This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa File: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (raw, json) Hash identifier: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM= Subject key identifier: 8E:18:2B:FE:4A:96:9F:43:FC:91:98:33:43:8A:D2:B5:A5:66:F6:55 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019B797F0AA85EA5BD08E0C296D71389444E Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60798 IP address blocks: 31.210.21.0/24 maxlen: 24 162.12.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0a:a8:5e:a5:bd:08:e0:c2:96:d7:13:89:44:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e182bfe4a969f43fc919833438ad2b5a566f655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:e9:95:ac:7a:8e:2c:9a:d4:99:98:93:7e: 0f:93:e2:5e:3d:1d:e7:75:e6:0d:c8:1b:8f:a5:34: 3c:60:1c:61:5f:b1:55:e2:bb:2f:c8:d5:83:32:47: 19:4e:86:e8:99:e0:8a:31:bb:f9:0a:72:42:7b:8d: 8b:c4:41:f3:27:15:50:64:ae:5d:b6:8f:50:2b:72: 14:2c:27:b4:48:51:76:cf:08:19:2b:11:67:0e:9f: 5a:66:c6:d2:a9:b3:51:ba:d5:51:22:59:7a:ff:62: b4:be:a3:1d:84:b7:40:ec:26:e5:a6:85:91:83:24: b6:46:83:a8:7e:1d:01:5a:97:a2:dc:42:f9:21:14: 3f:65:ba:6c:c9:85:fa:5c:a4:89:3a:a2:8f:77:af: 78:93:59:8d:38:b0:63:5d:d0:d5:a1:f5:38:12:42: 99:44:5e:46:35:09:87:00:5e:c1:48:03:1b:79:2d: 2e:20:76:ca:cd:45:e4:66:58:f4:76:2e:d0:0a:6d: e2:5d:78:fd:de:87:5f:b3:db:f1:3e:eb:be:a6:c5: 5b:c6:7b:83:5e:b1:2d:39:16:dc:46:98:d3:02:53: ff:8c:67:7d:a5:e8:25:da:2d:00:f2:40:25:68:a3: 33:c6:7a:b3:cd:84:5e:ac:27:62:2f:38:01:a1:d4: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:18:2B:FE:4A:96:9F:43:FC:91:98:33:43:8A:D2:B5:A5:66:F6:55 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.21.0/24 162.12.205.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:02:a3:20:38:7a:31:9a:0a:e7:b5:dc:0e:b7:77:d5:a8:85: 08:7b:ef:29:eb:b2:5c:c2:45:d7:58:2c:c7:84:73:44:11:0e: 24:45:71:53:18:a7:02:0b:18:1d:7d:40:67:1f:7b:93:fb:5e: f2:65:be:41:44:24:cd:88:af:92:95:ef:f7:a3:ab:97:fc:c2: 1c:80:86:4a:60:e9:3c:7a:97:65:84:7e:0d:d7:3a:ea:09:4b: 73:fe:26:a9:35:75:25:9e:61:46:b6:ce:38:ec:e4:c2:3f:74: 93:6c:39:a1:b0:58:82:7d:5a:43:56:96:7e:ae:93:ea:19:c6: c1:5f:11:2b:d8:d0:bd:b3:7f:e8:0d:89:de:83:27:43:e0:ee: a9:78:c5:7d:33:ce:0e:4f:51:f2:9e:95:a6:44:8e:02:1c:24: 49:eb:18:24:4c:ce:30:86:a4:28:d3:3b:b6:c5:2d:62:d1:df: aa:6b:46:a2:58:35:ab:c5:c1:f8:dc:25:99:51:90:ba:c5:2c: a9:50:87:0e:33:ea:a0:79:dd:3f:3b:b0:7b:3c:30:95:e3:8a: bf:aa:96:0c:2e:7f:ec:6d:a6:ce:b1:38:70:6a:cc:ad:76:b1: a6:09:63:2d:c0:4f:4e:c7:8b:b8:99:b2:75:db:d4:46:4a:80: 14:5d:48:4d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fwqoXqW9CODCltcTiUROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTE4MmJmZTRhOTY5ZjQzZmM5MTk4MzM0MzhhZDJiNWE1NjZmNjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXPplax6jiya1JmYk34Pk+JePR3n deYNyBuPpTQ8YBxhX7FV4rsvyNWDMkcZTobomeCKMbv5CnJCe42LxEHzJxVQZK5d to9QK3IULCe0SFF2zwgZKxFnDp9aZsbSqbNRutVRIll6/2K0vqMdhLdA7CblpoWR gyS2RoOofh0BWpei3EL5IRQ/ZbpsyYX6XKSJOqKPd694k1mNOLBjXdDVofU4EkKZ RF5GNQmHAF7BSAMbeS0uIHbKzUXkZlj0di7QCm3iXXj93odfs9vxPuu+psVbxnuD XrEtORbcRpjTAlP/jGd9pegl2i0A8kAlaKMzxnqzzYRerCdiLzgBodQAuQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI4YK/5Klp9D/JGYM0OK0rWlZvZVMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvamhncl9rcVduMFA4a1pnelE0clN0YVZtOWxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH9IVAwQA ogzNMA0GCSqGSIb3DQEBCwUAA4IBAQAvAqMgOHoxmgrntdwOt3fVqIUIe+8p67Jc wkXXWCzHhHNEEQ4kRXFTGKcCCxgdfUBnH3uT+17yZb5BRCTNiK+Sle/3o6uX/MIc gIZKYOk8epdlhH4N1zrqCUtz/iapNXUlnmFGts447OTCP3STbDmhsFiCfVpDVpZ+ rpPqGcbBXxEr2NC9s3/oDYnegydD4O6peMV9M84OT1HynpWmRI4CHCRJ6xgkTM4w hqQo0zu2xS1i0d+qa0aiWDWrxcH43CWZUZC6xSypUIcOM+qged0/O7B7PDCV44q/ qpYMLn/sbabOsThwasytdrGmCWMtwE9Ox4u4mbJ129RGSoAUXUhN -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:33 2026 by rpki-client