This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/knIA49lT4kFae2a5FSdFxE5JjSg.roa File: knIA49lT4kFae2a5FSdFxE5JjSg.roa (raw, json) Hash identifier: w13QkGWYjaW0SZaGSE/CEKdGdgu02cWn0uETwPsG+0U= Subject key identifier: 92:72:00:E3:D9:53:E2:41:5A:7B:66:B9:15:27:45:C4:4E:49:8D:28 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3928264D56BB7A6F318CA5B953104B Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/knIA49lT4kFae2a5FSdFxE5JjSg.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45049 IP address blocks: 194.28.97.0/24 maxlen: 24 2a0c:b641:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:28:26:4d:56:bb:7a:6f:31:8c:a5:b9:53:10:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=927200e3d953e2415a7b66b9152745c44e498d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:24:21:66:f2:48:ee:ff:ed:84:c2:93:e4: 78:82:83:9e:11:bc:a9:8e:c5:9a:50:52:29:d2:bb: e0:4c:91:f3:b3:2e:c0:4c:4f:81:a9:ed:68:2f:79: fc:0b:2d:8d:a0:bc:3b:e5:c3:b5:97:34:c8:de:1f: f9:b8:0e:3e:18:05:93:8c:75:00:ac:75:82:b2:aa: 1d:4e:d7:b2:e6:c0:ba:3e:07:e0:0c:b9:22:fb:6e: 82:55:a7:f3:2b:39:4f:cb:37:c8:e0:8b:98:14:5a: 44:02:ca:ce:e3:23:28:e7:d5:97:ba:0e:35:fc:d7: 12:13:8d:79:52:e0:1d:14:32:46:a5:cb:d8:2d:aa: cf:5a:b9:ab:97:6a:98:a2:3e:60:bd:af:d3:ce:0d: ab:1d:23:94:17:97:77:58:86:e8:5d:d5:f2:bd:29: d9:b5:ab:bc:96:b4:eb:f1:b7:4e:f6:57:c4:ad:31: 6e:97:f2:fa:d5:3f:e5:98:96:5c:8f:7f:29:dc:93: d0:08:13:22:f2:a5:3a:a0:08:e4:e0:75:46:ec:54: ef:1e:1c:78:b4:7c:47:c1:5a:ab:41:0d:0c:46:82: e4:08:ef:c5:ff:32:f9:b6:0c:29:72:c0:f6:09:8d: 32:49:a8:cc:07:36:53:f0:31:b7:6b:61:0b:13:fa: ba:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:72:00:E3:D9:53:E2:41:5A:7B:66:B9:15:27:45:C4:4E:49:8D:28 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/knIA49lT4kFae2a5FSdFxE5JjSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.28.97.0/24 IPv6: 2a0c:b641:400::/44 Signature Algorithm: sha256WithRSAEncryption 82:c9:ae:3d:21:eb:fc:c4:d2:0f:fc:46:82:af:0f:4a:b4:91: ba:f1:6d:05:3b:e5:4f:41:8d:b5:87:a2:2d:3c:cd:91:bd:e9: 13:cf:25:c4:a7:16:14:46:da:a8:3c:45:84:a5:f7:c5:a7:93: 1b:6a:66:07:74:10:40:28:40:b4:b7:19:df:29:ba:d1:c2:8b: d3:32:e9:c0:ef:8a:cb:5b:02:a3:9e:22:a3:ef:ee:44:ac:a8: 17:b9:43:2b:7f:1c:06:3f:00:ae:26:9c:3b:19:83:15:1b:e4: b2:b1:12:27:b9:c1:6e:d4:3a:e2:d6:eb:21:18:e3:52:36:18: bf:71:68:46:5f:f8:08:b9:7a:46:8c:fe:9a:4a:df:5e:0b:58: f6:45:27:0e:33:b5:3e:ad:f0:7a:4b:90:c7:6f:ac:a5:58:8e: 66:24:aa:ea:bf:20:cc:7b:7d:a6:0b:11:15:03:47:7c:a3:77: d1:d8:9c:6c:b0:65:02:02:57:31:b2:6c:6d:c9:58:08:fa:cb: f8:fa:f2:b2:f1:a2:5f:8a:76:b6:32:a1:5f:06:f5:4f:db:ae: 69:06:d0:11:db:ad:78:86:e2:13:35:b7:47:e8:01:10:87:23: b1:66:92:33:76:fd:59:8d:53:fc:2d:e5:d0:d0:a2:9e:06:dc: ea:8e:9f:fc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OSgmTVa7em8xjKW5UxBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjcyMDBlM2Q5NTNlMjQxNWE3YjY2YjkxNTI3NDVjNDRlNDk4ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4wkIWbySO7/7YTCk+R4goOeEbyp jsWaUFIp0rvgTJHzsy7ATE+Bqe1oL3n8Cy2NoLw75cO1lzTI3h/5uA4+GAWTjHUA rHWCsqodTtey5sC6PgfgDLki+26CVafzKzlPyzfI4IuYFFpEAsrO4yMo59WXug41 /NcSE415UuAdFDJGpcvYLarPWrmrl2qYoj5gva/Tzg2rHSOUF5d3WIboXdXyvSnZ tau8lrTr8bdO9lfErTFul/L61T/lmJZcj38p3JPQCBMi8qU6oAjk4HVG7FTvHhx4 tHxHwVqrQQ0MRoLkCO/F/zL5tgwpcsD2CY0ySajMBzZT8DG3a2ELE/q6bwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJJyAOPZU+JBWntmuRUnRcROSY0oMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEva25JQTQ5bFQ0a0ZhZTJhNUZTZEZ4RTVKalNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwhxhMA8E AgACMAkDBwQqDLZBBAAwDQYJKoZIhvcNAQELBQADggEBAILJrj0h6/zE0g/8RoKv D0q0kbrxbQU75U9BjbWHoi08zZG96RPPJcSnFhRG2qg8RYSl98WnkxtqZgd0EEAo QLS3Gd8putHCi9My6cDvistbAqOeIqPv7kSsqBe5Qyt/HAY/AK4mnDsZgxUb5LKx Eie5wW7UOuLW6yEY41I2GL9xaEZf+Ai5ekaM/ppK314LWPZFJw4ztT6t8HpLkMdv rKVYjmYkquq/IMx7faYLERUDR3yjd9HYnGywZQICVzGybG3JWAj6y/j68rLxol+K drYyoV8G9U/brmkG0BHbrXiG4hM1t0foARCHI7FmkjN2/VmNU/wt5dDQop4G3OqO n/w= -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:57 2026 by rpki-client