This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa
File: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (raw, json)
Hash identifier: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=
Subject key identifier: 0D:CA:D1:26:0A:91:36:9B:E8:09:64:4F:26:AF:A0:7D:9F:5C:4D:27
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019B775958608F6A1AA11B9B93113B0E1837
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa
Signing time: Thu 01 Jan 2026 02:18:22 +0000
ROA not before: Thu 01 Jan 2026 02:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199479
IP address blocks: 185.14.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Feb 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:58:60:8f:6a:1a:a1:1b:9b:93:11:3b:0e:18:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jan 1 02:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dcad1260a91369be809644f26afa07d9f5c4d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:0e:6c:37:e7:81:6c:6a:b2:48:c0:a8:0b:
ae:ca:fa:a9:b6:c0:41:f5:25:b5:5d:90:3d:a2:4c:
2e:6d:96:86:27:f3:4a:3d:35:69:cc:d3:0e:f1:d0:
9b:7f:af:c3:b8:5c:a1:89:6c:33:a3:e5:85:4c:02:
b6:a8:be:64:76:f0:64:c2:c5:15:b4:ca:37:a8:85:
c9:7a:c4:49:2c:8d:ee:a1:30:b7:45:f4:e2:09:22:
34:43:64:7f:da:30:a5:21:e4:1d:47:52:08:8c:2e:
8a:3c:9f:54:16:84:06:f9:25:40:96:ac:97:01:91:
8a:25:fd:77:68:5e:7a:2d:e4:fa:e5:ab:ae:21:d8:
62:59:41:30:32:f8:0a:f9:41:45:47:13:8e:19:01:
56:3e:17:2f:77:4a:04:f8:5a:18:cf:9f:e1:f8:d9:
79:bf:a0:7c:cd:6d:fb:00:7b:44:b2:00:71:5b:6c:
f3:42:50:5d:50:49:02:5f:fc:10:80:61:d6:5d:0d:
50:58:d2:76:a2:74:ae:fa:61:e2:1b:ac:59:eb:b5:
c1:05:e3:93:12:92:22:01:68:4d:40:09:e0:84:f4:
d0:58:13:02:93:12:98:74:ea:60:0b:62:26:62:90:
43:cb:35:d7:73:2c:c8:79:54:b1:7a:e6:f4:fc:d7:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CA:D1:26:0A:91:36:9B:E8:09:64:4F:26:AF:A0:7D:9F:5C:4D:27
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.84.0/22
Signature Algorithm: sha256WithRSAEncryption
76:56:f1:b9:27:2e:b5:b2:79:3f:ba:d5:fc:9a:2e:5f:7d:68:
03:6f:fe:d7:77:8e:b5:89:29:e0:f1:7e:04:fe:98:20:16:27:
d8:c4:c2:5d:f5:0a:27:f2:bf:95:b3:cd:4d:bf:1c:64:a1:cd:
d4:96:56:fb:92:51:58:9e:fe:22:8c:bd:cc:ba:1a:f6:cf:e0:
bf:bd:e3:85:12:aa:a5:b0:ca:27:8a:fd:c5:c2:29:cd:6f:20:
16:97:a4:a5:d8:5a:41:f6:00:e4:24:3e:65:cd:0e:73:3a:05:
2d:72:a8:9a:61:4a:59:d0:e3:36:ab:fd:26:81:62:28:fa:01:
c7:e0:0b:3f:56:5e:02:79:3a:11:20:bc:21:33:a5:ba:30:01:
d6:4b:82:93:59:cf:9c:7f:87:b6:d2:b7:6c:7a:35:46:7f:9d:
7f:0e:dc:37:98:e0:c9:c6:0f:de:ea:41:6a:50:d1:c6:c2:24:
c9:20:29:a2:51:63:c5:a6:a9:bc:b2:69:68:ed:9d:b4:e6:24:
45:ea:88:c4:0b:37:c4:f4:7e:22:e5:50:a1:b8:13:84:92:9b:
fa:f9:76:d4:28:d4:68:e0:8d:04:81:e0:9e:fc:35:7b:84:16:
e8:17:75:ba:da:2c:18:2a:bc:a8:cf:0c:58:a1:77:9d:ba:ed:
26:c8:9f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 13 11:26:46 2026 by rpki-client