This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e20383334.roa File: 3231322e37342e33382e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: R2/BGroKZkeNvhKfI5zHrIY8vRxL0coiCLIaftBmrXw= Subject key identifier: A6:83:9E:56:D6:BF:55:E3:A3:12:C4:49:30:17:33:32:3D:BF:75:ED Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 2442640F8681FE549ED35B377D25C8F10ABE37BA Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e20383334.roa Signing time: Thu 12 Feb 2026 15:09:03 +0000 ROA not before: Thu 12 Feb 2026 15:04:03 +0000 ROA not after: Thu 11 Feb 2027 15:09:03 +0000 asID: 834 IP address blocks: 212.74.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:42:64:0f:86:81:fe:54:9e:d3:5b:37:7d:25:c8:f1:0a:be:37:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 12 15:04:03 2026 GMT Not After : Feb 11 15:09:03 2027 GMT Subject: CN=A6839E56D6BF55E3A312C449301733323DBF75ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:be:ee:d0:39:dd:53:76:fc:51:ab:e8:a2: 1a:01:a9:08:a9:f5:dd:51:24:42:ee:ab:19:e9:f4: 06:c1:cf:c5:03:1b:b0:73:36:9c:4b:06:20:c3:d8: 99:80:d7:d8:a4:f9:b0:f2:a5:3e:24:aa:ab:9d:27: 60:63:1b:6c:44:25:61:34:77:89:a8:ec:89:48:e7: bc:be:f4:cd:48:1e:a2:c8:7a:66:88:04:dd:04:e2: 15:3a:3a:4c:57:75:95:d2:5e:f0:1e:36:97:2b:2c: 64:bc:b1:bf:9a:29:9d:7d:2d:46:8a:10:89:b6:59: 51:4b:32:9b:9c:f5:1e:fb:30:3d:77:c9:3c:76:97: bc:86:f4:bd:60:3e:82:5b:34:17:bb:5f:97:d4:98: fc:ac:cd:2b:70:79:15:e3:6d:f1:03:3b:fc:19:75: 9c:da:5b:47:13:10:39:5f:89:a4:7b:0a:8b:77:cb: 78:89:62:47:72:5f:c8:23:01:1a:79:e6:28:65:ac: 76:a0:47:82:81:5d:f0:d5:0c:7c:e3:40:83:24:51: 9c:55:fe:0e:6c:c9:9b:74:9b:f2:98:50:3f:1e:ea: 62:85:b0:38:fe:f4:d9:15:3d:3b:87:35:80:c1:3d: 9c:06:0a:f4:74:50:36:7b:84:39:58:d8:69:b8:70: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:83:9E:56:D6:BF:55:E3:A3:12:C4:49:30:17:33:32:3D:BF:75:ED X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33382e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.38.0/24 Signature Algorithm: sha256WithRSAEncryption 28:a8:67:ef:e3:3a:2c:52:25:ec:c9:a5:a3:27:77:d0:59:39: 9f:01:83:14:9d:81:26:92:96:15:e9:0e:ed:ed:7c:44:77:50: 55:8e:55:ee:e7:a0:66:f9:cd:cf:64:2b:3b:53:f9:3b:67:0f: eb:5c:bb:d5:4b:7e:c6:a6:10:0b:91:2b:03:d0:8a:db:dd:fe: 5f:a9:9f:52:0e:a5:88:43:eb:f0:f6:3c:f7:b6:b8:d6:52:be: bc:93:fc:c2:e8:4e:a3:4f:f3:e4:99:e1:bd:e4:94:52:a9:b7: c7:d7:86:c4:83:56:6e:21:b2:05:c4:b3:ac:cb:62:1f:b6:e1: e4:64:94:64:2f:b8:fd:cd:db:82:5d:6d:06:fb:51:cc:76:bf: f7:67:f3:5b:47:d3:03:fe:5f:30:3a:04:65:89:50:79:1b:4e: fe:01:7c:bf:6b:7d:33:8f:47:4b:09:2d:25:1c:ce:2a:0a:56: 3a:8a:d7:22:37:fc:21:05:c4:35:d9:72:b2:dc:eb:c2:9d:5b: 9a:72:b0:a3:ac:82:bd:c6:5c:7e:30:f9:d0:0e:60:b7:05:96: 0b:8f:26:71:52:f0:26:a4:43:2e:19:69:77:18:d6:51:4b:25: 62:07:f9:68:51:c3:d8:ef:9d:07:3a:4a:7a:13:28:e0:2a:3e: 37:6e:e4:b7 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUJEJkD4aB/lSe01s3fSXI8Qq+N7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMTIxNTA0MDNaFw0yNzAyMTExNTA5MDNaMDMxMTAvBgNV BAMTKEE2ODM5RTU2RDZCRjU1RTNBMzEyQzQ0OTMwMTczMzMyM0RCRjc1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ub7u0DndU3b8UavoohoBqQip 9d1RJELuqxnp9AbBz8UDG7BzNpxLBiDD2JmA19ik+bDypT4kqqudJ2BjG2xEJWE0 d4mo7IlI57y+9M1IHqLIemaIBN0E4hU6OkxXdZXSXvAeNpcrLGS8sb+aKZ19LUaK EIm2WVFLMpuc9R77MD13yTx2l7yG9L1gPoJbNBe7X5fUmPyszStweRXjbfEDO/wZ dZzaW0cTEDlfiaR7Cot3y3iJYkdyX8gjARp55ihlrHagR4KBXfDVDHzjQIMkUZxV /g5syZt0m/KYUD8e6mKFsDj+9NkVPTuHNYDBPZwGCvR0UDZ7hDlY2Gm4cI1rAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUpoOeVta/VeOjEsRJMBczMj2/de0wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EomMA0G CSqGSIb3DQEBCwUAA4IBAQAoqGfv4zosUiXsyaWjJ3fQWTmfAYMUnYEmkpYV6Q7t 7XxEd1BVjlXu56Bm+c3PZCs7U/k7Zw/rXLvVS37GphALkSsD0Irb3f5fqZ9SDqWI Q+vw9jz3trjWUr68k/zC6E6jT/PkmeG95JRSqbfH14bEg1ZuIbIFxLOsy2IftuHk ZJRkL7j9zduCXW0G+1HMdr/3Z/NbR9MD/l8wOgRliVB5G07+AXy/a30zj0dLCS0l HM4qClY6itciN/whBcQ12XKy3OvCnVuacrCjrIK9xlx+MPnQDmC3BZYLjyZxUvAm pEMuGWl3GNZRSyViB/loUcPY750HOkp6EyjgKj43buS3 -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:07 2026 by rpki-client