This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132322e302f32342d3234203d3e203630383630.roa File: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (raw, json) Hash identifier: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM= Subject key identifier: AA:7A:83:A5:6D:3B:B4:AD:57:8A:76:8F:C0:5E:8A:90:4E:C2:A9:FC Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 627C3DFA4D13F5C6D4C03D65C1F672609D1828D3 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132322e302f32342d3234203d3e203630383630.roa Signing time: Thu 12 Feb 2026 19:01:45 +0000 ROA not before: Thu 12 Feb 2026 18:56:45 +0000 ROA not after: Thu 11 Feb 2027 19:01:45 +0000 asID: 60860 IP address blocks: 109.72.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7c:3d:fa:4d:13:f5:c6:d4:c0:3d:65:c1:f6:72:60:9d:18:28:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:56:45 2026 GMT Not After : Feb 11 19:01:45 2027 GMT Subject: CN=AA7A83A56D3BB4AD578A768FC05E8A904EC2A9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:48:10:dd:5e:45:89:2e:75:8a:64:14:c1: 38:f3:f3:58:16:16:44:7d:97:cf:c9:5e:25:0d:b3: db:d3:41:5d:da:59:86:44:cc:f1:d5:13:9e:07:14: 25:19:07:a5:b2:e6:86:9e:d3:06:26:10:5c:87:53: 39:8e:bd:93:f0:32:39:14:29:31:33:d3:d2:f7:0f: e3:ea:80:19:41:d5:f3:24:57:6c:13:93:fc:19:6d: 65:fa:32:74:1f:02:62:8b:7a:ec:81:5d:77:45:d2: a2:a2:53:dc:83:62:af:8f:d5:a8:c4:a0:94:dc:58: 46:8c:d0:29:f5:4d:e8:41:2f:e1:0d:08:23:f1:91: 66:51:ba:b2:a7:d8:4c:7f:de:f4:ed:d0:86:4c:fa: 70:72:e5:ec:a9:88:12:a5:4a:a7:98:ff:97:2c:86: d9:5d:0f:f9:36:99:ec:d7:01:0a:a0:f3:83:e6:b6: 73:fb:8d:9c:c4:dd:a8:2a:b0:29:3f:d4:07:36:e8: 48:dd:e8:95:82:0c:b4:6e:6e:81:e5:ad:e8:64:a1: 26:3d:49:e9:e7:c8:29:b9:3c:7b:ab:6b:f2:e1:2f: 68:36:5e:60:77:df:71:7c:c4:34:95:51:6b:1d:43: 28:94:2a:29:5f:4d:d0:e1:4b:ae:84:7d:4f:04:77: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7A:83:A5:6D:3B:B4:AD:57:8A:76:8F:C0:5E:8A:90:4E:C2:A9:FC X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132322e302f32342d3234203d3e203630383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.122.0/24 Signature Algorithm: sha256WithRSAEncryption 57:62:db:9b:f4:33:c1:a8:25:ce:e1:fd:9e:01:76:3c:c8:71: b6:9b:a6:82:71:af:37:c1:08:16:6d:3c:6a:e7:56:8c:67:c0: 2d:0e:c9:e2:6e:9f:39:4b:eb:b8:02:24:d3:7a:13:fa:48:95: 9d:e4:1b:2b:7e:34:84:8a:a1:9c:70:23:26:3b:ed:16:f1:10: 2e:32:5e:c7:6e:d7:ee:83:9d:a9:9e:7f:b6:59:ca:3f:85:a8: 9d:7a:5d:78:f8:8f:db:10:a8:ac:82:40:e0:88:60:5e:ba:2c: b4:b3:05:e1:f8:06:7c:02:c0:2e:39:fa:29:9e:eb:f5:d5:13: fc:1f:26:b2:33:b1:f8:ac:d4:58:ae:3a:a3:c4:e5:1c:23:48: 67:f8:37:6e:c3:e8:ab:3c:a1:9d:a1:cb:d8:b4:59:4a:77:9a: 50:e5:4f:77:5d:0e:19:94:aa:f3:81:b3:49:c7:28:c3:14:ef: c0:e1:21:45:c4:77:a4:c6:88:31:11:ce:63:24:ed:69:8d:ac: e2:57:e9:b5:d0:55:a3:dc:eb:9a:69:e2:51:c1:a8:94:71:4c: a7:1a:93:30:2a:1f:8a:6a:01:39:7c:0b:34:2b:16:d6:58:2d: f3:14:38:dd:fe:cd:7d:a1:e7:7c:d7:d9:c2:b2:14:1b:02:0e: 2f:3d:5c:6f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYnw9+k0T9cbUwD1lwfZyYJ0YKNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU2NDVaFw0yNzAyMTExOTAxNDVaMDMxMTAvBgNV BAMTKEFBN0E4M0E1NkQzQkI0QUQ1NzhBNzY4RkMwNUU4QTkwNEVDMkE5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AEgQ3V5FiS51imQUwTjz81gW FkR9l8/JXiUNs9vTQV3aWYZEzPHVE54HFCUZB6Wy5oae0wYmEFyHUzmOvZPwMjkU KTEz09L3D+PqgBlB1fMkV2wTk/wZbWX6MnQfAmKLeuyBXXdF0qKiU9yDYq+P1ajE oJTcWEaM0Cn1TehBL+ENCCPxkWZRurKn2Ex/3vTt0IZM+nBy5eypiBKlSqeY/5cs htldD/k2mezXAQqg84PmtnP7jZzE3agqsCk/1Ac26Ejd6JWCDLRuboHlrehkoSY9 SennyCm5PHura/LhL2g2XmB333F8xDSVUWsdQyiUKilfTdDhS66EfU8Ed1W3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUqnqDpW07tK1XinaPwF6KkE7CqfwwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMy MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzgzNjMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA bUh6MA0GCSqGSIb3DQEBCwUAA4IBAQBXYtub9DPBqCXO4f2eAXY8yHG2m6aCca83 wQgWbTxq51aMZ8AtDsnibp85S+u4AiTTehP6SJWd5BsrfjSEiqGccCMmO+0W8RAu Ml7Hbtfug52pnn+2Wco/haidel14+I/bEKisgkDgiGBeuiy0swXh+AZ8AsAuOfop nuv11RP8HyayM7H4rNRYrjqjxOUcI0hn+Dduw+irPKGdocvYtFlKd5pQ5U93XQ4Z lKrzgbNJxyjDFO/A4SFFxHekxogxEc5jJO1pjaziV+m10FWj3OuaaeJRwaiUcUyn GpMwKh+KagE5fAs0KxbWWC3zFDjd/s19oed819nCshQbAg4vPVxv -----END CERTIFICATE-----Generated at Sat Feb 14 19:56:20 2026 by rpki-client