This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131392e302f32342d3234203d3e20323633373032.roa
File: 3130392e37322e3131392e302f32342d3234203d3e20323633373032.roa (raw, json)
Hash identifier: VMFllRf3m/5EPRz+M2WCdbIlGePIFEg6cfQ/NoIiFxg=
Subject key identifier: E5:65:F6:40:EB:88:D4:71:37:6D:80:09:F2:40:38:01:8A:34:38:53
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 4850ABB044E8EF9679C7248D5A52E50CBCA8DCAE
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131392e302f32342d3234203d3e20323633373032.roa
Signing time: Thu 12 Feb 2026 19:03:47 +0000
ROA not before: Thu 12 Feb 2026 18:58:47 +0000
ROA not after: Thu 11 Feb 2027 19:03:47 +0000
asID: 263702
IP address blocks: 109.72.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:50:ab:b0:44:e8:ef:96:79:c7:24:8d:5a:52:e5:0c:bc:a8:dc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 12 18:58:47 2026 GMT
Not After : Feb 11 19:03:47 2027 GMT
Subject: CN=E565F640EB88D471376D8009F24038018A343853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:de:3e:f3:04:66:1d:88:ba:e3:27:bc:d9:
6d:ca:8c:80:c5:2e:49:9c:cf:b7:99:54:a5:a5:e5:
0a:0e:d9:13:1d:00:07:35:de:13:2c:39:d3:43:ee:
13:b6:19:0c:6b:30:01:c1:f7:3a:50:86:8c:55:36:
39:7b:5e:1c:5a:8b:99:20:a7:8a:7b:28:38:6b:4e:
ba:06:2f:a1:2c:41:a7:11:71:cc:69:71:c7:02:41:
f7:bc:db:5b:09:22:f9:7c:b0:7e:2c:5f:48:de:a2:
5d:80:50:52:0b:78:1b:54:d3:7b:ba:e5:5b:84:a9:
0f:85:b1:2b:cc:8c:fd:63:80:c2:e1:42:f5:cb:4e:
bc:ac:3d:b5:98:ae:44:4d:82:79:c7:31:e5:c0:af:
a5:f0:cc:d0:63:59:20:78:f4:3d:ff:78:e2:d4:63:
d5:72:fd:6c:67:69:a6:d8:d2:02:a2:69:17:d6:7f:
8b:e7:ac:30:da:54:6b:b2:a1:09:18:ef:f6:d2:e3:
5e:0a:a0:06:69:78:e6:22:03:19:74:d7:42:10:25:
89:5f:39:92:97:ca:04:f4:63:79:ae:f2:dd:60:ff:
9e:eb:a3:5d:0a:36:ed:c7:b0:e6:3c:6f:fa:d1:e5:
88:df:09:40:f0:0c:2b:57:f8:76:cf:92:21:2a:4a:
b6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:65:F6:40:EB:88:D4:71:37:6D:80:09:F2:40:38:01:8A:34:38:53
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3131392e302f32342d3234203d3e20323633373032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.119.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ef:34:ba:52:5d:98:73:e9:bd:85:8b:e9:e3:32:83:91:26:
32:b8:68:b7:dd:61:c3:5e:74:4d:c2:15:30:cb:bd:ad:0a:73:
5c:35:5e:0d:57:14:06:1f:78:42:f3:dc:b3:98:4d:18:3a:22:
b9:0e:e8:6b:7c:f8:f1:f6:b5:8d:94:e9:36:b0:ad:79:19:0d:
67:54:70:a6:bc:7e:3f:d2:1f:ec:8e:81:9d:6b:78:2f:43:f7:
0e:01:7f:6a:69:db:80:af:28:c1:dc:74:6a:00:c8:be:18:99:
c9:7b:91:7e:b9:7f:fd:17:8f:30:5d:02:24:45:ee:27:03:b5:
e7:9a:e9:3b:b1:f2:d0:71:6e:32:de:85:f6:63:ce:07:4e:b3:
d1:c7:bf:35:c8:03:61:8d:e6:4d:d2:93:3f:1f:85:12:d4:68:
1a:32:33:f4:2c:36:e3:09:73:2c:b7:da:4e:e7:03:b6:bc:46:
b5:ad:c8:e0:5d:cd:5d:9d:ff:4d:ef:09:c9:7c:47:1d:bb:2c:
2a:24:1d:c0:bf:37:11:63:f1:f6:76:36:89:e4:63:04:59:65:
eb:9f:e4:c8:92:2c:8d:d3:26:be:16:af:7d:3f:f5:1d:63:df:
5a:20:1f:58:1c:4c:19:1e:d4:6f:94:ab:54:5b:9b:87:d5:6f:
f0:6b:8c:31
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUSFCrsETo75Z5xySNWlLlDLyo3K4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4
Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDdaFw0yNzAyMTExOTAzNDdaMDMxMTAvBgNV
BAMTKEU1NjVGNjQwRUI4OEQ0NzEzNzZEODAwOUYyNDAzODAxOEEzNDM4NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOt4+8wRmHYi64ye82W3KjIDF
Lkmcz7eZVKWl5QoO2RMdAAc13hMsOdND7hO2GQxrMAHB9zpQhoxVNjl7Xhxai5kg
p4p7KDhrTroGL6EsQacRccxpcccCQfe821sJIvl8sH4sX0jeol2AUFILeBtU03u6
5VuEqQ+FsSvMjP1jgMLhQvXLTrysPbWYrkRNgnnHMeXAr6XwzNBjWSB49D3/eOLU
Y9Vy/WxnaabY0gKiaRfWf4vnrDDaVGuyoQkY7/bS414KoAZpeOYiAxl010IQJYlf
OZKXygT0Y3mu8t1g/57ro10KNu3HsOY8b/rR5YjfCUDwDCtX+HbPkiEqSrZ9AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU5WX2QOuI1HE3bYAJ8kA4AYo0OFMwHwYDVR0j
BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4
NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP
R1Y2TS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt
NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMx
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNzMwMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABtSHcwDQYJKoZIhvcNAQELBQADggEBAFjvNLpSXZhz6b2Fi+njMoORJjK4aLfd
YcNedE3CFTDLva0Kc1w1Xg1XFAYfeELz3LOYTRg6IrkO6Gt8+PH2tY2U6TawrXkZ
DWdUcKa8fj/SH+yOgZ1reC9D9w4Bf2pp24CvKMHcdGoAyL4Ymcl7kX65f/0XjzBd
AiRF7icDteea6Tux8tBxbjLehfZjzgdOs9HHvzXIA2GN5k3Skz8fhRLUaBoyM/Qs
NuMJcyy32k7nA7a8RrWtyOBdzV2d/03vCcl8Rx27LCokHcC/NxFj8fZ2NonkYwRZ
Zeuf5MiSLI3TJr4Wr30/9R1j31ogH1gcTBke1G+Uq1Rbm4fVb/BrjDE=
-----END CERTIFICATE-----
Generated at Sat Feb 14 19:55:19 2026 by rpki-client