This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/haFw3q9tFoad6JUgiF-KPVOV4eM.roa File: haFw3q9tFoad6JUgiF-KPVOV4eM.roa (raw, json) Hash identifier: e1I2SrRGxtbgkFSgcz9jLZjRjE847NKvzw0g1roFc00= Subject key identifier: 85:A1:70:DE:AF:6D:16:86:9D:E8:95:20:88:5F:8A:3D:53:95:E1:E3 Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c Certificate serial: 019B797EFCD8EFC5EA434D2BF412EBECAE38 Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/haFw3q9tFoad6JUgiF-KPVOV4eM.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198227 IP address blocks: 91.232.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fc:d8:ef:c5:ea:43:4d:2b:f4:12:eb:ec:ae:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85a170deaf6d16869de89520885f8a3d5395e1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:34:b9:c5:6b:cb:21:97:78:de:3b:e5:5f: d8:2f:ae:a5:17:60:42:7d:a7:6e:57:c8:9c:74:ed: 77:2c:c3:7b:79:9c:97:4b:79:1b:9b:99:cb:a4:06: 2c:cf:ea:af:e1:93:4e:0c:42:ad:13:a1:ab:35:aa: 75:86:58:3b:c8:d8:f5:9c:d3:23:c2:27:1d:b4:50: 89:cb:6c:62:0a:2c:d5:6a:a8:87:65:73:91:b3:36: 52:77:03:e3:53:b8:15:74:0c:23:d6:bd:94:b1:43: 4d:5e:01:71:95:f2:69:22:1d:a1:9b:17:5a:4a:2b: 7f:03:42:ee:1a:63:26:75:0b:d4:3c:b1:41:0a:39: c7:2b:13:53:7d:5e:b4:1e:5f:d6:14:48:c9:64:44: ad:c9:53:93:ad:fd:79:a2:03:fb:b1:2d:fe:2c:d1: 62:cb:e0:88:e0:ca:b0:12:89:3c:b6:72:0c:ff:39: 8d:aa:3e:df:99:d3:97:b8:47:4d:e5:1e:cb:d9:2a: 87:70:84:f3:f9:b6:55:1a:c9:c9:3f:5f:77:64:8c: 92:df:ab:3a:56:1d:8c:1d:65:76:6e:21:79:12:a7: f8:cf:33:9d:e2:54:ae:41:64:77:c4:13:bf:7c:45: be:7b:41:89:3a:ff:02:78:51:f6:76:f1:88:b0:f2: 62:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A1:70:DE:AF:6D:16:86:9D:E8:95:20:88:5F:8A:3D:53:95:E1:E3 X509v3 Authority Key Identifier: keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/haFw3q9tFoad6JUgiF-KPVOV4eM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.158.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:24:3b:65:bc:f5:78:36:42:ac:f8:81:18:e9:bb:dd:43:1a: 37:ae:0a:53:f1:91:c9:54:b4:69:37:06:d3:9e:de:9e:74:0a: 41:05:48:9a:be:f3:0b:d8:8f:a2:49:7b:f7:80:2a:87:93:04: 34:0d:ab:6c:2d:31:e9:0a:82:23:9c:bf:d8:1f:7f:08:41:e9: 6d:5a:1d:b3:79:44:6b:6d:f8:61:5b:4e:ab:ff:2b:9e:41:31: 0e:47:8c:72:01:a4:f0:89:5a:f0:32:2f:aa:c3:f0:ea:29:cd: 52:a9:5b:f6:8d:ba:b1:e2:bf:e9:d3:64:8e:a3:bc:8b:f8:96: 52:58:a6:d9:35:34:5f:1c:9b:ce:14:73:93:f3:ce:ba:ca:ce: 88:ff:0b:04:0d:89:f2:ff:be:69:81:c1:f8:5c:19:1f:d6:42: c9:3f:1b:44:4e:f3:35:20:de:30:c6:1e:44:08:44:80:b6:49: 18:c9:04:ac:26:9b:a2:f9:35:c0:62:fd:a8:af:1c:d7:86:26: 1f:62:9e:86:45:59:0d:f8:0e:c2:a3:f7:03:96:44:0a:18:26: 24:44:03:8d:9b:0d:f5:06:6a:36:34:bc:8d:46:1a:1f:cc:f0: fc:44:7a:51:61:ea:d6:06:9e:79:de:f0:74:1e:7a:20:a3:ca: e2:16:c8:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvzY78XqQ00r9BLr7K44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4Nzk3NzBiZmZjMTRkOWNkZmI1NzRlYzg2NmNhYWYxMzU3 MmY0NWMwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWExNzBkZWFmNmQxNjg2OWRlODk1MjA4ODVmOGEzZDUzOTVlMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJQ0ucVryyGXeN475V/YL66lF2BC faduV8icdO13LMN7eZyXS3kbm5nLpAYsz+qv4ZNODEKtE6GrNap1hlg7yNj1nNMj wicdtFCJy2xiCizVaqiHZXORszZSdwPjU7gVdAwj1r2UsUNNXgFxlfJpIh2hmxda Sit/A0LuGmMmdQvUPLFBCjnHKxNTfV60Hl/WFEjJZEStyVOTrf15ogP7sS3+LNFi y+CI4MqwEok8tnIM/zmNqj7fmdOXuEdN5R7L2SqHcITz+bZVGsnJP193ZIyS36s6 Vh2MHWV2biF5Eqf4zzOd4lSuQWR3xBO/fEW+e0GJOv8CeFH2dvGIsPJiGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWhcN6vbRaGneiVIIhfij1TleHjMB8GA1UdIwQY MBaAFHh5dwv/wU2c37V07IZsqvE1cvRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzIt ZWU3MzEzNzE2NDk4LzEvaGFGdzNxOXRGb2FkNkpVZ2lGLUtQVk9WNGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzItZWU3MzEzNzE2NDk4 LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+ieMA0G CSqGSIb3DQEBCwUAA4IBAQBtJDtlvPV4NkKs+IEY6bvdQxo3rgpT8ZHJVLRpNwbT nt6edApBBUiavvML2I+iSXv3gCqHkwQ0DatsLTHpCoIjnL/YH38IQeltWh2zeURr bfhhW06r/yueQTEOR4xyAaTwiVrwMi+qw/DqKc1SqVv2jbqx4r/p02SOo7yL+JZS WKbZNTRfHJvOFHOT8866ys6I/wsEDYny/75pgcH4XBkf1kLJPxtETvM1IN4wxh5E CESAtkkYyQSsJpui+TXAYv2orxzXhiYfYp6GRVkN+A7Co/cDlkQKGCYkRAONmw31 Bmo2NLyNRhofzPD8RHpRYerWBp553vB0Hnogo8riFsiE -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:39 2026 by rpki-client