This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/HAExZIL6HCstqd9drd-nJZx-h6A.roa File: HAExZIL6HCstqd9drd-nJZx-h6A.roa (raw, json) Hash identifier: CNxLV5+HJzYzBJdn/UhYgryWPMzhSj4glkPh0nEHhh8= Subject key identifier: 1C:01:31:64:82:FA:1C:2B:2D:A9:DF:5D:AD:DF:A7:25:9C:7E:87:A0 Certificate issuer: /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb Certificate serial: 019B7F84BA6A8C304A24B5076208F6A887E6 Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/HAExZIL6HCstqd9drd-nJZx-h6A.roa Signing time: Fri 02 Jan 2026 16:22:43 +0000 ROA not before: Fri 02 Jan 2026 16:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201933 IP address blocks: 91.193.116.0/22 maxlen: 22 213.193.250.0/24 maxlen: 24 2a06:40c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ba:6a:8c:30:4a:24:b5:07:62:08:f6:a8:87:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb Validity Not Before: Jan 2 16:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c01316482fa1c2b2da9df5daddfa7259c7e87a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:8a:42:01:08:f4:b7:97:6c:5f:2c:fc:40: d8:ca:b6:8f:2c:86:0a:4b:b1:38:0a:d9:e1:7e:e9: b5:e9:a7:65:d2:a4:ee:9f:a3:49:d0:28:d1:ce:01: 01:a2:eb:37:59:9b:9c:e1:f3:75:ea:e3:3a:62:6f: cc:8d:91:e2:c7:2c:30:79:2e:7a:36:81:f2:ba:b9: 3a:23:a4:ef:15:bf:66:06:8e:8b:3a:6c:5d:67:78: e9:9b:ad:1b:a5:51:7a:12:62:6b:fb:28:1b:b4:41: 70:67:e9:f3:de:b1:ed:a3:6d:18:12:f3:cc:e0:f5: 4a:05:d5:78:a0:95:ae:84:7e:d4:5a:e7:b4:43:47: 71:4c:e7:8e:0d:d4:49:5c:22:d6:63:2a:de:ca:81: dd:08:75:6d:60:84:b3:c7:53:c2:1c:cc:dd:5d:7b: ee:b7:28:01:d8:03:cf:db:11:c7:cc:c1:6e:3e:57: 85:cd:46:77:24:65:5a:44:a6:73:9d:2f:6f:bf:ac: b7:bc:61:1c:bf:eb:9f:0f:9f:49:53:64:d9:4b:f1: 4d:7b:da:83:7b:f6:e7:e8:db:90:05:fe:0b:6d:cf: 53:a6:b8:24:2b:07:35:8c:80:4c:16:e1:04:53:95: d5:2d:73:46:49:b8:e2:9b:dc:b0:ae:a1:ac:3e:c3: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:01:31:64:82:FA:1C:2B:2D:A9:DF:5D:AD:DF:A7:25:9C:7E:87:A0 X509v3 Authority Key Identifier: keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/HAExZIL6HCstqd9drd-nJZx-h6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.116.0/22 213.193.250.0/24 IPv6: 2a06:40c0::/29 Signature Algorithm: sha256WithRSAEncryption 4b:15:80:ff:d3:99:71:4c:7e:69:28:a2:f0:18:7e:ca:40:7d: ec:a0:fa:0b:fc:06:4a:8e:44:ee:63:24:43:05:f0:0a:29:f0: e0:cc:69:e8:87:6a:10:48:2d:01:a6:f3:d0:d7:1a:df:75:18: f1:44:66:82:8f:ae:98:1e:a4:09:78:df:ff:f0:47:29:b1:46: 99:5c:7f:d3:e8:bb:67:23:ee:5d:fe:2e:0c:43:fb:06:a5:86: 6a:58:49:62:ff:4d:0f:5d:68:39:f8:63:28:9e:12:79:bc:6c: a0:87:58:fb:a5:9d:26:c0:e6:a7:c0:3d:c1:b4:8a:8b:9d:37: 63:e9:f2:8e:8a:14:76:48:e5:9b:e1:b9:28:5f:94:cc:d1:4a: 19:ab:84:86:9f:04:ae:0b:86:2c:6e:31:5f:d2:aa:e8:18:e5: 6b:d1:37:28:3a:08:74:8d:e6:df:4c:27:92:c0:b8:75:50:0c: b4:43:81:84:b5:41:d1:c0:69:1b:47:6d:b9:8a:5d:93:43:5e: 85:7d:66:90:ac:04:9e:5d:14:05:df:d4:ae:ac:34:77:2c:b0: 48:b4:65:54:f0:21:5f:a5:7a:ef:4e:f6:f9:ca:a0:f3:39:b1: ad:43:82:46:e1:9c:95:8d:08:9f:4a:9c:4f:24:51:b9:12:f9: f0:2b:6b:e3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/hLpqjDBKJLUHYgj2qIfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmRiYzZhZTBiNThhMTE3MzFmMjE5ZWRhMDIyNDcxZDFl MTFlZGIwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzAxMzE2NDgyZmExYzJiMmRhOWRmNWRhZGRmYTcyNTljN2U4N2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPSKQgEI9LeXbF8s/EDYyraPLIYK S7E4Ctnhfum16adl0qTun6NJ0CjRzgEBous3WZuc4fN16uM6Ym/MjZHixywweS56 NoHyurk6I6TvFb9mBo6LOmxdZ3jpm60bpVF6EmJr+ygbtEFwZ+nz3rHto20YEvPM 4PVKBdV4oJWuhH7UWue0Q0dxTOeODdRJXCLWYyreyoHdCHVtYISzx1PCHMzdXXvu tygB2APP2xHHzMFuPleFzUZ3JGVaRKZznS9vv6y3vGEcv+ufD59JU2TZS/FNe9qD e/bn6NuQBf4Lbc9TprgkKwc1jIBMFuEEU5XVLXNGSbjim9ywrqGsPsM76wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBwBMWSC+hwrLanfXa3fpyWcfoegMB8GA1UdIwQY MBaAFC9tvGrgtYoRcx8hntoCJHHR4R7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEt MjUxMGRhYzMyNDk2LzEvSEFFeFpJTDZIQ3N0cWQ5ZHJkLW5KWngtaDZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEtMjUxMGRhYzMyNDk2 LzEvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8F0AwQA 1cH6MA0EAgACMAcDBQMqBkDAMA0GCSqGSIb3DQEBCwUAA4IBAQBLFYD/05lxTH5p KKLwGH7KQH3soPoL/AZKjkTuYyRDBfAKKfDgzGnoh2oQSC0BpvPQ1xrfdRjxRGaC j66YHqQJeN//8EcpsUaZXH/T6LtnI+5d/i4MQ/sGpYZqWEli/00PXWg5+GMonhJ5 vGygh1j7pZ0mwOanwD3BtIqLnTdj6fKOihR2SOWb4bkoX5TM0UoZq4SGnwSuC4Ys bjFf0qroGOVr0TcoOgh0jebfTCeSwLh1UAy0Q4GEtUHRwGkbR225il2TQ16FfWaQ rASeXRQF39SurDR3LLBItGVU8CFfpXrvTvb5yqDzObGtQ4JG4ZyVjQifSpxPJFG5 EvnwK2vj -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:13 2026 by rpki-client