This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KZNNOVXLOvomZX2PcuuSIk_5LmU.roa File: KZNNOVXLOvomZX2PcuuSIk_5LmU.roa (raw, json) Hash identifier: 2ji8I3S9cyEusflPF2291OgEaE1m7Svx88a0ce5P/yE= Subject key identifier: 29:93:4D:39:55:CB:3A:FA:26:65:7D:8F:72:EB:92:22:4F:F9:2E:65 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84FE786CA3B9560D117553B87BB255 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KZNNOVXLOvomZX2PcuuSIk_5LmU.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207320 IP address blocks: 95.46.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fe:78:6c:a3:b9:56:0d:11:75:53:b8:7b:b2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29934d3955cb3afa26657d8f72eb92224ff92e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:6b:c8:05:8e:9f:8e:49:3b:d2:e2:7b:f1: b0:00:c1:0a:50:70:b7:5d:88:28:6b:64:77:e7:58: f2:fb:40:f9:6a:42:08:87:ac:17:31:f6:d8:e2:03: 49:79:bb:4e:b0:22:b8:3c:22:3f:95:4b:64:4c:1a: e6:93:1c:09:a6:29:77:e9:35:6b:54:77:83:0e:3a: ba:d7:96:9e:b7:4d:cf:dd:14:d0:ac:d3:db:d7:d1: 19:a2:1b:01:db:dc:b8:0d:72:14:6c:b2:55:e5:46: d3:92:c5:9a:0c:ff:b9:2c:58:29:c9:f7:ec:bf:a2: 53:d5:75:eb:d4:d7:f3:34:34:6e:03:2c:1e:23:c4: 07:71:cc:0f:36:b2:6f:84:08:f0:67:5e:15:6f:a3: 35:ab:ea:d2:30:e0:c5:35:ec:ec:c0:b4:dd:93:05: 2e:72:3e:90:ac:61:83:99:61:bf:1c:e4:f8:15:70: bf:4d:08:6c:43:d7:40:34:f6:5e:2c:1b:27:56:f4: a9:28:81:21:76:f2:13:32:7b:24:51:4c:f0:f3:d1: a5:2a:80:57:24:ae:22:7c:94:b3:fc:84:54:1c:63: ed:03:19:4d:c1:df:8e:de:fb:e0:d1:1e:7f:bc:fb: 61:14:c5:a2:a1:cd:a3:e8:dd:b7:63:04:25:ff:80: 34:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:93:4D:39:55:CB:3A:FA:26:65:7D:8F:72:EB:92:22:4F:F9:2E:65 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KZNNOVXLOvomZX2PcuuSIk_5LmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.105.0/24 Signature Algorithm: sha256WithRSAEncryption 06:26:1a:c6:9f:02:38:55:ea:b5:39:d0:0e:9e:31:9b:6a:e6: 42:0a:a6:a3:5f:65:46:fb:f3:91:31:b5:99:94:4b:5a:c6:ae: b3:f9:e5:cd:dd:ae:b9:67:ff:27:d6:3d:54:2b:76:68:8d:e1: 0b:cb:bb:4a:da:ca:2f:8d:69:9b:2d:ad:de:7a:96:88:ae:7d: 18:03:c2:ae:45:dc:54:80:e1:1e:e6:39:8b:5b:89:a3:55:3b: 8b:de:cc:b4:cd:24:ab:ff:ce:22:ea:62:cf:6a:87:91:f5:0a: 16:58:3c:00:b5:44:fc:29:ff:3c:80:ec:ac:6c:43:7a:cc:ac: 27:39:7b:7b:b0:64:b5:04:db:69:80:00:3b:6d:f0:f7:ae:19: 81:6c:91:5c:c6:23:e7:b9:19:0a:ce:28:8e:26:cf:1b:2b:ab: 89:24:5e:97:30:30:9f:b5:9c:83:c7:c1:9d:05:0e:b5:ab:4b: e6:33:e1:e2:49:78:99:85:0e:c6:6e:69:b2:45:a3:87:da:a5: 4b:b2:13:be:7f:96:71:cd:a0:69:dd:d6:9e:84:6b:f4:ae:1a: f3:a2:92:aa:8e:c6:27:37:59:3f:99:2e:33:fb:da:ea:08:02: 2a:34:94:d3:2a:04:2d:a0:5f:53:57:29:08:f9:78:14:6a:0e: 63:b2:be:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hP54bKO5Vg0RdVO4e7JVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTkzNGQzOTU1Y2IzYWZhMjY2NTdkOGY3MmViOTIyMjRmZjkyZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+VryAWOn45JO9Lie/GwAMEKUHC3 XYgoa2R351jy+0D5akIIh6wXMfbY4gNJebtOsCK4PCI/lUtkTBrmkxwJpil36TVr VHeDDjq615aet03P3RTQrNPb19EZohsB29y4DXIUbLJV5UbTksWaDP+5LFgpyffs v6JT1XXr1NfzNDRuAyweI8QHccwPNrJvhAjwZ14Vb6M1q+rSMODFNezswLTdkwUu cj6QrGGDmWG/HOT4FXC/TQhsQ9dANPZeLBsnVvSpKIEhdvITMnskUUzw89GlKoBX JK4ifJSz/IRUHGPtAxlNwd+O3vvg0R5/vPthFMWioc2j6N23YwQl/4A0KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCmTTTlVyzr6JmV9j3LrkiJP+S5lMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvS1pOTk9WWExPdm9tWlgyUGN1dVNJa181TG1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy5pMA0G CSqGSIb3DQEBCwUAA4IBAQAGJhrGnwI4Veq1OdAOnjGbauZCCqajX2VG+/ORMbWZ lEtaxq6z+eXN3a65Z/8n1j1UK3ZojeELy7tK2sovjWmbLa3eepaIrn0YA8KuRdxU gOEe5jmLW4mjVTuL3sy0zSSr/84i6mLPaoeR9QoWWDwAtUT8Kf88gOysbEN6zKwn OXt7sGS1BNtpgAA7bfD3rhmBbJFcxiPnuRkKziiOJs8bK6uJJF6XMDCftZyDx8Gd BQ61q0vmM+HiSXiZhQ7GbmmyRaOH2qVLshO+f5ZxzaBp3daehGv0rhrzopKqjsYn N1k/mS4z+9rqCAIqNJTTKgQtoF9TVykI+XgUag5jsr6F -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:33 2026 by rpki-client