This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/KZNB7lWAg2ccw6OEH22PfuTr474.roa File: KZNB7lWAg2ccw6OEH22PfuTr474.roa (raw, json) Hash identifier: oNpR7vBBKKyNPGUa7GkD8mmfi4bNftZfBrk2/MA9hZw= Subject key identifier: 29:93:41:EE:55:80:83:67:1C:C3:A3:84:1F:6D:8F:7E:E4:EB:E3:BE Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c Certificate serial: 019B7F83314BA11B9091FEC6A98477F9D7B8 Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/KZNB7lWAg2ccw6OEH22PfuTr474.roa Signing time: Fri 02 Jan 2026 16:21:02 +0000 ROA not before: Fri 02 Jan 2026 16:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209836 IP address blocks: 185.126.200.0/24 maxlen: 24 185.126.201.0/24 maxlen: 24 213.232.124.0/24 maxlen: 24 213.232.125.0/24 maxlen: 24 213.232.126.0/24 maxlen: 24 213.232.127.0/24 maxlen: 24 2a0a:2fc0::/30 maxlen: 30 2a13:6b00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:31:4b:a1:1b:90:91:fe:c6:a9:84:77:f9:d7:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c Validity Not Before: Jan 2 16:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=299341ee558083671cc3a3841f6d8f7ee4ebe3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:d0:54:d8:96:41:93:80:7f:85:ea:a5:b1: c1:e4:ba:50:75:7f:85:e0:51:6b:b4:21:6b:cc:8b: c1:2f:2d:0f:5e:92:cb:98:d6:73:ac:b6:18:31:20: 5a:0b:f5:af:04:7f:fc:fa:85:eb:13:07:16:ff:8f: 3e:26:de:1c:d5:6c:57:bb:87:8e:3e:53:1d:54:db: 16:b5:18:bf:2d:90:8b:78:76:88:5a:79:51:08:af: 46:4a:2e:a5:6a:3c:2b:ea:83:d9:93:fa:84:a9:d6: 9c:e1:1c:c9:f1:1d:8f:e3:64:b9:0a:f3:80:b7:b5: 37:e3:30:4e:e7:db:3b:bf:76:d5:c8:f4:4f:74:ac: 80:f9:53:82:1c:3d:1d:0f:d8:9c:38:a6:44:52:b0: d0:2b:6a:83:6b:a0:07:28:18:05:de:0e:11:5b:46: 8a:f0:b4:8a:1a:cf:24:a1:dd:7a:8b:27:90:1c:c4: 84:89:06:01:5d:f7:b6:7f:05:02:f4:c6:d6:5b:56: 71:a8:5a:0a:cf:0d:3f:81:c1:1d:c4:c8:d0:ea:b0: 94:c8:e1:d0:18:61:c2:f4:b2:81:89:06:55:37:eb: 69:6c:3f:ae:92:5d:99:51:10:57:f9:f3:e7:fd:e0: cb:a9:28:8a:29:e3:a3:b7:3d:62:92:52:d2:db:52: 3f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:93:41:EE:55:80:83:67:1C:C3:A3:84:1F:6D:8F:7E:E4:EB:E3:BE X509v3 Authority Key Identifier: keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/KZNB7lWAg2ccw6OEH22PfuTr474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.200.0/23 213.232.124.0/22 IPv6: 2a0a:2fc0::/30 2a13:6b00::/32 Signature Algorithm: sha256WithRSAEncryption 73:fa:3b:35:45:03:a5:62:e8:b8:8c:e5:72:f1:08:ff:e0:f9: