This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132302e302f32342d3234203d3e2035353131.roa File: 3130392e37322e3132302e302f32342d3234203d3e2035353131.roa (raw, json) Hash identifier: seZ0KZJy4RSuglqWb9Ipi2q6Gs8yC77WjnBYNJb7JA4= Subject key identifier: 0C:69:99:03:1B:72:9E:BE:B0:DB:65:BC:5F:58:1D:79:EA:36:C5:0D Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 4747C8F76223202869A3558F6F958940ED2F2A45 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132302e302f32342d3234203d3e2035353131.roa Signing time: Thu 12 Feb 2026 19:04:42 +0000 ROA not before: Thu 12 Feb 2026 18:59:42 +0000 ROA not after: Thu 11 Feb 2027 19:04:42 +0000 asID: 5511 IP address blocks: 109.72.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:47:c8:f7:62:23:20:28:69:a3:55:8f:6f:95:89:40:ed:2f:2a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:59:42 2026 GMT Not After : Feb 11 19:04:42 2027 GMT Subject: CN=0C6999031B729EBEB0DB65BC5F581D79EA36C50D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:7c:06:9f:d2:65:41:af:59:7e:79:fa:69: 1c:45:c8:52:69:c4:6a:b4:08:11:fa:97:b3:23:9b: 6e:07:15:60:50:9b:20:2e:cd:89:7a:42:89:90:8c: fa:34:06:46:3f:af:04:c5:b6:a3:8e:22:fc:92:c3: 04:de:36:88:3e:c3:a7:15:ad:12:4a:6f:77:5a:3c: b7:29:f5:f3:fc:9c:f7:3f:06:2d:e9:a9:cf:7d:aa: d5:79:7f:f5:28:93:4f:98:0b:50:bb:0b:c2:79:eb: 5d:ee:e0:d8:2b:5c:e1:6f:ca:d8:11:98:25:04:7f: c6:e4:60:20:41:fe:10:e7:48:43:e3:b4:07:4f:6e: 6a:69:e1:90:ed:a1:b1:cb:10:5e:a5:f1:a6:ad:30: 0c:d9:b2:12:c0:fb:71:1f:9c:cd:5b:ed:29:6e:86: 64:3d:b9:bd:ef:24:87:0d:0d:87:c5:aa:b8:5a:f0: 9d:78:de:7f:14:9b:36:5a:36:83:ec:a1:22:d1:12: b6:66:82:36:e7:56:23:05:29:ba:0b:ab:f1:9a:09: cc:9e:1d:0f:89:7e:fe:4a:16:d0:e1:8f:b9:d1:b0: 04:34:93:e4:a4:37:43:4e:3b:1e:c3:26:a6:f5:76: 8b:d4:40:bc:e2:f9:1c:ab:eb:ac:9e:31:fc:3d:83: a8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:69:99:03:1B:72:9E:BE:B0:DB:65:BC:5F:58:1D:79:EA:36:C5:0D X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132302e302f32342d3234203d3e2035353131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.120.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:8a:3f:25:11:71:62:7d:e7:07:8f:69:d2:c3:73:c2:ab:2f: 93:77:8f:9a:ee:a8:48:8b:42:70:4d:51:95:2d:c5:20:c7:74: de:03:e3:c3:08:72:5a:54:ba:ab:e4:89:7f:ea:9a:87:4d:bf: 7c:04:f3:31:a5:94:84:ff:47:d4:d4:1e:25:9b:0d:d1:05:c6: 9f:50:58:1a:c7:c1:84:e8:0c:26:97:40:58:67:3c:cf:56:56: ae:d6:c1:c3:f9:ba:1b:c5:98:09:5f:41:aa:79:c4:47:97:ab: f2:ff:fa:83:8d:04:23:93:f8:4f:ba:57:83:6f:d2:6c:1e:c3: a5:42:a2:2f:e7:d8:2a:bc:88:3b:de:ba:60:3d:df:4a:94:42: 01:69:f3:4c:22:09:0e:82:cb:3d:4f:86:20:82:a2:da:99:f0: c2:8b:f7:47:7b:1a:d9:b0:57:63:40:23:fb:50:4c:a2:c7:81: 06:90:dc:d5:12:4e:88:3e:a9:94:e1:eb:be:c7:6a:26:4e:c5: bf:6c:cf:bb:5f:2c:37:69:0d:c7:f8:dd:aa:a6:23:e1:ef:07: b5:53:ca:9f:db:42:f6:78:d8:4a:f6:67:f9:a5:9d:bb:08:fe: d5:3d:7e:82:f7:f4:9f:0d:8b:5f:7d:8e:84:b6:ad:4a:3b:3e: 83:a2:91:34 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUR0fI92IjIChpo1WPb5WJQO0vKkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU5NDJaFw0yNzAyMTExOTA0NDJaMDMxMTAvBgNV BAMTKDBDNjk5OTAzMUI3MjlFQkVCMERCNjVCQzVGNTgxRDc5RUEzNkM1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygnwGn9JlQa9Zfnn6aRxFyFJp xGq0CBH6l7Mjm24HFWBQmyAuzYl6QomQjPo0BkY/rwTFtqOOIvySwwTeNog+w6cV rRJKb3daPLcp9fP8nPc/Bi3pqc99qtV5f/Uok0+YC1C7C8J5613u4NgrXOFvytgR mCUEf8bkYCBB/hDnSEPjtAdPbmpp4ZDtobHLEF6l8aatMAzZshLA+3EfnM1b7Slu hmQ9ub3vJIcNDYfFqrha8J143n8UmzZaNoPsoSLRErZmgjbnViMFKboLq/GaCcye HQ+Jfv5KFtDhj7nRsAQ0k+SkN0NOOx7DJqb1dovUQLzi+Ryr66yeMfw9g6i3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUDGmZAxtynr6w22W8X1gdeeo2xQ0wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMy MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM1MzEzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1I eDANBgkqhkiG9w0BAQsFAAOCAQEAP4o/JRFxYn3nB49p0sNzwqsvk3ePmu6oSItC cE1RlS3FIMd03gPjwwhyWlS6q+SJf+qah02/fATzMaWUhP9H1NQeJZsN0QXGn1BY GsfBhOgMJpdAWGc8z1ZWrtbBw/m6G8WYCV9BqnnER5er8v/6g40EI5P4T7pXg2/S bB7DpUKiL+fYKryIO966YD3fSpRCAWnzTCIJDoLLPU+GIIKi2pnwwov3R3sa2bBX Y0Aj+1BMoseBBpDc1RJOiD6plOHrvsdqJk7Fv2zPu18sN2kNx/jdqqYj4e8HtVPK n9tC9njYSvZn+aWduwj+1T1+gvf0nw2LX32OhLatSjs+g6KRNA== -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:43 2026 by rpki-client