This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/IUysQoBsRWVOL5sdLOOClz3M4Tc.roa File: IUysQoBsRWVOL5sdLOOClz3M4Tc.roa (raw, json) Hash identifier: Q0b0Ej5B0Uf7P54rUhyCPtXaonVa+DMphvbAdFQOd6c= Subject key identifier: 21:4C:AC:42:80:6C:45:65:4E:2F:9B:1D:2C:E3:82:97:3D:CC:E1:37 Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a Certificate serial: 019B76EAE414C82B06F4DE528FC5ACBA6E7F Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/IUysQoBsRWVOL5sdLOOClz3M4Tc.roa Signing time: Thu 01 Jan 2026 00:17:43 +0000 ROA not before: Thu 01 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25031 IP address blocks: 160.61.168.0/23 maxlen: 23 160.61.170.0/23 maxlen: 23 160.61.208.0/24 maxlen: 24 160.61.211.0/24 maxlen: 24 160.62.0.0/23 maxlen: 23 160.62.0.0/24 maxlen: 24 160.62.1.0/24 maxlen: 24 160.62.2.0/24 maxlen: 24 160.62.3.0/24 maxlen: 24 160.62.4.0/24 maxlen: 24 160.62.5.0/24 maxlen: 24 160.62.6.0/24 maxlen: 24 160.62.7.0/24 maxlen: 24 160.62.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e4:14:c8:2b:06:f4:de:52:8f:c5:ac:ba:6e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=214cac42806c45654e2f9b1d2ce382973dcce137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:90:67:0d:eb:2c:c9:97:f4:4c:b3:af:25: 9b:f8:ed:ec:2e:c5:19:61:7b:bc:a3:d8:fa:0e:d4: 48:aa:d1:43:8d:c1:17:d6:16:ef:64:53:93:da:0e: af:47:c9:a7:24:07:1b:e4:05:8f:e3:8f:8c:32:4c: df:89:a8:75:5d:9a:79:b7:16:44:4d:33:bf:f1:05: ba:7e:da:7e:59:ff:bc:2f:3c:cb:e8:3c:e7:04:6e: 61:17:a0:f2:43:f1:c5:b8:c5:41:17:02:81:61:1b: 99:4e:16:3c:0f:97:72:92:3e:49:6e:ea:fc:83:2f: 4c:67:48:ac:8d:49:e3:00:dd:ee:c7:f9:29:64:a3: c0:df:ec:61:79:fd:99:9d:cb:0f:9e:9e:06:6a:e6: 3a:b2:57:0a:47:5f:00:d4:18:1f:a5:6d:b6:a1:bc: dd:86:f6:7a:7f:04:ab:08:1f:11:ef:f4:fc:2c:a0: 0d:ba:18:26:c0:cd:c7:0b:c9:14:2f:02:76:ae:0a: 70:46:4f:82:95:fe:b8:1f:53:b6:5a:e1:6e:e3:4c: dc:14:cd:e2:ad:51:83:b5:86:5d:94:77:fc:58:5e: fb:e5:20:7c:fe:f9:75:bc:81:84:3b:49:b3:30:87: 9a:ef:24:6f:ac:79:a9:b5:41:db:e1:16:e3:b4:95: c1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4C:AC:42:80:6C:45:65:4E:2F:9B:1D:2C:E3:82:97:3D:CC:E1:37 X509v3 Authority Key Identifier: keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/IUysQoBsRWVOL5sdLOOClz3M4Tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.61.168.0/22 160.61.208.0/24 160.61.211.0/24 160.62.0.0/21 160.62.22.0/24 Signature