b4:13:fd:b7:3a:ff:f1:67:44:f4:a1:48:08:9c:8c:b4:ca:b4: ff:15:04:63:48:cd:25:ac:d3:14:71:fd:be:09:2f:c8:fa:07: 10:48:e6:ed:56:4c:a9:4a:8d:e7:cc:a6:e9:1d:b8:0f:8b:e4: 5e:f1:4a:db:87:7e:47:99:91:c3:56:6e:d3:73:63:54:39:2a: 93:24:d2:99:4e:12:e3:53:c1:4e:5a:f3:04:b8:59:e4:16:f0: c5:31:4e:71:84:8c:87:b7:aa:cb:d3:22:2f:57:ba:6b:bf:3e: f6:3d:79:66:2f:f5:27:39:76:47:15:11:2b:db:8f:f1:2f:ab: b1:fe:32:52:81:96:a3:c5:43:ab:38:16:be:82:94:61:6b:34: d9:22:5b:a2:0a:7d:3f:0f:f8:a5:fe:3c:4c:04:bb:d5:ea:22: 79:e7:1d:44:3c:2b:cd:a4:72:04:f7:e0:07:ca:b4:0e:75:11: 88:ff:99:26:b6:76:1f:27:5a:85:8e:63:1b:6e:02:9e:34:e5: 4b:6b:a7:02:6c:13:de:a4:1d:65:5e:43:30:33:a9:40:09:17: ba:11:62:56:ac:07:a7:cd:cb:0d:65:e3:67:eb:f2:0c:f3:54: b1:09:37:e6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/gzFLoRuQkf7GqYR3+de4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZjU4ZGZmYmE0ZGY2YWMzNGJkOWY0ODExOWFlMTFjZmVm OGE3NmMwHhcNMjYwMTAyMTYyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTkzNDFlZTU1ODA4MzY3MWNjM2EzODQxZjZkOGY3ZWU0ZWJlM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxHQVNiWQZOAf4XqpbHB5LpQdX+F 4FFrtCFrzIvBLy0PXpLLmNZzrLYYMSBaC/WvBH/8+oXrEwcW/48+Jt4c1WxXu4eO PlMdVNsWtRi/LZCLeHaIWnlRCK9GSi6lajwr6oPZk/qEqdac4RzJ8R2P42S5CvOA t7U34zBO59s7v3bVyPRPdKyA+VOCHD0dD9icOKZEUrDQK2qDa6AHKBgF3g4RW0aK 8LSKGs8kod16iyeQHMSEiQYBXfe2fwUC9MbWW1ZxqFoKzw0/gcEdxMjQ6rCUyOHQ GGHC9LKBiQZVN+tpbD+ukl2ZURBX+fPn/eDLqSiKKeOjtz1iklLS21I/EwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCmTQe5VgINnHMOjhB9tj37k6+O+MB8GA1UdIwQY MBaAFD/1jf+6TfasNL2fSBGa4Rz++KdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yOGZjZTQtODFmMS00Y2QzLWE4ZWQt YWI5NGFmZmI5MDNhLzEvS1pOQjdsV0FnMmNjdzZPRUgyMlBmdVRyNDc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yOGZjZTQtODFmMS00Y2QzLWE4ZWQtYWI5NGFmZmI5MDNh LzEvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQBuX7IAwQC 1eh8MBQEAgACMA4DBQIqCi/AAwUAKhNrADANBgkqhkiG9w0BAQsFAAOCAQEAc/o7 NUUDpWLouIzlcvEI/+D5tBP9tzr/8WdE9KFICJyMtMq0/xUEY0jNJazTFHH9vgkv yPoHEEjm7VZMqUqN58ym6R24D4vkXvFK24d+R5mRw1Zu03NjVDkqkyTSmU4S41PB TlrzBLhZ5BbwxTFOcYSMh7eqy9MiL1e6a78+9j15Zi/1Jzl2RxURK9uP8S+rsf4y UoGWo8VDqzgWvoKUYWs02SJbogp9Pw/4pf48TAS71eoieecdRDwrzaRyBPfgB8q0 DnURiP+ZJrZ2HydahY5jG24CnjTlS2unAmwT3qQdZV5DMDOpQAkXuhFiVqwHp83L DWXjZ+vyDPNUsQk35g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:50:08 2026 by rpki-client