This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/YJL1m4i4QHQXRNcDuKgXsonBGnU.roa
File: YJL1m4i4QHQXRNcDuKgXsonBGnU.roa (raw, json)
Hash identifier: mgdo2Tbf5EfthnmO/tzLkoHo1GPFwSNtM7tNPXp8qfk=
Subject key identifier: 60:92:F5:9B:88:B8:40:74:17:44:D7:03:B8:A8:17:B2:89:C1:1A:75
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 019C07C7F34938513DD66032DDB09DADF4D5
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/YJL1m4i4QHQXRNcDuKgXsonBGnU.roa
Signing time: Thu 29 Jan 2026 03:24:30 +0000
ROA not before: Thu 29 Jan 2026 03:24:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204102
IP address blocks: 212.15.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 18:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:07:c7:f3:49:38:51:3d:d6:60:32:dd:b0:9d:ad:f4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jan 29 03:24:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6092f59b88b840741744d703b8a817b289c11a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:bf:e6:e0:d3:da:e1:b3:82:04:ff:e7:75:
d8:0c:51:5e:09:e5:79:4f:49:89:58:a8:93:44:3c:
12:81:b4:0a:aa:9c:36:20:86:43:19:54:27:3f:93:
36:1e:5f:3b:7f:98:54:e0:6a:25:cf:4d:7f:79:24:
2d:aa:f8:dd:36:60:e4:58:15:4e:98:19:06:d3:b0:
64:4c:2e:6c:50:cb:b1:7a:d8:fd:9f:52:c4:d7:91:
95:c4:bc:4c:c3:7d:fd:92:74:aa:0a:41:00:64:a0:
be:1b:8a:c1:e3:72:bd:56:f0:d9:d4:f1:63:70:8a:
29:4f:3d:c1:d6:ec:e8:93:91:0f:0d:4a:c2:e1:fb:
27:0a:21:3e:41:8e:5d:8a:a7:7e:99:dc:54:fa:ac:
2b:8e:26:aa:b1:9b:19:ab:bc:d2:4b:04:fb:ef:00:
fd:4b:86:59:67:16:51:9a:e6:ca:81:7f:e0:ae:e2:
23:fb:96:12:ff:95:d9:a0:41:3a:71:78:52:27:b6:
76:02:8c:4a:c5:e8:fe:0f:81:95:3f:a9:02:83:03:
61:da:40:77:d1:56:07:1b:57:5b:6a:ec:e0:06:b4:
2d:e3:13:33:d9:d9:99:65:2f:33:c9:ae:79:8a:a7:
47:5e:7f:e4:3f:05:57:b4:a1:54:09:4d:14:4f:a9:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:92:F5:9B:88:B8:40:74:17:44:D7:03:B8:A8:17:B2:89:C1:1A:75
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/YJL1m4i4QHQXRNcDuKgXsonBGnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.43.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1c:7c:67:3c:85:22:c4:7c:f2:47:8b:a2:f6:1d:7b:8a:db:
d9:f7:79:ff:0d:c2:23:a2:96:6b:51:ab:41:42:ee:ad:43:fd:
d7:3e:02:57:59:dc:11:fe:85:30:30:be:d7:58:22:7b:03:90:
cd:c1:26:f6:8f:ad:32:68:0e:02:73:b7:ae:4b:0c:7c:b2:ff:
6a:fa:88:11:74:fc:37:1d:ef:38:24:d0:ca:fa:d6:33:a4:83:
ae:3c:f7:b5:86:be:89:51:30:44:6b:fc:3a:b4:75:42:42:21:
b9:93:b6:66:3f:1f:52:5b:10:a4:d0:e7:15:48:4f:65:a4:89:
8c:14:07:d3:a6:86:8f:98:fc:75:92:71:ed:21:f9:2b:cd:44:
32:4a:1c:bb:ba:d3:c2:57:b2:ab:a3:60:d9:72:5f:50:f3:18:
2b:e7:e6:95:d1:07:db:c6:6c:bb:30:1f:c4:cc:39:1e:82:80:
9a:06:3e:fd:95:1d:7b:c7:96:7b:56:6a:c8:1a:65:de:0e:df:
13:df:9a:fb:87:10:93:96:70:1e:04:7f:ed:f0:72:38:f8:f9:
b0:52:fd:07:9b:1d:76:5c:43:8c:30:55:aa:56:ac:6e:16:c7:
d1:b1:b3:0f:96:c3:7e:74:67:cb:1b:5a:7c:43:35:e7:b5:fc:
80:f6:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:56:32 2026 by rpki-client