This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/knp9l5mmFlAhTXiQD133DdWn8nA.roa File: knp9l5mmFlAhTXiQD133DdWn8nA.roa (raw, json) Hash identifier: AHEa0qs038WvNyCuY1mn9lhnIIRhANTFA21MGFe80tY= Subject key identifier: 92:7A:7D:97:99:A6:16:50:21:4D:78:90:0F:5D:F7:0D:D5:A7:F2:70 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AC614E351C3B1DBDB6D7636A4BF59AE38 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/knp9l5mmFlAhTXiQD133DdWn8nA.roa Signing time: Thu 27 Nov 2025 16:10:49 +0000 ROA not before: Thu 27 Nov 2025 16:10:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58061 IP address blocks: 45.137.85.0/24 maxlen: 24 84.21.191.0/24 maxlen: 24 103.114.40.0/24 maxlen: 24 195.66.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:14:e3:51:c3:b1:db:db:6d:76:36:a4:bf:59:ae:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 27 16:10:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=927a7d9799a61650214d78900f5df70dd5a7f270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:6a:78:6a:75:99:5b:23:08:02:a4:a2:3f: 51:1e:40:2c:f6:2b:47:cc:85:71:9e:f7:54:3a:d4: e4:3a:ad:a3:1a:ba:0f:27:c7:79:7b:e7:f7:81:86: 1d:4e:8b:dd:38:f0:48:c8:b1:63:8b:94:cb:f4:5d: ff:aa:78:5b:e3:4f:63:5a:76:c6:66:80:c6:58:09: 77:e7:53:fa:6f:5b:2e:8f:27:56:d1:73:b9:9a:09: fd:b3:65:86:e7:82:87:a4:19:ef:9d:60:43:e4:9f: 21:25:fa:be:02:46:57:d8:5e:7b:b2:a2:ba:b2:25: 95:36:78:4e:c3:0a:75:17:ce:7c:12:92:cd:05:7a: 72:e3:d7:8f:47:f8:4a:ca:02:c1:3b:fa:63:b0:a5: fa:4b:e9:0d:ca:9b:6a:2e:05:57:19:5c:7f:a2:30: 76:b2:d3:2c:93:aa:98:ba:ab:c2:65:05:57:69:29: ef:f6:15:3a:3a:ca:2b:10:22:c6:01:11:63:e7:5a: bb:de:e5:cf:26:a5:87:ad:be:a6:7e:7e:15:9d:f6: 61:fc:63:e4:b3:70:88:01:83:e2:7b:66:2a:a6:fe: bb:57:26:aa:dd:1b:ba:dd:eb:68:17:1d:95:6a:24: b1:fe:09:35:20:83:0a:79:c6:7f:09:a6:81:22:b4: ee:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7A:7D:97:99:A6:16:50:21:4D:78:90:0F:5D:F7:0D:D5:A7:F2:70 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/knp9l5mmFlAhTXiQD133DdWn8nA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.85.0/24 84.21.191.0/24 103.114.40.0/24 195.66.24.0/24 Signature Algorithm: sha256WithRSAEncryption 76:4c:05:65:f4:1f:0c:af:b5:2d:8a:d1:6f:d6:8e:78:ee:a7: f1:6d:07:74:ca:70:a5:b4:5d:c6:4c:10:fa:2e:29:88:ec:34: 68:08:50:f9:2a:c3:99:3d:f9:d0:29:0c:22:ec:4e:b4:52:f4: a2:63:e0:6b:be:66:a8:a3:06:33:db:8a:4e:71:f2:10:ce:76: 11:ef:57:0a:bc:56:d2:b5:91:49:23:1a:84:3f:45:88:9d:dc: 75:4c:9f:37:f4:9b:b0:de:10:4a:19:6b:34:43:72:c2:5c:f0: a7:89:1a:dc:1e:71:4b:1b:2e:39:bb:ab:af:24:4c:76:32:90: 26:7a:c4:ab:e1:3c:fc:ee:59:4d:b5:9a:b5:27:9b:4a:8b:ad: e3:4d:28:2d:14:36:1c:e7:3d:d5:e6:85:a2:ad:87:21:11:d5: 3a:27:f7:98:62:aa:d0:31:5b:08:ee:43:10:12:8c:a6:51:4c: 5d:da:d4:df:aa:2f:97:4f:3a:d8:8f:58:7b:cc:f7:47:bc:e9: 0d:b3:a3:ab:37:c6:db:f3:97:41:b3:30:64:9b:aa:8f:5a:bf: 22:d2:e1:af:b8:38:73:83:fc:2b:1e:cc:ca:91:1d:01:78:69: c7:c9:9d:0f:2d:21:d1:de:7e:04:46:5d:d3:d0:fa:93:60:97: fe:a6:c9:7d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrGFONRw7Hb2212NqS/Wa44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTI3MTYxMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjdhN2Q5Nzk5YTYxNjUwMjE0ZDc4OTAwZjVkZjcwZGQ1YTdmMjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwlqeGp1mVsjCAKkoj9RHkAs9itH zIVxnvdUOtTkOq2jGroPJ8d5e+f3gYYdTovdOPBIyLFji5TL9F3/qnhb409jWnbG ZoDGWAl351P6b1sujydW0XO5mgn9s2WG54KHpBnvnWBD5J8hJfq+AkZX2F57sqK6 siWVNnhOwwp1F858EpLNBXpy49ePR/hKygLBO/pjsKX6S+kNyptqLgVXGVx/ojB2 stMsk6qYuqvCZQVXaSnv9hU6OsorECLGARFj51q73uXPJqWHrb6mfn4VnfZh/GPk s3CIAYPie2Yqpv67Vyaq3Ru63etoFx2VaiSx/gk1IIMKecZ/CaaBIrTutQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJJ6fZeZphZQIU14kA9d9w3Vp/JwMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEva25wOWw1bW1GbEFoVFhpUUQxMzNEZFduOG5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYlVAwQA VBW/AwQAZ3IoAwQAw0IYMA0GCSqGSIb3DQEBCwUAA4IBAQB2TAVl9B8Mr7UtitFv 1o547qfxbQd0ynCltF3GTBD6LimI7DRoCFD5KsOZPfnQKQwi7E60UvSiY+Brvmao owYz24pOcfIQznYR71cKvFbStZFJIxqEP0WIndx1TJ839Juw3hBKGWs0Q3LCXPCn iRrcHnFLGy45u6uvJEx2MpAmesSr4Tz87llNtZq1J5tKi63jTSgtFDYc5z3V5oWi rYchEdU6J/eYYqrQMVsI7kMQEoymUUxd2tTfqi+XTzrYj1h7zPdHvOkNs6OrN8bb 85dBszBkm6qPWr8i0uGvuDhzg/wrHszKkR0BeGnHyZ0PLSHR3n4ERl3T0PqTYJf+ psl9 -----END CERTIFICATE-----Generated at Sat Dec 6 03:16:38 2025 by rpki-client