This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132312e302f32342d3234203d3e20343031383338.roa File: 3130392e37322e3132312e302f32342d3234203d3e20343031383338.roa (raw, json) Hash identifier: 6/cJsJr8b1ruKpRa6F3PXSspgyKY7U2OCmspyF1g8Xk= Subject key identifier: D0:7A:5D:BE:8B:F3:18:0C:8B:BE:52:D6:13:B5:FA:CE:65:1D:4F:52 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 24EF4ED84565CA0C99717A9990DEE1C54B201999 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132312e302f32342d3234203d3e20343031383338.roa Signing time: Thu 12 Feb 2026 19:03:46 +0000 ROA not before: Thu 12 Feb 2026 18:58:46 +0000 ROA not after: Thu 11 Feb 2027 19:03:46 +0000 asID: 401838 IP address blocks: 109.72.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ef:4e:d8:45:65:ca:0c:99:71:7a:99:90:de:e1:c5:4b:20:19:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:46 2026 GMT Not After : Feb 11 19:03:46 2027 GMT Subject: CN=D07A5DBE8BF3180C8BBE52D613B5FACE651D4F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:b1:e5:38:f8:37:b7:b5:7c:99:ff:4f:03: c1:df:d1:56:8e:e6:2c:f9:f2:32:4f:e4:6d:05:c4: 8c:84:78:4d:3f:d2:82:9c:be:ee:f0:65:32:4e:41: 2b:3e:bc:e9:f6:e8:9c:f7:cd:ba:a6:9b:14:0a:ea: d1:f9:6a:5c:28:06:4c:d8:a5:9c:66:12:4a:d8:a9: b3:ec:9c:70:45:e1:95:57:1f:f7:6b:42:89:d7:fc: f5:8f:d6:f8:3b:dd:a0:38:22:46:54:73:11:bd:1a: 5e:b2:86:23:56:78:be:50:0c:52:0d:58:60:e5:c8: f1:49:34:e7:c0:c2:7c:fc:35:86:55:52:58:47:a3: 09:d2:64:36:f5:1d:75:87:8d:58:12:c4:0e:0a:1e: 7a:b5:b7:22:9f:b4:ea:c4:11:8b:de:c3:51:e8:0d: 71:1c:e1:d2:a5:58:d2:b0:a1:fc:09:3c:c9:fb:2a: 6a:e8:cc:ac:82:57:d1:c9:c6:68:3c:84:ab:a4:37: 26:67:57:67:25:4d:e8:dd:fa:a8:12:a4:f4:b8:11: 81:7a:5f:db:0d:da:e3:b8:bc:1f:c2:37:72:f2:06: cd:84:aa:45:12:23:05:ab:55:f9:36:63:cc:f7:11: e2:d7:9e:c4:42:4c:60:85:16:8f:e2:a5:b9:57:06: e3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7A:5D:BE:8B:F3:18:0C:8B:BE:52:D6:13:B5:FA:CE:65:1D:4F:52 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132312e302f32342d3234203d3e20343031383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.121.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:4b:08:14:9f:bb:8d:a7:df:49:76:9a:b4:75:a3:d7:6e:5a: 2e:e9:1b:1f:c5:88:83:71:4d:bd:70:c5:78:67:82:9e:b0:97: 07:c0:44:2f:99:f3:e2:4c:b9:1a:de:fc:4c:63:1e:49:f4:6b: 83:2e:50:b1:0f:5d:6e:c0:24:af:27:70:c2:94:80:3a:08:81: b8:a4:ff:24:7e:62:fd:d7:82:b7:91:ed:1e:da:ad:c4:76:f0: 29:dd:1e:22:31:0d:05:8a:f9:66:4b:60:f8:db:50:48:de:ff: 93:f1:36:f0:97:af:b2:7f:9c:6d:d4:7d:c3:5f:ff:c1:dc:13: a5:d7:5e:6b:aa:79:8d:f1:63:d1:cf:91:0c:68:40:e3:35:b2: 2e:72:29:76:7b:4e:05:ca:67:cf:f0:9e:c7:76:0c:8d:85:db: 53:aa:57:e8:6d:fd:21:72:68:4e:d1:11:f6:cf:05:43:f8:36: ae:8a:01:c7:ab:6b:71:03:45:ab:59:cc:39:f0:48:93:c3:b8: d0:bd:09:b5:b9:19:2a:2b:2e:c8:7c:48:78:a1:10:80:f7:dd: cd:d2:75:a5:ec:bf:85:82:e2:86:d2:4d:17:9e:f2:af:33:fd: 2b:79:5e:57:17:20:5e:f2:8f:4f:c8:ee:26:92:30:3f:35:d9: 60:21:9e:15 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUJO9O2EVlygyZcXqZkN7hxUsgGZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDZaFw0yNzAyMTExOTAzNDZaMDMxMTAvBgNV BAMTKEQwN0E1REJFOEJGMzE4MEM4QkJFNTJENjEzQjVGQUNFNjUxRDRGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+bHlOPg3t7V8mf9PA8Hf0VaO 5iz58jJP5G0FxIyEeE0/0oKcvu7wZTJOQSs+vOn26Jz3zbqmmxQK6tH5alwoBkzY pZxmEkrYqbPsnHBF4ZVXH/drQonX/PWP1vg73aA4IkZUcxG9Gl6yhiNWeL5QDFIN WGDlyPFJNOfAwnz8NYZVUlhHownSZDb1HXWHjVgSxA4KHnq1tyKftOrEEYvew1Ho DXEc4dKlWNKwofwJPMn7KmrozKyCV9HJxmg8hKukNyZnV2clTejd+qgSpPS4EYF6 X9sN2uO4vB/CN3LyBs2EqkUSIwWrVfk2Y8z3EeLXnsRCTGCFFo/ipblXBuO1AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU0HpdvovzGAyLvlLWE7X6zmUdT1IwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMy MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzEzODMzMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABtSHkwDQYJKoZIhvcNAQELBQADggEBACxLCBSfu42n30l2mrR1o9duWi7pGx/F iINxTb1wxXhngp6wlwfARC+Z8+JMuRre/ExjHkn0a4MuULEPXW7AJK8ncMKUgDoI gbik/yR+Yv3XgreR7R7arcR28CndHiIxDQWK+WZLYPjbUEje/5PxNvCXr7J/nG3U fcNf/8HcE6XXXmuqeY3xY9HPkQxoQOM1si5yKXZ7TgXKZ8/wnsd2DI2F21OqV+ht /SFyaE7REfbPBUP4Nq6KAcera3EDRatZzDnwSJPDuNC9CbW5GSorLsh8SHihEID3 3c3SdaXsv4WC4obSTRee8q8z/St5XlcXIF7yj0/I7iaSMD812WAhnhU= -----END CERTIFICATE-----Generated at Sat Feb 14 19:55:18 2026 by rpki-client