This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/KKNtSPFbvF4xC2fg1H7HuDRzkGE.roa File: KKNtSPFbvF4xC2fg1H7HuDRzkGE.roa (raw, json) Hash identifier: H5EVZdHcI+WVSxnRSQo+6mijz5FGMO2AIbkdKiqbEss= Subject key identifier: 28:A3:6D:48:F1:5B:BC:5E:31:0B:67:E0:D4:7E:C7:B8:34:73:90:61 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019A890F139C2998CFE85B6BF420B2F2E05F Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/KKNtSPFbvF4xC2fg1H7HuDRzkGE.roa Signing time: Sat 15 Nov 2025 19:47:37 +0000 ROA not before: Sat 15 Nov 2025 19:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213799 IP address blocks: 185.7.242.0/24 maxlen: 24 185.7.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:89:0f:13:9c:29:98:cf:e8:5b:6b:f4:20:b2:f2:e0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Nov 15 19:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=28a36d48f15bbc5e310b67e0d47ec7b834739061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:03:f3:42:3b:0d:cb:6e:44:be:9d:6e:b4:33: 85:78:8d:87:0b:cc:6e:d2:3c:7b:cd:eb:c2:6c:43: d8:92:b0:65:d3:e8:b1:1e:87:2a:ad:2e:f9:72:39: 66:b5:f9:07:16:dc:70:f1:cc:e2:24:73:d7:1c:df: 22:d4:d9:4d:b6:66:ae:15:7d:30:d3:69:65:b0:96: 5b:3b:88:b1:6a:bd:47:e5:3c:6b:5c:06:5b:0c:9e: e4:a5:02:3f:f5:14:99:16:73:9a:4c:5a:c2:06:1f: d2:0c:da:32:68:3b:0a:22:d9:2e:a4:33:80:6e:23: d2:0b:40:24:84:b0:5a:4d:eb:91:6b:fd:2c:ff:07: 7f:72:44:98:33:93:9d:e4:ad:4b:b6:4b:c8:de:b1: 39:2c:02:a0:b1:1e:8c:ae:6a:5f:d0:e5:e1:e1:34: af:c2:6e:91:8b:59:c5:ac:07:d4:a8:42:6d:1b:61: 9d:f9:1b:2b:4a:da:9a:9b:bc:d5:c5:43:60:77:0d: fb:5d:80:d7:af:99:b2:c9:93:a6:ec:46:7f:7e:69: 01:58:8c:fe:ce:17:5b:f1:24:4b:f7:07:9a:80:99: d2:2a:f3:e8:78:4a:46:1b:11:26:92:12:ee:8c:73: e9:f5:ef:04:38:9f:81:1b:59:6a:e0:53:b3:3b:07: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A3:6D:48:F1:5B:BC:5E:31:0B:67:E0:D4:7E:C7:B8:34:73:90:61 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/KKNtSPFbvF4xC2fg1H7HuDRzkGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.242.0/23 Signature Algorithm: sha256WithRSAEncryption 10:23:40:b4:3f:80:bb:23:05:18:14:dd:cd:29:55:3d:ac:58: ed:73:6b:12:7c:ed:4f:8d:a5:83:85:0e:72:b2:7b:ed:09:f7: 03:44:40:0c:b0:8d:ec:09:9a:44:86:03:b4:e1:05:48:0d:8e: 21:77:4b:98:d9:d6:b4:ab:ff:30:ea:13:03:89:16:7d:60:87: 86:79:8a:d1:be:58:c0:b1:d4:7c:e6:4c:08:f1:7a:42:59:a9: 86:47:09:0b:c9:d5:91:d2:37:7b:1b:65:90:04:1c:12:44:08: 65:a5:ca:ba:3a:49:a1:ac:19:42:9f:1a:a0:89:01:36:6a:ab: 5b:6a:98:82:91:05:c1:31:df:c5:dd:6a:3a:12:a8:22:fa:33: 26:0a:fe:fa:3b:c6:a1:d0:99:0c:17:87:80:7b:22:63:95:b9: 43:06:2b:47:2f:30:54:30:a1:41:f6:17:1e:b6:12:53:74:72: 48:41:0a:04:f2:c4:9d:e8:ad:5e:cd:86:fb:58:a7:16:26:a3: 56:84:db:ce:87:24:d7:16:e3:0b:fa:62:2c:bd:ae:d4:03:71: 69:5d:1f:a2:45:ed:d0:6b:fe:d2:8f:72:11:f6:f2:8b:c8:d0: e7:73:f9:9c:b7:18:63:0b:2b:dc:dc:88:89:a5:6d:59:ec:78: 24:f4:a4:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqJDxOcKZjP6Ftr9CCy8uBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjUxMTE1MTk0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGEzNmQ0OGYxNWJiYzVlMzEwYjY3ZTBkNDdlYzdiODM0NzM5MDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6APzQjsNy25Evp1utDOFeI2HC8xu 0jx7zevCbEPYkrBl0+ixHocqrS75cjlmtfkHFtxw8cziJHPXHN8i1NlNtmauFX0w 02llsJZbO4ixar1H5TxrXAZbDJ7kpQI/9RSZFnOaTFrCBh/SDNoyaDsKItkupDOA biPSC0AkhLBaTeuRa/0s/wd/ckSYM5Od5K1LtkvI3rE5LAKgsR6Mrmpf0OXh4TSv wm6Ri1nFrAfUqEJtG2Gd+RsrStqam7zVxUNgdw37XYDXr5myyZOm7EZ/fmkBWIz+ zhdb8SRL9weagJnSKvPoeEpGGxEmkhLujHPp9e8EOJ+BG1lq4FOzOwdDhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCijbUjxW7xeMQtn4NR+x7g0c5BhMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvS0tOdFNQRmJ2RjR4QzJmZzFIN0h1RFJ6a0dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQfyMA0G CSqGSIb3DQEBCwUAA4IBAQAQI0C0P4C7IwUYFN3NKVU9rFjtc2sSfO1PjaWDhQ5y snvtCfcDREAMsI3sCZpEhgO04QVIDY4hd0uY2da0q/8w6hMDiRZ9YIeGeYrRvljA sdR85kwI8XpCWamGRwkLydWR0jd7G2WQBBwSRAhlpcq6OkmhrBlCnxqgiQE2aqtb apiCkQXBMd/F3Wo6Eqgi+jMmCv76O8ah0JkMF4eAeyJjlblDBitHLzBUMKFB9hce thJTdHJIQQoE8sSd6K1ezYb7WKcWJqNWhNvOhyTXFuML+mIsva7UA3FpXR+iRe3Q a/7Sj3IR9vKLyNDnc/mctxhjCyvc3IiJpW1Z7Hgk9KT5 -----END CERTIFICATE-----Generated at Sat Dec 6 18:09:11 2025 by rpki-client