This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/HJpn_J4PDoFUYqEVCWj0iQM-3k0.roa File: HJpn_J4PDoFUYqEVCWj0iQM-3k0.roa (raw, json) Hash identifier: VJAIFmjRG0CrMBQmMTvTyvzSn9UbCMce42aoZ7KBzXY= Subject key identifier: 1C:9A:67:FC:9E:0F:0E:81:54:62:A1:15:09:68:F4:89:03:3E:DE:4D Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898 Certificate serial: 019B7BA32DC0F395570697ACFBBA31949DC9 Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/HJpn_J4PDoFUYqEVCWj0iQM-3k0.roa Signing time: Thu 01 Jan 2026 22:17:30 +0000 ROA not before: Thu 01 Jan 2026 22:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 91.213.13.0/24 maxlen: 24 193.108.238.0/24 maxlen: 24 2001:67c:1064::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2d:c0:f3:95:57:06:97:ac:fb:ba:31:94:9d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898 Validity Not Before: Jan 1 22:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c9a67fc9e0f0e815462a1150968f489033ede4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:2f:48:ac:48:62:5d:cb:db:ee:d5:46:11: 2f:a2:f7:99:0c:21:33:b3:05:ee:37:c9:63:3d:f9: 59:48:4a:15:b0:6c:41:3c:52:fd:ef:d5:ce:d4:88: fa:76:87:4c:92:a6:93:99:c6:8e:a7:b4:88:7f:15: 67:70:0d:ab:ca:bd:eb:29:14:ad:92:70:86:0d:81: 74:6f:9e:51:78:bd:49:6e:98:ad:99:4e:b4:3d:b5: 41:cb:14:6e:bd:1b:2e:2b:44:b1:68:3a:d1:f8:23: 73:58:fd:06:10:6c:13:1f:63:63:42:25:e3:46:85: cf:25:3c:c7:29:0e:4c:0e:c9:25:48:1a:ee:2a:7a: e6:e7:90:cb:24:ae:d0:17:b7:27:07:d1:17:f1:c5: cb:ce:ed:92:ae:a0:81:b3:e6:3a:9e:d3:83:40:84: 53:21:a2:09:e1:56:a9:b6:10:08:69:bf:0f:a1:57: 1e:de:5a:55:6b:3a:2d:b3:cb:9f:49:46:33:fd:72: 2b:58:fb:09:3d:f2:6c:30:0e:62:b2:15:92:15:45: 3e:e8:a9:dd:74:5c:b8:c8:a7:99:45:f2:46:4b:f3: 87:fa:88:8f:b9:a7:da:c0:5a:7a:6a:41:2e:d7:8d: d1:1d:38:a2:b4:c1:c7:7c:67:db:d5:fd:0d:95:a5: 94:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9A:67:FC:9E:0F:0E:81:54:62:A1:15:09:68:F4:89:03:3E:DE:4D X509v3 Authority Key Identifier: keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/HJpn_J4PDoFUYqEVCWj0iQM-3k0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.13.0/24 193.108.238.0/24 IPv6: 2001:67c:1064::/48 Signature Algorithm: sha256WithRSAEncryption 48:23:b2:9d:a3:5b:0e:ec:14:9c:a1:1e:66:08:0c:3e:47:07: 64:73:12:2c:cb:8b:5a:71:b1:e6:9c:23:0d:51:32:8e:51:92: b5:c5:68:82:30:9c:35:8e:a7:12:f9:07:21:5e:84:9a:92:0d: 62:06:17:cb:fc:67:ae:41:e5:5c:e0:e2:fb:09:6f:dc:58:35: a4:ad:14:ea:89:1a:85:14:ea:a7:94:98:2d:6f:9e:da:2c:75: 6a:72:b8:49:92:c8:cf:72:49:78:03:8a:08:cd:d1:3d:d2:96: 19:92:5b:91:d3:31:3e:60:42:15:f1:e8:4d:04:7f:91:76:15: 86:2f:61:c7:6a:a4:a8:2f:f8:42:db:6b:2c:7e:df:1b:6a:ba: a6:77:11:b7:2b:19:79:f9:35:ea:b1:ed:e9:a2:11:85:5a:13: 63:8d:83:0a:a0:47:a3:5b:21:f4:2a:42:b8:ef:1c:66:54:6f: 25:2e:5f:83:59:8d:f6:45:62:7e:06:3a:53:9d:77:d6:2f:00: 1b:2b:79:2d:20:22:00:30:b4:48:31:be:5f:cd:b9:b0:f1:eb: 84:b2:72:88:53:e6:19:3f:72:9d:7b:09:a0:da:dc:2f:aa:56: e3:21:b1:eb:58:9b:02:03:c1:e3:63:d0:91:37:d4:f9:61:de: 68:cf:c8:b9 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7oy3A85VXBpes+7oxlJ3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmIyNDQwYTdjN2EyZGZjZjJlNDIxNmRhOGEzYmRlNjhi OWI4OTgwHhcNMjYwMTAxMjIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzlhNjdmYzllMGYwZTgxNTQ2MmExMTUwOTY4ZjQ4OTAzM2VkZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8IvSKxIYl3L2+7VRhEvoveZDCEz swXuN8ljPflZSEoVsGxBPFL979XO1Ij6dodMkqaTmcaOp7SIfxVncA2ryr3rKRSt knCGDYF0b55ReL1JbpitmU60PbVByxRuvRsuK0SxaDrR+CNzWP0GEGwTH2NjQiXj RoXPJTzHKQ5MDsklSBruKnrm55DLJK7QF7cnB9EX8cXLzu2SrqCBs+Y6ntODQIRT IaIJ4VapthAIab8PoVce3lpVazots8ufSUYz/XIrWPsJPfJsMA5ishWSFUU+6Knd dFy4yKeZRfJGS/OH+oiPuafawFp6akEu143RHTiitMHHfGfb1f0NlaWUGQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFByaZ/yeDw6BVGKhFQlo9IkDPt5NMB8GA1UdIwQY MBaAFKkrJECnx6Lfzy5CFtqKO95oubiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDIt ZjJjNjdlY2EzZTViLzEvSEpwbl9KNFBEb0ZVWXFFVkNXajBpUU0tM2swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDItZjJjNjdlY2EzZTVi LzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9UNAwQA wWzuMA8EAgACMAkDBwAgAQZ8EGQwDQYJKoZIhvcNAQELBQADggEBAEgjsp2jWw7s FJyhHmYIDD5HB2RzEizLi1pxseacIw1RMo5RkrXFaIIwnDWOpxL5ByFehJqSDWIG F8v8Z65B5Vzg4vsJb9xYNaStFOqJGoUU6qeUmC1vntosdWpyuEmSyM9ySXgDigjN 0T3SlhmSW5HTMT5gQhXx6E0Ef5F2FYYvYcdqpKgv+ELbayx+3xtquqZ3EbcrGXn5 Neqx7emiEYVaE2ONgwqgR6NbIfQqQrjvHGZUbyUuX4NZjfZFYn4GOlOdd9YvABsr eS0gIgAwtEgxvl/NubDx64SycohT5hk/cp17CaDa3C+qVuMhsetYmwIDweNj0JE3 1Plh3mjPyLk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:35 2026 by rpki-client