This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32332d3234203d3e20383334.roa File: 3231322e37342e35362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: 5ID8e59IxV/ZQoZE9tRWbOmftgiQeyMYk6Px2I0dreQ= Subject key identifier: E6:BF:A8:A9:DB:A1:CF:F6:94:C4:39:02:4C:89:00:8E:DD:DE:C7:F7 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 2B9C3DAF5823477D47CB5F0495A1CD1E614335FC Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32332d3234203d3e20383334.roa Signing time: Fri 06 Feb 2026 04:14:22 +0000 ROA not before: Fri 06 Feb 2026 04:09:22 +0000 ROA not after: Fri 05 Feb 2027 04:14:22 +0000 asID: 834 IP address blocks: 212.74.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:9c:3d:af:58:23:47:7d:47:cb:5f:04:95:a1:cd:1e:61:43:35:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 6 04:09:22 2026 GMT Not After : Feb 5 04:14:22 2027 GMT Subject: CN=E6BFA8A9DBA1CFF694C439024C89008EDDDEC7F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b7:86:5e:96:b6:06:d6:8b:06:21:e9:52:aa: 23:c2:4f:d4:a5:9b:51:8d:bc:37:77:b9:f1:9b:ea: c8:70:9b:57:ab:dc:34:1c:85:4f:c5:98:98:86:33: e3:f6:d2:ca:9f:33:ff:00:af:3f:1c:12:aa:cc:9c: b6:0f:29:85:5c:87:a2:8e:ea:66:5a:f9:af:a1:6b: 7b:8a:bb:3f:d3:af:0e:6e:6c:3e:2e:02:62:6d:a9: 8d:a2:69:16:4a:e9:db:f1:a1:39:c0:8b:4f:da:2c: 59:e9:7b:b1:aa:46:41:3b:85:cf:42:f3:6e:3b:00: fb:39:e3:45:73:b1:6a:85:91:7c:18:67:c4:85:a8: 14:b7:a7:5d:90:28:5c:b5:7c:93:eb:27:e4:72:87: 26:de:aa:4b:4d:88:cf:99:d0:73:61:fa:27:00:d4: f9:93:a8:c4:f1:2f:90:f5:48:65:2c:3c:56:f6:b5: 8f:48:11:75:9c:d6:2a:08:44:2f:62:64:b7:01:a0: 01:d1:d2:fe:13:d9:73:93:b4:a2:94:a1:60:ac:67: 93:53:12:a0:6a:48:2f:02:ff:75:7d:bf:38:89:ef: d4:e4:38:06:32:51:1c:0e:e6:c9:17:f3:c3:cf:1b: f5:80:2b:58:32:a8:b5:a6:80:f2:b1:7c:bc:29:da: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BF:A8:A9:DB:A1:CF:F6:94:C4:39:02:4C:89:00:8E:DD:DE:C7:F7 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.56.0/23 Signature Algorithm: sha256WithRSAEncryption cb:69:c4:5d:b5:66:07:48:11:28:62:92:04:f2:97:51:49:05: ca:68:cb:91:a7:2c:ce:65:90:b2:29:c6:2f:83:2e:fa:63:13: 1a:ec:82:54:a9:1a:e8:a5:72:c9:c2:1a:f5:b5:4e:ac:7c:29: 07:fe:e0:f8:18:34:de:b3:39:17:1d:d7:30:90:61:cd:8a:6d: 8a:96:3c:31:ad:95:de:83:72:c0:26:19:a2:a1:d0:42:e7:49: 8e:12:81:a8:61:ce:f6:1b:18:a6:bd:f2:26:59:72:5b:d7:6a: 9c:14:b1:e9:f6:7d:3c:0f:af:6c:56:82:85:02:ea:43:0a:de: 86:77:89:9e:b6:f4:a6:8c:63:cd:14:0b:4a:40:2f:83:3b:7f: 2f:75:41:07:23:64:37:25:e4:d9:68:45:f5:a2:59:4f:ba:6a: 50:8a:64:65:e8:f4:e2:71:9b:7a:90:18:b9:74:97:76:55:a1: 34:57:bc:5a:07:80:0d:58:27:9e:a8:58:bf:5f:f6:99:56:ef: 75:02:02:0a:49:82:c7:c5:e6:80:18:89:96:cc:88:ca:af:8e: 1d:1d:43:4a:6f:69:8a:a5:77:d6:d3:f1:b2:01:3c:6c:f9:73: 41:f7:29:c7:09:1d:c2:ce:54:48:64:68:15:d3:a2:38:aa:93: dc:d3:b7:e8 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUK5w9r1gjR31Hy18ElaHNHmFDNfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMDYwNDA5MjJaFw0yNzAyMDUwNDE0MjJaMDMxMTAvBgNV BAMTKEU2QkZBOEE5REJBMUNGRjY5NEM0MzkwMjRDODkwMDhFRERERUM3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdt4ZelrYG1osGIelSqiPCT9Sl m1GNvDd3ufGb6shwm1er3DQchU/FmJiGM+P20sqfM/8Arz8cEqrMnLYPKYVch6KO 6mZa+a+ha3uKuz/Trw5ubD4uAmJtqY2iaRZK6dvxoTnAi0/aLFnpe7GqRkE7hc9C 8247APs540VzsWqFkXwYZ8SFqBS3p12QKFy1fJPrJ+RyhybeqktNiM+Z0HNh+icA 1PmTqMTxL5D1SGUsPFb2tY9IEXWc1ioIRC9iZLcBoAHR0v4T2XOTtKKUoWCsZ5NT EqBqSC8C/3V9vziJ79TkOAYyURwO5skX88PPG/WAK1gyqLWmgPKxfLwp2hFlAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU5r+oqduhz/aUxDkCTIkAjt3ex/cwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNTM2 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1Eo4MA0G CSqGSIb3DQEBCwUAA4IBAQDLacRdtWYHSBEoYpIE8pdRSQXKaMuRpyzOZZCyKcYv gy76YxMa7IJUqRropXLJwhr1tU6sfCkH/uD4GDTeszkXHdcwkGHNim2KljwxrZXe g3LAJhmiodBC50mOEoGoYc72GximvfImWXJb12qcFLHp9n08D69sVoKFAupDCt6G d4metvSmjGPNFAtKQC+DO38vdUEHI2Q3JeTZaEX1ollPumpQimRl6PTicZt6kBi5 dJd2VaE0V7xaB4ANWCeeqFi/X/aZVu91AgIKSYLHxeaAGImWzIjKr44dHUNKb2mK pXfW0/GyATxs+XNB9ynHCR3CzlRIZGgV06I4qpPc07fo -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:08 2026 by rpki-client