This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa File: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (raw, json) Hash identifier: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg= Subject key identifier: 1C:6D:D8:BD:55:65:F6:55:EA:A8:6F:A0:26:58:35:36:34:DA:64:0A Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019B78353AEBB956FEFCF8BAEECE29CC26B2 Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa Signing time: Thu 01 Jan 2026 06:18:33 +0000 ROA not before: Thu 01 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201525 IP address blocks: 5.149.252.0/23 maxlen: 23 79.141.166.0/23 maxlen: 23 2a01:8640:3::/48 maxlen: 48 2a01:8640:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3a:eb:b9:56:fe:fc:f8:ba:ee:ce:29:cc:26:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c6dd8bd5565f655eaa86fa02658353634da640a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:db:39:1d:fd:b3:14:e5:6a:1c:f9:f0:d3:89: 9b:23:9a:db:9e:ac:b0:64:63:53:cd:0a:71:e8:07: a9:9c:9e:ea:ad:15:c6:01:d0:75:0b:78:1b:16:59: 7c:98:ad:81:65:d6:a4:14:09:a1:42:b7:fc:97:4a: e3:ab:14:79:41:ae:b8:dd:b3:62:cd:f5:a0:20:30: f2:5f:f5:03:97:60:aa:33:ec:0b:59:fd:cc:ae:2c: 18:f6:f7:fe:92:52:6e:a8:24:94:1c:80:91:52:a1: 48:74:43:1e:3c:f9:3b:7f:4f:28:4a:df:7a:95:66: b3:14:f1:89:65:48:a3:06:fb:e4:ef:02:36:a8:2b: 45:27:18:09:70:17:e6:37:f3:80:38:8d:ae:ba:6c: d7:5e:64:a5:8c:07:32:f1:44:48:50:76:ab:86:a4: b2:97:ac:51:99:86:55:55:c1:18:49:34:c6:9f:60: 0d:25:c5:b9:80:73:6d:25:c3:93:f7:03:0a:f7:df: ec:0a:0a:d1:ee:b5:dd:4d:ef:77:51:9d:14:b6:bc: 4c:0b:dd:1d:9b:5f:49:c4:74:00:d2:5a:63:3c:41: bb:e8:a1:da:eb:ad:e9:c1:bd:03:d7:b3:bc:6f:ad: bb:49:cc:ed:45:26:15:b5:60:0e:7a:1f:d7:8c:42: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6D:D8:BD:55:65:F6:55:EA:A8:6F:A0:26:58:35:36:34:DA:64:0A X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.252.0/23 79.141.166.0/23 IPv6: 2a01:8640:3::/48 2a01:8640:19::/48 Signature Algorithm: sha256WithRSAEncryption 6e:25:77:b6:e1:2b:f7:62:93:42:2b:c9:29:68:d4:21:b6:19: 09:b6:e8:b0:3a:b7:69:a5:6b:68:e2:48:d7:98:a1:61:40:5a: 62:12:c5:29:6c:cb:7d:cf:25:88:51:ba:6c:2b:bb:47:a9:e0: 3d:86:7c:c1:22:76:62:a5:b1:6f:6c:98:a5:cf:3f:97:e3:4e: 9a:16:4a:f1:15:23:b9:0f:2e:05:12:9f:d5:86:c9:d2:c8:7a: e2:27:13:c7:2f:85:48:03:66:b7:30:58:ce:dd:92:3e:5f:9d: 85:38:30:ff:fc:3d:94:d8:d1:09:fc:81:96:d6:32:bc:e8:3b: b1:b6:bd:08:90:e9:05:bf:29:df:79:4b:99:f3:3d:5b:b9:6e: 1c:2d:da:ca:03:7d:f1:62:e0:a5:b1:fa:1f:58:e1:11:78:08: 0d:24:82:f5:5e:0f:2b:65:fc:67:6f:74:b9:f2:4c:4b:52:94: e3:b4:01:b8:b7:09:d3:ac:81:5d:36:a7:b4:9d:ae:c8:37:73: dc:6f:eb:24:6f:a7:cd:39:2b:f8:1d:63:18:a0:16:50:95:a2: e8:14:ac:dc:bd:77:cc:2c:80:fd:8a:3e:3f:27:7f:64:e3:d1: 0c:86:43:de:e0:7b:ea:f6:4b:9f:ff:f5:fd:25:db:bd:b3:50: 68:8b:0f:10 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt4NTrruVb+/Pi67s4pzCayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzZkZDhiZDU1NjVmNjU1ZWFhODZmYTAyNjU4MzUzNjM0ZGE2NDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNs5Hf2zFOVqHPnw04mbI5rbnqyw ZGNTzQpx6AepnJ7qrRXGAdB1C3gbFll8mK2BZdakFAmhQrf8l0rjqxR5Qa643bNi zfWgIDDyX/UDl2CqM+wLWf3MriwY9vf+klJuqCSUHICRUqFIdEMePPk7f08oSt96 lWazFPGJZUijBvvk7wI2qCtFJxgJcBfmN/OAOI2uumzXXmSljAcy8URIUHarhqSy l6xRmYZVVcEYSTTGn2ANJcW5gHNtJcOT9wMK99/sCgrR7rXdTe93UZ0UtrxMC90d m19JxHQA0lpjPEG76KHa663pwb0D17O8b627ScztRSYVtWAOeh/XjEKpWQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFBxt2L1VZfZV6qhvoCZYNTY02mQKMB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEvSEczWXZWVmw5bFhxcUctZ0psZzFOalRhWkFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBBZX8AwQB T42mMBgEAgACMBIDBwAqAYZAAAMDBwAqAYZAABkwDQYJKoZIhvcNAQELBQADggEB AG4ld7bhK/dik0IrySlo1CG2GQm26LA6t2mla2jiSNeYoWFAWmISxSlsy33PJYhR umwru0ep4D2GfMEidmKlsW9smKXPP5fjTpoWSvEVI7kPLgUSn9WGydLIeuInE8cv hUgDZrcwWM7dkj5fnYU4MP/8PZTY0Qn8gZbWMrzoO7G2vQiQ6QW/Kd95S5nzPVu5 bhwt2soDffFi4KWx+h9Y4RF4CA0kgvVeDytl/GdvdLnyTEtSlOO0Abi3CdOsgV02 p7Sdrsg3c9xv6yRvp805K/gdYxigFlCVougUrNy9d8wsgP2KPj8nf2Tj0QyGQ97g e+r2S5//9f0l272zUGiLDxA= -----END CERTIFICATE-----Generated at Sun Jan 25 15:35:58 2026 by rpki-client