Algorithm: sha256WithRSAEncryption 19:18:4b:9e:33:2c:b1:f2:cc:a1:5b:1b:65:0d:de:8d:77:02: 0c:db:88:56:65:96:83:4e:95:08:02:33:84:87:7d:db:27:b9: a5:e6:52:bf:0b:ec:a5:38:e5:1e:65:91:43:09:41:75:21:e2: e4:74:03:74:3b:10:77:c6:8e:1f:18:67:9f:32:9f:aa:02:51: 8e:49:82:68:a5:d3:58:1c:00:52:5d:9b:4b:98:70:2d:ae:18: 39:0b:67:54:98:0c:e7:73:d8:97:e2:54:b2:b9:f9:a9:68:22: f8:be:e4:a5:b8:cc:60:bf:c9:a2:c9:df:e9:a2:8c:2b:18:d8: d4:8d:24:a9:03:38:ae:6d:76:c0:ea:d5:f0:26:00:72:4b:97: 59:ec:76:c7:b0:3d:94:e9:49:23:fa:58:2a:42:88:55:bf:b1: c2:a2:b4:04:b6:79:08:20:99:c4:e9:4c:83:41:41:06:99:03: 22:a4:52:dc:29:3f:a6:73:0c:e5:f8:99:58:15:99:70:8c:5d: 4f:cb:c1:09:a0:55:e0:48:55:34:e8:85:bf:71:48:8d:be:53: ba:8f:50:1e:b4:14:19:e2:7e:d1:35:6f:87:5a:b3:71:00:a6: 01:98:b8:a0:33:f8:57:d5:d7:de:d5:f3:bc:ad:cb:81:4b:9c: 33:cb:b8:a7 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt26uQUyCsG9N5Sj8Wsum5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMjRlNWVmZjFhYmMwZTZkOGJmMDI5ZTRmNzMyZTBhYjcx YmMxNmEwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTRjYWM0MjgwNmM0NTY1NGUyZjliMWQyY2UzODI5NzNkY2NlMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tqQZw3rLMmX9EyzryWb+O3sLsUZ YXu8o9j6DtRIqtFDjcEX1hbvZFOT2g6vR8mnJAcb5AWP44+MMkzfiah1XZp5txZE TTO/8QW6ftp+Wf+8LzzL6DznBG5hF6DyQ/HFuMVBFwKBYRuZThY8D5dykj5Jbur8 gy9MZ0isjUnjAN3ux/kpZKPA3+xhef2ZncsPnp4GauY6slcKR18A1BgfpW22obzd hvZ6fwSrCB8R7/T8LKANuhgmwM3HC8kULwJ2rgpwRk+Clf64H1O2WuFu40zcFM3i rVGDtYZdlHf8WF775SB8/vl1vIGEO0mzMIea7yRvrHmptUHb4RbjtJXBZwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCFMrEKAbEVlTi+bHSzjgpc9zOE3MB8GA1UdIwQY MBaAFBIk5e/xq8Dm2L8Cnk9zLgq3G8FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEt NTM4NmIxZDk2M2JjLzEvSVV5c1FvQnNSV1ZPTDVzZExPT0NsejNNNFRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEtNTM4NmIxZDk2M2Jj LzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCoD2oAwQA oD3QAwQAoD3TAwQDoD4AAwQAoD4WMA0GCSqGSIb3DQEBCwUAA4IBAQAZGEueMyyx 8syhWxtlDd6NdwIM24hWZZaDTpUIAjOEh33bJ7ml5lK/C+ylOOUeZZFDCUF1IeLk dAN0OxB3xo4fGGefMp+qAlGOSYJopdNYHABSXZtLmHAtrhg5C2dUmAznc9iX4lSy ufmpaCL4vuSluMxgv8miyd/poowrGNjUjSSpAziubXbA6tXwJgByS5dZ7HbHsD2U 6Ukj+lgqQohVv7HCorQEtnkIIJnE6UyDQUEGmQMipFLcKT+mcwzl+JlYFZlwjF1P y8EJoFXgSFU06IW/cUiNvlO6j1AetBQZ4n7RNW+HWrNxAKYBmLigM/hX1dfe1fO8 rcuBS5wzy7in -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:11 2026 by rpki-client