This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/knNwFqOSUSmwnzIGTZTBkXny7vM.roa File: knNwFqOSUSmwnzIGTZTBkXny7vM.roa (raw, json) Hash identifier: Xuq/XGETEu+nAPlO71gTOdaRVSzyfoQNkrNuyE5V+lc= Subject key identifier: 92:73:70:16:A3:92:51:29:B0:9F:32:06:4D:94:C1:91:79:F2:EE:F3 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B7AC8800C96E3E446F2B7E91769F4D2B0 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/knNwFqOSUSmwnzIGTZTBkXny7vM.roa Signing time: Thu 01 Jan 2026 18:18:38 +0000 ROA not before: Thu 01 Jan 2026 18:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213911 IP address blocks: 2a0d:d940:17::/48 maxlen: 48 2a0d:d940:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:80:0c:96:e3:e4:46:f2:b7:e9:17:69:f4:d2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 1 18:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92737016a3925129b09f32064d94c19179f2eef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:e6:4e:d0:be:c9:c4:8f:6b:9a:20:e3:99: bd:1f:44:8e:0a:85:a8:d1:0a:e1:b3:3d:77:99:9a: b1:36:2e:cf:5d:37:f5:07:a3:dd:ee:31:2d:c7:f1: 03:5f:e5:29:63:26:1d:82:bf:cd:a7:01:88:20:86: 44:13:15:8f:ea:6e:23:af:4a:bc:5c:8c:b2:da:62: 55:fa:1f:97:21:e1:a0:f2:0f:4c:ab:93:ce:73:99: 11:77:5b:9a:72:9a:7a:71:d8:53:02:1c:c1:e6:2d: b1:9f:26:b8:5c:0c:1b:f9:f3:1b:cb:23:b1:aa:1b: d6:46:52:3e:d7:ec:45:0b:bd:05:0c:4a:e1:47:54: bd:e0:a4:7b:13:fb:7d:57:8c:bd:92:59:86:6c:e7: 16:58:96:ac:25:73:84:ab:a2:72:9f:dd:2a:bc:31: 75:64:fc:e9:55:5f:9b:a3:7c:71:18:84:ae:be:27: e1:47:5a:44:a4:1a:27:b8:22:5a:a0:ee:40:87:bd: e1:f7:c5:79:c5:b3:95:32:98:1e:c4:47:3f:42:9f: 43:59:b1:7f:46:9d:5d:75:c9:50:54:63:77:bd:c3: 03:f3:7d:30:c9:df:1d:69:ae:af:42:9f:2d:81:7e: 09:4c:73:b8:17:0c:5d:c6:12:24:3e:9d:65:e1:9c: c9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:73:70:16:A3:92:51:29:B0:9F:32:06:4D:94:C1:91:79:F2:EE:F3 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/knNwFqOSUSmwnzIGTZTBkXny7vM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:17::/48 2a0d:d940:200::/48 Signature Algorithm: sha256WithRSAEncryption 48:6d:cd:19:53:62:1a:bb:a5:a5:2a:d7:cd:d3:40:b1:db:56: 9a:86:03:5d:aa:d4:0f:28:34:6f:b4:bb:62:9f:91:b0:13:64: cc:b0:f5:33:65:dd:f5:44:b5:d6:b0:6b:1d:2e:4a:59:21:63: 5c:4e:ee:d4:45:7f:ec:d8:6b:28:80:5f:96:1f:b2:5f:ac:0c: 4f:cf:09:2c:a2:71:03:f3:81:b1:43:68:77:ec:36:35:15:72: 46:87:e9:d2:00:56:64:bf:7f:7c:66:57:e1:cb:b3:d4:8f:29: 20:c7:13:d1:c3:66:e4:33:34:d4:4c:36:c6:eb:eb:06:09:23: 76:42:e9:53:0a:c9:d5:75:1a:a1:c7:29:39:00:2c:e0:09:11: dc:76:58:ed:3f:9e:95:1a:b0:1d:be:cc:52:35:03:f2:95:ca: db:d8:83:6e:fe:0c:64:d6:6c:21:43:6c:44:6a:3a:90:78:03: e4:16:b1:da:27:37:f4:cf:99:48:7a:c0:dd:3f:c2:4f:35:db: 1a:4d:d8:d6:a3:88:de:2f:69:45:24:2f:12:fe:74:42:95:74: 6f:29:5e:0d:35:d5:92:12:c9:98:cc:0e:10:01:7b:b4:76:9d: e7:65:cc:45:34:b6:81:30:32:a7:84:0c:04:b6:e3:3d:19:72: f9:73:66:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yIAMluPkRvK36Rdp9NKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTAxMTgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjczNzAxNmEzOTI1MTI5YjA5ZjMyMDY0ZDk0YzE5MTc5ZjJlZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnXmTtC+ycSPa5og45m9H0SOCoWo 0Qrhsz13mZqxNi7PXTf1B6Pd7jEtx/EDX+UpYyYdgr/NpwGIIIZEExWP6m4jr0q8 XIyy2mJV+h+XIeGg8g9Mq5POc5kRd1uacpp6cdhTAhzB5i2xnya4XAwb+fMbyyOx qhvWRlI+1+xFC70FDErhR1S94KR7E/t9V4y9klmGbOcWWJasJXOEq6Jyn90qvDF1 ZPzpVV+bo3xxGISuvifhR1pEpBonuCJaoO5Ah73h98V5xbOVMpgexEc/Qp9DWbF/ Rp1ddclQVGN3vcMD830wyd8daa6vQp8tgX4JTHO4FwxdxhIkPp1l4ZzJkwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJJzcBajklEpsJ8yBk2UwZF58u7zMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEva25Od0ZxT1NVU213bnpJR1RaVEJrWG55N3ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg3ZQAAX AwcAKg3ZQAIAMA0GCSqGSIb3DQEBCwUAA4IBAQBIbc0ZU2Iau6WlKtfN00Cx21aa hgNdqtQPKDRvtLtin5GwE2TMsPUzZd31RLXWsGsdLkpZIWNcTu7URX/s2GsogF+W H7JfrAxPzwksonED84GxQ2h37DY1FXJGh+nSAFZkv398Zlfhy7PUjykgxxPRw2bk MzTUTDbG6+sGCSN2QulTCsnVdRqhxyk5ACzgCRHcdljtP56VGrAdvsxSNQPylcrb 2INu/gxk1mwhQ2xEajqQeAPkFrHaJzf0z5lIesDdP8JPNdsaTdjWo4jeL2lFJC8S /nRClXRvKV4NNdWSEsmYzA4QAXu0dp3nZcxFNLaBMDKnhAwEtuM9GXL5c2bW -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:58 2026 by rpki-client