This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/knCed-keSzVEOPICx1gRMxep3OM.roa File: knCed-keSzVEOPICx1gRMxep3OM.roa (raw, json) Hash identifier: PwNnPjtHsrQvIYgK4ATN14eaGro5/ZgkqW0B/Ot+2cU= Subject key identifier: 92:70:9E:77:E9:1E:4B:35:44:38:F2:02:C7:58:11:33:17:A9:DC:E3 Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd Certificate serial: 019B7C126DA1F13ED427721E9C70C96A3C73 Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/knCed-keSzVEOPICx1gRMxep3OM.roa Signing time: Fri 02 Jan 2026 00:19:01 +0000 ROA not before: Fri 02 Jan 2026 00:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205952 IP address blocks: 62.113.95.0/24 maxlen: 24 62.213.72.0/21 maxlen: 21 62.213.94.0/23 maxlen: 23 62.213.102.0/23 maxlen: 23 62.213.112.0/23 maxlen: 23 62.213.116.0/24 maxlen: 24 212.24.37.0/24 maxlen: 24 212.24.39.0/24 maxlen: 24 212.24.40.0/24 maxlen: 24 212.24.43.0/24 maxlen: 24 212.24.50.0/24 maxlen: 24 212.24.57.0/24 maxlen: 24 212.158.168.0/24 maxlen: 24 212.158.170.0/23 maxlen: 23 212.158.174.0/23 maxlen: 23 217.23.129.0/24 maxlen: 24 217.23.139.0/24 maxlen: 24 217.23.152.0/21 maxlen: 21 2a01:9860::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6d:a1:f1:3e:d4:27:72:1e:9c:70:c9:6a:3c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92709e77e91e4b354438f202c758113317a9dce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:2c:b2:a9:9f:6b:19:89:f5:b0:04:b6:7a: 88:8e:cb:d4:7b:ec:35:3b:88:02:95:6c:cf:60:1e: 96:97:eb:53:ca:a9:d5:e2:0a:e9:b5:ba:72:37:a0: 9b:db:8a:bc:00:49:c4:c9:48:85:a4:ca:fe:47:b8: e7:04:f6:9a:c8:77:7c:61:9c:86:76:a9:08:d4:6c: 51:97:76:08:1d:26:c3:8d:2e:6c:0a:26:41:25:ba: 4b:56:38:00:ca:cd:55:89:a1:6c:dd:29:ee:13:94: 87:f2:eb:34:75:91:09:dd:eb:a9:25:b6:5f:17:15: 95:d2:51:8a:21:db:b7:7b:f6:7e:fb:bd:44:75:48: 98:5c:bc:6c:f1:e3:16:8c:f3:15:8a:74:b0:a7:7d: 7e:bd:70:f4:e8:5f:fb:87:65:9c:64:6e:a5:26:76: 9d:91:29:ea:48:05:29:50:e5:e3:ce:7a:8d:ca:c5: ed:6a:97:41:ac:76:41:df:70:a5:9e:d9:65:c9:d9: 59:bf:7d:db:5a:47:ff:09:ee:97:7f:de:7f:a5:9d: d6:a9:29:d9:e7:c0:5f:4b:6c:df:2f:f5:0d:3c:eb: bb:54:7c:ec:d2:19:73:9b:9c:42:bc:f1:77:6d:51: 64:f9:b1:aa:bf:39:f4:0d:dc:fe:ea:90:51:2c:c3: 08:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:70:9E:77:E9:1E:4B:35:44:38:F2:02:C7:58:11:33:17:A9:DC:E3 X509v3 Authority Key Identifier: keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/knCed-keSzVEOPICx1gRMxep3OM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.95.0/24 62.213.72.0/21 62.213.94.0/23 62.213.102.0/23 62.213.112.0/23 62.213.116.0/24 212.24.37.0/24 212.24.39.0-212.24.40.255 212.24.43.0/24 212.24.50.0/24 212.24.57.0/24 212.158.168.0/24 