This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/7DKhg71ZB3nnMpauf53JDjRxvcE.roa File: 7DKhg71ZB3nnMpauf53JDjRxvcE.roa (raw, json) Hash identifier: JaQt7Bz1hiKlJT1Mi9uSBQ4bdQnONHvQK2D4cbBsnd4= Subject key identifier: EC:32:A1:83:BD:59:07:79:E7:32:96:AE:7F:9D:C9:0E:34:71:BD:C1 Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a Certificate serial: 019B76EAE585F3B6D11B0F27CB23EA79A58F Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/7DKhg71ZB3nnMpauf53JDjRxvcE.roa Signing time: Thu 01 Jan 2026 00:17:44 +0000 ROA not before: Thu 01 Jan 2026 00:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200471 IP address blocks: 160.62.9.0/24 maxlen: 24 160.62.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e5:85:f3:b6:d1:1b:0f:27:cb:23:ea:79:a5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec32a183bd590779e73296ae7f9dc90e3471bdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:05:94:fe:aa:c1:04:df:37:8b:6c:61:eb: 5b:c8:58:df:d6:19:e3:42:47:84:51:e6:42:de:77: e4:ce:9d:3a:8b:bb:a4:27:d9:e8:83:80:42:9d:d8: b2:6f:94:19:3e:21:3c:73:e3:50:fa:3a:ba:f0:58: f7:9b:01:16:b0:2a:e1:5e:ba:a2:80:c7:03:f0:e0: ca:ae:87:40:58:51:5d:22:b6:77:c6:6b:a1:e4:10: 50:99:9d:58:39:f4:bd:61:3b:9b:b2:ab:92:06:e2: 78:b4:e8:de:00:f9:58:6d:fd:ad:28:94:dd:59:40: 81:46:66:24:f1:9f:a4:74:33:3b:00:21:1b:9a:73: 30:b6:19:64:21:5e:04:04:16:03:92:e1:3e:07:9e: ab:b7:76:1f:cf:53:76:9d:76:d6:5a:be:d3:3b:ca: 4a:ec:bb:d7:ab:5e:79:5b:db:f7:14:7c:1d:da:ea: 59:71:e0:b6:36:9d:df:cf:6f:14:d0:af:2d:40:ed: 42:5b:e7:61:3a:f5:31:31:01:51:07:e6:06:84:f2: d4:16:92:a2:fb:98:83:a6:9e:ec:27:eb:69:d2:b7: b9:4e:1e:a4:f3:3e:9d:b5:dd:42:c5:0d:95:ed:46: 89:de:c8:2b:53:45:68:13:28:c7:b6:12:57:a8:c0: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:32:A1:83:BD:59:07:79:E7:32:96:AE:7F:9D:C9:0E:34:71:BD:C1 X509v3 Authority Key Identifier: keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/7DKhg71ZB3nnMpauf53JDjRxvcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.62.9.0/24 160.62.21.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:7c:38:9c:fe:13:ba:90:a4:67:54:9e:c7:5e:ef:a6:ad:4f: 3f:ad:ab:e9:8e:f7:22:4d:0b:95:ac:25:75:f4:30:25:c8:ee: 15:7b:e6:38:52:ee:e6:94:16:30:36:c6:26:b4:20:57:e8:aa: 86:75:a5:cf:9d:75:7c:6e:26:25:cd:f0:9a:8d:55:91:2a:9f: 9a:31:f1:1c:7f:ab:cd:fc:cc:be:8f:20:fc:f8:06:8f:dd:14: 95:10:f8:3f:0b:49:f3:90:c4:3e:6a:9f:12:76:a0:71:a8:2b: e0:05:99:8d:c7:e9:26:1e:92:f9:a9:bf:ed:8c:be:74:5e:38: 47:aa:2d:d2:27:da:c2:ad:3f:a7:ab:03:48:67:11:c6:a2:70: 6a:fb:7e:13:a1:2b:5a:ad:f2:36:c4:3c:64:95:ae:37:86:73: 30:ef:8a:30:4a:10:03:93:3a:ec:85:2c:f1:8a:03:c9:dd:09: 22:c8:b3:0e:c4:1e:9c:e6:b4:00:89:8d:fb:50:c0:1a:20:38: 2b:c4:1a:2c:88:18:9c:82:ac:4d:6c:9b:17:74:b5:4e:12:6e: 16:b2:4f:1b:cf:d1:1b:8c:d3:d9:8c:14:bb:1a:60:3a:ae:a1: 49:c1:d5:66:8e:02:43:ad:bb:a0:ae:2b:6f:f3:f9:5f:b1:7f: 5e:86:f0:0d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26uWF87bRGw8nyyPqeaWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMjRlNWVmZjFhYmMwZTZkOGJmMDI5ZTRmNzMyZTBhYjcx YmMxNmEwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzMyYTE4M2JkNTkwNzc5ZTczMjk2YWU3ZjlkYzkwZTM0NzFiZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK0FlP6qwQTfN4tsYetbyFjf1hnj QkeEUeZC3nfkzp06i7ukJ9nog4BCndiyb5QZPiE8c+NQ+jq68Fj3mwEWsCrhXrqi gMcD8ODKrodAWFFdIrZ3xmuh5BBQmZ1YOfS9YTubsquSBuJ4tOjeAPlYbf2tKJTd WUCBRmYk8Z+kdDM7ACEbmnMwthlkIV4EBBYDkuE+B56rt3Yfz1N2nXbWWr7TO8pK 7LvXq155W9v3FHwd2upZceC2Np3fz28U0K8tQO1CW+dhOvUxMQFRB+YGhPLUFpKi +5iDpp7sJ+tp0re5Th6k8z6dtd1CxQ2V7UaJ3sgrU0VoEyjHthJXqMDLIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOwyoYO9WQd55zKWrn+dyQ40cb3BMB8GA1UdIwQY MBaAFBIk5e/xq8Dm2L8Cnk9zLgq3G8FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEt NTM4NmIxZDk2M2JjLzEvN0RLaGc3MVpCM25uTXBhdWY1M0pEalJ4dmNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEtNTM4NmIxZDk2M2Jj LzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAoD4JAwQA oD4VMA0GCSqGSIb3DQEBCwUAA4IBAQArfDic/hO6kKRnVJ7HXu+mrU8/ravpjvci TQuVrCV19DAlyO4Ve+Y4Uu7mlBYwNsYmtCBX6KqGdaXPnXV8biYlzfCajVWRKp+a MfEcf6vN/My+jyD8+AaP3RSVEPg/C0nzkMQ+ap8SdqBxqCvgBZmNx+kmHpL5qb/t jL50XjhHqi3SJ9rCrT+nqwNIZxHGonBq+34ToStarfI2xDxkla43hnMw74owShAD kzrshSzxigPJ3QkiyLMOxB6c5rQAiY37UMAaIDgrxBosiBicgqxNbJsXdLVOEm4W sk8bz9EbjNPZjBS7GmA6rqFJwdVmjgJDrbugritv8/lfsX9ehvAN -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:36 2026 by rpki-client