This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e20333938343635.roa File: 3130392e37322e3132332e302f32342d3234203d3e20333938343635.roa (raw, json) Hash identifier: pF+OBTgBEPBIEjMLt6KFkQ9YSPQu50dJqUZx6oz3wpM= Subject key identifier: 34:A5:52:1F:C5:53:D6:A7:6A:EF:D8:7F:A6:9E:BB:85:49:F0:F1:98 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 12368192417B5F98C9071D23686293A0B1C5AB1A Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e20333938343635.roa Signing time: Thu 12 Feb 2026 19:23:01 +0000 ROA not before: Thu 12 Feb 2026 19:18:01 +0000 ROA not after: Thu 11 Feb 2027 19:23:01 +0000 asID: 398465 IP address blocks: 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:36:81:92:41:7b:5f:98:c9:07:1d:23:68:62:93:a0:b1:c5:ab:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:18:01 2026 GMT Not After : Feb 11 19:23:01 2027 GMT Subject: CN=34A5521FC553D6A76AEFD87FA69EBB8549F0F198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:5f:77:fa:b5:db:3e:fa:cc:0e:46:99:bc: ff:3e:3b:0a:2a:5e:19:df:85:58:48:45:ac:36:ff: 1e:c5:7a:15:45:14:89:1c:31:e2:80:db:04:6c:20: 82:80:5d:42:52:41:53:9e:5c:07:b2:9a:37:63:44: 4d:f9:fa:0e:4d:db:83:52:54:2a:a8:84:10:33:6a: 1d:23:f4:e9:83:c0:81:a3:1e:04:aa:7f:d9:b2:87: 2c:41:48:0e:47:3f:ba:da:e8:fd:99:12:ca:66:ce: d6:e7:0c:02:18:65:5a:26:75:ef:e1:3e:de:84:e8: 36:95:25:fd:51:e8:c1:e5:87:62:91:7a:d7:10:68: b4:b7:bd:36:18:c5:55:ad:53:f9:6e:c8:bd:2a:ef: 07:a9:a6:1c:f3:29:4d:02:0d:2c:9a:e2:0b:a7:f0: 51:e7:05:8d:6e:ee:87:51:99:37:b1:22:de:2b:70: db:d0:3a:d7:c6:30:26:36:0c:f2:4d:b9:1b:b9:fd: d8:77:ff:e9:50:91:b6:4c:58:06:5c:91:ba:a4:f9: 09:52:a0:c6:c9:cf:92:e2:57:ba:e4:20:c9:f7:f7: a7:ec:51:4e:80:2a:22:29:35:6e:17:cc:dc:45:f2: 55:cc:73:a8:86:f1:d7:85:1b:8f:13:1b:a2:b6:37: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A5:52:1F:C5:53:D6:A7:6A:EF:D8:7F:A6:9E:BB:85:49:F0:F1:98 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e20333938343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 41:f4:01:13:c3:c8:15:83:29:99:72:9b:bf:f1:4f:d3:ea:44: 33:6b:67:77:29:9d:83:ea:31:8e:f8:70:d6:a3:fb:fe:35:f1: 42:a8:3f:b7:3d:7c:a3:ec:2a:71:f3:e5:94:91:bb:9a:56:34: d7:59:a6:db:ee:16:ed:df:b6:88:f5:38:76:55:03:ba:7f:c7: 2e:d8:81:4d:b0:da:1d:80:32:ce:9f:62:38:a2:b8:99:76:1e: 0e:48:ce:29:f9:eb:41:c1:a2:cf:fc:b4:73:13:db:70:d4:df: 92:e4:89:7d:18:fa:8f:22:bc:a5:c5:3f:04:52:3c:c5:bb:85: 3c:b2:e9:3d:69:17:fe:fe:08:41:08:81:05:1f:d0:2b:1f:af: ff:34:70:87:3c:db:12:12:a4:50:e9:a3:5e:ee:e7:6f:66:95: 78:1b:1a:af:ac:3a:2a:71:b2:cc:12:f9:e9:0f:97:4d:f4:55: d8:21:3f:2c:f6:f4:3a:e8:4a:5b:24:8b:f8:6b:9b:f0:8b:e2: fc:0d:30:0e:79:d3:61:2f:b3:c8:1c:73:84:1c:cf:ef:c4:34: 83:4d:84:96:13:52:ba:7d:9e:19:3a:c5:16:2b:10:5b:63:a7: 17:9d:d0:76:bd:3b:5e:28:0f:c0:98:a0:40:73:9b:6e:56:d8: ab:7e:87:b5 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUEjaBkkF7X5jJBx0jaGKToLHFqxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE4MDFaFw0yNzAyMTExOTIzMDFaMDMxMTAvBgNV BAMTKDM0QTU1MjFGQzU1M0Q2QTc2QUVGRDg3RkE2OUVCQjg1NDlGMEYxOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OV93+rXbPvrMDkaZvP8+Owoq XhnfhVhIRaw2/x7FehVFFIkcMeKA2wRsIIKAXUJSQVOeXAeymjdjRE35+g5N24NS VCqohBAzah0j9OmDwIGjHgSqf9myhyxBSA5HP7ra6P2ZEspmztbnDAIYZVomde/h Pt6E6DaVJf1R6MHlh2KRetcQaLS3vTYYxVWtU/luyL0q7wepphzzKU0CDSya4gun 8FHnBY1u7odRmTexIt4rcNvQOtfGMCY2DPJNuRu5/dh3/+lQkbZMWAZckbqk+QlS oMbJz5LiV7rkIMn396fsUU6AKiIpNW4XzNxF8lXMc6iG8deFG48TG6K2NyZ7AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUNKVSH8VT1qdq79h/pp67hUnw8ZgwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMy MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzgzNDM2MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABtSHswDQYJKoZIhvcNAQELBQADggEBAEH0ARPDyBWDKZlym7/xT9PqRDNrZ3cp nYPqMY74cNaj+/418UKoP7c9fKPsKnHz5ZSRu5pWNNdZptvuFu3ftoj1OHZVA7p/ xy7YgU2w2h2AMs6fYjiiuJl2Hg5Izin560HBos/8tHMT23DU35LkiX0Y+o8ivKXF PwRSPMW7hTyy6T1pF/7+CEEIgQUf0Csfr/80cIc82xISpFDpo17u529mlXgbGq+s OipxsswS+ekPl030VdghPyz29DroSlski/hrm/CL4vwNMA5502Evs8gcc4Qcz+/E NINNhJYTUrp9nhk6xRYrEFtjpxed0Ha9O14oD8CYoEBzm25W2Kt+h7U= -----END CERTIFICATE-----Generated at Sat Feb 14 19:56:20 2026 by rpki-client