This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/HSWeI-pcXEHS_St9O3C8_Rn69wI.roa File: HSWeI-pcXEHS_St9O3C8_Rn69wI.roa (raw, json) Hash identifier: gjfAtgRKuT6ywaR0yaoqKznKuEzQl2e1Pp41NKZMoGQ= Subject key identifier: 1D:25:9E:23:EA:5C:5C:41:D2:FD:2B:7D:3B:70:BC:FD:19:FA:F7:02 Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01 Certificate serial: 019B7AC945F49895870D9272FD9428CD9267 Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/HSWeI-pcXEHS_St9O3C8_Rn69wI.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47302 IP address blocks: 91.206.24.0/23 maxlen: 23 149.126.0.0/21 maxlen: 21 185.174.216.0/22 maxlen: 22 194.126.200.0/24 maxlen: 24 2001:67c:234::/48 maxlen: 48 2a01:ab20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:45:f4:98:95:87:0d:92:72:fd:94:28:cd:92:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01 Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d259e23ea5c5c41d2fd2b7d3b70bcfd19faf702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b1:82:a0:04:08:c0:ac:7b:5e:8d:da:e3:aa: 81:02:02:22:f3:a7:6e:ad:40:5e:86:d1:40:b2:ec: 4c:2e:06:ee:ae:47:44:33:25:e6:24:e3:8d:0c:b3: 16:91:4b:89:66:54:57:f9:96:1b:74:9e:b9:01:f8: fe:a6:27:09:1d:44:3c:96:40:7c:a6:be:55:e7:c0: 14:37:b5:75:b3:80:08:3b:7d:df:41:52:11:16:4b: 63:cb:f2:41:e1:21:99:f0:30:53:d1:d6:f9:c8:7b: 57:53:84:7d:08:47:bb:68:56:ad:6c:ca:af:19:f6: a1:c7:72:3c:07:b0:d0:fe:c9:13:0c:6e:a1:41:26: 0b:d7:25:64:65:9f:dc:9a:46:08:d3:53:12:bf:b6: db:25:dc:76:a4:34:8f:d2:d6:37:65:d4:88:db:1f: 05:ac:c2:59:3c:04:71:18:d2:3c:e2:4a:e4:a5:77: b3:1d:ea:e6:35:76:2c:72:19:1c:c3:74:29:0d:79: 7b:4f:5d:56:c2:70:94:e9:1a:8d:0b:3b:90:2c:62: 58:3e:55:5b:e9:67:e0:90:7c:52:83:c5:db:b4:2c: 74:23:58:19:8b:da:80:e9:b7:3f:57:e6:af:d6:10: c4:a9:32:93:6f:24:2f:4d:ad:6e:18:a6:5e:1a:63: 64:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:25:9E:23:EA:5C:5C:41:D2:FD:2B:7D:3B:70:BC:FD:19:FA:F7:02 X509v3 Authority Key Identifier: keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/HSWeI-pcXEHS_St9O3C8_Rn69wI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.24.0/23 149.126.0.0/21 185.174.216.0/22 194.126.200.0/24 IPv6: 2001:67c:234::/48 2a01:ab20::/32 Signature Algorithm: sha256WithRSAEncryption 52:8a:18:ac:5b:2d:23:9f:74:2d:0b:6f:0b:c8:dc:39:18:bc: 40:61:0d:77:11:f3:3a:69:2b:56:f2:0a:8c:0e:97:12:bb:32: 77:e3:80:01:63:d7:b7:c4:6d:6a:35:df:00:db:60:fd:10:e4: 97:91:24:73:12:b2:24:10:64:9a:7e:b5:44:cc:88:64:8a:2a: 7c:39:c4:be:83:e7:41:67:82:e1:18:8d:53:37:22:22:47:50: cb:5d:d0:c9:52:e6:f6:50:a5:ac:81:88:72:7f:a5:4f:46:24: ed:ad:e8:3b:68:e0:ac:8c:09:d7:d8:82:8f:77:2c:69:d3:cf: 8b:52:ff:3f:9e:40:ef:51:64:62:c1:7e:54:e1:b5:f2:22:ba: 97:b6:12:a6:73:61:f8:11:ca:be:62:eb:9a:57:da:80:58:3d: f9:2d:05:50:ac:05:98:a1:8c:af:9e:4a:b1:71:50:a5:c5:db: 7f:c5:51:bc:f9:78:3d:1a:c7:2f:33:68:f7:a1:d1:52:53:05: 39:0c:05:2c:97:12:2f:b3:8d:f0:d7:54:2a:9a:f2:b6:d5:6a: 0e:05:3e:02:22:45:bb:dd:a6:b0:73:46:bd:50:4d:d9:d6:24: dc:45:e7:db:2e:34:6e:cd:57:45:c1:20:a3:40:7b:ea:4b:4c: 93:30:50:9a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt6yUX0mJWHDZJy/ZQozZJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDk3NThiOGM4YzM3MzU4M2MwNTc1MTY2ZDYyMzQzNjAw YzdmMDEwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDI1OWUyM2VhNWM1YzQxZDJmZDJiN2QzYjcwYmNmZDE5ZmFmNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bGCoAQIwKx7Xo3a46qBAgIi86du rUBehtFAsuxMLgburkdEMyXmJOONDLMWkUuJZlRX+ZYbdJ65Afj+picJHUQ8lkB8 pr5V58AUN7V1s4AIO33fQVIRFktjy/JB4SGZ8DBT0db5yHtXU4R9CEe7aFatbMqv Gfahx3I8B7DQ/skTDG6hQSYL1yVkZZ/cmkYI01MSv7bbJdx2pDSP0tY3ZdSI2x8F rMJZPARxGNI84krkpXezHermNXYschkcw3QpDXl7T11WwnCU6RqNCzuQLGJYPlVb 6WfgkHxSg8XbtCx0I1gZi9qA6bc/V+av1hDEqTKTbyQvTa1uGKZeGmNknwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFB0lniPqXFxB0v0rfTtwvP0Z+vcCMB8GA1UdIwQY MBaAFGbZdYuMjDc1g8BXUWbWI0NgDH8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWIt ZWU4ODMxOTI0YjMyLzEvSFNXZUktcGNYRUhTX1N0OU8zQzhfUm42OXdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWItZWU4ODMxOTI0YjMy LzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQBW84YAwQD lX4AAwQCua7YAwQAwn7IMBYEAgACMBADBwAgAQZ8AjQDBQAqAasgMA0GCSqGSIb3 DQEBCwUAA4IBAQBSihisWy0jn3QtC28LyNw5GLxAYQ13EfM6aStW8gqMDpcSuzJ3 44ABY9e3xG1qNd8A22D9EOSXkSRzErIkEGSafrVEzIhkiip8OcS+g+dBZ4LhGI1T NyIiR1DLXdDJUub2UKWsgYhyf6VPRiTtreg7aOCsjAnX2IKPdyxp08+LUv8/nkDv UWRiwX5U4bXyIrqXthKmc2H4Ecq+YuuaV9qAWD35LQVQrAWYoYyvnkqxcVClxdt/ xVG8+Xg9GscvM2j3odFSUwU5DAUslxIvs43w11QqmvK21WoOBT4CIkW73aawc0a9 UE3Z1iTcRefbLjRuzVdFwSCjQHvqS0yTMFCa -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:14 2026 by rpki-client