This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa File: KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa (raw, json) Hash identifier: UiYbuT4DjmIashb94arKXLuitUGRN2TvoEQlDnO6RSk= Subject key identifier: 28:D3:95:5E:81:90:B1:D0:B1:3E:C6:4C:DF:32:89:EA:E1:66:A6:D2 Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358 Certificate serial: 019B797EC5EE6964B9A180E76947B680769B Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44028 IP address blocks: 185.251.64.0/24 maxlen: 24 185.251.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c5:ee:69:64:b9:a1:80:e7:69:47:b6:80:76:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358 Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28d3955e8190b1d0b13ec64cdf3289eae166a6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:03:2d:84:1e:7c:69:1d:d3:47:23:5b:f8:a7: 23:05:b4:d1:a0:5e:55:5c:e9:26:77:83:dc:74:2e: 5f:48:60:c4:be:11:87:57:a1:7f:c7:a4:2f:9c:4b: 0a:9c:fe:9e:35:d2:dc:68:84:d4:5a:85:dc:79:50: b6:f1:c9:dd:dc:38:02:a6:35:91:48:db:10:6a:f6: 6f:bb:a0:6c:fc:fa:1e:bc:68:f5:ad:82:bb:cb:6e: 3c:e7:1f:7f:1d:f5:28:9d:66:3c:79:29:ca:58:a6: 21:de:09:3a:67:c1:fe:fb:32:81:01:8f:0c:1b:ea: 98:5c:d5:ef:4a:51:c8:66:f5:cd:5f:12:7b:09:67: 43:91:f4:5a:3d:1f:ad:4d:58:d1:d0:7b:b8:91:19: 90:ec:ee:15:76:63:4b:49:aa:87:b4:7c:84:d8:bb: 11:f2:c9:38:66:8b:86:0e:a5:ce:f7:4f:e7:20:2e: 11:66:b7:da:84:d7:86:b7:82:30:29:77:bc:a1:ec: 79:a4:66:70:25:2e:a1:8d:89:70:e8:a9:fe:9a:32: bf:61:30:7b:45:59:14:49:3f:ad:aa:99:60:00:5f: e5:1b:bf:f5:1b:58:39:39:0d:9e:e6:12:8d:13:13: 56:40:27:c2:f9:1d:f1:b6:15:ba:df:c1:0a:f9:5e: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D3:95:5E:81:90:B1:D0:B1:3E:C6:4C:DF:32:89:EA:E1:66:A6:D2 X509v3 Authority Key Identifier: keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.64.0/23 Signature Algorithm: sha256WithRSAEncryption 31:e8:41:3f:d9:3e:d5:f7:99:bf:d9:0b:77:31:20:c0:b1:ee: 61:aa:ce:8b:bf:20:1e:a7:f9:8b:e6:3d:fe:cd:38:c7:34:8d: b7:a6:83:12:7c:fd:6d:a9:4d:8e:2d:82:89:22:d5:3c:91:d5: 0a:95:04:b8:94:6d:87:c2:9c:d8:0d:cf:5e:7b:8c:3c:20:c5: ca:7d:c1:21:50:88:ab:83:0c:45:ba:9d:01:25:c5:9d:c5:df: a5:da:ab:fb:f6:51:a2:aa:8e:76:b5:46:c4:55:df:0d:a1:19: 5e:b1:0d:c2:66:4f:4f:0e:b2:6a:38:cf:7c:60:fb:f6:90:fc: 3f:ee:3b:c8:66:50:99:bc:b1:fc:38:4c:3a:a3:a0:81:a7:00: d3:cf:18:da:c4:03:bb:a1:ca:4d:6c:ce:0a:df:ea:e2:10:50: 0e:e6:fd:ad:77:81:0d:34:43:31:c3:ce:cf:8f:15:a7:01:a7: d3:0e:3a:92:50:62:df:e7:04:5d:df:41:9c:f1:53:0a:4b:29: 88:af:a5:ec:e3:7e:aa:88:8e:63:d7:eb:48:9b:26:cd:97:92: 16:fe:e5:f3:e6:20:1d:71:0a:58:c5:a4:7c:27:52:5b:a6:5c: 13:af:28:4e:f0:41:45:59:16:45:86:9f:98:ec:6e:63:a0:15: 54:f1:4d:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsXuaWS5oYDnaUe2gHabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWI4NmY4MGM0YmIyYWM1NmU0MWVjN2EyNDZhZTI5Njlk OGQzNTgwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGQzOTU1ZTgxOTBiMWQwYjEzZWM2NGNkZjMyODllYWUxNjZhNmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gMthB58aR3TRyNb+KcjBbTRoF5V XOkmd4PcdC5fSGDEvhGHV6F/x6QvnEsKnP6eNdLcaITUWoXceVC28cnd3DgCpjWR SNsQavZvu6Bs/PoevGj1rYK7y2485x9/HfUonWY8eSnKWKYh3gk6Z8H++zKBAY8M G+qYXNXvSlHIZvXNXxJ7CWdDkfRaPR+tTVjR0Hu4kRmQ7O4VdmNLSaqHtHyE2LsR 8sk4ZouGDqXO90/nIC4RZrfahNeGt4IwKXe8oex5pGZwJS6hjYlw6Kn+mjK/YTB7 RVkUST+tqplgAF/lG7/1G1g5OQ2e5hKNExNWQCfC+R3xthW638EK+V5aRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCjTlV6BkLHQsT7GTN8yierhZqbSMB8GA1UdIwQY MBaAFOGrhvgMS7KsVuQex6JGrilp2NNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODct NTE2ZjExYWNiM2FlLzEvS05PVlhvR1FzZEN4UHNaTTN6S0o2dUZtcHRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODctNTE2ZjExYWNiM2Fl LzEvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuftAMA0G CSqGSIb3DQEBCwUAA4IBAQAx6EE/2T7V95m/2Qt3MSDAse5hqs6LvyAep/mL5j3+ zTjHNI23poMSfP1tqU2OLYKJItU8kdUKlQS4lG2HwpzYDc9ee4w8IMXKfcEhUIir gwxFup0BJcWdxd+l2qv79lGiqo52tUbEVd8NoRlesQ3CZk9PDrJqOM98YPv2kPw/ 7jvIZlCZvLH8OEw6o6CBpwDTzxjaxAO7ocpNbM4K3+riEFAO5v2td4ENNEMxw87P jxWnAafTDjqSUGLf5wRd30Gc8VMKSymIr6Xs436qiI5j1+tImybNl5IW/uXz5iAd cQpYxaR8J1JbplwTryhO8EFFWRZFhp+Y7G5joBVU8U26 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:59 2026 by rpki-client