34:7a:5c:1f:53:7b:02:e6:dc: d5:19:44:a8:2b:db:b6:4b:85:c3:e6:12:6b:a5:3e:71:86:8b: d9:ec:29:33:39:2d:48:ea:f3:05:41:19:df:b7:44:05:35:5b: 6c:cb:90:e7:a9:63:18:da:d3:ad:64:70:8d:5f:c4:8e:3a:6a: 81:0d:52:60:e7:8f:89:6d:fb:8d:76:8e:d1:b1:dd:d6:a7:7b: a2:f7:1f:77:ff:ac:3f:1f:df:7e:95:0e:ea:99:38:7d:9c:66: 74:cc:29:19:36:75:e1:47:87:3b:82:3c:59:37:83:68:37:0d: 45:26:91:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrk3+NAE9+uwHyIreNa8RToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjAzMTU0MTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGUwOGZmMDZkNmIzYWM4ODMxOTVmZjdkNTNmMWE3NzZlNWUyMTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IhqC9B+8I73JbiJG3nY7/uGWx5M QRtGR2d17B71Wp6+Di1ygM7r8R0DrjtkPXp3N2I2Jf8mtvl8hcoLvtg5q2CxKAUD KMHaWasip7+ElBSz8db12rGgNNE8/b6O7BVqdGdxCNpGJdJRbEa3i8CkQZ97wEPw 6f5lDcBtQ4YBB/WgHsLr3NAWbE64v2TVHcnFEzJmRPsGtH5oudE8FpW39le3+Cim frJs6OsAn6LbFM6PW1HnCUGgMI57G6sfYQXo8Hh6B6nJbkFuCZhn51j+ae6R5Ujz RLqqoWgUwxx/Up+88W71l8+PDvWqMrYJEKootLpoS78e1cRsodyctBmW6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH3gj/BtazrIgxlf99U/GnduXiFdMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvZmVDUDhHMXJPc2lER1ZfMzFUOGFkMjVlSVYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueOQMA0G CSqGSIb3DQEBCwUAA4IBAQCUWL23dfP5nqBvCYZW1KkzSOmis4EEhLWE4hl1zoV+ Pr4S9Iq22BkJDrqPpIA0F+PHeSAAq3/FrtuE4JDWs/APWwghGYRwCY9LGFf9V0ps TDpQQxOL1vw+NuqtfAIz/MvmL0NNv5ZKskjOchwiYmVtB4fvKBA551Rvs6rKwjRS z9ftDV+w/0c0elwfU3sC5tzVGUSoK9u2S4XD5hJrpT5xhovZ7CkzOS1I6vMFQRnf t0QFNVtsy5DnqWMY2tOtZHCNX8SOOmqBDVJg54+JbfuNdo7Rsd3Wp3ui9x93/6w/ H99+lQ7qmTh9nGZ0zCkZNnXhR4c7gjxZN4NoNw1FJpHX -----END CERTIFICATE-----Generated at Fri Dec 5 08:04:34 2025 by rpki-client