This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35392e302f32342d3234203d3e20383334.roa File: 3231322e37342e35392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: lzvKDPrWC+iYg1JZPmug4gt+JkIsjKC3gftAZpYXWWI= Subject key identifier: 2B:8E:CC:80:E9:A6:3B:A7:68:19:83:CA:F5:1E:5F:DD:C4:E2:19:94 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 6C68B029B38DDFCE9E02F8DBDB156A48A64899C2 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35392e302f32342d3234203d3e20383334.roa Signing time: Fri 06 Feb 2026 04:14:22 +0000 ROA not before: Fri 06 Feb 2026 04:09:22 +0000 ROA not after: Fri 05 Feb 2027 04:14:22 +0000 asID: 834 IP address blocks: 212.74.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:68:b0:29:b3:8d:df:ce:9e:02:f8:db:db:15:6a:48:a6:48:99:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 6 04:09:22 2026 GMT Not After : Feb 5 04:14:22 2027 GMT Subject: CN=2B8ECC80E9A63BA7681983CAF51E5FDDC4E21994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c4:fd:59:6a:a4:ce:9d:76:f0:87:cd:ec:0c: 03:a7:a1:bb:11:a4:84:54:5b:09:63:f5:ef:7b:7a: 4a:7e:4d:1c:72:1f:5e:29:f9:7d:48:76:5e:92:35: 20:9d:10:8c:d6:7b:95:fd:10:98:b7:97:fb:36:8d: d7:b2:d1:d3:03:c5:e2:d5:8f:77:40:c9:26:1e:0e: b0:d1:42:7d:16:fe:96:dd:3f:55:48:f3:59:b0:2d: 69:dd:92:55:08:db:db:de:61:fd:05:d2:42:6c:48: cd:9c:d1:0c:09:dc:71:d9:07:8e:e6:69:fc:b0:00: b0:80:0d:fe:04:2f:4f:fe:bb:02:98:43:9b:78:64: 37:9e:37:f2:ce:35:a3:cf:ae:47:b8:13:a5:ab:c9: 36:45:fa:47:cd:b6:65:f5:40:2c:7d:a1:82:e0:50: 05:bd:69:0f:c1:d8:62:42:b2:31:58:73:eb:c8:e7: b3:3a:4b:72:12:09:2d:f8:fa:c3:be:d8:c2:0b:b6: 2a:d1:5b:11:92:c4:1d:61:31:4f:d0:ba:87:45:68: d7:46:0b:45:34:82:16:62:b9:66:a9:92:a9:7d:42: da:61:ad:08:7d:8c:9d:1a:22:8f:11:19:4d:0f:b4: 9a:97:aa:b6:d4:56:c5:1f:d0:1e:61:68:28:d9:fd: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8E:CC:80:E9:A6:3B:A7:68:19:83:CA:F5:1E:5F:DD:C4:E2:19:94 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.59.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:28:9f:a5:ee:28:32:14:03:78:7e:68:5e:10:69:b7:be:d9: e4:d5:76:0f:ee:82:ef:28:da:90:b4:81:90:47:a7:31:ac:34: 40:17:57:62:6b:da:39:7f:4b:a3:05:24:5c:c9:32:98:02:e2: 97:3d:d1:39:45:a0:43:d4:44:2c:e2:33:ad:43:11:3d:13:c3: 15:dd:84:70:c8:f9:e4:74:e2:46:39:c1:4a:ca:cb:ec:2c:d5: 63:c9:27:16:4e:ad:25:62:8e:2e:f7:e3:b8:c6:77:b4:0e:43: ab:d8:c7:ca:d5:10:29:3f:4d:24:46:bc:0e:26:ac:09:cf:c6: 17:3d:ca:e1:3b:df:6c:d9:b5:f0:21:c4:67:02:7f:d1:c8:84: ef:0d:d9:4c:59:ec:b0:09:8b:0d:b1:3e:a0:fd:4a:cb:c0:c5: 0a:e3:79:75:01:3a:89:76:33:a5:8d:1a:ef:40:e8:86:b0:5e: f9:da:ef:66:d0:a7:03:bb:93:4c:1b:2c:3d:8b:09:79:f9:a3: 3a:35:54:8d:09:ab:41:54:03:e3:06:19:2a:dd:0a:27:be:77: de:87:73:23:f4:c2:0d:a9:8c:4f:e2:0e:6b:7d:7d:3b:0f:1c: 44:87:a6:30:5c:f4:41:aa:bc:ac:2d:7f:83:7e:d4:ce:ad:b9: 70:6e:01:c6 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUbGiwKbON386eAvjb2xVqSKZImcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMDYwNDA5MjJaFw0yNzAyMDUwNDE0MjJaMDMxMTAvBgNV BAMTKDJCOEVDQzgwRTlBNjNCQTc2ODE5ODNDQUY1MUU1RkREQzRFMjE5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgxP1ZaqTOnXbwh83sDAOnobsR pIRUWwlj9e97ekp+TRxyH14p+X1Idl6SNSCdEIzWe5X9EJi3l/s2jdey0dMDxeLV j3dAySYeDrDRQn0W/pbdP1VI81mwLWndklUI29veYf0F0kJsSM2c0QwJ3HHZB47m afywALCADf4EL0/+uwKYQ5t4ZDeeN/LONaPPrke4E6WryTZF+kfNtmX1QCx9oYLg UAW9aQ/B2GJCsjFYc+vI57M6S3ISCS34+sO+2MILtirRWxGSxB1hMU/QuodFaNdG C0U0ghZiuWapkql9QtphrQh9jJ0aIo8RGU0PtJqXqrbUVsUf0B5haCjZ/UTnAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUK47MgOmmO6doGYPK9R5f3cTiGZQwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNTM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Eo7MA0G CSqGSIb3DQEBCwUAA4IBAQBMKJ+l7igyFAN4fmheEGm3vtnk1XYP7oLvKNqQtIGQ R6cxrDRAF1dia9o5f0ujBSRcyTKYAuKXPdE5RaBD1EQs4jOtQxE9E8MV3YRwyPnk dOJGOcFKysvsLNVjyScWTq0lYo4u9+O4xne0DkOr2MfK1RApP00kRrwOJqwJz8YX PcrhO99s2bXwIcRnAn/RyITvDdlMWeywCYsNsT6g/UrLwMUK43l1ATqJdjOljRrv QOiGsF752u9m0KcDu5NMGyw9iwl5+aM6NVSNCatBVAPjBhkq3Qonvnfeh3Mj9MIN qYxP4g5rfX07DxxEh6YwXPRBqrysLX+DftTOrblwbgHG -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:55 2026 by rpki-client