This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131332e302f32342d3234203d3e20343031383338.roa File: 3130392e37322e3131332e302f32342d3234203d3e20343031383338.roa (raw, json) Hash identifier: xE0uq44wTm4nS/3wOsr9QiSM+oxnkUfjDxNRRIb6wLg= Subject key identifier: D9:63:0A:89:A2:2B:72:91:5F:D5:CD:50:19:C2:F8:5C:8A:B6:48:DD Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 33EC6E50781BB8531264B2AE9688FA42E3B0F10C Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131332e302f32342d3234203d3e20343031383338.roa Signing time: Thu 12 Feb 2026 19:24:56 +0000 ROA not before: Thu 12 Feb 2026 19:19:56 +0000 ROA not after: Thu 11 Feb 2027 19:24:56 +0000 asID: 401838 IP address blocks: 109.72.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ec:6e:50:78:1b:b8:53:12:64:b2:ae:96:88:fa:42:e3:b0:f1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:19:56 2026 GMT Not After : Feb 11 19:24:56 2027 GMT Subject: CN=D9630A89A22B72915FD5CD5019C2F85C8AB648DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:27:75:69:5a:16:e8:5a:fe:f7:74:5a:ff: 49:05:5d:e4:0b:6d:7a:9d:ae:6e:fa:f6:f5:89:fc: 2d:34:5a:34:81:4a:40:d1:80:1b:8d:0e:0e:8b:2d: a2:2f:7f:df:57:61:3c:58:8d:98:1b:75:98:10:eb: 9e:e4:d2:30:9d:f3:7f:fa:89:2e:3f:92:63:04:4e: 9c:e8:f1:ad:22:5f:89:39:2e:e4:33:78:91:c8:11: 56:08:dd:12:7e:16:19:de:5d:0e:72:77:2b:12:94: 06:87:f2:99:d1:cf:f8:38:1d:41:ae:8e:26:11:86: 2a:f0:5d:2c:d4:9a:a1:01:6d:e4:2d:e0:fa:f4:da: 73:93:07:12:aa:fe:b0:ef:c3:ce:aa:7c:0c:6e:36: 6b:45:c4:75:f8:d7:68:97:99:b1:85:b4:11:2f:a0: ee:eb:2c:4d:85:bc:3d:31:34:33:88:4a:24:92:e9: af:6b:c0:e6:24:e9:40:f5:eb:cd:a7:33:66:48:1b: 5f:1e:e4:a5:de:b7:98:6e:cf:8c:b7:a0:de:92:0e: b7:cb:d7:ca:d2:7d:64:3c:10:c2:de:f0:15:91:81: 25:59:43:f7:84:c7:fd:e6:79:0b:09:c3:f7:10:d4: ed:88:e9:a6:79:3d:a8:3c:c5:ca:61:d7:6e:77:a6: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:63:0A:89:A2:2B:72:91:5F:D5:CD:50:19:C2:F8:5C:8A:B6:48:DD X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131332e302f32342d3234203d3e20343031383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.113.0/24 Signature Algorithm: sha256WithRSAEncryption 74:8a:3c:a8:51:17:31:06:b5:42:23:21:44:54:7e:12:ca:82: 8d:2c:e9:ca:30:66:73:13:af:a0:02:55:1e:22:f7:69:d4:48: ed:19:5a:84:45:a2:81:5f:2f:f0:34:7d:10:e4:38:40:49:4d: 0d:73:c3:74:5a:c5:55:00:39:ab:cf:d8:51:b9:43:a5:5f:c0: 09:81:c7:f1:51:fd:cc:62:62:01:da:cc:f5:ba:a9:39:3b:d9: ec:31:a7:35:e7:14:2c:02:f7:cd:15:3e:86:23:64:ef:0a:d1: 04:54:00:fa:f7:a2:55:d6:7c:3c:bd:2e:86:f0:34:17:bf:6e: d4:a1:1c:a8:24:82:67:89:48:6c:89:9a:45:4c:b1:ed:04:89: d4:24:49:cf:2c:9c:ba:dd:4c:6e:a3:d6:b9:c5:a6:f8:f8:73: 40:0c:30:31:24:6c:09:7a:45:aa:6c:bf:39:72:b2:00:0e:2d: 7f:36:51:33:d0:77:5f:a8:08:44:42:a2:75:ed:87:55:fd:a8: 14:0f:9b:ee:fc:4f:6e:e3:09:56:08:ef:07:f1:97:db:32:79: 43:88:ea:56:4b:fe:9d:cc:c0:19:2b:80:d6:e8:ea:dd:e0:55: 3c:c9:17:b4:51:73:9d:14:05:97:49:42:2a:b8:8e:04:84:ef: 9b:ea:c8:57 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUM+xuUHgbuFMSZLKuloj6QuOw8QwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE5NTZaFw0yNzAyMTExOTI0NTZaMDMxMTAvBgNV BAMTKEQ5NjMwQTg5QTIyQjcyOTE1RkQ1Q0Q1MDE5QzJGODVDOEFCNjQ4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fSd1aVoW6Fr+93Ra/0kFXeQL bXqdrm769vWJ/C00WjSBSkDRgBuNDg6LLaIvf99XYTxYjZgbdZgQ657k0jCd83/6 iS4/kmMETpzo8a0iX4k5LuQzeJHIEVYI3RJ+FhneXQ5ydysSlAaH8pnRz/g4HUGu jiYRhirwXSzUmqEBbeQt4Pr02nOTBxKq/rDvw86qfAxuNmtFxHX412iXmbGFtBEv oO7rLE2FvD0xNDOISiSS6a9rwOYk6UD1682nM2ZIG18e5KXet5huz4y3oN6SDrfL 18rSfWQ8EMLe8BWRgSVZQ/eEx/3meQsJw/cQ1O2I6aZ5Pag8xcph1253pr5ZAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU2WMKiaIrcpFf1c1QGcL4XIq2SN0wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMx MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzEzODMzMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABtSHEwDQYJKoZIhvcNAQELBQADggEBAHSKPKhRFzEGtUIjIURUfhLKgo0s6cow ZnMTr6ACVR4i92nUSO0ZWoRFooFfL/A0fRDkOEBJTQ1zw3RaxVUAOavP2FG5Q6Vf wAmBx/FR/cxiYgHazPW6qTk72ewxpzXnFCwC980VPoYjZO8K0QRUAPr3olXWfDy9 LobwNBe/btShHKgkgmeJSGyJmkVMse0EidQkSc8snLrdTG6j1rnFpvj4c0AMMDEk bAl6RapsvzlysgAOLX82UTPQd1+oCERConXth1X9qBQPm+78T27jCVYI7wfxl9sy eUOI6lZL/p3MwBkrgNbo6t3gVTzJF7RRc50UBZdJQiq4jgSE75vqyFc= -----END CERTIFICATE-----Generated at Sat Feb 14 19:55:18 2026 by rpki-client