This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132312e302f32342d3234203d3e2036303739.roa File: 3130392e37322e3132312e302f32342d3234203d3e2036303739.roa (raw, json) Hash identifier: s+Frq6VtWPWu19TrwLNWLcn2SVozdjr2gySPyH4QFeI= Subject key identifier: C5:0B:7C:9D:7F:62:B0:D3:A1:A9:68:1A:CA:70:45:B5:6A:51:0F:4A Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 57D55183A64C47875F0EC8E298E484F3976F2D04 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132312e302f32342d3234203d3e2036303739.roa Signing time: Fri 13 Feb 2026 09:52:26 +0000 ROA not before: Fri 13 Feb 2026 09:47:26 +0000 ROA not after: Fri 12 Feb 2027 09:52:26 +0000 asID: 6079 IP address blocks: 109.72.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d5:51:83:a6:4c:47:87:5f:0e:c8:e2:98:e4:84:f3:97:6f:2d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 13 09:47:26 2026 GMT Not After : Feb 12 09:52:26 2027 GMT Subject: CN=C50B7C9D7F62B0D3A1A9681ACA7045B56A510F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:50:dc:47:2d:73:b2:66:33:81:34:59:37:0e: 16:ae:7c:6f:36:05:15:f3:05:17:17:6b:68:20:c7: c5:5a:f6:3a:1d:68:f5:30:66:6b:1a:8f:69:b9:e1: 74:2b:8a:b1:67:de:2a:89:38:3e:40:22:a9:80:e6: 04:b5:17:50:42:b1:66:63:dc:ef:68:ed:c5:d7:c7: 57:75:6a:7b:0a:e5:38:53:d7:85:53:ae:4f:a4:a9: 26:10:56:22:b3:a9:fd:52:22:de:8b:d8:4a:b4:9a: 29:68:4c:32:5e:37:d4:cc:a1:88:f0:02:7c:07:de: ad:a3:e5:aa:c8:72:fa:1a:1a:00:a5:37:6b:c7:01: db:7c:3c:76:b9:d9:73:bb:38:ae:a4:0e:6e:ee:3a: 06:ef:a8:b7:63:6d:23:fa:28:39:22:a3:3a:b5:00: b6:2a:0f:2a:cd:85:67:7b:a8:2c:7b:9d:43:57:c9: 79:cd:ed:5f:39:7f:35:6f:cc:1f:09:24:1a:81:04: 4c:60:de:29:43:6f:60:23:c8:65:93:2e:fa:07:37: dd:0b:e6:cc:5f:6a:b4:30:86:43:fa:75:80:00:11: 6a:a1:04:e8:d2:51:46:0f:61:0f:c5:b2:57:da:cb: 23:6d:19:ba:1d:f2:a2:56:bf:14:1e:8d:72:15:80: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0B:7C:9D:7F:62:B0:D3:A1:A9:68:1A:CA:70:45:B5:6A:51:0F:4A X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132312e302f32342d3234203d3e2036303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.121.0/24 Signature Algorithm: sha256WithRSAEncryption a5:ac:5d:1e:c9:02:05:4a:36:89:66:d1:d0:92:b5:91:03:b3: 10:b1:61:77:36:02:63:f6:c3:2a:20:0d:60:58:52:ab:d0:af: 9a:00:48:78:2c:b2:af:d0:df:59:b6:4e:23:42:a8:18:3b:4a: 8e:37:b1:e1:05:b0:ea:29:0a:40:50:e7:da:22:40:9f:69:60: 0c:49:a7:9a:10:01:c8:38:77:55:30:bf:92:ec:e4:92:c8:7f: 64:84:99:d9:16:65:51:1b:dc:75:22:e6:77:8f:18:85:0c:68: 64:f7:c7:7c:ae:08:02:aa:26:24:b7:08:c8:95:b0:af:4d:d5: d5:4d:cf:a2:23:86:1c:d5:fc:1f:49:a3:ba:c1:ea:2b:62:2d: 68:43:c5:bf:9d:8b:ec:93:ba:40:06:43:aa:c3:f8:1d:d3:a2: ec:e3:f7:23:cb:23:3c:47:4c:e1:6b:3f:51:2c:76:65:32:0e: e1:d1:89:2d:d2:ea:8b:df:f9:2f:60:dd:cd:4d:a8:e4:d7:b1: eb:ea:86:7c:2a:6c:8c:47:50:2d:84:c4:24:c9:9c:e0:58:9e: 86:a7:f9:d9:56:56:8c:d4:31:1b:55:51:8f:cc:b0:86:ce:dc: 4a:a5:c7:4c:48:6a:76:46:d6:a3:f3:b1:a2:fd:51:3c:57:3b: a4:16:4f:1c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUV9VRg6ZMR4dfDsjimOSE85dvLQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTMwOTQ3MjZaFw0yNzAyMTIwOTUyMjZaMDMxMTAvBgNV BAMTKEM1MEI3QzlEN0Y2MkIwRDNBMUE5NjgxQUNBNzA0NUI1NkE1MTBGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlUNxHLXOyZjOBNFk3DhaufG82 BRXzBRcXa2ggx8Va9jodaPUwZmsaj2m54XQrirFn3iqJOD5AIqmA5gS1F1BCsWZj 3O9o7cXXx1d1ansK5ThT14VTrk+kqSYQViKzqf1SIt6L2Eq0miloTDJeN9TMoYjw AnwH3q2j5arIcvoaGgClN2vHAdt8PHa52XO7OK6kDm7uOgbvqLdjbSP6KDkiozq1 ALYqDyrNhWd7qCx7nUNXyXnN7V85fzVvzB8JJBqBBExg3ilDb2AjyGWTLvoHN90L 5sxfarQwhkP6dYAAEWqhBOjSUUYPYQ/FslfayyNtGbod8qJWvxQejXIVgMklAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUxQt8nX9isNOhqWgaynBFtWpRD0owHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMy MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzczOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1I eTANBgkqhkiG9w0BAQsFAAOCAQEApaxdHskCBUo2iWbR0JK1kQOzELFhdzYCY/bD KiANYFhSq9CvmgBIeCyyr9DfWbZOI0KoGDtKjjex4QWw6ikKQFDn2iJAn2lgDEmn mhAByDh3VTC/kuzkksh/ZISZ2RZlURvcdSLmd48YhQxoZPfHfK4IAqomJLcIyJWw r03V1U3PoiOGHNX8H0mjusHqK2ItaEPFv52L7JO6QAZDqsP4HdOi7OP3I8sjPEdM 4Ws/USx2ZTIO4dGJLdLqi9/5L2DdzU2o5Nex6+qGfCpsjEdQLYTEJMmc4Fiehqf5 2VZWjNQxG1VRj8ywhs7cSqXHTEhqdkbWo/Oxov1RPFc7pBZPHA== -----END CERTIFICATE-----Generated at Sat Feb 14 19:56:20 2026 by rpki-client