This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Knx_TZDGdPb6x8xQZrv52Ui1fqc.roa File: Knx_TZDGdPb6x8xQZrv52Ui1fqc.roa (raw, json) Hash identifier: 7Mrcs3Prd7k4B/IAsqTLsJQfysfOgLftbbydiC46140= Subject key identifier: 2A:7C:7F:4D:90:C6:74:F6:FA:C7:CC:50:66:BB:F9:D9:48:B5:7E:A7 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB09CA4A55FECDDC7245AA6D27F733 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Knx_TZDGdPb6x8xQZrv52Ui1fqc.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 37.202.219.0/24 maxlen: 24 151.240.229.0/24 maxlen: 24 151.240.233.0/24 maxlen: 24 151.240.234.0/24 maxlen: 24 151.240.235.0/24 maxlen: 24 151.240.236.0/24 maxlen: 24 151.240.237.0/24 maxlen: 24 151.240.238.0/24 maxlen: 24 151.240.240.0/24 maxlen: 24 151.242.9.0/24 maxlen: 24 151.242.46.0/24 maxlen: 24 151.242.47.0/24 maxlen: 24 151.242.48.0/24 maxlen: 24 151.242.60.0/24 maxlen: 24 151.242.62.0/24 maxlen: 24 151.242.121.0/24 maxlen: 24 151.242.158.0/24 maxlen: 24 151.242.166.0/23 maxlen: 24 151.243.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:09:ca:4a:55:fe:cd:dc:72:45:aa:6d:27:f7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a7c7f4d90c674f6fac7cc5066bbf9d948b57ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:49:5e:69:c6:f8:31:c9:d2:a0:6e:52:67: ae:6a:18:0f:39:60:f5:41:eb:95:57:00:58:70:b2: 44:85:af:93:c6:47:86:01:26:14:e0:02:bd:d0:46: fc:64:88:b1:cd:94:2a:be:b6:db:07:97:b5:a0:c7: 69:94:b8:65:81:10:8a:e0:f5:20:ed:e4:7b:fd:f0: 49:ad:18:54:ba:21:6e:f7:92:0e:6e:e5:95:0b:24: 10:bf:c1:ca:ac:3a:8e:ed:82:41:93:a2:4d:b6:be: 30:e3:fb:c4:91:1a:0f:75:6a:94:ac:c2:66:ac:79: 84:0b:1a:84:32:fa:85:7f:a3:9e:d4:0e:58:31:d4: 3d:d4:ff:36:5f:5e:43:2b:0c:cb:75:a7:74:16:dc: d4:f3:2b:aa:0b:e9:ce:7e:1e:7c:cb:49:cd:a3:8c: 67:57:1c:88:b4:05:a8:3d:03:d6:46:54:4e:e3:0e: d1:97:bd:72:43:4e:9b:5e:a1:d2:15:ba:e2:3c:1a: a2:69:ac:dc:d9:f1:93:19:40:4a:68:20:5a:60:20: 73:1d:17:d7:f5:e5:96:4f:f0:44:ec:18:a6:a6:bd: 88:44:6a:a3:b9:d4:e6:39:55:9e:ce:3e:ab:c2:ca: 0e:f4:04:59:c9:c1:df:6a:11:28:12:70:94:0f:9e: 95:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7C:7F:4D:90:C6:74:F6:FA:C7:CC:50:66:BB:F9:D9:48:B5:7E:A7 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Knx_TZDGdPb6x8xQZrv52Ui1fqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.219.0/24 151.240.229.0/24 151.240.233.0-151.240.238.255 151.240.240.0/24 