This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/knDmeA2ssnsq3koQjYEYOH22ljE.roa File: knDmeA2ssnsq3koQjYEYOH22ljE.roa (raw, json) Hash identifier: wXYxKGYHG8/DzazVRSxXd9+t+/QYFTtKVJ9nvMVpMMU= Subject key identifier: 92:70:E6:78:0D:AC:B2:7B:2A:DE:4A:10:8D:81:18:38:7D:B6:96:31 Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B791007941F54351679361F150B2E50F2 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/knDmeA2ssnsq3koQjYEYOH22ljE.roa Signing time: Thu 01 Jan 2026 10:17:32 +0000 ROA not before: Thu 01 Jan 2026 10:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210811 IP address blocks: 92.119.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:07:94:1f:54:35:16:79:36:1f:15:0b:2e:50:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9270e6780dacb27b2ade4a108d8118387db69631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:9a:fd:c6:e1:6c:b4:76:3a:b0:72:38:93: 38:93:59:8a:e9:96:38:06:e1:ac:7b:90:8d:4a:61: 25:04:b3:91:48:94:fd:c8:fe:45:2d:ce:de:fe:40: 84:e7:18:ae:ce:9e:19:5e:9f:0e:f1:0c:1f:fe:e1: 58:ef:38:d9:31:dc:fb:a9:5a:5c:04:35:93:99:58: 2e:2b:6b:dc:c8:03:23:eb:2c:07:81:4b:80:0f:6e: 84:04:f6:37:62:d2:06:f2:b3:f1:09:46:b5:74:9a: 10:60:4a:66:ea:64:e6:86:57:aa:9b:38:92:69:f3: 68:11:00:4f:78:a7:e2:33:85:a6:44:e5:01:c7:0f: 48:d4:25:79:fe:8d:2a:00:c4:0e:9d:83:aa:01:63: 3b:d2:fb:1a:97:39:61:f8:48:7d:80:9b:da:9c:44: 63:04:b3:4f:04:c8:5b:f3:c1:c7:fd:3c:60:69:0e: 77:ce:a1:ec:57:f6:e2:c3:9c:b3:63:51:c7:cc:0b: 21:a4:92:fe:d2:f6:ae:ed:a3:9f:66:f8:32:ee:01: 12:ca:73:58:23:e0:42:8c:58:41:be:3a:b7:27:ac: 92:a4:37:df:f1:c9:61:38:11:be:1d:9d:b4:36:47: 8d:2c:3d:ac:56:d4:97:47:74:53:09:b6:01:91:14: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:70:E6:78:0D:AC:B2:7B:2A:DE:4A:10:8D:81:18:38:7D:B6:96:31 X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/knDmeA2ssnsq3koQjYEYOH22ljE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.184.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:82:55:87:31:b3:2c:0d:d1:4a:80:6d:99:23:c2:f3:a2:be: 07:03:5e:7c:d2:20:4c:c4:7a:56:2f:a5:37:fd:2e:00:2e:95: d0:b7:33:70:c7:9d:e8:49:1a:43:63:18:1f:33:16:d6:2e:10: 32:e1:1f:2c:97:dd:bb:ec:26:f8:91:17:b3:32:ee:72:44:dd: e7:78:4d:69:b9:99:86:b1:e9:95:05:20:23:94:70:7d:e6:64: e2:31:d8:08:28:17:02:9a:ab:dd:e7:16:b2:c3:d2:aa:69:fe: ad:57:7e:27:0d:24:42:97:c0:04:22:ef:52:e8:90:e9:db:7c: e9:fd:75:73:f0:53:02:c1:3f:ae:97:c0:8b:fd:d5:e0:13:24: 6f:ea:b1:6b:70:60:cb:ba:f7:f2:51:da:9f:4b:0b:91:3d:d9: 3d:90:2f:8a:37:a6:67:29:50:e3:03:67:6e:23:11:7a:c0:31: b7:1c:ed:ec:11:a7:12:ff:7e:27:b9:da:a7:ee:77:a4:7c:6c: 69:39:21:d5:cd:6f:94:05:92:b2:2d:9b:0f:ed:64:f2:0d:9f: 6c:09:26:e4:50:52:ea:9b:3f:ba:e6:be:97:8d:75:5e:59:ba: bf:c6:0b:1e:4a:67:84:c0:89:8f:8e:db:33:18:08:86:a1:cc: dd:a3:86:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAeUH1Q1Fnk2HxULLlDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjcwZTY3ODBkYWNiMjdiMmFkZTRhMTA4ZDgxMTgzODdkYjY5NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24Ka/cbhbLR2OrByOJM4k1mK6ZY4 BuGse5CNSmElBLORSJT9yP5FLc7e/kCE5xiuzp4ZXp8O8Qwf/uFY7zjZMdz7qVpc BDWTmVguK2vcyAMj6ywHgUuAD26EBPY3YtIG8rPxCUa1dJoQYEpm6mTmhleqmziS afNoEQBPeKfiM4WmROUBxw9I1CV5/o0qAMQOnYOqAWM70vsalzlh+Eh9gJvanERj BLNPBMhb88HH/TxgaQ53zqHsV/biw5yzY1HHzAshpJL+0vau7aOfZvgy7gESynNY I+BCjFhBvjq3J6ySpDff8clhOBG+HZ20NkeNLD2sVtSXR3RTCbYBkRQF1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJJw5ngNrLJ7Kt5KEI2BGDh9tpYxMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEva25EbWVBMnNzbnNxM2tvUWpZRVlPSDIybGpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHe4MA0G CSqGSIb3DQEBCwUAA4IBAQCaglWHMbMsDdFKgG2ZI8Lzor4HA1580iBMxHpWL6U3 /S4ALpXQtzNwx53oSRpDYxgfMxbWLhAy4R8sl9277Cb4kRezMu5yRN3neE1puZmG semVBSAjlHB95mTiMdgIKBcCmqvd5xayw9Kqaf6tV34nDSRCl8AEIu9S6JDp23zp /XVz8FMCwT+ul8CL/dXgEyRv6rFrcGDLuvfyUdqfSwuRPdk9kC+KN6ZnKVDjA2du IxF6wDG3HO3sEacS/34nudqn7nekfGxpOSHVzW+UBZKyLZsP7WTyDZ9sCSbkUFLq mz+65r6XjXVeWbq/xgseSmeEwImPjtszGAiGoczdo4YL -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:15 2026 by rpki-client