This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/CNKO1AJeRZSp_3kQ19ptZSb9qxw.roa File: CNKO1AJeRZSp_3kQ19ptZSb9qxw.roa (raw, json) Hash identifier: L6OclFsXAbkjxZSlLKINJ4WzPa71QpYW4ACfx2HTL/4= Subject key identifier: 08:D2:8E:D4:02:5E:45:94:A9:FF:79:10:D7:DA:6D:65:26:FD:AB:1C Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934 Certificate serial: 019B7F83D09D2321B7352D6810CC162E9483 Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/CNKO1AJeRZSp_3kQ19ptZSb9qxw.roa Signing time: Fri 02 Jan 2026 16:21:43 +0000 ROA not before: Fri 02 Jan 2026 16:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42658 IP address blocks: 185.196.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d0:9d:23:21:b7:35:2d:68:10:cc:16:2e:94:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934 Validity Not Before: Jan 2 16:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08d28ed4025e4594a9ff7910d7da6d6526fdab1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:f0:1d:7d:ca:92:39:17:74:1f:10:ac:14: d7:8d:58:34:ca:53:90:77:52:8d:cf:2d:35:6c:01: f9:30:f5:5d:12:e1:db:86:10:8b:52:c0:43:22:ad: 07:26:a4:c9:f0:16:e8:e3:48:b8:67:b2:2d:3f:2b: c5:6b:1e:c0:cd:68:2f:f1:0b:4c:88:78:89:bc:8e: dd:74:93:c6:25:1c:bb:eb:02:50:39:db:0f:1c:20: 9d:f8:99:48:c3:f3:b5:a1:3f:0a:a6:e6:a5:3e:c0: 18:ed:16:9a:01:17:c9:de:bd:63:d3:1f:b5:45:12: 13:c2:c6:79:e8:34:18:e7:e8:f6:2d:25:d6:79:24: ad:04:77:b1:da:b0:24:72:db:25:a2:c4:95:ab:0e: 6b:8f:0e:3a:1c:6b:3c:fe:91:0f:b3:c2:a1:5a:f3: e2:c0:57:f1:bc:7e:34:86:6e:53:74:c7:04:2d:bd: 97:47:67:1a:1c:0d:8f:c2:9f:ac:8e:0d:4c:23:f5: be:ca:1e:aa:55:38:bd:a0:f3:b8:c9:07:6c:bb:b7: b0:ec:d7:2d:c0:1c:5e:5d:42:96:b5:16:33:92:3e: 22:c9:7a:7b:94:e7:8b:a7:53:7c:81:15:a3:df:9d: a7:ea:03:78:96:fd:21:b4:9b:13:07:83:22:2f:1b: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D2:8E:D4:02:5E:45:94:A9:FF:79:10:D7:DA:6D:65:26:FD:AB:1C X509v3 Authority Key Identifier: keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/CNKO1AJeRZSp_3kQ19ptZSb9qxw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.48.0/22 Signature Algorithm: sha256WithRSAEncryption 58:58:3a:83:c6:0f:76:8a:49:e4:a6:a3:a5:18:ba:d2:23:07: 14:c6:33:90:a2:86:30:cc:44:36:c5:39:8c:1f:04:cf:20:f0: 66:5f:60:98:e5:8b:36:54:7d:f8:cd:f2:2c:f4:f9:bf:da:57: 48:e7:71:2e:e2:98:98:80:93:bb:5b:60:8c:41:36:76:10:d2: 91:05:ef:46:c9:60:f0:82:2b:ad:77:b6:aa:b8:68:8f:5b:b5: ff:ac:14:d6:c5:39:2e:5d:5a:de:87:a0:4a:f8:d9:ac:fb:73: 25:95:4b:c6:f2:9e:31:e8:27:ad:46:b4:9c:4b:c1:39:8f:12: 25:2a:6e:50:3f:c8:ae:7e:81:02:f6:d3:c4:01:70:07:f9:70: e1:81:2f:63:12:5f:0a:85:a1:80:c1:30:ba:c5:4d:70:9f:d4: 52:b0:d4:44:84:f2:ad:a7:b6:f1:58:41:3b:c2:d8:f9:03:d3: bf:38:f5:f7:10:bf:6b:16:44:c4:90:57:d3:bf:eb:21:1f:4c: ad:ae:d5:17:82:dc:0e:e4:e3:c4:d2:10:59:be:0a:4a:20:3e: 05:f6:48:99:e0:94:1c:4f:2a:ad:51:57:91:68:14:e7:24:cf: c2:98:22:ea:1a:0c:32:29:74:8b:0b:68:14:9e:5e:d5:9d:e7: aa:f6:10:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g9CdIyG3NS1oEMwWLpSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MmQxMjA5NzA1MTU4NDYzNjBlYTIyM2U5YTBlNmEzYzM4 OTY5MzQwHhcNMjYwMTAyMTYyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGQyOGVkNDAyNWU0NTk0YTlmZjc5MTBkN2RhNmQ2NTI2ZmRhYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCXwHX3KkjkXdB8QrBTXjVg0ylOQ d1KNzy01bAH5MPVdEuHbhhCLUsBDIq0HJqTJ8Bbo40i4Z7ItPyvFax7AzWgv8QtM iHiJvI7ddJPGJRy76wJQOdsPHCCd+JlIw/O1oT8KpualPsAY7RaaARfJ3r1j0x+1 RRITwsZ56DQY5+j2LSXWeSStBHex2rAkctslosSVqw5rjw46HGs8/pEPs8KhWvPi wFfxvH40hm5TdMcELb2XR2caHA2Pwp+sjg1MI/W+yh6qVTi9oPO4yQdsu7ew7Nct wBxeXUKWtRYzkj4iyXp7lOeLp1N8gRWj352n6gN4lv0htJsTB4MiLxtSBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjSjtQCXkWUqf95ENfabWUm/ascMB8GA1UdIwQY MBaAFCktEglwUVhGNg6iI+mg5qPDiWk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAt ZWQwZjI1NmE1ZmUzLzEvQ05LTzFBSmVSWlNwXzNrUTE5cHRaU2I5cXh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9kZTkxMzktYTlkMC00OTNhLTkyNjAtZWQwZjI1NmE1ZmUz LzEvS1MwU0NYQlJXRVkyRHFJajZhRG1vOE9KYVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucQwMA0G CSqGSIb3DQEBCwUAA4IBAQBYWDqDxg92iknkpqOlGLrSIwcUxjOQooYwzEQ2xTmM HwTPIPBmX2CY5Ys2VH34zfIs9Pm/2ldI53Eu4piYgJO7W2CMQTZ2ENKRBe9GyWDw giutd7aquGiPW7X/rBTWxTkuXVreh6BK+Nms+3MllUvG8p4x6CetRrScS8E5jxIl Km5QP8iufoEC9tPEAXAH+XDhgS9jEl8KhaGAwTC6xU1wn9RSsNREhPKtp7bxWEE7 wtj5A9O/OPX3EL9rFkTEkFfTv+shH0ytrtUXgtwO5OPE0hBZvgpKID4F9kiZ4JQc TyqtUVeRaBTnJM/CmCLqGgwyKXSLC2gUnl7Vneeq9hD2 -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:26 2026 by rpki-client