This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/KAN-qjqmnh5cqoy6zcPSS-sENok.roa File: KAN-qjqmnh5cqoy6zcPSS-sENok.roa (raw, json) Hash identifier: KIM13RN1rwVfiqcH/vu91prDVqpHnTdoOYAr3zB4tTI= Subject key identifier: 28:03:7E:AA:3A:A6:9E:1E:5C:AA:8C:BA:CD:C3:D2:4B:EB:04:36:89 Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82 Certificate serial: 019B797F17C3E243EA7482A0A92FF3661052 Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/KAN-qjqmnh5cqoy6zcPSS-sENok.roa Signing time: Thu 01 Jan 2026 12:18:50 +0000 ROA not before: Thu 01 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59868 IP address blocks: 185.48.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:17:c3:e2:43:ea:74:82:a0:a9:2f:f3:66:10:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82 Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28037eaa3aa69e1e5caa8cbacdc3d24beb043689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f4:73:14:3a:9c:ae:1b:4e:01:6d:f4:07:37: e3:17:c3:22:6b:6e:e3:b5:ff:73:35:50:e3:ad:38: 5e:e5:bf:00:8e:9f:f8:4d:4f:4a:ed:94:39:6b:00: 3b:18:f3:6d:71:48:90:8b:a2:3f:c3:7c:ac:f5:03: 37:36:4a:da:23:88:5d:ae:ab:3d:e0:37:e4:7d:db: 71:76:d6:00:cd:a3:89:e0:56:f8:ae:a8:a9:cb:f3: 69:a9:cb:1a:16:f5:d9:5a:68:65:2a:eb:d1:d1:e4: c9:8c:8a:52:f9:77:fa:6a:ff:36:f5:70:c2:0e:ba: ae:29:a3:c2:df:39:cf:2a:ef:7a:71:65:d5:42:6d: 31:30:c8:ab:5e:80:6b:d2:ea:e7:18:8c:8a:dd:10: 0d:a8:26:16:57:ed:58:df:a7:ff:22:55:4e:e5:56: d6:13:26:41:40:4b:a0:11:c4:c3:5d:79:ca:96:35: f8:94:20:f9:07:6e:a0:a4:98:1f:90:3f:51:ad:ba: 13:8b:ee:9c:c8:ce:9d:74:6e:ae:51:59:18:99:6a: cb:37:71:10:a2:c4:64:52:43:12:b7:c9:00:cb:85: 90:65:e2:e8:e9:13:db:26:04:3e:16:77:f1:a2:30: 2c:8d:47:43:5b:ff:7a:b7:76:a9:fa:b5:5c:cd:a5: 14:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:03:7E:AA:3A:A6:9E:1E:5C:AA:8C:BA:CD:C3:D2:4B:EB:04:36:89 X509v3 Authority Key Identifier: keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/KAN-qjqmnh5cqoy6zcPSS-sENok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.64.0/24 Signature Algorithm: sha256WithRSAEncryption af:96:ae:0b:54:cb:76:33:7b:92:b1:29:dc:92:e7:c8:2d:41: 2b:60:32:47:0c:f5:c9:ed:0f:fa:13:94:00:6f:fb:6e:db:52: c5:45:e4:75:94:ed:6f:15:c5:2b:f4:3e:3b:64:1e:14:89:4c: cd:e3:6d:8a:80:ea:0b:1a:58:24:27:a1:e9:df:39:dd:08:94: b9:86:94:b4:6c:f0:d9:99:b6:6b:6a:92:7a:93:7a:d7:12:f2: a1:28:2c:f6:13:0a:71:e8:ab:b9:c6:da:37:e7:b8:b3:12:65: 8b:0e:f8:8b:e0:be:21:d8:0c:d6:b7:21:0a:49:e4:5a:8c:8b: 3b:6a:17:30:40:ea:f7:b8:fb:01:01:d6:72:32:8e:4f:97:01: 62:6d:2c:8b:65:d8:19:d6:72:63:a0:f3:f9:b2:38:e6:0d:48: 29:3a:4a:8d:65:d7:96:0b:45:42:9f:d0:f8:85:b0:e9:f1:b0: e2:6e:9d:82:64:85:2d:2f:88:e7:9e:ea:ea:3a:86:b9:53:bb: 8e:dd:b8:e7:5f:d0:8b:bb:89:cf:b3:76:2e:30:53:2b:45:c0: ca:14:3e:6f:00:31:7c:03:1d:08:8a:5b:6b:11:9c:52:94:2d: 11:20:4a:76:e9:23:22:6e:64:25:d8:c8:c4:18:84:cd:d4:49: f0:2f:04:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fxfD4kPqdIKgqS/zZhBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWE1MjNlYzdmOTM3N2ExYTllNWQ2ZmE4NjgxN2VkM2Q2 YzBhODIwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODAzN2VhYTNhYTY5ZTFlNWNhYThjYmFjZGMzZDI0YmViMDQzNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fRzFDqcrhtOAW30BzfjF8Mia27j tf9zNVDjrThe5b8Ajp/4TU9K7ZQ5awA7GPNtcUiQi6I/w3ys9QM3NkraI4hdrqs9 4DfkfdtxdtYAzaOJ4Fb4rqipy/NpqcsaFvXZWmhlKuvR0eTJjIpS+Xf6av829XDC DrquKaPC3znPKu96cWXVQm0xMMirXoBr0urnGIyK3RANqCYWV+1Y36f/IlVO5VbW EyZBQEugEcTDXXnKljX4lCD5B26gpJgfkD9RrboTi+6cyM6ddG6uUVkYmWrLN3EQ osRkUkMSt8kAy4WQZeLo6RPbJgQ+FnfxojAsjUdDW/96t3ap+rVczaUUwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCgDfqo6pp4eXKqMus3D0kvrBDaJMB8GA1UdIwQY MBaAFAfqUj7H+Td6Gp5db6hoF+09bAqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1wU1BzZjVOM29hbmwxdnFHZ1g3VDFzQ29JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ZGZjZDUtMDdkNi00YWQ4LWFkMWQt YjYwZmQ2Nzk5N2JiLzEvS0FOLXFqcW1uaDVjcW95NnpjUFNTLXNFTm9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS85ZGZjZDUtMDdkNi00YWQ4LWFkMWQtYjYwZmQ2Nzk5N2Ji LzEvQi1wU1BzZjVOM29hbmwxdnFHZ1g3VDFzQ29JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTBAMA0G CSqGSIb3DQEBCwUAA4IBAQCvlq4LVMt2M3uSsSnckufILUErYDJHDPXJ7Q/6E5QA b/tu21LFReR1lO1vFcUr9D47ZB4UiUzN422KgOoLGlgkJ6Hp3zndCJS5hpS0bPDZ mbZrapJ6k3rXEvKhKCz2Ewpx6Ku5xto357izEmWLDviL4L4h2AzWtyEKSeRajIs7 ahcwQOr3uPsBAdZyMo5PlwFibSyLZdgZ1nJjoPP5sjjmDUgpOkqNZdeWC0VCn9D4 hbDp8bDibp2CZIUtL4jnnurqOoa5U7uO3bjnX9CLu4nPs3YuMFMrRcDKFD5vADF8 Ax0IiltrEZxSlC0RIEp26SMibmQl2MjEGITN1EnwLwRk -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:49 2026 by rpki-client