This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/KNR4PgWJfb3vtdUZqU5U6TMBpdY.roa File: KNR4PgWJfb3vtdUZqU5U6TMBpdY.roa (raw, json) Hash identifier: FvXFqGKsxlqj2HffgaL93RIKCQxRabK29vELfwfTVJI= Subject key identifier: 28:D4:78:3E:05:89:7D:BD:EF:B5:D5:19:A9:4E:54:E9:33:01:A5:D6 Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019B663CAAD58D0FA4EBFE4405ADF6329175 Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/KNR4PgWJfb3vtdUZqU5U6TMBpdY.roa Signing time: Sun 28 Dec 2025 18:33:30 +0000 ROA not before: Sun 28 Dec 2025 18:33:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61317 IP address blocks: 185.215.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:3c:aa:d5:8d:0f:a4:eb:fe:44:05:ad:f6:32:91:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Dec 28 18:33:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=28d4783e05897dbdefb5d519a94e54e93301a5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:de:c4:d3:ab:e8:7e:73:36:c7:46:1d:75: fb:8f:f6:77:63:ee:a9:04:6c:91:60:6c:89:62:a1: 69:0e:d1:9d:67:8d:27:0b:95:6a:87:2f:f5:4e:46: d6:b9:01:ac:24:cf:a5:26:4c:e5:de:84:48:fa:87: f1:bb:58:08:3b:99:c1:db:72:a8:e6:3f:32:06:8d: ae:02:2f:fa:f5:0d:ed:4c:09:18:6b:cf:a9:a0:a0: df:ba:b0:60:a2:66:4a:eb:e2:f0:16:a3:73:98:b6: 45:6d:ba:b4:bb:0c:59:8b:83:ef:c5:f1:33:75:ef: f8:60:5e:04:59:0f:a7:83:15:0d:db:34:03:ac:09: f5:21:77:91:f2:73:4e:44:a5:d5:c9:9c:6c:d3:55: d0:8c:0e:3a:a7:9a:28:d9:2d:6c:8a:dd:83:f7:ab: 03:fd:ee:aa:c5:28:cf:f1:92:77:52:02:b6:d3:c4: 50:79:be:48:27:f5:09:d3:8f:59:1a:d8:db:8a:81: 53:d5:33:68:5d:72:c7:45:c9:1b:34:b7:05:df:00: 14:c4:4b:86:20:a8:53:4a:f1:8b:28:c9:12:a9:9b: e0:9f:a6:33:14:24:86:55:43:29:db:cc:81:3f:7b: cb:75:9b:61:f6:ce:0e:e0:92:c5:ef:04:6c:f0:ee: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D4:78:3E:05:89:7D:BD:EF:B5:D5:19:A9:4E:54:E9:33:01:A5:D6 X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/KNR4PgWJfb3vtdUZqU5U6TMBpdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.114.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:5a:fa:5e:83:98:48:3c:23:3b:96:19:39:19:5f:dc:e7:c7: 45:5a:aa:8b:e0:7e:82:d7:5b:67:c6:2e:c7:a4:bb:74:1e:2b: eb:6e:70:c1:1b:46:54:91:f6:63:ec:8d:34:5f:c0:de:08:d3: 72:71:9f:af:1d:60:6c:28:02:5e:e7:20:a8:0c:5c:e3:6c:a1: 08:58:3c:38:c4:2e:19:91:70:16:aa:d9:00:a2:27:eb:14:57: 1a:e9:cf:c2:43:c5:e5:ab:2a:db:d3:f7:9f:d6:f8:58:ec:7a: 21:4a:8b:0d:1b:c2:dc:0f:58:b7:6f:2a:35:82:d3:66:1c:04: 59:29:9e:34:27:9f:60:d9:7a:98:04:11:fe:57:95:2c:bc:0d: d1:10:c3:98:cb:ad:39:71:05:2b:8b:fe:a2:7e:79:fc:50:9a: 3f:e2:3c:30:43:76:60:3c:7d:d8:ca:a8:fe:95:33:6e:c9:00: 3f:b4:11:b4:e9:0f:15:eb:85:f8:44:a9:0b:7a:08:8a:b7:7b: 95:39:6b:db:2d:41:8e:eb:a7:75:8b:ea:44:bf:b4:b8:e9:de: bc:a4:63:39:1a:79:5e:92:5d:9e:b5:00:0a:1f:a8:9f:82:04: 29:de:fc:08:c8:d1:42:53:43:37:ff:55:c3:37:66:85:d7:13: d4:4d:b6:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtmPKrVjQ+k6/5EBa32MpF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjUxMjI4MTgzMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGQ0NzgzZTA1ODk3ZGJkZWZiNWQ1MTlhOTRlNTRlOTMzMDFhNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUvexNOr6H5zNsdGHXX7j/Z3Y+6p BGyRYGyJYqFpDtGdZ40nC5Vqhy/1TkbWuQGsJM+lJkzl3oRI+ofxu1gIO5nB23Ko 5j8yBo2uAi/69Q3tTAkYa8+poKDfurBgomZK6+LwFqNzmLZFbbq0uwxZi4PvxfEz de/4YF4EWQ+ngxUN2zQDrAn1IXeR8nNORKXVyZxs01XQjA46p5oo2S1sit2D96sD /e6qxSjP8ZJ3UgK208RQeb5IJ/UJ049ZGtjbioFT1TNoXXLHRckbNLcF3wAUxEuG IKhTSvGLKMkSqZvgn6YzFCSGVUMp28yBP3vLdZth9s4O4JLF7wRs8O5MHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCjUeD4FiX2977XVGalOVOkzAaXWMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvS05SNFBnV0pmYjN2dGRVWnFVNVU2VE1CcGRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuddyMA0G CSqGSIb3DQEBCwUAA4IBAQBMWvpeg5hIPCM7lhk5GV/c58dFWqqL4H6C11tnxi7H pLt0HivrbnDBG0ZUkfZj7I00X8DeCNNycZ+vHWBsKAJe5yCoDFzjbKEIWDw4xC4Z kXAWqtkAoifrFFca6c/CQ8Xlqyrb0/ef1vhY7HohSosNG8LcD1i3byo1gtNmHARZ KZ40J59g2XqYBBH+V5UsvA3REMOYy605cQUri/6ifnn8UJo/4jwwQ3ZgPH3Yyqj+ lTNuyQA/tBG06Q8V64X4RKkLegiKt3uVOWvbLUGO66d1i+pEv7S46d68pGM5Gnle kl2etQAKH6ifggQp3vwIyNFCU0M3/1XDN2aF1xPUTbb4 -----END CERTIFICATE-----Generated at Wed Dec 31 00:55:27 2025 by rpki-client