This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7ix-Gi2bmQYhQ485L9gjKrX7x80.roa File: 7ix-Gi2bmQYhQ485L9gjKrX7x80.roa (raw, json) Hash identifier: XqMlcbiyce35Ac27HWz8xFlDs1UiwUwt8+vV9fprdlg= Subject key identifier: EE:2C:7E:1A:2D:9B:99:06:21:43:8F:39:2F:D8:23:2A:B5:FB:C7:CD Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AA1D1FEB8034774716F918F8C9D86 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7ix-Gi2bmQYhQ485L9gjKrX7x80.roa Signing time: Fri 02 Jan 2026 06:17:30 +0000 ROA not before: Fri 02 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 62.60.148.0/22 maxlen: 24 62.60.152.0/23 maxlen: 24 62.60.154.0/23 maxlen: 24 62.60.156.0/22 maxlen: 24 62.60.172.0/22 maxlen: 24 62.60.176.0/22 maxlen: 24 62.60.186.0/24 maxlen: 24 62.60.216.0/23 maxlen: 24 62.60.228.0/22 maxlen: 24 62.60.235.0/24 maxlen: 24 62.60.236.0/22 maxlen: 24 62.60.240.0/22 maxlen: 24 62.60.244.0/22 maxlen: 24 62.60.248.0/24 maxlen: 24 62.60.249.0/24 maxlen: 24 62.60.250.0/24 maxlen: 24 62.60.251.0/24 maxlen: 24 62.60.252.0/22 maxlen: 24 213.176.64.0/22 maxlen: 24 213.176.74.0/23 maxlen: 24 213.176.92.0/22 maxlen: 24 213.176.112.0/22 maxlen: 24 213.176.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:a1:d1:fe:b8:03:47:74:71:6f:91:8f:8c:9d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee2c7e1a2d9b990621438f392fd8232ab5fbc7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:c3:61:f8:a1:0d:43:03:54:2d:c7:8b:0a: 3f:53:03:31:b6:69:f1:88:ea:66:4c:56:f4:c0:e1: 7e:71:b0:3b:38:2f:56:de:59:0d:48:bd:45:78:b1: 2d:f8:6d:8f:25:d1:db:28:13:39:9d:7b:13:51:df: bd:2b:f3:a9:3e:f5:be:13:cc:b8:64:3e:c9:ee:24: 7d:e1:75:e2:a5:9d:65:51:66:7e:8f:08:8e:c7:0b: bb:44:82:2d:76:6b:80:06:49:4f:b5:a4:17:5f:1f: 73:bb:69:1c:18:ee:f4:b2:5e:a0:02:e1:c3:4a:4f: 35:81:33:05:a7:10:5b:02:29:a1:be:db:67:6d:9b: 34:74:ce:c5:9c:5c:8e:50:ba:47:6f:25:16:a0:af: b0:99:9f:08:6b:a9:70:60:67:01:da:a0:79:10:06: a1:72:ca:bc:81:c7:0f:ad:b6:60:51:ac:71:5c:e5: 0f:59:49:07:e1:fa:6a:ae:20:bb:f3:82:30:53:bf: 09:22:4e:10:87:5c:42:c4:88:4c:49:6e:9d:33:08: 4d:5f:41:b0:c2:4b:9f:f6:f2:ac:40:11:16:98:38: d7:68:97:2d:8a:ef:c1:82:47:3b:d3:46:26:a3:0c: 6d:05:1f:25:47:a0:b1:be:b4:70:19:23:3b:6d:c7: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2C:7E:1A:2D:9B:99:06:21:43:8F:39:2F:D8:23:2A:B5:FB:C7:CD X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/7ix-Gi2bmQYhQ485L9gjKrX7x80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.148.0-62.60.159.255 