151.242.9.0/24 151.242.46.0-151.242.48.255 151.242.60.0/24 151.242.62.0/24 151.242.121.0/24 151.242.158.0/24 151.242.166.0/23 151.243.140.0/24 Signature Algorithm: sha256WithRSAEncryption 37:c2:dc:75:4c:fa:52:58:22:9e:d7:98:91:c4:bd:9f:b8:60: bc:44:4e:d8:96:6b:fd:1b:d8:62:1c:fb:94:e5:04:b4:95:f2: 6b:62:dd:11:02:d7:96:19:7e:3b:61:20:94:c3:8f:4e:58:d0: e1:a7:49:ba:a2:b1:c9:61:bb:7c:b6:dc:36:bf:de:91:e1:d9: d9:a8:53:31:c5:70:e4:f3:f5:ba:e7:6e:44:2e:95:42:ca:6d: 54:8c:98:e9:77:89:c6:c8:e3:cd:44:a1:04:d1:7a:a5:74:1d: ef:e2:65:0f:75:b0:d0:51:9e:46:17:e3:79:5c:15:8b:d0:9d: f9:37:8a:64:f8:02:d0:22:25:29:6a:84:cb:86:2c:60:3d:26: be:4a:d9:c3:90:b0:7f:65:be:31:81:91:17:55:6b:17:aa:9c: 4f:75:d7:31:db:9f:0e:a2:3d:56:17:66:3b:0e:3f:f7:1e:58: 01:2c:a7:e6:6d:9d:dc:9e:9a:e8:03:f5:a3:ef:ec:7c:11:5f: 4f:d9:82:d9:08:d1:a6:8b:59:c5:49:61:9d:c7:a6:16:b9:37: 01:b2:91:93:a0:3a:e6:be:66:a3:cd:a4:9c:fd:0f:71:27:ac: d5:03:89:00:0f:ce:43:d7:bc:b5:95:54:b0:e1:50:6f:a9:90: 53:ff:83:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZt9ywnKSlX+zdxyRaptJ/czMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTdjN2Y0ZDkwYzY3NGY2ZmFjN2NjNTA2NmJiZjlkOTQ4YjU3ZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM9JXmnG+DHJ0qBuUmeuahgPOWD1 QeuVVwBYcLJEha+TxkeGASYU4AK90Eb8ZIixzZQqvrbbB5e1oMdplLhlgRCK4PUg 7eR7/fBJrRhUuiFu95IObuWVCyQQv8HKrDqO7YJBk6JNtr4w4/vEkRoPdWqUrMJm rHmECxqEMvqFf6Oe1A5YMdQ91P82X15DKwzLdad0FtzU8yuqC+nOfh58y0nNo4xn VxyItAWoPQPWRlRO4w7Rl71yQ06bXqHSFbriPBqiaazc2fGTGUBKaCBaYCBzHRfX 9eWWT/BE7Bimpr2IRGqjudTmOVWezj6rwsoO9ARZycHfahEoEnCUD56VrwIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFCp8f02QxnT2+sfMUGa7+dlItX6nMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvS254X1RaREdkUGI2eDh4UVpydjUyVWkxZnFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQAJcrbAwQA l/DlMAwDBACX8OkDBACX8O4DBACX8PADBACX8gkwDAMEAZfyLgMEAJfyMAMEAJfy PAMEAJfyPgMEAJfyeQMEAJfyngMEAZfypgMEAJfzjDANBgkqhkiG9w0BAQsFAAOC AQEAN8LcdUz6UlginteYkcS9n7hgvERO2JZr/RvYYhz7lOUEtJXya2LdEQLXlhl+ O2EglMOPTljQ4adJuqKxyWG7fLbcNr/ekeHZ2ahTMcVw5PP1uuduRC6VQsptVIyY 6XeJxsjjzUShBNF6pXQd7+JlD3Ww0FGeRhfjeVwVi9Cd+TeKZPgC0CIlKWqEy4Ys YD0mvkrZw5Cwf2W+MYGRF1VrF6qcT3XXMdufDqI9VhdmOw4/9x5YASyn5m2d3J6a 6AP1o+/sfBFfT9mC2QjRpotZxUlhncemFrk3AbKRk6A65r5mo82knP0PcSes1QOJ AA/OQ9e8tZVUsOFQb6mQU/+DUA== -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:07 2026 by rpki-client