This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131382e302f32342d3234203d3e203538303631.roa File: 3130392e37322e3131382e302f32342d3234203d3e203538303631.roa (raw, json) Hash identifier: 3YbPihJ6MucvV9JSafw2kX8oKEII4SGsU1pP8N2lJZo= Subject key identifier: 76:2B:3F:02:88:E2:7B:01:86:AB:72:21:89:5C:F6:41:69:78:48:EF Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 79AC3FC0675D66BB68C803C877AF85B1D89C6433 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131382e302f32342d3234203d3e203538303631.roa Signing time: Thu 12 Feb 2026 19:03:46 +0000 ROA not before: Thu 12 Feb 2026 18:58:46 +0000 ROA not after: Thu 11 Feb 2027 19:03:46 +0000 asID: 58061 IP address blocks: 109.72.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ac:3f:c0:67:5d:66:bb:68:c8:03:c8:77:af:85:b1:d8:9c:64:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:46 2026 GMT Not After : Feb 11 19:03:46 2027 GMT Subject: CN=762B3F0288E27B0186AB7221895CF641697848EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:58:41:71:08:23:e8:c9:67:30:75:0d:58: 9a:47:b5:cb:7c:80:16:26:26:d7:a3:fe:dd:54:7d: 97:eb:65:58:b9:61:5e:9c:a2:5d:2a:25:5f:22:6d: 1b:18:7b:e6:59:d4:34:18:1d:e7:b0:c0:e0:b3:b8: c7:fc:a1:09:96:66:f0:24:38:86:a6:12:7b:c0:50: 71:c6:e6:cc:d8:be:ab:ae:54:42:1f:dc:40:40:3a: 2c:88:2b:e0:f7:87:a0:59:04:6a:a7:ac:2a:a6:f7: 5f:e4:41:41:cf:4b:36:6b:f5:3e:17:d5:c9:d8:67: e3:05:14:dc:14:5c:37:fc:a2:d0:03:ed:5e:39:2d: 20:a5:5f:42:49:18:5e:ae:18:8b:44:a0:10:a6:6d: b0:0e:b2:43:2d:b8:78:ae:78:58:89:6d:4d:09:f9: 0d:54:ed:ad:f1:15:66:c9:d8:17:5c:43:a7:8b:1b: 81:31:5e:fa:a4:0b:31:8b:77:5a:46:5f:32:af:f2: 1f:5c:a6:d6:12:ee:a8:56:4d:7e:90:2e:43:ba:f4: 9b:fb:cf:97:b0:3a:77:f3:26:a3:44:f7:6e:fd:8b: 82:52:94:bd:48:32:b1:c5:25:ab:1e:a9:ee:18:3f: 62:f5:94:0e:0a:3a:f1:95:1a:15:de:6e:90:93:78: 6b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2B:3F:02:88:E2:7B:01:86:AB:72:21:89:5C:F6:41:69:78:48:EF X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131382e302f32342d3234203d3e203538303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.118.0/24 Signature Algorithm: sha256WithRSAEncryption a4:6c:57:52:96:e8:17:2e:45:09:59:32:9b:98:bd:4b:97:06: ae:57:92:07:bd:04:72:d7:10:09:69:35:96:38:20:a1:9a:b1: ef:31:37:58:58:90:e4:3a:90:c3:88:c8:fc:75:ed:25:93:5d: 92:f7:e2:6f:96:45:ef:8b:af:25:de:ed:52:1a:a6:b7:ba:27: 86:8d:a7:1b:14:70:fa:73:57:b0:21:20:bc:4c:91:21:33:93: 06:bb:2f:f8:02:da:b4:94:54:1a:43:83:4f:ac:c8:ee:f0:75: fe:9d:d6:b1:eb:0c:e8:af:e7:d6:b3:b7:f2:bb:d4:07:5d:fa: e7:8b:f8:e8:31:56:96:8e:6d:fe:e2:6e:5d:e2:94:a9:19:61: 7f:c5:50:49:ec:c7:42:60:2b:ac:1c:fd:3b:75:60:a1:80:c8: cd:34:21:ba:21:e1:e1:47:67:df:ad:7d:d7:5a:0e:ca:4e:81: 7c:a7:d0:84:32:94:a7:c9:b9:b6:da:ae:a6:5e:0b:1e:16:2b: 9b:29:5a:13:34:b3:a2:d3:50:65:24:e6:4f:62:c6:0d:12:b7: 9c:a6:36:2c:4e:06:8d:b0:cd:27:48:e0:97:49:1e:8e:88:ac: 59:66:14:3e:36:3f:eb:90:21:ed:58:eb:fa:ea:4e:97:45:18: 9d:dc:f3:54 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeaw/wGddZrtoyAPId6+FsdicZDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDZaFw0yNzAyMTExOTAzNDZaMDMxMTAvBgNV BAMTKDc2MkIzRjAyODhFMjdCMDE4NkFCNzIyMTg5NUNGNjQxNjk3ODQ4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdJ1hBcQgj6MlnMHUNWJpHtct8 gBYmJtej/t1UfZfrZVi5YV6col0qJV8ibRsYe+ZZ1DQYHeewwOCzuMf8oQmWZvAk OIamEnvAUHHG5szYvquuVEIf3EBAOiyIK+D3h6BZBGqnrCqm91/kQUHPSzZr9T4X 1cnYZ+MFFNwUXDf8otAD7V45LSClX0JJGF6uGItEoBCmbbAOskMtuHiueFiJbU0J +Q1U7a3xFWbJ2BdcQ6eLG4ExXvqkCzGLd1pGXzKv8h9cptYS7qhWTX6QLkO69Jv7 z5ewOnfzJqNE9279i4JSlL1IMrHFJaseqe4YP2L1lA4KOvGVGhXebpCTeGtTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUdis/AojiewGGq3IhiVz2QWl4SO8wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMx MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM4MzAzNjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA bUh2MA0GCSqGSIb3DQEBCwUAA4IBAQCkbFdSlugXLkUJWTKbmL1LlwauV5IHvQRy 1xAJaTWWOCChmrHvMTdYWJDkOpDDiMj8de0lk12S9+JvlkXvi68l3u1SGqa3uieG jacbFHD6c1ewISC8TJEhM5MGuy/4Atq0lFQaQ4NPrMju8HX+ndax6wzor+fWs7fy u9QHXfrni/joMVaWjm3+4m5d4pSpGWF/xVBJ7MdCYCusHP07dWChgMjNNCG6IeHh R2ffrX3XWg7KToF8p9CEMpSnybm22q6mXgseFiubKVoTNLOi01BlJOZPYsYNErec pjYsTgaNsM0nSOCXSR6OiKxZZhQ+Nj/rkCHtWOv66k6XRRid3PNU -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:52 2026 by rpki-client