This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/knXxB7ogut7UzbLLXfTNukmfScI.roa File: knXxB7ogut7UzbLLXfTNukmfScI.roa (raw, json) Hash identifier: puOiX+TXNRmU4QlR8PD/Z8i9GfRwmnC2+oEjk9iN+TE= Subject key identifier: 92:75:F1:07:BA:20:BA:DE:D4:CD:B2:CB:5D:F4:CD:BA:49:9F:49:C2 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3586ACAF6A66DEBA232D97A16FC790 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/knXxB7ogut7UzbLLXfTNukmfScI.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62445 IP address blocks: 85.120.244.0/23 maxlen: 24 85.120.246.0/24 maxlen: 24 194.102.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:86:ac:af:6a:66:de:ba:23:2d:97:a1:6f:c7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9275f107ba20baded4cdb2cb5df4cdba499f49c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:ad:e6:42:8e:e4:40:06:4d:0c:87:70:14: 29:49:e0:54:c7:dc:97:9f:5b:2f:99:85:28:79:3f: a9:c7:80:b9:6f:e5:e2:94:68:53:d0:63:32:56:c5: 7b:ed:24:33:73:23:f5:12:85:ca:af:94:2a:84:c3: 6c:0f:95:85:98:c4:9c:0b:04:bf:ae:59:35:e6:6c: da:21:40:50:b4:c7:03:88:6b:a0:88:5e:ad:4d:b7: 65:90:07:e8:38:90:51:9b:bd:c9:d3:3c:d2:61:f9: 67:56:bf:61:1c:80:8a:ee:9f:a0:a3:71:68:00:8e: a5:ce:7e:96:2f:db:74:99:c0:be:25:22:18:9e:22: 01:f3:58:b5:38:a3:df:77:a3:0b:fe:bd:f7:c8:81: 3a:2b:f6:a0:b0:fb:c9:e6:38:3e:3a:4b:46:2f:ca: 70:71:46:a6:f7:b0:8a:e4:b9:31:22:41:01:28:07: 69:2d:62:c4:63:2b:d3:0c:a9:55:2f:f7:39:d4:c5: 52:a0:65:38:b2:61:56:c1:6f:e9:cf:da:f2:5a:b5: da:a7:4b:a3:cb:45:54:cc:0f:ed:2d:f5:76:50:91: 75:ce:a3:8b:bd:00:f1:8f:c5:68:1d:91:09:07:70: c0:62:bc:03:11:3e:75:de:b4:0b:56:90:9c:d8:25: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:75:F1:07:BA:20:BA:DE:D4:CD:B2:CB:5D:F4:CD:BA:49:9F:49:C2 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/knXxB7ogut7UzbLLXfTNukmfScI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.244.0-85.120.246.255 194.102.241.0/24 Signature Algorithm: sha256WithRSAEncryption a4:91:78:09:a3:8b:5b:55:e6:e5:f5:44:18:b7:9b:bd:74:70: 0d:b0:0f:85:14:99:af:17:37:6a:fc:97:02:6c:ac:73:6a:83: 9c:42:84:a6:22:0b:b3:79:13:d3:38:f7:96:5f:23:28:a4:68: c8:9d:96:76:75:a9:5c:d1:5c:56:17:b5:70:09:06:21:c1:35: b6:14:b1:00:19:d8:bd:6e:51:c0:dc:0a:58:78:52:82:57:1f: 96:48:1b:b5:ea:5d:af:1e:2e:a3:ef:93:50:58:b4:f2:9e:b9: 8e:68:0e:b5:98:ba:6e:93:c1:19:55:38:03:ba:41:48:c8:db: b8:30:a1:59:20:07:3c:fd:90:96:86:a5:00:06:1c:06:b6:e6: 72:57:ff:5d:1c:ac:2f:dc:07:19:73:50:ff:66:af:da:7b:99: e7:f6:2a:3e:11:ed:87:84:86:e6:43:14:54:b1:a3:fd:f1:cb: 2c:60:53:83:37:df:1d:0c:f9:ac:da:77:a2:d0:51:cb:36:78: d4:da:0c:2d:a6:c6:3a:b8:0a:27:fe:e0:fd:a3:48:7f:15:53: 85:12:22:ba:99:57:af:bd:69:ca:7f:4c:73:8b:a2:56:81:7d: 05:9e:b4:03:ef:42:b0:c3:65:1b:1e:0d:36:c7:f2:9b:d4:2f: 7c:17:2e:eb -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7NYasr2pm3rojLZehb8eQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mjc1ZjEwN2JhMjBiYWRlZDRjZGIyY2I1ZGY0Y2RiYTQ5OWY0OWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv56t5kKO5EAGTQyHcBQpSeBUx9yX n1svmYUoeT+px4C5b+XilGhT0GMyVsV77SQzcyP1EoXKr5QqhMNsD5WFmMScCwS/ rlk15mzaIUBQtMcDiGugiF6tTbdlkAfoOJBRm73J0zzSYflnVr9hHICK7p+go3Fo AI6lzn6WL9t0mcC+JSIYniIB81i1OKPfd6ML/r33yIE6K/agsPvJ5jg+OktGL8pw cUam97CK5LkxIkEBKAdpLWLEYyvTDKlVL/c51MVSoGU4smFWwW/pz9ryWrXap0uj y0VUzA/tLfV2UJF1zqOLvQDxj8VoHZEJB3DAYrwDET513rQLVpCc2CUuDwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJJ18Qe6ILre1M2yy130zbpJn0nCMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEva25YeEI3b2d1dDdVemJMTFhmVE51a21mU2NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJVePQD BABVePYDBADCZvEwDQYJKoZIhvcNAQELBQADggEBAKSReAmji1tV5uX1RBi3m710 cA2wD4UUma8XN2r8lwJsrHNqg5xChKYiC7N5E9M495ZfIyikaMidlnZ1qVzRXFYX tXAJBiHBNbYUsQAZ2L1uUcDcClh4UoJXH5ZIG7XqXa8eLqPvk1BYtPKeuY5oDrWY um6TwRlVOAO6QUjI27gwoVkgBzz9kJaGpQAGHAa25nJX/10crC/cBxlzUP9mr9p7 mef2Kj4R7YeEhuZDFFSxo/3xyyxgU4M33x0M+azad6LQUcs2eNTaDC2mxjq4Cif+ 4P2jSH8VU4USIrqZV6+9acp/THOLolaBfQWetAPvQrDDZRseDTbH8pvUL3wXLus= -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:40 2026 by rpki-client