This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131342e302f32332d3234203d3e20343030383130.roa File: 3130392e37322e3131342e302f32332d3234203d3e20343030383130.roa (raw, json) Hash identifier: fAFf6j/pxZegvTYNhwoKtePur8asLGRezi1EsZn1e48= Subject key identifier: 38:0F:33:EE:29:70:A7:FD:1C:C8:9B:8E:7F:EB:0B:5D:54:62:8D:77 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 593ACA18A08FBA180159D48FFE9911B3A509CB1A Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131342e302f32332d3234203d3e20343030383130.roa Signing time: Thu 12 Feb 2026 19:13:32 +0000 ROA not before: Thu 12 Feb 2026 19:08:32 +0000 ROA not after: Thu 11 Feb 2027 19:13:32 +0000 asID: 400810 IP address blocks: 109.72.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3a:ca:18:a0:8f:ba:18:01:59:d4:8f:fe:99:11:b3:a5:09:cb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:08:32 2026 GMT Not After : Feb 11 19:13:32 2027 GMT Subject: CN=380F33EE2970A7FD1CC89B8E7FEB0B5D54628D77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:97:ad:3e:e3:31:ac:15:23:3d:16:0f:bb:46: 18:cd:2e:dd:39:2a:57:9d:2c:a1:aa:d3:9e:16:16: b6:e8:a5:c9:a7:19:43:66:1d:3b:77:d3:2a:4c:8e: 09:0d:46:de:25:94:a0:78:3b:dd:4c:18:47:1c:f5: 2a:12:d2:94:76:fb:25:e3:e1:9d:da:2f:ec:b1:b1: 89:a1:18:1e:9f:d2:d2:9a:1b:d9:c1:0d:9f:0d:69: f6:0b:5e:b1:f3:82:6e:f7:51:f5:db:88:a4:70:04: ea:72:db:96:7b:51:20:e5:ff:61:20:7f:4b:f7:2e: cd:00:71:d5:f8:fb:9b:7c:c3:d3:97:76:88:9f:5c: 2d:55:7e:c0:6e:4c:17:a0:ed:d4:a8:13:f6:75:20: d3:8c:ea:a0:ff:5d:cc:e7:f4:ed:81:e6:ee:ea:04: 9b:7d:8a:cb:c8:b7:ab:c0:2a:49:23:4d:b8:c0:e4: 7b:74:ab:ff:21:71:04:ff:0b:88:1f:7b:f1:32:9b: 03:0a:d2:75:9f:56:6b:6a:a7:d7:26:33:26:c9:e2: fe:ff:ee:a1:cc:1e:c8:e6:c8:cd:04:f1:b8:e1:e7: c5:19:15:2f:65:3e:8b:60:b3:86:43:7a:8f:34:d8: bd:a1:c1:1f:54:75:08:a0:18:6a:6c:33:99:4d:1f: 90:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0F:33:EE:29:70:A7:FD:1C:C8:9B:8E:7F:EB:0B:5D:54:62:8D:77 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131342e302f32332d3234203d3e20343030383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.114.0/23 Signature Algorithm: sha256WithRSAEncryption 01:00:92:a7:26:62:bb:af:5c:44:61:d3:d7:dd:a7:d1:35:a0: 29:71:9d:56:24:48:a0:9e:fd:94:90:fd:5b:64:a0:a3:f6:74: 7e:48:25:5f:97:bc:49:17:39:9d:87:9f:b2:69:15:3e:b0:e5: cc:d6:75:16:5c:22:ad:8d:08:65:fa:a1:8c:50:36:73:eb:fb: de:b9:81:c9:26:ba:98:61:9b:b0:c8:9b:6d:99:3c:d6:37:04: 64:fa:47:bf:aa:6b:56:80:60:be:e9:d3:ec:7c:34:a6:a8:51: cd:82:c0:1a:22:28:9c:5e:73:44:75:bc:c1:97:21:99:af:b4: 19:61:40:1e:1e:33:1a:7e:ec:76:47:6e:e4:3f:73:99:41:a6: 52:f5:a7:c9:88:65:a2:ed:44:ee:a3:ab:87:66:d4:2d:7f:8a: 3e:40:dc:1c:2f:cd:fd:22:6c:59:36:29:7a:c7:1a:3c:78:89: ad:6c:eb:3c:48:53:5d:8e:be:b3:51:a0:e6:a6:8a:59:9a:58: 4c:00:2f:f6:91:c7:fb:56:00:b2:66:fb:a3:38:e5:71:60:e7: 67:68:8c:56:5b:ef:78:a3:af:4e:d3:8f:93:b8:c3:d1:ca:1b: a3:08:e2:6e:36:6e:43:c6:4b:e4:48:2c:c6:e5:a8:4f:78:cd: f3:79:d8:18 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUWTrKGKCPuhgBWdSP/pkRs6UJyxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTA4MzJaFw0yNzAyMTExOTEzMzJaMDMxMTAvBgNV BAMTKDM4MEYzM0VFMjk3MEE3RkQxQ0M4OUI4RTdGRUIwQjVENTQ2MjhENzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWl60+4zGsFSM9Fg+7RhjNLt05 KledLKGq054WFrbopcmnGUNmHTt30ypMjgkNRt4llKB4O91MGEcc9SoS0pR2+yXj 4Z3aL+yxsYmhGB6f0tKaG9nBDZ8NafYLXrHzgm73UfXbiKRwBOpy25Z7USDl/2Eg f0v3Ls0AcdX4+5t8w9OXdoifXC1VfsBuTBeg7dSoE/Z1INOM6qD/Xczn9O2B5u7q BJt9isvIt6vAKkkjTbjA5Ht0q/8hcQT/C4gfe/EymwMK0nWfVmtqp9cmMybJ4v7/ 7qHMHsjmyM0E8bjh58UZFS9lPotgs4ZDeo802L2hwR9UdQigGGpsM5lNH5DbAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUOA8z7ilwp/0cyJuOf+sLXVRijXcwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMx MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDMwMzAzODMxMzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFtSHIwDQYJKoZIhvcNAQELBQADggEBAAEAkqcmYruvXERh09fdp9E1oClxnVYk SKCe/ZSQ/VtkoKP2dH5IJV+XvEkXOZ2Hn7JpFT6w5czWdRZcIq2NCGX6oYxQNnPr +965gckmuphhm7DIm22ZPNY3BGT6R7+qa1aAYL7p0+x8NKaoUc2CwBoiKJxec0R1 vMGXIZmvtBlhQB4eMxp+7HZHbuQ/c5lBplL1p8mIZaLtRO6jq4dm1C1/ij5A3Bwv zf0ibFk2KXrHGjx4ia1s6zxIU12OvrNRoOamilmaWEwAL/aRx/tWALJm+6M45XFg 52dojFZb73ijr07Tj5O4w9HKG6MI4m42bkPGS+RILMblqE94zfN52Bg= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:17 2026 by rpki-client