This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/KnVR_9VrWrMYjNqmZyI3AyOyCfQ.roa File: KnVR_9VrWrMYjNqmZyI3AyOyCfQ.roa (raw, json) Hash identifier: smZSmUpd6ByBf72zK69AbaDDhM3Jk9l+boOyjSHXOmU= Subject key identifier: 2A:75:51:FF:D5:6B:5A:B3:18:8C:DA:A6:67:22:37:03:23:B2:09:F4 Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615 Certificate serial: 019B77C6885FF3F6D178B200CE17CCE0A21F Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/KnVR_9VrWrMYjNqmZyI3AyOyCfQ.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61295 IP address blocks: 91.214.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:88:5f:f3:f6:d1:78:b2:00:ce:17:cc:e0:a2:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb79c26f31575345159c840ed278a878a9256615 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a7551ffd56b5ab3188cdaa66722370323b209f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:56:0d:6f:a3:33:a3:17:eb:3c:01:7d:ad:ef: 98:d6:1d:11:60:9a:1c:d8:7f:45:92:fe:3a:80:86: 03:98:df:5c:02:be:1e:df:33:d3:00:f3:94:42:60: 1c:95:d2:4e:e7:8d:45:23:98:d7:d2:fe:11:e2:70: 36:a4:2b:26:94:78:2e:c6:80:de:43:e8:b5:4d:9e: 57:0d:fd:65:66:43:4e:36:f0:b7:2e:59:f0:d5:a2: f6:ac:9b:46:bb:4e:2e:ca:a5:ff:f0:5e:39:4f:23: 7c:56:66:c9:c9:64:c0:e9:fc:44:b0:f1:1a:1c:07: 71:76:90:0b:8d:1e:60:48:76:05:1d:db:d4:de:03: 03:24:8e:6d:5a:52:49:ce:72:df:5a:65:06:24:1e: 3b:b8:66:5f:f9:fa:bc:e0:4c:b6:a1:09:c5:73:53: 17:c5:9d:6c:f9:b5:99:77:80:c4:e2:54:29:05:d9: 9c:88:67:85:00:c5:a0:34:9a:94:eb:ee:f6:74:c0: bd:87:ba:99:d8:f4:1d:92:b7:69:a8:4c:6b:15:a2: e8:bf:ab:26:74:b2:41:3a:19:82:6e:da:18:ac:2a: 63:47:65:2f:7d:2a:8e:a0:91:01:2f:d4:2b:da:22: e3:14:f7:84:e4:05:0d:77:71:8c:92:23:ce:11:d3: fe:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:75:51:FF:D5:6B:5A:B3:18:8C:DA:A6:67:22:37:03:23:B2:09:F4 X509v3 Authority Key Identifier: keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/KnVR_9VrWrMYjNqmZyI3AyOyCfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.46.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:62:af:93:4f:b6:d8:3f:25:86:c5:cb:43:8f:b1:11:6a:01: cd:df:d5:16:39:c7:31:cc:f0:00:21:7b:be:a2:1d:58:01:c6: bf:b0:ef:35:0e:d8:18:65:08:26:a0:f2:a4:92:3e:fe:fd:d4: 64:a1:58:8d:ad:3e:e1:96:fe:b5:a1:98:85:79:7c:dd:61:3c: 94:e6:f0:27:37:3e:f1:cf:7f:21:8e:d4:42:e6:cf:06:ad:a1: 9b:84:1c:94:b1:1f:fd:f1:71:9d:f8:58:fc:dd:61:50:8a:39: 8c:a6:13:92:f2:54:45:57:0a:ef:d9:2a:0c:df:ff:b3:91:9c: 67:0f:8c:da:35:8a:10:cb:53:ae:8d:c1:d6:66:90:a8:8f:55: b8:8f:4f:70:e9:09:b5:db:ad:94:1e:33:1f:8f:53:68:4c:90: 69:b9:be:60:11:f8:9c:ca:0d:c5:1d:f2:4f:35:d6:58:bd:f6: 2b:db:f9:43:5d:41:09:b9:18:a0:7e:31:b8:3c:68:19:13:82: 1d:92:8b:5c:d1:47:23:63:49:55:ae:d4:a9:cf:e3:22:df:a6: 25:c3:26:b6:96:3f:3c:c8:4a:4b:c8:9f:e5:62:1b:cd:50:9a: c5:39:e7:14:81:f0:ac:76:a0:d5:9e:23:84:ef:90:c3:0a:b0: ca:5a:a6:b3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xohf8/bReLIAzhfM4KIfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky NTY2MTUwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTc1NTFmZmQ1NmI1YWIzMTg4Y2RhYTY2NzIyMzcwMzIzYjIwOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FYNb6MzoxfrPAF9re+Y1h0RYJoc 2H9Fkv46gIYDmN9cAr4e3zPTAPOUQmAcldJO541FI5jX0v4R4nA2pCsmlHguxoDe Q+i1TZ5XDf1lZkNONvC3Llnw1aL2rJtGu04uyqX/8F45TyN8VmbJyWTA6fxEsPEa HAdxdpALjR5gSHYFHdvU3gMDJI5tWlJJznLfWmUGJB47uGZf+fq84Ey2oQnFc1MX xZ1s+bWZd4DE4lQpBdmciGeFAMWgNJqU6+72dMC9h7qZ2PQdkrdpqExrFaLov6sm dLJBOhmCbtoYrCpjR2UvfSqOoJEBL9Qr2iLjFPeE5AUNd3GMkiPOEdP+owIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCp1Uf/Va1qzGIzapmciNwMjsgn0MB8GA1UdIwQY MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh LWJkMzdkYTBlNDQ3Yy8xL0tuVlJfOVZyV3JNWWpOcW1aeUkzQXlPeUNmUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2VhLWJkMzdkYTBlNDQ3 Yy8xLzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb1i4w DQYJKoZIhvcNAQELBQADggEBAAtir5NPttg/JYbFy0OPsRFqAc3f1RY5xzHM8AAh e76iHVgBxr+w7zUO2BhlCCag8qSSPv791GShWI2tPuGW/rWhmIV5fN1hPJTm8Cc3 PvHPfyGO1ELmzwatoZuEHJSxH/3xcZ34WPzdYVCKOYymE5LyVEVXCu/ZKgzf/7OR nGcPjNo1ihDLU66NwdZmkKiPVbiPT3DpCbXbrZQeMx+PU2hMkGm5vmAR+JzKDcUd 8k811li99ivb+UNdQQm5GKB+Mbg8aBkTgh2Si1zRRyNjSVWu1KnP4yLfpiXDJraW PzzISkvIn+ViG81QmsU55xSB8Kx2oNWeI4TvkMMKsMpaprM= -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:30 2026 by rpki-client