This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KNHznfe17OxgibRQI55Yjrk8XqU.roa File: KNHznfe17OxgibRQI55Yjrk8XqU.roa (raw, json) Hash identifier: KNo2fR9uF9ojRisFW+2PVfbmA3oeyJ0R9L/NsD+vadg= Subject key identifier: 28:D1:F3:9D:F7:B5:EC:EC:60:89:B4:50:23:9E:58:8E:B9:3C:5E:A5 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B0C8873D8F14003802FA64D2F82A3CAE0 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KNHznfe17OxgibRQI55Yjrk8XqU.roa Signing time: Thu 11 Dec 2025 08:30:27 +0000 ROA not before: Thu 11 Dec 2025 08:30:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216138 IP address blocks: 92.62.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:88:73:d8:f1:40:03:80:2f:a6:4d:2f:82:a3:ca:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 11 08:30:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=28d1f39df7b5ecec6089b450239e588eb93c5ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:f8:65:be:ee:24:0e:ad:1f:a4:3c:15:77: 04:5a:d8:26:28:11:0d:64:b4:ba:57:6e:d4:54:d7: 61:1c:94:d2:43:c9:a4:6e:7b:81:22:21:2e:23:77: 71:fe:2c:1e:b4:f3:34:88:20:48:01:8a:43:5a:64: 0a:a0:7b:36:8d:53:7a:38:06:2e:13:6b:b4:d7:42: 88:95:8b:b4:19:1d:36:e7:7b:69:52:f9:a8:84:06: af:b5:1d:dc:9f:f8:b7:81:32:00:32:dc:59:cc:8b: d1:14:8f:ea:45:a8:2c:6c:a2:8e:1f:a5:63:de:af: dc:da:b0:ff:b6:81:0b:66:8f:2a:ce:6c:b2:14:04: 10:10:b9:62:22:bd:a1:ed:22:d8:a4:35:f8:2e:49: 90:64:78:cb:75:40:f0:f6:e7:a2:bb:73:2b:16:67: 61:a1:eb:ac:6d:d6:9b:0d:f5:9f:3f:17:f2:8b:0d: 76:d2:42:40:81:78:aa:19:a5:38:8b:59:b2:58:49: 10:71:61:f6:c3:bb:25:fc:22:c0:e9:46:bd:9c:98: fa:95:98:b6:ec:cc:c4:ed:e9:c2:75:12:14:52:f9: 85:1d:d4:47:e6:ea:24:a6:26:68:05:dc:89:2a:e5: 73:2f:ae:1f:91:03:99:52:3a:89:c7:11:79:5b:70: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D1:F3:9D:F7:B5:EC:EC:60:89:B4:50:23:9E:58:8E:B9:3C:5E:A5 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KNHznfe17OxgibRQI55Yjrk8XqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.245.0/24 Signature Algorithm: sha256WithRSAEncryption bf:dc:ec:41:84:10:ea:39:e9:59:da:ed:a8:ba:a3:4a:5b:ee: 20:dd:46:eb:85:2c:a0:ed:98:dc:94:80:32:ed:d2:bb:d4:e1: b8:fb:2d:e3:77:6f:22:ff:fe:84:7d:66:dc:ac:5e:aa:55:9f: 8a:55:59:db:aa:21:20:3c:2e:18:a7:cd:01:96:58:e3:82:f4: 2b:1a:05:ff:0f:42:29:1e:bd:14:c8:3a:60:0c:51:c9:6d:d0: 91:cf:d7:9f:6c:cb:0c:58:b7:f9:9c:c6:9e:96:1c:3f:a6:27: 83:01:85:2e:05:39:cf:03:a0:e7:d8:e5:32:13:84:33:96:7c: 8a:68:99:62:70:ab:78:74:81:a9:1c:13:af:ac:0c:91:f1:41: da:eb:30:78:ac:6e:4b:3a:a3:cc:2e:96:8c:d8:b0:8b:2b:50: f1:ce:46:0c:f5:99:1c:a0:26:fd:5a:5b:5e:a2:3c:eb:f8:e7: 64:d2:50:66:26:11:68:18:18:67:a6:a8:ef:f5:3f:0f:65:08: c5:04:fc:30:1f:23:84:b1:bf:8b:b9:38:f2:5d:38:c1:22:21: 8c:be:bd:3e:55:24:95:70:6a:49:a9:2c:2a:1c:52:88:f7:7e: ca:9f:79:76:91:31:71:81:93:5f:74:6d:1e:6e:2d:ae:9e:41: 2d:34:89:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsMiHPY8UADgC+mTS+Co8rgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjExMDgzMDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGQxZjM5ZGY3YjVlY2VjNjA4OWI0NTAyMzllNTg4ZWI5M2M1ZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaj4Zb7uJA6tH6Q8FXcEWtgmKBEN ZLS6V27UVNdhHJTSQ8mkbnuBIiEuI3dx/iwetPM0iCBIAYpDWmQKoHs2jVN6OAYu E2u010KIlYu0GR0253tpUvmohAavtR3cn/i3gTIAMtxZzIvRFI/qRagsbKKOH6Vj 3q/c2rD/toELZo8qzmyyFAQQELliIr2h7SLYpDX4LkmQZHjLdUDw9ueiu3MrFmdh oeusbdabDfWfPxfyiw120kJAgXiqGaU4i1myWEkQcWH2w7sl/CLA6Ua9nJj6lZi2 7MzE7enCdRIUUvmFHdRH5uokpiZoBdyJKuVzL64fkQOZUjqJxxF5W3AdhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCjR8533tezsYIm0UCOeWI65PF6lMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS05Iem5mZTE3T3hnaWJSUUk1NVlqcms4WHFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD71MA0G CSqGSIb3DQEBCwUAA4IBAQC/3OxBhBDqOelZ2u2ouqNKW+4g3UbrhSyg7ZjclIAy 7dK71OG4+y3jd28i//6EfWbcrF6qVZ+KVVnbqiEgPC4Yp80BlljjgvQrGgX/D0Ip Hr0UyDpgDFHJbdCRz9efbMsMWLf5nMaelhw/pieDAYUuBTnPA6Dn2OUyE4QzlnyK aJlicKt4dIGpHBOvrAyR8UHa6zB4rG5LOqPMLpaM2LCLK1DxzkYM9ZkcoCb9Wlte ojzr+Odk0lBmJhFoGBhnpqjv9T8PZQjFBPwwHyOEsb+LuTjyXTjBIiGMvr0+VSSV cGpJqSwqHFKI937Kn3l2kTFxgZNfdG0ebi2unkEtNIkM -----END CERTIFICATE-----Generated at Fri Dec 19 23:20:44 2025 by rpki-client