This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/xC4HZY2FAIOZlVLev_OryihHWUo.roa File: xC4HZY2FAIOZlVLev_OryihHWUo.roa (raw, json) Hash identifier: t5wlokLTk+K42yuANt3hwr4tFRZLOSrgIWyKhOKmoyk= Subject key identifier: C4:2E:07:65:8D:85:00:83:99:95:52:DE:BF:F3:AB:CA:28:47:59:4A Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a Certificate serial: 019B76EAE2D22675B130700CC751594258DF Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/xC4HZY2FAIOZlVLev_OryihHWUo.roa Signing time: Thu 01 Jan 2026 00:17:43 +0000 ROA not before: Thu 01 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6095 IP address blocks: 160.62.0.0/24 maxlen: 24 160.62.3.0/24 maxlen: 24 160.62.21.0/24 maxlen: 24 160.62.22.0/24 maxlen: 24 160.62.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e2:d2:26:75:b1:30:70:0c:c7:51:59:42:58:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c42e07658d850083999552debff3abca2847594a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:9f:0a:c9:cd:14:fb:86:d0:ee:2f:d8:f0: 93:b1:12:55:e5:2a:c8:35:1b:fc:57:bb:79:49:4b: cc:2e:9a:15:ce:fa:92:aa:9a:35:d0:4d:08:ca:ef: f6:26:82:5b:7a:71:6a:4a:33:09:4f:7c:76:bd:dd: 93:dc:f0:1d:ce:74:32:dd:37:36:7f:a6:ce:23:6c: 9c:cc:be:6b:ec:37:84:b6:68:bb:1d:2f:c3:ec:bb: 3c:0c:85:c0:9f:5d:6e:e3:0b:fa:26:8e:7d:97:6f: 81:6c:03:3d:cc:6b:30:a5:6c:3f:99:27:5e:c2:ea: 96:2d:9e:39:f6:9c:01:f7:8f:31:b6:4c:5c:7d:9c: 54:80:d2:f8:51:6a:61:c4:01:ab:70:d4:a8:ab:ec: 18:8d:86:2e:4a:66:40:71:40:e7:74:59:ec:4a:a7: d1:37:1f:86:fe:dd:92:39:d8:da:51:c9:1d:0e:48: 2d:12:82:9a:65:d1:aa:52:2f:75:96:07:18:c3:a0: c1:3e:fa:58:b9:4b:2e:40:f3:6f:3c:53:df:34:65: 3b:fa:5b:a5:13:f9:f0:2f:58:d0:11:91:22:85:22: 12:32:cd:94:70:ce:1a:f9:34:be:dc:20:ad:9f:c5: e7:41:28:d1:a3:a1:3a:12:b3:da:57:5d:14:63:18: 59:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2E:07:65:8D:85:00:83:99:95:52:DE:BF:F3:AB:CA:28:47:59:4A X509v3 Authority Key Identifier: keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/xC4HZY2FAIOZlVLev_OryihHWUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.62.0.0/24 160.62.3.0/24 160.62.21.0-160.62.23.255 Signature Algorithm: sha256WithRSAEncryption 5a:c5:72:46:28:62:7b:da:54:14:0b:56:a0:eb:19:55:e3:84: d6:85:db:27:30:9f:62:05:0a:53:33:9a:7a:fe:4c:aa:7d:e9: e7:62:66:95:58:fb:b5:7b:96:6b:c6:57:71:d3:66:82:cd:73: e5:26:ad:fc:c6:64:2d:20:69:ea:51:5f:bb:46:a8:2b:36:6b: cc:9c:cc:ae:c6:67:df:32:ef:3c:68:a5:7a:dc:d0:3e:1f:c0: d0:e0:51:45:24:cf:8e:9d:e5:fc:ac:48:0e:27:1e:c2:12:11: 86:23:a6:f8:d9:7d:e5:7b:cd:de:c1:7a:8a:4f:1d:8b:af:bf: a2:ea:19:25:5e:0a:5b:b3:71:74:7b:84:06:2a:17:32:df:63: 50:08:e5:c1:f8:7c:bc:d1:33:f5:2b:10:3d:ed:43:1a:94:b4: 9a:90:30:c7:61:05:93:3b:bc:be:fd:96:9b:7e:86:ca:c7:00: 3b:3c:72:d4:33:d6:2a:17:3e:25:92:d6:c3:a9:2d:bd:e0:a1: 96:62:36:43:3d:63:f1:62:bc:4d:08:35:5e:3d:d7:55:17:1a: 60:d5:6f:d5:b1:99:d4:d9:7f:50:ae:ab:02:9a:da:03:b8:7f: b4:31:2f:46:97:7a:8b:e8:45:54:30:66:35:0b:9c:8b:e9:5b: c9:29:b9:6c -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt26uLSJnWxMHAMx1FZQljfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMjRlNWVmZjFhYmMwZTZkOGJmMDI5ZTRmNzMyZTBhYjcx YmMxNmEwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDJlMDc2NThkODUwMDgzOTk5NTUyZGViZmYzYWJjYTI4NDc1OTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunSfCsnNFPuG0O4v2PCTsRJV5SrI NRv8V7t5SUvMLpoVzvqSqpo10E0Iyu/2JoJbenFqSjMJT3x2vd2T3PAdznQy3Tc2 f6bOI2yczL5r7DeEtmi7HS/D7Ls8DIXAn11u4wv6Jo59l2+BbAM9zGswpWw/mSde wuqWLZ459pwB948xtkxcfZxUgNL4UWphxAGrcNSoq+wYjYYuSmZAcUDndFnsSqfR Nx+G/t2SOdjaUckdDkgtEoKaZdGqUi91lgcYw6DBPvpYuUsuQPNvPFPfNGU7+lul E/nwL1jQEZEihSISMs2UcM4a+TS+3CCtn8XnQSjRo6E6ErPaV10UYxhZsQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMQuB2WNhQCDmZVS3r/zq8ooR1lKMB8GA1UdIwQY MBaAFBIk5e/xq8Dm2L8Cnk9zLgq3G8FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEt NTM4NmIxZDk2M2JjLzEveEM0SFpZMkZBSU9abFZMZXZfT3J5aWhIV1VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEtNTM4NmIxZDk2M2Jj LzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAoD4AAwQA oD4DMAwDBACgPhUDBAOgPhAwDQYJKoZIhvcNAQELBQADggEBAFrFckYoYnvaVBQL VqDrGVXjhNaF2ycwn2IFClMzmnr+TKp96ediZpVY+7V7lmvGV3HTZoLNc+UmrfzG ZC0gaepRX7tGqCs2a8yczK7GZ98y7zxopXrc0D4fwNDgUUUkz46d5fysSA4nHsIS EYYjpvjZfeV7zd7BeopPHYuvv6LqGSVeCluzcXR7hAYqFzLfY1AI5cH4fLzRM/Ur ED3tQxqUtJqQMMdhBZM7vL79lpt+hsrHADs8ctQz1ioXPiWS1sOpLb3goZZiNkM9 Y/FivE0INV4911UXGmDVb9WxmdTZf1CuqwKa2gO4f7QxL0aXeovoRVQwZjULnIvp W8kpuWw= -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:51 2026 by rpki-client