This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/yrM0soQqx_j0-1MHLmyxRBwRLbM.roa
File: yrM0soQqx_j0-1MHLmyxRBwRLbM.roa (raw, json)
Hash identifier: W92AJMwPEMvy6l2A/2J7r66vBSLFPMTIh8GEtzvHHq0=
Subject key identifier: CA:B3:34:B2:84:2A:C7:F8:F4:FB:53:07:2E:6C:B1:44:1C:11:2D:B3
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 019BBC13E4FCBFD0E73B16ABF27C4B422474
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/yrM0soQqx_j0-1MHLmyxRBwRLbM.roa
Signing time: Wed 14 Jan 2026 10:36:18 +0000
ROA not before: Wed 14 Jan 2026 10:36:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50867
IP address blocks: 212.115.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:bc:13:e4:fc:bf:d0:e7:3b:16:ab:f2:7c:4b:42:24:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 14 10:36:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cab334b2842ac7f8f4fb53072e6cb1441c112db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:64:de:a7:ed:bd:0b:71:74:7c:92:41:eb:
c0:fd:6d:3b:1a:aa:e2:d1:4e:f6:dc:65:1a:b3:34:
7c:72:aa:75:3b:23:6c:fd:ad:8f:40:fb:55:78:2b:
e7:3b:74:30:e5:08:48:60:3c:c6:13:07:89:04:fd:
64:de:03:f1:8d:b1:6c:de:31:e9:c6:4f:a1:00:95:
c2:17:62:bd:aa:d1:25:d0:3e:c3:00:2f:b6:07:78:
a8:c5:f7:f7:1f:eb:c4:f9:4f:e1:9b:62:89:59:ea:
17:06:6d:1f:55:60:41:3a:d0:e9:67:ca:4e:00:8c:
d4:52:aa:4b:ee:29:f4:d9:ea:08:c9:c9:df:f0:38:
ab:3c:a0:09:04:5c:88:aa:75:dc:95:8d:7a:b8:75:
db:5d:56:15:28:9d:05:bd:e3:3c:f9:22:1d:1d:8e:
ab:68:90:0e:94:2a:55:63:05:7b:5b:d1:7f:05:73:
82:b7:8d:81:b5:8d:d3:e4:a0:cf:66:17:21:87:fd:
86:4f:c0:ad:91:7b:ba:a3:2f:bc:f2:ac:8a:8a:88:
5a:af:85:ca:88:45:52:62:e0:81:e6:6e:3a:36:97:
39:b6:7a:6f:0b:73:99:5a:89:a5:0c:a4:79:a8:22:
c4:0e:0e:5e:e7:68:c6:34:e3:4d:3c:63:67:4f:71:
e8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B3:34:B2:84:2A:C7:F8:F4:FB:53:07:2E:6C:B1:44:1C:11:2D:B3
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/yrM0soQqx_j0-1MHLmyxRBwRLbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:6d:1d:70:70:29:d8:34:db:3e:b3:02:cd:b3:43:05:26:da:
45:27:19:7b:2e:cb:a2:5e:9f:e8:05:4a:85:39:dc:5d:09:bb:
61:c0:0c:83:ca:4c:15:af:d5:48:57:99:ae:48:cf:77:f5:27:
f5:b7:65:49:f2:8a:c2:82:e6:20:b8:e4:f9:20:5a:4d:35:8a:
08:f5:9f:06:55:1e:52:c8:90:28:6b:7f:94:d9:cf:c2:b6:bd:
17:d9:d9:3c:7f:7a:f9:d5:38:cc:45:de:ea:36:f9:c4:a5:7c:
d1:86:10:19:d1:85:61:49:f0:cd:c1:e5:8b:7f:19:76:fe:98:
14:67:d6:9f:3c:15:cf:d7:77:de:fe:f1:eb:31:74:71:b0:ff:
1a:4d:f2:38:ed:88:7f:d4:4f:c1:03:bf:ec:a6:2c:ec:46:e1:
9b:ef:ff:55:44:54:f0:29:6d:fe:2b:6e:2d:f5:39:05:86:e6:
b0:d2:f1:29:99:ac:f5:11:a7:a3:03:4f:0f:ca:a8:6d:21:3a:
45:eb:21:a8:65:74:bc:a0:88:03:98:7b:c1:e2:6d:e2:1f:21:
60:17:e9:9a:92:92:1e:93:79:a6:c8:c3:44:b1:fa:67:9e:b2:
29:db:40:69:70:d0:ac:bf:6f:70:6c:74:83:d3:e9:ff:68:40:
08:d0:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:15:17 2026 by rpki-client