This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e2036303739.roa File: 3130392e37322e3132332e302f32342d3234203d3e2036303739.roa (raw, json) Hash identifier: uVdVVEDk9ozhoajwD4lyWpF91DsPWUnxE/p2FBEOh8o= Subject key identifier: 1B:7D:DD:0D:D1:C4:E0:41:8D:BD:FE:94:D8:0E:8F:0D:A3:C6:C4:CF Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 41451CA601690304767DB52BA11CE0E50252099D Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e2036303739.roa Signing time: Thu 12 Feb 2026 19:19:35 +0000 ROA not before: Thu 12 Feb 2026 19:14:35 +0000 ROA not after: Thu 11 Feb 2027 19:19:35 +0000 asID: 6079 IP address blocks: 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:45:1c:a6:01:69:03:04:76:7d:b5:2b:a1:1c:e0:e5:02:52:09:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:14:35 2026 GMT Not After : Feb 11 19:19:35 2027 GMT Subject: CN=1B7DDD0DD1C4E0418DBDFE94D80E8F0DA3C6C4CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:2a:cf:55:26:90:22:1e:ae:91:36:b9:1a: 4b:34:10:f3:e1:ff:b4:d0:88:7d:09:2f:6a:6e:ff: b6:c0:c9:57:6c:c1:63:bb:b5:a6:bf:04:68:ef:53: e2:d8:ea:a4:34:5f:13:ba:05:5f:7f:ea:71:20:ff: f8:80:52:b1:52:03:ef:19:29:ce:9d:37:d5:c5:18: 14:98:26:d7:e6:c9:96:05:1f:50:86:75:8f:51:26: 56:57:33:54:f6:bb:e0:f7:cf:2d:06:ca:b2:46:7e: 24:ca:56:e8:c1:7d:3d:e3:4a:8e:1f:2a:5b:9e:1d: 82:da:01:5d:08:77:7d:9a:53:6e:47:6a:00:17:58: aa:fc:c7:8d:a1:19:d5:e9:96:95:bc:5d:64:8f:7e: de:1e:bb:53:e0:9a:e3:d6:ec:ac:66:b1:f7:40:2e: 45:c3:1c:b2:32:04:27:db:b4:90:5f:d1:4d:01:8d: c3:cf:95:b2:59:63:ce:45:bf:76:82:60:71:f2:29: 1f:55:fe:ea:a6:a4:38:1f:65:42:6d:ee:af:bd:54: 00:07:79:52:f0:35:f3:54:17:81:53:8c:1f:77:92: f4:54:c3:c4:ed:90:73:b9:cf:1c:45:e3:ec:c1:49: 44:09:18:a4:30:51:8b:63:66:0b:4e:0e:13:10:2a: 13:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7D:DD:0D:D1:C4:E0:41:8D:BD:FE:94:D8:0E:8F:0D:A3:C6:C4:CF X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e2036303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:cc:e5:2d:3f:f3:3e:25:83:39:2e:96:8b:d4:d6:06:8b:41: 28:85:38:61:52:ee:2e:27:e8:6d:1c:18:10:c2:a0:2f:33:06: a5:c7:29:b9:6d:f4:90:cc:41:3d:38:1f:99:7c:de:bc:2e:b3: 00:e2:b9:40:31:87:ca:6f:e7:2f:72:87:bb:b4:33:33:25:9c: a2:f6:b1:0c:73:0f:44:5b:58:da:4f:25:d5:07:df:ae:7f:5c: bc:53:57:db:52:d2:bb:95:04:49:10:8a:07:3c:6e:71:1a:4d: 58:48:9a:fb:94:bd:61:f4:88:39:cb:42:b2:af:fc:d5:57:aa: c0:bd:ed:f5:cd:c6:ba:36:46:5c:33:19:fc:13:dc:26:0e:f7: 19:a3:83:64:51:d2:51:7d:76:4a:76:1d:e5:6a:88:d4:92:85: ab:6d:fe:31:3d:9d:ff:ad:73:cf:0c:4d:4b:16:0f:e5:b4:a2: 93:22:9e:98:70:39:f7:e3:f7:57:0f:87:34:d0:71:b8:8d:35: 52:73:29:b8:47:2d:b9:ed:44:bd:8f:b4:57:31:15:a9:99:02: f4:e7:ef:2c:7c:af:11:70:bb:83:c4:a6:ea:ec:11:e1:a2:eb: 92:93:5b:ff:9f:62:dc:6b:19:89:b7:d9:84:d8:0c:98:e6:90: 46:94:93:5d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUQUUcpgFpAwR2fbUroRzg5QJSCZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE0MzVaFw0yNzAyMTExOTE5MzVaMDMxMTAvBgNV BAMTKDFCN0RERDBERDFDNEUwNDE4REJERkU5NEQ4MEU4RjBEQTNDNkM0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWCrPVSaQIh6ukTa5Gks0EPPh /7TQiH0JL2pu/7bAyVdswWO7taa/BGjvU+LY6qQ0XxO6BV9/6nEg//iAUrFSA+8Z Kc6dN9XFGBSYJtfmyZYFH1CGdY9RJlZXM1T2u+D3zy0GyrJGfiTKVujBfT3jSo4f KlueHYLaAV0Id32aU25HagAXWKr8x42hGdXplpW8XWSPft4eu1PgmuPW7KxmsfdA LkXDHLIyBCfbtJBf0U0BjcPPlbJZY85Fv3aCYHHyKR9V/uqmpDgfZUJt7q+9VAAH eVLwNfNUF4FTjB93kvRUw8TtkHO5zxxF4+zBSUQJGKQwUYtjZgtODhMQKhMDAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUG33dDdHE4EGNvf6U2A6PDaPGxM8wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMy MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzczOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1I ezANBgkqhkiG9w0BAQsFAAOCAQEAC8zlLT/zPiWDOS6Wi9TWBotBKIU4YVLuLifo bRwYEMKgLzMGpccpuW30kMxBPTgfmXzevC6zAOK5QDGHym/nL3KHu7QzMyWcovax DHMPRFtY2k8l1Qffrn9cvFNX21LSu5UESRCKBzxucRpNWEia+5S9YfSIOctCsq/8 1VeqwL3t9c3GujZGXDMZ/BPcJg73GaODZFHSUX12SnYd5WqI1JKFq23+MT2d/61z zwxNSxYP5bSikyKemHA59+P3Vw+HNNBxuI01UnMpuEctue1EvY+0VzEVqZkC9Ofv LHyvEXC7g8Sm6uwR4aLrkpNb/59i3GsZibfZhNgMmOaQRpSTXQ== -----END CERTIFICATE-----Generated at Sat Feb 14 19:56:19 2026 by rpki-client