This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/HscqlSP_T6jWomPIcWdE3IC4My4.roa File: HscqlSP_T6jWomPIcWdE3IC4My4.roa (raw, json) Hash identifier: /7wtYvtk4cUOoXmRq6scL7JJ5OG21YbveewB9o7fEHg= Subject key identifier: 1E:C7:2A:95:23:FF:4F:A8:D6:A2:63:C8:71:67:44:DC:80:B8:33:2E Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85 Certificate serial: 019B7AC831B5EA60A0E2A3EC856A3B482ED3 Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/HscqlSP_T6jWomPIcWdE3IC4My4.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 185.253.12.0/22 maxlen: 24 2a0c:3040::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:31:b5:ea:60:a0:e2:a3:ec:85:6a:3b:48:2e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85 Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ec72a9523ff4fa8d6a263c8716744dc80b8332e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:14:28:66:46:d9:00:a8:b7:38:e3:5d:63: c1:ad:98:43:17:d5:2a:ce:cb:54:f9:47:d6:0f:58: 69:1c:64:9e:3c:0b:ed:88:cb:4a:b6:bb:5a:8c:db: 97:b7:f8:0c:91:1a:15:c6:59:3f:36:40:cf:f5:22: ab:14:71:44:db:6a:ae:10:51:9b:2e:36:71:fc:a6: 86:ec:2c:d7:8a:34:11:04:10:15:89:6c:6a:48:46: c9:bd:70:c2:3f:a9:9f:35:34:7c:1c:c9:a4:65:0f: b9:20:61:08:ec:7f:df:4f:97:fc:ab:fe:7d:01:d2: d4:8e:b5:e9:53:da:10:cf:71:39:6d:ba:5f:2d:d7: 7c:c7:b3:dc:df:b4:05:27:70:7d:6d:85:80:a6:aa: 68:18:81:2a:e5:4c:57:32:d9:bc:b1:0f:bd:b2:c5: 75:ff:2e:d4:1e:0c:1c:7e:56:46:02:3f:bf:78:8f: 46:f8:16:ef:35:bb:89:a0:27:29:aa:8c:3a:e7:56: b1:ec:0c:cc:16:e9:c7:b3:da:17:1d:d1:b6:16:93: 39:f7:35:5e:1a:4e:f2:6e:ea:3f:cd:44:ee:e4:55: 0f:43:19:e8:fc:f7:34:8b:ad:1d:99:21:06:65:55: 38:37:73:85:06:62:8d:f1:70:f1:c3:4b:45:fa:17: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C7:2A:95:23:FF:4F:A8:D6:A2:63:C8:71:67:44:DC:80:B8:33:2E X509v3 Authority Key Identifier: keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/HscqlSP_T6jWomPIcWdE3IC4My4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.12.0/22 IPv6: 2a0c:3040::/29 Signature Algorithm: sha256WithRSAEncryption 43:14:00:c7:74:a0:33:c0:78:e6:31:9c:83:a4:6b:0c:ce:be: 24:66:75:9f:b9:d1:75:76:f5:2b:7e:c0:92:aa:db:e2:d4:b9: 32:35:b2:93:38:ba:2a:05:f9:dd:5e:2d:ad:cb:5f:5c:83:5b: b9:2a:12:af:c7:97:1a:24:f1:b5:b9:fe:02:18:1b:6b:35:bd: ee:40:fe:42:e5:49:0f:44:ab:0b:8b:7c:c3:65:bc:92:b2:6a: 96:f1:d5:61:58:56:21:f4:03:5f:01:79:b2:47:cd:17:ba:2d: 10:3e:5b:64:94:62:d1:08:e5:12:20:42:9f:69:b6:c2:74:1d: d1:a2:64:66:6b:07:48:24:78:e9:69:ab:1b:ec:cf:0f:8d:9c: 01:48:43:b7:5c:73:1c:e3:cf:65:10:d2:62:7f:97:ed:74:65: 70:69:d0:eb:b2:8a:5e:b0:a7:11:5c:4a:13:37:2f:b7:bc:54: a5:bd:9e:e8:b3:d7:d9:db:26:92:58:83:a5:03:10:37:3b:c9: b7:b5:81:14:73:1a:d3:90:23:22:8d:d3:51:bd:22:78:30:36: 2c:aa:1c:d1:ce:ce:17:06:f5:70:3d:68:4c:32:22:86:21:cc: 6d:f6:83:15:7c:ad:a7:51:e1:38:91:8b:d1:ae:83:64:c3:f3: 17:b2:e9:63 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yDG16mCg4qPshWo7SC7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYWQ5Y2Q1MDM0ZjgxNTU4ZjgzZDIzOGVjYTQwNjMzMmJk N2JhODUwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWM3MmE5NTIzZmY0ZmE4ZDZhMjYzYzg3MTY3NDRkYzgwYjgzMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL0UKGZG2QCotzjjXWPBrZhDF9Uq zstU+UfWD1hpHGSePAvtiMtKtrtajNuXt/gMkRoVxlk/NkDP9SKrFHFE22quEFGb LjZx/KaG7CzXijQRBBAViWxqSEbJvXDCP6mfNTR8HMmkZQ+5IGEI7H/fT5f8q/59 AdLUjrXpU9oQz3E5bbpfLdd8x7Pc37QFJ3B9bYWApqpoGIEq5UxXMtm8sQ+9ssV1 /y7UHgwcflZGAj+/eI9G+BbvNbuJoCcpqow651ax7AzMFunHs9oXHdG2FpM59zVe Gk7ybuo/zUTu5FUPQxno/Pc0i60dmSEGZVU4N3OFBmKN8XDxw0tF+hdT8wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB7HKpUj/0+o1qJjyHFnRNyAuDMuMB8GA1UdIwQY MBaAFDutnNUDT4FVj4PSOOykBjMr17qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgt NGJhNWYyMDZmNjVhLzEvSHNjcWxTUF9UNmpXb21QSWNXZEUzSUM0TXk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgtNGJhNWYyMDZmNjVh LzEvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuf0MMA0E AgACMAcDBQMqDDBAMA0GCSqGSIb3DQEBCwUAA4IBAQBDFADHdKAzwHjmMZyDpGsM zr4kZnWfudF1dvUrfsCSqtvi1LkyNbKTOLoqBfndXi2ty19cg1u5KhKvx5caJPG1 uf4CGBtrNb3uQP5C5UkPRKsLi3zDZbySsmqW8dVhWFYh9ANfAXmyR80Xui0QPltk lGLRCOUSIEKfabbCdB3RomRmawdIJHjpaasb7M8PjZwBSEO3XHMc489lENJif5ft dGVwadDrsopesKcRXEoTNy+3vFSlvZ7os9fZ2yaSWIOlAxA3O8m3tYEUcxrTkCMi jdNRvSJ4MDYsqhzRzs4XBvVwPWhMMiKGIcxt9oMVfK2nUeE4kYvRroNkw/MXsulj -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:34 2026 by rpki-client