This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dCsYn_jnKg7K1gVjDVySXJVB0f0.roa File: dCsYn_jnKg7K1gVjDVySXJVB0f0.roa (raw, json) Hash identifier: 2Uor21FGvp03fz3U5FxAgEn7wBOTgPhNP4lnXG29MuU= Subject key identifier: 74:2B:18:9F:F8:E7:2A:0E:CA:D6:05:63:0D:5C:92:5C:95:41:D1:FD Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019C4F1753374D74BB42DFDB352045341C0A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dCsYn_jnKg7K1gVjDVySXJVB0f0.roa Signing time: Wed 11 Feb 2026 23:44:14 +0000 ROA not before: Wed 11 Feb 2026 23:44:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201354 IP address blocks: 2a0e:97c0:b70::/48 maxlen: 48 2a0e:97c0:b71::/48 maxlen: 48 2a0e:97c0:b72::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Feb 2026 23:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:4f:17:53:37:4d:74:bb:42:df:db:35:20:45:34:1c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Feb 11 23:44:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=742b189ff8e72a0ecad605630d5c925c9541d1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:11:36:ee:a0:48:83:96:b9:6a:e1:e1:bc: ab:74:05:8d:76:bc:18:c7:5b:79:b2:6b:40:d6:c8: 7f:29:61:84:b8:49:ed:27:8e:6d:db:f8:a1:c8:8b: 83:b8:a6:15:2b:d2:86:88:d3:0f:69:1a:00:a6:3b: 27:c1:83:f9:f4:db:44:5c:22:4a:dd:33:06:c8:58: 00:a7:02:29:58:8d:ea:08:c3:87:50:e4:c9:74:c3: 1b:83:56:07:d7:d7:bf:b7:a4:77:68:84:ad:4f:02: 06:7f:78:05:90:a2:ec:68:40:73:55:a3:d1:a3:7b: 46:a3:07:27:a4:02:fb:06:3f:e0:c6:2c:41:92:bf: 9f:ad:1e:25:73:9e:40:4c:a9:35:18:a1:85:40:c0: 04:e3:8a:45:91:7b:91:3b:ad:3b:22:ca:c1:18:8a: 77:db:da:0e:39:43:1d:3f:ff:ef:15:41:f6:35:b5: c9:1c:fa:65:18:b3:6b:bd:f5:9d:d1:03:e9:0d:5d: e2:f8:f6:88:5f:9c:fc:2e:0b:1a:11:35:03:70:aa: 17:62:e0:1f:8d:70:77:8f:a6:8d:30:7d:4d:9b:81: be:a7:f6:02:81:c0:11:2d:d9:2f:95:ab:85:a2:20: 14:05:a3:a0:7a:6a:c0:08:40:e4:bb:a9:e8:76:2e: c1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2B:18:9F:F8:E7:2A:0E:CA:D6:05:63:0D:5C:92:5C:95:41:D1:FD X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dCsYn_jnKg7K1gVjDVySXJVB0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:b70::-2a0e:97c0:b72:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 09:72:52:db:2d:af:af:3d:47:c9:26:17:7d:10:58:c6:78:8f: 40:af:78:7f:91:4a:44:af:61:15:b8:0f:30:63:9f:70:25:89: 97:08:16:a6:d9:8e:d2:f1:85:b7:a0:e4:5e:96:33:01:b4:d4: bd:1d:5d:26:31:5f:23:de:7e:c8:90:f0:6b:d0:10:25:ce:2a: 4c:d9:8b:59:d9:09:f5:17:63:2b:3b:ae:09:cb:12:c2:c3:e0: ad:5a:c4:dd:1a:7f:ed:e8:0c:b3:31:1e:e6:34:fa:b7:f7:db: 1f:5c:22:f3:db:6c:43:b7:60:13:a6:f1:0c:73:1f:93:4b:0d: 8f:c4:87:76:62:e1:12:ce:b5:1e:da:58:b0:6a:8a:a9:b1:6a: 2c:0d:ad:f2:f0:c7:88:ef:be:9d:20:48:46:e2:90:06:d5:55: 82:a0:97:3d:3a:28:20:0a:26:2a:b9:e2:35:b3:7c:b0:7f:c4: 12:0f:ed:c4:9b:c1:ef:7c:7d:b8:4a:03:d0:62:19:14:5d:14: ee:a2:58:43:05:a0:0c:84:4d:89:a6:72:f5:b6:c9:cb:e5:15: 66:87:a9:2a:7e:f7:46:ab:ab:8b:29:1a:20:1a:a5:70:18:4b: d2:03:01:52:a8:75:96:e3:81:03:2d:76:f9:0c:a2:61:7d:64: 91:70:da:4f -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZxPF1M3TXS7Qt/bNSBFNBwKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMjExMjM0NDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDJiMTg5ZmY4ZTcyYTBlY2FkNjA1NjMwZDVjOTI1Yzk1NDFkMWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAERNu6gSIOWuWrh4byrdAWNdrwY x1t5smtA1sh/KWGEuEntJ45t2/ihyIuDuKYVK9KGiNMPaRoApjsnwYP59NtEXCJK 3TMGyFgApwIpWI3qCMOHUOTJdMMbg1YH19e/t6R3aIStTwIGf3gFkKLsaEBzVaPR o3tGowcnpAL7Bj/gxixBkr+frR4lc55ATKk1GKGFQMAE44pFkXuRO607IsrBGIp3 29oOOUMdP//vFUH2NbXJHPplGLNrvfWd0QPpDV3i+PaIX5z8LgsaETUDcKoXYuAf jXB3j6aNMH1Nm4G+p/YCgcARLdkvlauFoiAUBaOgemrACEDku6nodi7BWwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHQrGJ/45yoOytYFYw1cklyVQdH9MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZENzWW5fam5LZzdLMWdWakRWeVNYSlZCMGYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqDpfA C3ADBwAqDpfAC3IwDQYJKoZIhvcNAQELBQADggEBAAlyUtstr689R8kmF30QWMZ4 j0CveH+RSkSvYRW4DzBjn3AliZcIFqbZjtLxhbeg5F6WMwG01L0dXSYxXyPefsiQ 8GvQECXOKkzZi1nZCfUXYys7rgnLEsLD4K1axN0af+3oDLMxHuY0+rf32x9cIvPb bEO3YBOm8QxzH5NLDY/Eh3Zi4RLOtR7aWLBqiqmxaiwNrfLwx4jvvp0gSEbikAbV VYKglz06KCAKJiq54jWzfLB/xBIP7cSbwe98fbhKA9BiGRRdFO6iWEMFoAyETYmm cvW2ycvlFWaHqSp+90arq4spGiAapXAYS9IDAVKodZbjgQMtdvkMomF9ZJFw2k8= -----END CERTIFICATE-----Generated at Thu Feb 12 04:14:32 2026 by rpki-client