This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131362e302f32342d3234203d3e2033333230.roa File: 3130392e37322e3131362e302f32342d3234203d3e2033333230.roa (raw, json) Hash identifier: XPEOromcBrHiuF9rTILtgFYMYhAnf7IeWuYX0RTf/xg= Subject key identifier: D0:74:B9:F0:DE:F8:02:51:B0:EF:38:0F:82:E3:7E:FD:5E:62:E1:90 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 483729297A635112A97E3F852ECF0121BE41F430 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131362e302f32342d3234203d3e2033333230.roa Signing time: Thu 12 Feb 2026 19:04:42 +0000 ROA not before: Thu 12 Feb 2026 18:59:42 +0000 ROA not after: Thu 11 Feb 2027 19:04:42 +0000 asID: 3320 IP address blocks: 109.72.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:37:29:29:7a:63:51:12:a9:7e:3f:85:2e:cf:01:21:be:41:f4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:59:42 2026 GMT Not After : Feb 11 19:04:42 2027 GMT Subject: CN=D074B9F0DEF80251B0EF380F82E37EFD5E62E190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:37:10:bf:d5:1c:6f:3a:07:87:b6:dd:b4: b7:97:c2:93:be:ec:e5:0b:b0:e8:f3:48:49:5f:66: 6b:03:7f:ce:82:e5:6d:f7:84:1e:10:b7:85:7f:8c: 32:31:7d:19:74:85:b1:78:e5:18:b4:ee:61:a6:38: 9f:17:74:8d:34:90:03:20:1c:ce:00:94:27:9f:29: ae:7f:99:c6:a7:bf:a1:d0:f7:86:66:a6:cd:09:36: 23:d5:49:82:03:72:b7:af:54:ed:20:29:ae:e4:23: 46:fc:f2:42:46:04:13:be:64:17:11:d8:15:2c:58: 5c:cd:7a:c3:03:29:e6:62:d4:4c:24:8d:0e:03:88: 89:23:9c:29:da:33:1b:c8:74:19:5e:b6:b8:76:07: 0a:59:60:f0:7d:12:1d:99:6a:15:64:b5:ad:4b:a6: ce:e7:74:9c:c2:aa:a0:17:a4:36:17:8f:32:87:fd: 71:f6:0f:71:6e:7d:04:89:5b:95:7c:9a:22:f3:9e: ed:cf:3c:f6:ab:75:6a:bb:34:71:6c:08:23:3c:a7: 25:f0:d2:5f:60:aa:fd:d9:6f:c6:6e:f0:87:96:3d: 92:5d:be:04:84:80:23:5c:63:ed:41:d3:b5:50:2e: 4b:a5:6a:83:79:c6:f6:1e:cf:ee:c0:75:95:c0:7f: cc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:74:B9:F0:DE:F8:02:51:B0:EF:38:0F:82:E3:7E:FD:5E:62:E1:90 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131362e302f32342d3234203d3e2033333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.116.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:80:41:e9:3d:bc:ac:d0:3f:6e:f4:cd:17:c8:33:7b:73:41: 01:07:a2:74:39:ac:f4:f1:d4:ce:0b:ee:c0:ab:43:79:15:2e: 26:c7:89:ae:c4:fb:09:2e:1e:97:47:12:ad:ba:1e:21:1d:6f: 1a:40:2f:95:b8:3f:e5:59:30:12:80:34:c6:9b:aa:a2:bc:f7: 5f:b2:33:e6:af:8f:8c:db:00:b2:cb:21:cc:db:7f:78:2a:2d: 8f:db:f1:19:be:42:d0:81:aa:09:62:d4:21:dd:51:9c:1d:3e: 91:fc:8e:51:5d:b6:2a:71:c7:23:00:7a:82:36:ad:34:d8:89: 8d:8f:46:90:03:1d:6d:6d:ce:36:96:9f:57:1f:a2:7c:a2:65: d4:3e:2c:5f:00:80:69:8e:bd:32:85:e1:84:90:00:f3:d0:46: 26:7e:c4:b1:51:c0:a7:80:b1:2b:3a:a1:fb:65:c2:c9:7a:d4: c5:c8:f8:7a:11:1b:88:a9:c5:a7:3d:b5:1f:84:b8:f9:29:9a: 18:00:6e:38:15:ca:45:40:81:c3:b5:e7:1e:f2:74:ab:55:06: d1:c6:05:16:5e:a2:e1:ed:f4:4b:78:82:eb:48:a8:6d:07:fa: 21:3c:79:38:b2:a3:c2:85:f9:d3:0b:bb:da:e1:b2:be:7d:80: 70:87:31:f9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSDcpKXpjURKpfj+FLs8BIb5B9DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU5NDJaFw0yNzAyMTExOTA0NDJaMDMxMTAvBgNV BAMTKEQwNzRCOUYwREVGODAyNTFCMEVGMzgwRjgyRTM3RUZENUU2MkUxOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86zcQv9UcbzoHh7bdtLeXwpO+ 7OULsOjzSElfZmsDf86C5W33hB4Qt4V/jDIxfRl0hbF45Ri07mGmOJ8XdI00kAMg HM4AlCefKa5/mcanv6HQ94Zmps0JNiPVSYIDcrevVO0gKa7kI0b88kJGBBO+ZBcR 2BUsWFzNesMDKeZi1EwkjQ4DiIkjnCnaMxvIdBletrh2BwpZYPB9Eh2ZahVkta1L ps7ndJzCqqAXpDYXjzKH/XH2D3FufQSJW5V8miLznu3PPPardWq7NHFsCCM8pyXw 0l9gqv3Zb8Zu8IeWPZJdvgSEgCNcY+1B07VQLkulaoN5xvYez+7AdZXAf8y7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU0HS58N74AlGw7zgPguN+/V5i4ZAwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMx MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMzMzIzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1I dDANBgkqhkiG9w0BAQsFAAOCAQEAC4BB6T28rNA/bvTNF8gze3NBAQeidDms9PHU zgvuwKtDeRUuJseJrsT7CS4el0cSrboeIR1vGkAvlbg/5VkwEoA0xpuqorz3X7Iz 5q+PjNsAssshzNt/eCotj9vxGb5C0IGqCWLUId1RnB0+kfyOUV22KnHHIwB6gjat NNiJjY9GkAMdbW3ONpafVx+ifKJl1D4sXwCAaY69MoXhhJAA89BGJn7EsVHAp4Cx Kzqh+2XCyXrUxcj4ehEbiKnFpz21H4S4+SmaGABuOBXKRUCBw7XnHvJ0q1UG0cYF Fl6i4e30S3iC60iobQf6ITx5OLKjwoX50wu72uGyvn2AcIcx+Q== -----END CERTIFICATE-----Generated at Sat Feb 14 19:54:18 2026 by rpki-client