This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/knMCjsMKq8boFlcM4TD-NB1mee0.roa File: knMCjsMKq8boFlcM4TD-NB1mee0.roa (raw, json) Hash identifier: 5pXrohpLzHpy5wR5NL0Pk7xascagMMWfyt+Jyy021+I= Subject key identifier: 92:73:02:8E:C3:0A:AB:C6:E8:16:57:0C:E1:30:FE:34:1D:66:79:ED Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019B7FF1788A8542062494CE5FE7DC287E79 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/knMCjsMKq8boFlcM4TD-NB1mee0.roa Signing time: Fri 02 Jan 2026 18:21:30 +0000 ROA not before: Fri 02 Jan 2026 18:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11404 IP address blocks: 62.164.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:78:8a:85:42:06:24:94:ce:5f:e7:dc:28:7e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Jan 2 18:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9273028ec30aabc6e816570ce130fe341d6679ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:18:da:6a:15:f6:a3:ac:8d:40:9c:6b:8b: bf:e6:f5:1e:24:ff:ea:82:19:a6:97:45:dc:83:65: c8:65:11:6f:91:fb:18:dc:a2:ac:25:9d:6c:6e:21: 5c:1d:98:8c:d6:04:23:72:b3:98:03:72:0b:f6:6f: e7:5d:7d:ee:c2:c3:ea:74:b4:53:5e:38:f0:6f:0c: 94:e0:46:02:4c:97:3f:0e:65:a2:ce:f9:ab:b1:ea: f1:ac:68:88:87:d8:c3:df:9c:8c:3c:12:23:71:70: da:97:e8:03:58:04:cd:39:9b:95:80:fd:34:dc:2d: 0f:d6:d6:ed:f4:d3:9d:2b:b4:cd:0f:04:a8:4c:74: 26:4e:7d:20:a8:23:e8:4b:ba:38:83:d6:0f:40:8f: b5:5c:23:c1:4d:50:d7:be:9a:a6:b3:9c:fd:d3:9e: c5:66:4a:83:f5:88:06:fe:8d:bd:7a:6b:de:71:9a: 56:76:47:ff:ad:f0:8b:39:db:e3:cd:07:66:60:7d: e5:79:5a:18:34:7c:f4:ae:d0:41:16:ff:7c:06:51: f6:59:c1:61:b9:f4:b1:99:ba:76:ad:16:85:d6:7d: af:68:3f:26:4d:31:3c:c7:94:f7:8c:5b:a0:d7:f8: 3c:e8:c8:fb:bd:f3:b0:0e:12:6a:3b:0f:b1:9a:69: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:73:02:8E:C3:0A:AB:C6:E8:16:57:0C:E1:30:FE:34:1D:66:79:ED X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/knMCjsMKq8boFlcM4TD-NB1mee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.194.0/24 Signature Algorithm: sha256WithRSAEncryption 74:63:50:7b:0a:9b:73:05:29:3d:cb:39:48:f2:c7:30:dc:80: 62:46:39:08:98:85:82:39:7c:87:d4:0b:7d:e9:c7:a4:ba:8a: 5f:eb:7e:82:a9:63:98:e7:89:dd:ab:05:1a:74:b6:c7:d5:e9: 18:1f:03:82:51:76:27:29:91:13:18:4a:e7:e0:0a:f4:a9:b8: d2:92:26:19:8a:5f:8a:15:6d:21:9e:90:0f:77:18:0a:27:88: d0:fb:39:d2:5f:9b:23:cd:cb:38:a1:9e:33:32:e7:90:8a:f0: 2d:f6:3d:da:46:13:22:7e:94:c3:7f:df:8a:8e:3b:42:8f:71: 2b:b5:d7:b3:db:8f:68:0c:9e:a7:34:a8:1f:63:f4:12:2d:44: 69:20:22:e8:a8:a0:db:39:c8:da:ae:3f:85:6e:3d:3c:2d:c4: 39:a9:df:3c:9f:2c:1f:ae:85:42:2d:18:d6:f4:f1:04:5c:87: f3:cd:28:f9:62:3a:13:45:3c:c5:e2:39:30:9f:67:40:6e:d7: 5b:94:4c:f6:b8:52:e7:98:bd:12:3e:7a:fd:70:6b:66:50:b7: f8:67:96:09:17:aa:a9:74:36:9f:9a:d9:1f:a8:23:75:cc:33: 5f:e1:a6:90:63:ca:9d:71:2c:85:ff:27:62:aa:07:15:68:1c: 0e:ea:9b:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8XiKhUIGJJTOX+fcKH55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjYwMTAyMTgyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjczMDI4ZWMzMGFhYmM2ZTgxNjU3MGNlMTMwZmUzNDFkNjY3OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1cY2moV9qOsjUCca4u/5vUeJP/q ghmml0Xcg2XIZRFvkfsY3KKsJZ1sbiFcHZiM1gQjcrOYA3IL9m/nXX3uwsPqdLRT XjjwbwyU4EYCTJc/DmWizvmrserxrGiIh9jD35yMPBIjcXDal+gDWATNOZuVgP00 3C0P1tbt9NOdK7TNDwSoTHQmTn0gqCPoS7o4g9YPQI+1XCPBTVDXvpqms5z9057F ZkqD9YgG/o29emvecZpWdkf/rfCLOdvjzQdmYH3leVoYNHz0rtBBFv98BlH2WcFh ufSxmbp2rRaF1n2vaD8mTTE8x5T3jFug1/g86Mj7vfOwDhJqOw+xmml2BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJzAo7DCqvG6BZXDOEw/jQdZnntMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEva25NQ2pzTUtxOGJvRmxjTTRURC1OQjFtZWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPqTCMA0G CSqGSIb3DQEBCwUAA4IBAQB0Y1B7CptzBSk9yzlI8scw3IBiRjkImIWCOXyH1At9 6cekuopf636CqWOY54ndqwUadLbH1ekYHwOCUXYnKZETGErn4Ar0qbjSkiYZil+K FW0hnpAPdxgKJ4jQ+znSX5sjzcs4oZ4zMueQivAt9j3aRhMifpTDf9+KjjtCj3Er tdez249oDJ6nNKgfY/QSLURpICLoqKDbOcjarj+Fbj08LcQ5qd88nywfroVCLRjW 9PEEXIfzzSj5YjoTRTzF4jkwn2dAbtdblEz2uFLnmL0SPnr9cGtmULf4Z5YJF6qp dDafmtkfqCN1zDNf4aaQY8qdcSyF/ydiqgcVaBwO6pu5 -----END CERTIFICATE-----Generated at Thu Jan 22 07:29:59 2026 by rpki-client