This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/HS3nZ0zy9rnKNuUQJIH2lNuhV3s.roa File: HS3nZ0zy9rnKNuUQJIH2lNuhV3s.roa (raw, json) Hash identifier: AgTDhdZgzXbDinGCbfeqfnNTye+ByZ5TlKKfMLNM5jk= Subject key identifier: 1D:2D:E7:67:4C:F2:F6:B9:CA:36:E5:10:24:81:F6:94:DB:A1:57:7B Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061 Certificate serial: 019C28492D941A692BA1BC8E9CC498BD8F73 Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/HS3nZ0zy9rnKNuUQJIH2lNuhV3s.roa Signing time: Wed 04 Feb 2026 10:53:30 +0000 ROA not before: Wed 04 Feb 2026 10:53:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56987 IP address blocks: 5.180.57.0/24 maxlen: 24 5.180.58.0/23 maxlen: 23 185.140.248.0/24 maxlen: 24 185.197.150.0/24 maxlen: 24 2a0c:3d00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:49:2d:94:1a:69:2b:a1:bc:8e:9c:c4:98:bd:8f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061 Validity Not Before: Feb 4 10:53:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d2de7674cf2f6b9ca36e5102481f694dba1577b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:f0:35:b6:0c:5d:70:fd:43:e2:89:da:55: 74:85:43:e7:6b:cc:2b:b1:ec:a9:7c:6a:a6:cd:8d: 47:f5:70:bd:79:54:88:04:91:30:f3:5f:4f:30:99: 1d:d8:e5:6b:24:20:2a:43:1e:24:b8:10:cd:3d:55: d2:4d:d0:89:c6:37:69:40:51:d1:dc:2b:0e:bb:d7: b5:8a:87:c5:eb:a0:53:c3:ca:09:4f:6a:67:a8:78: dd:67:a7:b6:8c:d1:10:1c:f5:b0:73:84:f3:ea:16: fb:a4:ac:2d:c2:de:9f:2f:dd:2f:99:f1:e9:22:3c: 85:4f:f1:67:3e:6a:15:9e:da:8f:3c:9b:a9:3d:0b: 66:67:5f:e6:e0:96:f0:bd:ce:1b:f5:08:da:1e:b1: d6:42:fe:b2:3f:27:90:06:e6:17:d7:d5:4e:12:7c: fc:5a:65:24:ac:69:91:3b:94:c1:93:16:24:62:51: 01:cf:a8:b4:e4:dd:28:03:90:cb:cf:35:bb:f7:b0: 2f:3e:0f:48:32:d0:fc:d0:e0:59:eb:c3:f8:6e:ee: 8a:4e:fc:e9:9d:cf:79:79:10:95:dc:7c:31:b5:50: 11:5c:2f:99:70:af:5c:a3:f6:ce:6d:a7:a5:7a:ce: 04:4c:75:49:5b:1b:cf:0f:ec:f3:b7:34:02:63:74: 34:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2D:E7:67:4C:F2:F6:B9:CA:36:E5:10:24:81:F6:94:DB:A1:57:7B X509v3 Authority Key Identifier: keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/HS3nZ0zy9rnKNuUQJIH2lNuhV3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.57.0-5.180.59.255 185.140.248.0/24 185.197.150.0/24 IPv6: 2a0c:3d00::/29 Signature Algorithm: sha256WithRSAEncryption 78:8a:d6:fa:41:76:1d:96:ba:d5:82:20:a7:9c:9f:71:b1:67: cf:b2:a3:cf:74:e5:d5:ef:32:61:9d:cd:1f:ca:1a:33:a2:b7: f5:b3:d0:2d:7b:7f:81:fb:75:45:bc:4a:b7:be:7b:a4:23:82: 8b:36:13:9e:4a:4e:31:96:b5:ff:dc:24:c2:fa:59:89:81:8e: ed:40:0a:37:06:0e:0a:97:89:be:be:f8:0b:64:65:ad:1c:ed: 3b:4e:ab:ff:35:90:4c:93:a8:ab:36:b9:a9:6e:7c:82:61:68: d8:c0:6d:87:7f:d7:cd:0e:81:c7:67:d2:7d:97:ff:6e:38:60: e1:3f:8f:90:d6:19:2f:b4:4b:47:13:ec:0c:18:7b:85:37:14: 14:ab:19:f1:d9:26:96:51:2e:82:28:95:b0:ad:a7:60:60:83: 65:28:76:e2:ce:51:0e:65:f7:f1:6d:e8:c7:32:0d:85:6a:af: f9:23:d2:8c:ee:0c:b3:e8:e9:84:f6:8b:cd:29:ec:72:39:f3: 50:b3:d1:7c:13:46:7c:61:ad:70:be:f5:a2:0f:55:88:14:f1: 35:d1:7c:6f:83:73:a8:fc:c7:22:c6:9e:2f:e8:2c:86:9e:3e: 89:ad:f5:b9:10:b2:50:a4:06:59:c2:48:bc:6c:a1:86:41:67: bc:3e:af:9e -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZwoSS2UGmkrobyOnMSYvY9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YzFhYzY4ODJkZTA4OTMwNjBmODA5MTdkN2I4NThjNWMz MGYwNjEwHhcNMjYwMjA0MTA1MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDJkZTc2NzRjZjJmNmI5Y2EzNmU1MTAyNDgxZjY5NGRiYTE1NzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttnwNbYMXXD9Q+KJ2lV0hUPna8wr seypfGqmzY1H9XC9eVSIBJEw819PMJkd2OVrJCAqQx4kuBDNPVXSTdCJxjdpQFHR 3CsOu9e1iofF66BTw8oJT2pnqHjdZ6e2jNEQHPWwc4Tz6hb7pKwtwt6fL90vmfHp IjyFT/FnPmoVntqPPJupPQtmZ1/m4Jbwvc4b9QjaHrHWQv6yPyeQBuYX19VOEnz8 WmUkrGmRO5TBkxYkYlEBz6i05N0oA5DLzzW797AvPg9IMtD80OBZ68P4bu6KTvzp nc95eRCV3HwxtVARXC+ZcK9co/bObaeles4ETHVJWxvPD+zztzQCY3Q0DQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFB0t52dM8va5yjblECSB9pTboVd7MB8GA1UdIwQY MBaAFBjBrGiC3giTBg+AkX17hYxcMPBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYt ZThkZTA1OTI3OGJkLzEvSFMzblowenk5cm5LTnVVUUpJSDJsTnVoVjNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYtZThkZTA1OTI3OGJk LzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAAFtDkD BAIFtDgDBAC5jPgDBAC5xZYwDQQCAAIwBwMFAyoMPQAwDQYJKoZIhvcNAQELBQAD ggEBAHiK1vpBdh2WutWCIKecn3GxZ8+yo8905dXvMmGdzR/KGjOit/Wz0C17f4H7 dUW8Sre+e6Qjgos2E55KTjGWtf/cJML6WYmBju1ACjcGDgqXib6++AtkZa0c7TtO q/81kEyTqKs2ualufIJhaNjAbYd/180Ogcdn0n2X/244YOE/j5DWGS+0S0cT7AwY e4U3FBSrGfHZJpZRLoIolbCtp2Bgg2UoduLOUQ5l9/Ft6McyDYVqr/kj0ozuDLPo 6YT2i80p7HI581Cz0XwTRnxhrXC+9aIPVYgU8TXRfG+Dc6j8xyLGni/oLIaePomt 9bkQslCkBlnCSLxsoYZBZ7w+r54= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:26 2026 by rpki-client