This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132312e302f32342d3234203d3e2037303138.roa File: 3130392e37322e3132312e302f32342d3234203d3e2037303138.roa (raw, json) Hash identifier: mNTWKAHu0sMeTf4TBuUjIaEa4lz+Z73blfmGhYli6WI= Subject key identifier: 07:61:4F:87:12:3B:7E:09:D0:CD:2A:88:48:E3:8F:C4:CD:B6:44:53 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 60CE0EE50BF18B818C08FC868E1D58690CD565AE Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132312e302f32342d3234203d3e2037303138.roa Signing time: Thu 12 Feb 2026 19:20:55 +0000 ROA not before: Thu 12 Feb 2026 19:15:55 +0000 ROA not after: Thu 11 Feb 2027 19:20:55 +0000 asID: 7018 IP address blocks: 109.72.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ce:0e:e5:0b:f1:8b:81:8c:08:fc:86:8e:1d:58:69:0c:d5:65:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:15:55 2026 GMT Not After : Feb 11 19:20:55 2027 GMT Subject: CN=07614F87123B7E09D0CD2A8848E38FC4CDB64453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:4f:e4:da:a6:c5:53:06:e8:d8:02:b9:70: 15:2f:4c:02:5b:ba:3f:f9:14:d8:1f:24:48:df:d9: f6:27:c3:6a:70:af:9a:8e:b8:99:db:f5:69:d8:0d: 04:a2:55:a1:97:77:5b:f5:b2:36:2a:1e:46:02:17: 16:da:8c:88:d5:5b:16:3e:9b:2a:cf:23:46:ec:ef: 14:88:cd:87:34:d1:d0:82:c0:18:f9:56:75:42:d1: 96:4e:51:03:0d:9b:22:c7:f1:11:f3:fa:e1:a2:b3: fc:c5:14:ca:c6:2e:fa:c7:19:0f:23:9a:c8:5f:32: d0:27:bf:d5:1e:b7:ca:b9:33:45:f1:e5:cf:80:77: 86:2b:54:4c:1d:c6:09:1f:97:0d:39:03:63:a7:0e: 03:7c:f9:11:cc:4c:86:d8:a0:17:78:85:2f:1d:6b: 89:de:62:ab:41:53:6d:b2:f2:4c:1a:1a:76:61:2a: 19:f8:3d:27:38:e0:b5:ed:8f:7e:67:d9:8d:3b:4b: b6:f4:93:25:a2:6a:18:3b:99:2d:ff:ea:12:94:34: 6c:9f:03:20:b1:fa:54:90:09:f7:7e:b5:bc:37:e5: fd:a5:d8:f4:dc:2d:65:d6:8f:5a:33:d8:28:9d:31: 49:b5:1e:4e:ce:0c:7d:46:6c:ab:00:78:aa:1e:5a: 49:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:61:4F:87:12:3B:7E:09:D0:CD:2A:88:48:E3:8F:C4:CD:B6:44:53 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132312e302f32342d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.121.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:fc:53:22:5c:7f:9a:ba:9c:6f:ad:e1:c2:11:fc:01:24:64: df:89:ef:05:4c:8f:77:a3:52:1e:4c:3b:c3:4c:5d:b6:d8:c8: 00:c9:c9:56:52:49:f1:a1:0a:4d:e0:1c:e3:3d:e9:92:0b:35: f4:44:1d:99:e6:a5:27:d0:74:9f:d3:8d:86:b9:11:ec:57:8b: 4c:14:0f:ee:0f:fd:ab:52:a5:4c:4a:7b:44:61:2d:f4:15:56: f7:72:08:93:76:3d:55:2f:b0:27:e9:ff:2d:83:f0:70:6e:f3: 0d:55:ad:6e:16:f6:69:89:e5:d2:9f:07:83:5d:f9:6f:e4:eb: 84:86:87:80:74:2a:94:38:4f:d6:f6:f1:81:7d:f4:61:ea:db: 20:86:0c:fa:0e:c4:a9:5e:0d:be:c0:c6:c8:7e:32:5a:49:43: 2e:ba:2a:50:ff:c0:b9:d4:26:f7:08:04:05:61:04:b6:6d:98: 76:fe:d0:87:d8:2f:ef:e7:6d:7f:a2:f2:b5:16:7c:11:df:91: 5f:31:f6:06:13:98:16:7c:68:ac:c3:7a:6b:00:dc:c3:6d:4e: e3:a0:4c:2c:46:2b:73:08:30:6a:68:23:0a:9b:ed:bb:6b:06: c6:e1:37:e4:16:75:d0:a7:87:c4:93:65:23:2d:ef:dd:03:fa: b1:b3:ec:e0 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUYM4O5Qvxi4GMCPyGjh1YaQzVZa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE1NTVaFw0yNzAyMTExOTIwNTVaMDMxMTAvBgNV BAMTKDA3NjE0Rjg3MTIzQjdFMDlEMENEMkE4ODQ4RTM4RkM0Q0RCNjQ0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hU/k2qbFUwbo2AK5cBUvTAJb uj/5FNgfJEjf2fYnw2pwr5qOuJnb9WnYDQSiVaGXd1v1sjYqHkYCFxbajIjVWxY+ myrPI0bs7xSIzYc00dCCwBj5VnVC0ZZOUQMNmyLH8RHz+uGis/zFFMrGLvrHGQ8j mshfMtAnv9Uet8q5M0Xx5c+Ad4YrVEwdxgkflw05A2OnDgN8+RHMTIbYoBd4hS8d a4neYqtBU22y8kwaGnZhKhn4PSc44LXtj35n2Y07S7b0kyWiahg7mS3/6hKUNGyf AyCx+lSQCfd+tbw35f2l2PTcLWXWj1oz2CidMUm1Hk7ODH1GbKsAeKoeWkn7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUB2FPhxI7fgnQzSqISOOPxM22RFMwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMy MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1I eTANBgkqhkiG9w0BAQsFAAOCAQEAK/xTIlx/mrqcb63hwhH8ASRk34nvBUyPd6NS Hkw7w0xdttjIAMnJVlJJ8aEKTeAc4z3pkgs19EQdmealJ9B0n9ONhrkR7FeLTBQP 7g/9q1KlTEp7RGEt9BVW93IIk3Y9VS+wJ+n/LYPwcG7zDVWtbhb2aYnl0p8Hg135 b+TrhIaHgHQqlDhP1vbxgX30YerbIIYM+g7EqV4NvsDGyH4yWklDLroqUP/AudQm 9wgEBWEEtm2Ydv7Qh9gv7+dtf6LytRZ8Ed+RXzH2BhOYFnxorMN6awDcw21O46BM LEYrcwgwamgjCpvtu2sGxuE35BZ10KeHxJNlIy3v3QP6sbPs4A== -----END CERTIFICATE-----Generated at Sat Feb 14 19:54:17 2026 by rpki-client