This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/knrDAil7OO-Yx2NTo_oTE0lWvG0.roa File: knrDAil7OO-Yx2NTo_oTE0lWvG0.roa (raw, json) Hash identifier: EQdRod3nZJJQ0luHMt9XKGtHT/MSluOGADpnfRGbDAg= Subject key identifier: 92:7A:C3:02:29:7B:38:EF:98:C7:63:53:A3:FA:13:13:49:56:BC:6D Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e Certificate serial: 019B7AC796F6704A775691CAF6B2B896B5A7 Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/knrDAil7OO-Yx2NTo_oTE0lWvG0.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200359 IP address blocks: 109.70.232.0/24 maxlen: 24 109.70.233.0/24 maxlen: 24 109.70.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:96:f6:70:4a:77:56:91:ca:f6:b2:b8:96:b5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=927ac302297b38ef98c76353a3fa13134956bc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0b:3a:db:4c:a1:8e:92:63:70:9b:ed:f5:eb: 5c:3f:b7:89:25:0c:98:96:b0:b7:bf:1f:c5:42:4e: cc:4d:db:ae:ab:76:54:90:54:89:8e:bb:1a:24:96: 4c:d4:58:60:ea:9c:ea:5f:5a:16:c4:2b:80:4b:49: 2d:9f:b4:1b:c7:0f:85:c1:95:f1:c1:86:c6:f3:07: 5e:aa:3a:18:c4:48:61:7e:35:25:e2:47:2e:f4:e9: 07:10:b7:b9:1b:3b:f0:bb:0b:7b:e6:76:05:1e:6b: 80:7a:61:01:7d:c6:b3:47:d9:0e:5f:d9:ba:80:f0: a1:ce:83:38:b7:e3:2f:26:69:77:be:29:f3:ae:ea: c4:7e:68:52:4f:58:07:3e:6f:5f:ca:36:d2:09:f8: d2:59:ea:5a:30:19:83:08:78:ad:19:7b:61:da:c2: 80:87:d2:3e:a1:39:44:ca:08:2e:c5:f1:e5:ce:35: 02:44:52:c6:39:ee:19:3e:0a:2a:e7:56:d4:b0:6b: ba:21:d0:0d:9c:c8:08:06:c6:5a:52:4d:44:fb:57: 21:92:3d:81:fc:7f:b2:e8:07:95:79:25:d5:2e:76: fe:96:40:5c:37:da:e1:8c:87:4f:f9:09:31:27:b1: b0:cf:4f:a2:12:46:88:20:23:45:e6:5a:13:b6:41: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7A:C3:02:29:7B:38:EF:98:C7:63:53:A3:FA:13:13:49:56:BC:6D X509v3 Authority Key Identifier: keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/knrDAil7OO-Yx2NTo_oTE0lWvG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.70.232.0-109.70.234.255 Signature Algorithm: sha256WithRSAEncryption 08:30:7a:b4:24:6c:38:58:bf:6b:27:35:fe:3c:34:b1:66:88: b5:9b:59:eb:7e:c5:a6:7a:9f:8f:20:72:d0:2a:2d:16:40:bf: 92:b0:fe:8e:66:fc:0c:1a:87:fe:06:7e:af:da:f4:6e:35:a8: 1f:03:6f:5b:60:e7:3b:a8:21:48:0f:1a:a9:c0:dd:2c:52:a5: f6:69:db:9e:bb:7f:d7:16:0c:70:0d:a1:69:4b:15:2b:53:af: c5:14:5b:4b:fd:cb:78:1c:e7:b9:d4:87:4c:ba:56:96:bd:2b: 97:05:14:85:45:53:d8:47:f3:e3:34:c1:49:92:7c:0f:e9:e6: df:f7:d4:ca:f6:8e:fa:f3:5e:49:60:56:4d:b1:b0:5a:76:85: 00:31:fc:d6:89:f8:8a:51:6e:2e:56:83:f2:15:70:9c:78:ce: 44:09:04:15:c8:76:b6:e2:12:9b:3e:73:0e:54:81:0a:c9:68: 28:15:c4:f4:b3:28:3b:5a:73:48:70:ad:cf:5e:84:a5:85:d7: 0a:84:77:50:41:f3:43:3c:6d:a9:56:14:90:c9:c3:94:2b:17: 5f:a6:1f:bc:90:aa:60:cb:c2:c0:6f:05:6b:a6:c7:d3:86:b5: fb:1f:8c:88:06:78:a0:fc:12:03:92:1f:68:dc:5a:47:70:fc: 10:95:b6:79 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x5b2cEp3VpHK9rK4lrWnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0 MTIxMmUwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjdhYzMwMjI5N2IzOGVmOThjNzYzNTNhM2ZhMTMxMzQ5NTZiYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Qs620yhjpJjcJvt9etcP7eJJQyY lrC3vx/FQk7MTduuq3ZUkFSJjrsaJJZM1Fhg6pzqX1oWxCuAS0ktn7Qbxw+FwZXx wYbG8wdeqjoYxEhhfjUl4kcu9OkHELe5Gzvwuwt75nYFHmuAemEBfcazR9kOX9m6 gPChzoM4t+MvJml3vinzrurEfmhST1gHPm9fyjbSCfjSWepaMBmDCHitGXth2sKA h9I+oTlEygguxfHlzjUCRFLGOe4ZPgoq51bUsGu6IdANnMgIBsZaUk1E+1chkj2B /H+y6AeVeSXVLnb+lkBcN9rhjIdP+QkxJ7Gwz0+iEkaIICNF5loTtkFvSwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJJ6wwIpezjvmMdjU6P6ExNJVrxtMB8GA1UdIwQY MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct M2U4ZGYzMzEwMjMyLzEva25yREFpbDdPTy1ZeDJOVG9fb1RFMGxXdkcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANtRugD BABtRuowDQYJKoZIhvcNAQELBQADggEBAAgwerQkbDhYv2snNf48NLFmiLWbWet+ xaZ6n48gctAqLRZAv5Kw/o5m/Awah/4Gfq/a9G41qB8Db1tg5zuoIUgPGqnA3SxS pfZp2567f9cWDHANoWlLFStTr8UUW0v9y3gc57nUh0y6Vpa9K5cFFIVFU9hH8+M0 wUmSfA/p5t/31Mr2jvrzXklgVk2xsFp2hQAx/NaJ+IpRbi5Wg/IVcJx4zkQJBBXI drbiEps+cw5UgQrJaCgVxPSzKDtac0hwrc9ehKWF1wqEd1BB80M8balWFJDJw5Qr F1+mH7yQqmDLwsBvBWumx9OGtfsfjIgGeKD8EgOSH2jcWkdw/BCVtnk= -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:49 2026 by rpki-client