212.158.170.0/23 212.158.174.0/23 217.23.129.0/24 217.23.139.0/24 217.23.152.0/21 IPv6: 2a01:9860::/32 Signature Algorithm: sha256WithRSAEncryption f9:f3:f8:b3:50:6d:1d:80:a0:2a:ae:08:68:b5:bf:02:39:fd: a5:83:4f:20:0c:2a:46:24:66:2e:52:2c:86:64:59:8a:4b:71: 1b:7f:80:15:4a:b0:ae:f3:d8:33:f7:ec:6d:4c:cd:a8:59:a3: e2:97:e0:71:cb:38:e8:50:10:b4:49:b1:55:8d:4c:50:3b:46: 72:d4:56:3b:04:7b:8c:03:62:3c:16:da:22:2f:f5:c0:73:23: fe:cd:41:27:1c:44:62:fe:e9:26:5e:12:2f:a8:5d:b6:b5:0e: 5b:47:87:da:84:47:28:69:11:b3:1e:f9:74:ae:6c:e5:bb:bb: 37:fe:fe:f5:c6:21:20:ac:27:59:11:2c:39:b6:a9:6f:66:16: e5:c0:c2:43:b9:e5:7e:08:b0:73:90:29:fd:80:88:df:00:a1: c0:80:61:38:d5:72:93:dd:f4:d5:b1:6a:16:5d:ae:6e:11:31: 6d:de:9a:dc:32:be:12:09:c3:ca:ac:63:f2:2c:88:0c:84:c6: ec:a4:e0:8c:b7:8c:72:13:82:c6:a3:19:e1:96:68:93:23:d6: c0:a6:0a:75:c5:f5:d0:5e:6e:08:8e:3f:12:ea:51:e0:45:e1: c9:bd:c8:dc:89:34:82:61:5b:4d:14:63:15:b4:40:79:b5:d5: bf:5a:ae:0e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt8Em2h8T7UJ3IenHDJajxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTRkNjkxNmI5MzE1OWFhODA5ODRhOWIzNzc0NjgzYmI1 NTBlYmQwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjcwOWU3N2U5MWU0YjM1NDQzOGYyMDJjNzU4MTEzMzE3YTlkY2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HQssqmfaxmJ9bAEtnqIjsvUe+w1 O4gClWzPYB6Wl+tTyqnV4grptbpyN6Cb24q8AEnEyUiFpMr+R7jnBPaayHd8YZyG dqkI1GxRl3YIHSbDjS5sCiZBJbpLVjgAys1ViaFs3SnuE5SH8us0dZEJ3eupJbZf FxWV0lGKIdu3e/Z++71EdUiYXLxs8eMWjPMVinSwp31+vXD06F/7h2WcZG6lJnad kSnqSAUpUOXjznqNysXtapdBrHZB33ClntllydlZv33bWkf/Ce6Xf95/pZ3WqSnZ 58BfS2zfL/UNPOu7VHzs0hlzm5xCvPF3bVFk+bGqvzn0Ddz+6pBRLMMI4wIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFJJwnnfpHks1RDjyAsdYETMXqdzjMB8GA1UdIwQY MBaAFGmk1pFrkxWaqAmEqbN3RoO7VQ69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUt MzE5NzExMDA5N2M5LzEva25DZWQta2VTelZFT1BJQ3gxZ1JNeGVwM09NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUtMzE5NzExMDA5N2M5 LzEvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTB0BAIAATBuAwQAPnFf AwQDPtVIAwQBPtVeAwQBPtVmAwQBPtVwAwQAPtV0AwQA1BglMAwDBADUGCcDBADU GCgDBADUGCsDBADUGDIDBADUGDkDBADUnqgDBAHUnqoDBAHUnq4DBADZF4EDBADZ F4sDBAPZF5gwDQQCAAIwBwMFACoBmGAwDQYJKoZIhvcNAQELBQADggEBAPnz+LNQ bR2AoCquCGi1vwI5/aWDTyAMKkYkZi5SLIZkWYpLcRt/gBVKsK7z2DP37G1MzahZ o+KX4HHLOOhQELRJsVWNTFA7RnLUVjsEe4wDYjwW2iIv9cBzI/7NQSccRGL+6SZe Ei+oXba1DltHh9qERyhpEbMe+XSubOW7uzf+/vXGISCsJ1kRLDm2qW9mFuXAwkO5 5X4IsHOQKf2AiN8AocCAYTjVcpPd9NWxahZdrm4RMW3emtwyvhIJw8qsY/IsiAyE xuyk4Iy3jHITgsajGeGWaJMj1sCmCnXF9dBebgiOPxLqUeBF4cm9yNyJNIJhW00U YxW0QHm11b9arg4= -----END CERTIFICATE-----Generated at Mon Jan 26 06:29:09 2026 by rpki-client