This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34362e302f32332d3234203d3e20383334.roa File: 3231322e37342e34362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: zbjmn3yUTAJSkXaJcm86fgJNAmhGhli1GKL2h9x8Fp8= Subject key identifier: 6E:C7:B8:7E:A5:68:7C:64:40:64:CF:7A:FE:FE:C4:0B:33:19:E3:60 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 302FB273D88554340B1CEF3C643948C19AE85B12 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34362e302f32332d3234203d3e20383334.roa Signing time: Sat 14 Feb 2026 10:06:51 +0000 ROA not before: Sat 14 Feb 2026 10:01:51 +0000 ROA not after: Sat 13 Feb 2027 10:06:51 +0000 asID: 834 IP address blocks: 212.74.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2f:b2:73:d8:85:54:34:0b:1c:ef:3c:64:39:48:c1:9a:e8:5b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 14 10:01:51 2026 GMT Not After : Feb 13 10:06:51 2027 GMT Subject: CN=6EC7B87EA5687C644064CF7AFEFEC40B3319E360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:7b:a5:51:b2:db:aa:80:f9:84:9d:8b:91: e7:a7:5c:7f:a2:a1:eb:49:71:f0:02:7e:45:4c:f9: aa:e0:2e:be:d1:cc:81:91:c9:9a:23:d9:ae:a0:db: 9e:b3:fd:1a:0f:64:3e:10:e5:a9:3a:71:f8:9d:24: 55:67:d2:c3:60:7c:dc:df:7f:11:8e:fb:bd:72:60: da:00:eb:1a:fe:b3:3f:c3:0c:5f:87:00:33:ce:3e: f6:cb:25:d3:35:c3:19:98:83:f1:5d:89:3e:81:53: 89:59:2f:36:c5:d5:65:4e:1f:be:d9:26:18:67:2e: e8:69:cf:be:83:01:d9:37:fe:48:82:ba:bf:3b:fe: ce:79:86:7e:ec:b8:8d:a6:22:31:bf:0b:eb:db:2d: 21:c0:a7:17:1c:d7:20:ad:ca:65:42:d4:6f:ec:50: 85:a1:58:7e:6c:ec:36:4c:ba:d6:03:5d:42:bd:ca: ed:e0:c9:71:c5:e0:ae:1b:93:c5:36:10:d5:6b:62: 8b:88:6d:be:65:9a:13:bf:e8:40:de:4c:2d:79:9c: 0b:08:7a:be:10:84:00:8c:7d:99:b8:94:13:ca:0f: 5e:c4:48:07:cc:2a:b7:27:10:b3:f0:d3:27:ea:bd: bb:cb:5a:ab:c9:7c:df:05:7d:98:ad:5d:45:b2:e9: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C7:B8:7E:A5:68:7C:64:40:64:CF:7A:FE:FE:C4:0B:33:19:E3:60 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.46.0/23 Signature Algorithm: sha256WithRSAEncryption db:ed:5d:a8:54:12:7f:b0:f2:53:0c:e1:2b:a8:02:53:27:89: a9:da:2d:e4:ec:6e:59:cc:64:0b:01:88:74:e1:cb:1f:00:03: dc:68:2e:e2:64:16:32:39:2d:df:d0:e4:7b:9c:4b:fc:81:1f: 6f:f8:77:13:92:99:fb:b5:95:8e:0c:cd:f1:51:bb:58:57:68: ec:36:01:c7:02:8c:f2:39:bc:69:8d:2a:ff:b3:75:20:e1:f3: 9f:a1:2a:57:b9:fe:a5:46:84:12:e1:f8:6e:51:66:8e:08:4d: 31:12:aa:64:cc:d0:08:cd:d0:5c:d5:76:4d:bc:f3:ed:9d:7e: 7c:00:59:ef:58:c0:db:a1:4f:4d:41:29:87:7e:2e:44:f8:28: 01:5e:68:44:4d:1f:86:db:40:cb:10:ed:43:e2:01:03:8e:1d: b6:87:f2:47:8f:97:b6:59:21:2c:92:89:2c:bc:3e:30:aa:23: 24:54:31:34:20:c8:84:c8:26:d7:58:de:b0:53:95:42:6f:d2: 90:2a:a9:1e:61:58:88:8a:53:78:13:0d:6b:bb:0a:16:f6:6a: f8:86:48:26:46:85:4e:8d:73:c4:7d:52:1f:a8:2b:f4:ce:c0: ad:95:11:cc:d5:75:25:48:c8:41:a8:bf:50:9a:44:dc:66:54: d2:2e:e2:03 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUMC+yc9iFVDQLHO88ZDlIwZroWxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMTQxMDAxNTFaFw0yNzAyMTMxMDA2NTFaMDMxMTAvBgNV BAMTKDZFQzdCODdFQTU2ODdDNjQ0MDY0Q0Y3QUZFRkVDNDBCMzMxOUUzNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDHulUbLbqoD5hJ2LkeenXH+i oetJcfACfkVM+argLr7RzIGRyZoj2a6g256z/RoPZD4Q5ak6cfidJFVn0sNgfNzf fxGO+71yYNoA6xr+sz/DDF+HADPOPvbLJdM1wxmYg/FdiT6BU4lZLzbF1WVOH77Z JhhnLuhpz76DAdk3/kiCur87/s55hn7suI2mIjG/C+vbLSHApxcc1yCtymVC1G/s UIWhWH5s7DZMutYDXUK9yu3gyXHF4K4bk8U2ENVrYouIbb5lmhO/6EDeTC15nAsI er4QhACMfZm4lBPKD17ESAfMKrcnELPw0yfqvbvLWqvJfN8FfZitXUWy6WsxAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUbse4fqVofGRAZM96/v7ECzMZ42AwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDM2 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1EouMA0G CSqGSIb3DQEBCwUAA4IBAQDb7V2oVBJ/sPJTDOErqAJTJ4mp2i3k7G5ZzGQLAYh0 4csfAAPcaC7iZBYyOS3f0OR7nEv8gR9v+HcTkpn7tZWODM3xUbtYV2jsNgHHAozy ObxpjSr/s3Ug4fOfoSpXuf6lRoQS4fhuUWaOCE0xEqpkzNAIzdBc1XZNvPPtnX58 AFnvWMDboU9NQSmHfi5E+CgBXmhETR+G20DLEO1D4gEDjh22h/JHj5e2WSEskoks vD4wqiMkVDE0IMiEyCbXWN6wU5VCb9KQKqkeYViIilN4Ew1ruwoW9mr4hkgmRoVO jXPEfVIfqCv0zsCtlRHM1XUlSMhBqL9QmkTcZlTSLuID -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:07 2026 by rpki-client