This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32322d3234203d3e20383334.roa File: 3231322e37342e34302e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: njLW0p5os/rHkrYuf5o1yQZ1XCVX+ZLKfpYcIxf+Kbw= Subject key identifier: F8:94:6A:D6:CB:9F:22:C4:35:FD:43:FD:E5:05:3D:92:CB:E8:A9:30 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 3BA2C66E9301790B200314CC8C8F569A66D2807C Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32322d3234203d3e20383334.roa Signing time: Thu 12 Feb 2026 06:46:21 +0000 ROA not before: Thu 12 Feb 2026 06:41:21 +0000 ROA not after: Thu 11 Feb 2027 06:46:21 +0000 asID: 834 IP address blocks: 212.74.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a2:c6:6e:93:01:79:0b:20:03:14:cc:8c:8f:56:9a:66:d2:80:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 12 06:41:21 2026 GMT Not After : Feb 11 06:46:21 2027 GMT Subject: CN=F8946AD6CB9F22C435FD43FDE5053D92CBE8A930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:db:cf:a2:ae:7a:6a:9b:07:40:aa:36:64: 60:cd:d9:50:8a:35:20:bd:ca:50:e4:69:98:73:17: f6:36:3c:30:5c:c3:f2:66:77:bf:19:5e:32:f0:86: 5f:e2:7e:1b:4f:a8:2f:0c:d0:d8:c5:f4:6b:05:49: d2:de:9b:a5:fb:08:b6:48:17:3d:70:8a:3c:95:e5: b2:4b:a1:71:fd:2c:96:25:ef:7f:f3:e1:b9:28:2c: 1a:c5:2d:aa:1b:41:ef:03:e7:e2:d9:c1:a1:9a:08: b9:d8:9d:16:e7:49:90:55:56:7c:39:2d:de:b8:62: dc:1f:8f:48:4f:3b:78:a6:8d:3b:a1:9f:09:6e:fa: 39:1b:d2:7d:24:8d:d6:d4:aa:9f:73:3e:a0:17:ec: 92:b4:1f:c1:d1:3b:e0:61:e4:84:68:d8:a0:70:b4: 46:bc:05:4a:0e:04:16:c3:9a:15:8f:8b:bd:3f:07: 02:4d:ea:4b:ac:96:2b:d6:c5:76:a8:63:2e:82:ee: 15:a2:43:62:84:d0:cf:10:1d:6f:f9:dc:2e:8b:e5: 98:d4:1a:97:2d:9f:24:37:3e:dd:09:d0:8b:ca:dd: d5:1f:91:f8:f8:38:63:2e:01:c1:b8:d4:15:a7:81: 35:5d:82:e2:34:36:75:16:e2:5c:b3:00:11:1a:8b: db:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:94:6A:D6:CB:9F:22:C4:35:FD:43:FD:E5:05:3D:92:CB:E8:A9:30 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.40.0/22 Signature Algorithm: sha256WithRSAEncryption 16:ee:91:ae:03:eb:c6:40:38:84:95:ea:f9:98:35:d1:ea:f9: 6f:aa:98:a7:f8:84:d5:2d:94:c8:8f:7e:32:95:f2:ae:29:08: bd:9f:7a:20:1b:c3:be:e9:9a:ed:d4:d9:1b:7c:fe:a5:ad:3d: 14:aa:7a:9f:02:b4:38:e7:bd:c0:5e:d2:be:21:e4:70:d1:84: b7:4b:10:98:f7:c1:29:52:7d:27:d9:93:ed:a7:ec:23:8b:7b: a4:b4:40:61:d3:53:09:da:45:e0:28:53:2a:30:22:f4:f0:1c: 4b:22:10:d2:7f:a5:5f:2c:41:2a:0c:6d:9f:c2:c5:2e:bd:14: ad:f6:a0:67:b3:d4:b2:2c:0c:ea:8d:01:67:11:45:1f:81:ae: c4:23:22:d4:c3:61:a3:ee:55:0c:bf:a1:93:65:1d:56:c1:c3: 47:75:c8:b6:27:3c:75:2a:0b:e5:f2:61:30:5d:56:80:ec:44: c5:f4:44:c6:7a:da:f8:44:a1:1e:14:3c:dd:0b:fb:1f:aa:06: 45:9e:1d:f0:c2:9c:7f:4e:83:5b:80:59:46:31:b4:dc:b8:5c: 88:7c:0f:9d:9c:fe:6c:ee:f4:b7:d7:3d:98:6b:75:e0:b4:ed: f5:5c:e9:81:ca:ee:13:b0:66:de:cf:52:0f:71:73:fc:72:a9: 95:92:88:70 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUO6LGbpMBeQsgAxTMjI9WmmbSgHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMTIwNjQxMjFaFw0yNzAyMTEwNjQ2MjFaMDMxMTAvBgNV BAMTKEY4OTQ2QUQ2Q0I5RjIyQzQzNUZENDNGREU1MDUzRDkyQ0JFOEE5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1tvPoq56apsHQKo2ZGDN2VCK NSC9ylDkaZhzF/Y2PDBcw/Jmd78ZXjLwhl/ifhtPqC8M0NjF9GsFSdLem6X7CLZI Fz1wijyV5bJLoXH9LJYl73/z4bkoLBrFLaobQe8D5+LZwaGaCLnYnRbnSZBVVnw5 Ld64Ytwfj0hPO3imjTuhnwlu+jkb0n0kjdbUqp9zPqAX7JK0H8HRO+Bh5IRo2KBw tEa8BUoOBBbDmhWPi70/BwJN6kuslivWxXaoYy6C7hWiQ2KE0M8QHW/53C6L5ZjU GpctnyQ3Pt0J0IvK3dUfkfj4OGMuAcG41BWngTVdguI0NnUW4lyzABEai9tBAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU+JRq1sufIsQ1/UP95QU9ksvoqTAwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDMw MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1EooMA0G CSqGSIb3DQEBCwUAA4IBAQAW7pGuA+vGQDiEler5mDXR6vlvqpin+ITVLZTIj34y lfKuKQi9n3ogG8O+6Zrt1NkbfP6lrT0UqnqfArQ4573AXtK+IeRw0YS3SxCY98Ep Un0n2ZPtp+wji3uktEBh01MJ2kXgKFMqMCL08BxLIhDSf6VfLEEqDG2fwsUuvRSt 9qBns9SyLAzqjQFnEUUfga7EIyLUw2Gj7lUMv6GTZR1WwcNHdci2Jzx1Kgvl8mEw XVaA7ETF9ETGetr4RKEeFDzdC/sfqgZFnh3wwpx/ToNbgFlGMbTcuFyIfA+dnP5s 7vS31z2Ya3XgtO31XOmByu4TsGbez1IPcXP8cqmVkohw -----END CERTIFICATE-----Generated at Sat Feb 14 17:26:35 2026 by rpki-client