62.60.172.0-62.60.179.255 62.60.186.0/24 62.60.216.0/23 62.60.228.0/22 62.60.235.0-62.60.255.255 213.176.64.0/22 213.176.74.0/23 213.176.92.0/22 213.176.112.0/21 Signature Algorithm: sha256WithRSAEncryption 00:7c:fd:71:3b:63:0b:9e:24:a4:f6:a3:cc:f0:bb:4a:43:59: 99:46:a7:4b:8e:dc:0a:8b:77:92:14:99:f4:21:35:ad:87:ce: c2:3c:7b:15:55:93:20:15:f6:eb:b8:8b:ed:b4:15:e0:35:ee: 8e:c8:b1:ac:c8:03:07:c8:4c:e0:26:2d:b6:06:c9:23:72:89: 8d:77:70:f0:ba:26:67:50:04:ea:16:2f:f8:99:ff:c4:e7:08: 7c:10:79:9d:48:1b:8e:47:da:6c:74:ed:9f:1d:c8:a9:6d:1e: 4e:6d:10:24:ff:e5:e7:8f:3b:db:3d:b4:d7:84:b4:81:78:fb: 31:91:48:60:72:b9:45:d2:f2:cb:e9:f4:1a:df:2e:ef:8c:2e: 1e:34:ca:aa:00:80:7d:16:81:2d:a2:76:80:e0:ce:65:e1:c3: 17:92:3f:53:14:ba:5c:c6:cb:81:85:78:77:29:e3:7d:a5:04: da:cb:39:04:a8:ee:cb:2f:08:4f:7b:b6:1c:db:73:06:de:2e: fb:e6:eb:86:27:d6:e6:bd:b9:cf:8e:2e:a4:91:92:3b:7f:ef: ba:08:eb:ad:f1:4b:9c:68:f8:c7:48:54:03:88:60:b0:cd:bf: 63:7a:7a:a7:23:08:8b:0e:a4:5d:03:28:06:e1:ed:5f:1a:18: 69:37:eb:23 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt9WqHR/rgDR3Rxb5GPjJ2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTJjN2UxYTJkOWI5OTA2MjE0MzhmMzkyZmQ4MjMyYWI1ZmJjN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncjDYfihDUMDVC3Hiwo/UwMxtmnx iOpmTFb0wOF+cbA7OC9W3lkNSL1FeLEt+G2PJdHbKBM5nXsTUd+9K/OpPvW+E8y4 ZD7J7iR94XXipZ1lUWZ+jwiOxwu7RIItdmuABklPtaQXXx9zu2kcGO70sl6gAuHD Sk81gTMFpxBbAimhvttnbZs0dM7FnFyOULpHbyUWoK+wmZ8Ia6lwYGcB2qB5EAah csq8gccPrbZgUaxxXOUPWUkH4fpqriC784IwU78JIk4Qh1xCxIhMSW6dMwhNX0Gw wkuf9vKsQBEWmDjXaJctiu/Bgkc700YmowxtBR8lR6CxvrRwGSM7bcc3uQIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFO4sfhotm5kGIUOPOS/YIyq1+8fNMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvN2l4LUdpMmJtUVloUTQ4NUw5Z2pLclg3eDgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBZBAIAATBTMAwDBAI+PJQD BAU+PIAwDAMEAj48rAMEAj48sAMEAD48ugMEAT482AMEAj485DALAwQAPjzrAwMA PjwDBALVsEADBAHVsEoDBALVsFwDBAPVsHAwDQYJKoZIhvcNAQELBQADggEBAAB8 /XE7YwueJKT2o8zwu0pDWZlGp0uO3AqLd5IUmfQhNa2HzsI8exVVkyAV9uu4i+20 FeA17o7IsazIAwfITOAmLbYGySNyiY13cPC6JmdQBOoWL/iZ/8TnCHwQeZ1IG45H 2mx07Z8dyKltHk5tECT/5eePO9s9tNeEtIF4+zGRSGByuUXS8svp9BrfLu+MLh40 yqoAgH0WgS2idoDgzmXhwxeSP1MUulzGy4GFeHcp432lBNrLOQSo7ssvCE97thzb cwbeLvvm64Yn1ua9uc+OLqSRkjt/77oI663xS5xo+MdIVAOIYLDNv2N6eqcjCIsO pF0DKAbh7V8aGGk36yM= -----END CERTIFICATE-----Generated at Tue Jan 20 06:04:28 2026 by rpki-client