This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/hl-CAOXcEMSBgJ4byPB1-qjoksU.roa File: hl-CAOXcEMSBgJ4byPB1-qjoksU.roa (raw, json) Hash identifier: nnT/cCvEzvJkrGdSWyP9Kx6I0wWK7lArB8sNBz6w3ps= Subject key identifier: 86:5F:82:00:E5:DC:10:C4:81:80:9E:1B:C8:F0:75:FA:A8:E8:92:C5 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802CF13D0B429283B920A1F13D7515 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/hl-CAOXcEMSBgJ4byPB1-qjoksU.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214713 IP address blocks: 2a0f:7803:fa40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2c:f1:3d:0b:42:92:83:b9:20:a1:f1:3d:75:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=865f8200e5dc10c481809e1bc8f075faa8e892c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:e7:99:ff:af:01:8a:9c:aa:af:58:93:76: 58:45:dd:50:7a:b4:1e:16:39:9b:6a:ae:58:17:e1: d9:11:14:37:38:10:32:fa:68:cc:c2:c7:38:0d:6d: 34:55:f2:20:09:52:72:e2:a4:18:f8:cd:28:c9:21: 7b:8b:7b:dc:07:d6:8b:7c:63:30:6a:70:9b:a2:59: e1:74:9f:34:e3:d0:9a:4b:94:d7:75:10:19:44:4b: 5a:12:4a:13:a1:4f:f8:35:57:41:eb:8f:6e:a2:2a: 66:81:ad:f9:a5:6c:d9:cf:9e:ed:af:4c:f4:a1:ff: eb:dd:4c:d7:d8:d0:fb:53:fb:e9:9a:79:dd:c8:a9: 58:a1:d9:ce:3f:ab:23:2a:f7:9d:ab:15:55:3c:d9: 41:aa:a9:0c:b9:1e:08:78:4f:49:af:7d:a0:74:e2: b4:9f:74:c8:c6:44:61:11:9e:cc:8e:ed:9f:33:36: 19:36:3b:64:2b:a3:ab:9c:4b:4b:cd:ce:22:fe:75: c3:c7:0c:76:40:f8:24:74:57:6a:86:56:29:15:9a: bb:35:d5:6b:5d:e3:9b:48:08:c0:2b:54:22:8e:14: 5d:c2:2e:fd:fc:14:96:a0:ef:2e:50:94:c4:24:5a: fb:4a:c8:2d:e4:73:09:3b:c2:b4:0e:54:de:75:7d: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5F:82:00:E5:DC:10:C4:81:80:9E:1B:C8:F0:75:FA:A8:E8:92:C5 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/hl-CAOXcEMSBgJ4byPB1-qjoksU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fa40::/44 Signature Algorithm: sha256WithRSAEncryption 71:91:79:d5:35:34:5f:59:92:a3:14:93:61:27:67:e0:76:59: e6:2b:f8:3b:18:c6:cd:37:62:0e:b2:6d:9f:09:67:15:fc:56: 11:23:48:0d:69:af:7e:bd:9c:c3:e9:27:5f:e7:82:88:30:8c: 80:b8:f8:28:4e:8b:ad:f0:49:26:9a:8f:db:5f:79:44:18:12: 15:46:62:19:6d:92:71:98:0a:95:ec:83:7f:7a:f8:4e:aa:73: a1:2d:7e:e6:c4:3f:01:b5:e4:f8:be:7f:f9:94:f1:c8:13:41: e5:84:f2:ac:a5:51:f5:e5:02:90:c9:57:9e:e9:5f:1f:c5:eb: fe:84:c1:1c:e0:00:ac:73:c4:a3:10:85:61:95:fd:bd:26:d5: ab:96:de:4b:46:1a:91:91:af:0d:5a:ea:b7:8b:e9:98:1f:f4: fb:b6:ac:7f:27:84:be:dd:9d:ec:fe:96:cd:29:1c:f3:0b:f1: 5a:04:d4:de:39:52:dc:d3:5f:f9:9c:db:c4:2d:35:05:2e:1b: f4:1f:d1:ad:c5:bb:e8:97:fa:40:9d:8f:65:d3:79:88:f7:2d: 69:b1:c4:2a:dd:78:6f:57:cc:8d:43:44:55:84:8f:c1:08:f8: f0:41:00:da:50:6d:21:df:ad:70:63:38:b4:c4:a1:ce:ce:ba: 0b:00:c8:cb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gCzxPQtCkoO5IKHxPXUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjVmODIwMGU1ZGMxMGM0ODE4MDllMWJjOGYwNzVmYWE4ZTg5MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFHnmf+vAYqcqq9Yk3ZYRd1QerQe Fjmbaq5YF+HZERQ3OBAy+mjMwsc4DW00VfIgCVJy4qQY+M0oySF7i3vcB9aLfGMw anCbolnhdJ8049CaS5TXdRAZREtaEkoToU/4NVdB649uoipmga35pWzZz57tr0z0 of/r3UzX2ND7U/vpmnndyKlYodnOP6sjKvedqxVVPNlBqqkMuR4IeE9Jr32gdOK0 n3TIxkRhEZ7Mju2fMzYZNjtkK6OrnEtLzc4i/nXDxwx2QPgkdFdqhlYpFZq7NdVr XeObSAjAK1QijhRdwi79/BSWoO8uUJTEJFr7Ssgt5HMJO8K0DlTedX3S1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIZfggDl3BDEgYCeG8jwdfqo6JLFMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvaGwtQ0FPWGNFTVNCZ0o0YnlQQjEtcWpva3NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/pA MA0GCSqGSIb3DQEBCwUAA4IBAQBxkXnVNTRfWZKjFJNhJ2fgdlnmK/g7GMbNN2IO sm2fCWcV/FYRI0gNaa9+vZzD6Sdf54KIMIyAuPgoTout8Ekmmo/bX3lEGBIVRmIZ bZJxmAqV7IN/evhOqnOhLX7mxD8BteT4vn/5lPHIE0HlhPKspVH15QKQyVee6V8f xev+hMEc4ACsc8SjEIVhlf29JtWrlt5LRhqRka8NWuq3i+mYH/T7tqx/J4S+3Z3s /pbNKRzzC/FaBNTeOVLc01/5nNvELTUFLhv0H9Gtxbvol/pAnY9l03mI9y1pscQq 3XhvV8yNQ0RVhI/BCPjwQQDaUG0h361wYzi0xKHOzroLAMjL -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:54 2026 by rpki-client