This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131372e302f32342d3234203d3e203631333137.roa File: 3130392e37322e3131372e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: u0YuZQg/8HWcFgsG2L+UI6xLn037kVcOpYBj3thaz18= Subject key identifier: B8:35:92:FE:FC:E8:82:50:CA:0D:C2:3A:23:70:86:80:7C:A6:85:5E Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 035925B6E8733629AC37222C1F3E0C9E31B46E96 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131372e302f32342d3234203d3e203631333137.roa Signing time: Thu 12 Feb 2026 19:03:45 +0000 ROA not before: Thu 12 Feb 2026 18:58:45 +0000 ROA not after: Thu 11 Feb 2027 19:03:45 +0000 asID: 61317 IP address blocks: 109.72.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:59:25:b6:e8:73:36:29:ac:37:22:2c:1f:3e:0c:9e:31:b4:6e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:45 2026 GMT Not After : Feb 11 19:03:45 2027 GMT Subject: CN=B83592FEFCE88250CA0DC23A237086807CA6855E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:a6:6e:42:9e:75:22:68:ce:8c:8c:6b:78: 3b:56:76:92:fb:3a:eb:59:29:ee:53:fe:f4:4b:74: fb:9e:63:e7:50:c9:64:2c:37:28:8c:2e:f7:e4:49: ca:25:fd:0a:6e:63:7f:e7:96:10:42:c5:2d:ca:c6: 94:ec:05:58:39:27:0d:d9:1c:fb:28:60:92:0c:44: 94:96:8d:28:34:2d:56:9d:18:c6:bd:0d:9d:7a:d8: df:b5:2d:15:d3:e5:a4:6c:02:62:b2:da:a8:0c:c5: 1c:21:25:0b:67:ad:74:d4:9b:64:58:b7:55:e8:42: 2b:3c:06:9f:dd:ac:56:9e:e9:5b:55:02:8e:fd:54: 41:1d:c3:2b:b5:1a:c1:af:64:46:aa:60:04:55:a5: 91:ac:c4:ad:86:53:76:97:f8:1a:b3:bb:15:85:7c: 35:2e:55:f4:7c:46:6b:b2:09:c0:4b:6b:e0:f3:00: f7:e5:43:cc:24:71:b9:56:ab:ee:7c:ea:52:a5:97: 12:5d:49:58:9d:31:da:77:0c:f4:7b:9c:9d:b7:c3: c0:a1:e2:8f:69:4f:86:1a:5b:f1:bd:4d:3b:43:3f: 73:75:96:5d:a5:52:f9:aa:1d:b5:00:b5:6e:24:30: 87:63:cc:c5:02:ca:c2:79:19:6b:7a:58:51:0b:2a: 5a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:35:92:FE:FC:E8:82:50:CA:0D:C2:3A:23:70:86:80:7C:A6:85:5E X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131372e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.117.0/24 Signature Algorithm: sha256WithRSAEncryption 09:1c:63:ce:d7:63:46:c4:32:20:80:97:10:19:85:39:d5:ad: 3a:ae:8a:ca:f3:a3:9f:39:da:19:c4:89:69:29:db:ba:60:f1: 67:38:46:08:df:ec:f4:c2:a4:71:b6:c9:51:28:67:22:73:50: 81:4a:f0:64:ea:8d:76:9f:c0:dc:65:b5:f6:08:a8:ea:83:c1: b1:a9:fe:f5:73:27:68:a3:f9:71:25:26:ed:25:1f:e9:ca:78: 41:ba:e3:57:23:89:b3:5f:88:3f:86:20:c8:a7:4f:85:bb:65: 9a:50:5f:88:7e:7e:e1:82:4d:4a:21:5f:2f:63:74:2d:eb:b4: d2:c1:aa:13:ee:0d:0b:ab:a7:d8:7d:19:a5:84:2a:79:f8:a2: 58:0f:ff:d0:99:7b:6e:54:9f:8c:0d:57:c4:2c:e8:09:1c:74: f4:b3:17:07:42:ea:49:0a:03:be:83:e3:22:53:8b:d3:a3:53: 19:48:24:10:71:82:f4:35:e6:aa:9c:1a:1c:ee:13:3f:fe:22: 62:4b:a4:0b:b7:5e:5d:b9:45:7e:73:f3:8d:c3:d0:43:8f:a7: f0:61:79:d2:86:0a:43:c8:e4:c9:6e:e9:d1:85:87:1e:a1:99: 8b:12:83:d6:4d:88:8f:fc:29:25:53:a5:0e:88:85:ad:ad:ad: 93:67:bf:9c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUA1kltuhzNimsNyIsHz4MnjG0bpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDVaFw0yNzAyMTExOTAzNDVaMDMxMTAvBgNV BAMTKEI4MzU5MkZFRkNFODgyNTBDQTBEQzIzQTIzNzA4NjgwN0NBNjg1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprKZuQp51ImjOjIxreDtWdpL7 OutZKe5T/vRLdPueY+dQyWQsNyiMLvfkScol/QpuY3/nlhBCxS3KxpTsBVg5Jw3Z HPsoYJIMRJSWjSg0LVadGMa9DZ162N+1LRXT5aRsAmKy2qgMxRwhJQtnrXTUm2RY t1XoQis8Bp/drFae6VtVAo79VEEdwyu1GsGvZEaqYARVpZGsxK2GU3aX+BqzuxWF fDUuVfR8RmuyCcBLa+DzAPflQ8wkcblWq+586lKllxJdSVidMdp3DPR7nJ23w8Ch 4o9pT4YaW/G9TTtDP3N1ll2lUvmqHbUAtW4kMIdjzMUCysJ5GWt6WFELKlrNAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUuDWS/vzoglDKDcI6I3CGgHymhV4wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMx MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA bUh1MA0GCSqGSIb3DQEBCwUAA4IBAQAJHGPO12NGxDIggJcQGYU51a06rorK86Of OdoZxIlpKdu6YPFnOEYI3+z0wqRxtslRKGcic1CBSvBk6o12n8DcZbX2CKjqg8Gx qf71cydoo/lxJSbtJR/pynhBuuNXI4mzX4g/hiDIp0+Fu2WaUF+Ifn7hgk1KIV8v Y3Qt67TSwaoT7g0Lq6fYfRmlhCp5+KJYD//QmXtuVJ+MDVfELOgJHHT0sxcHQupJ CgO+g+MiU4vTo1MZSCQQcYL0NeaqnBoc7hM//iJiS6QLt15duUV+c/ONw9BDj6fw YXnShgpDyOTJbunRhYceoZmLEoPWTYiP/CklU6UOiIWtra2TZ7+c -----END CERTIFICATE-----Generated at Sat Feb 14 19:54:53 2026 by rpki-client