This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e2037303138.roa File: 3130392e37322e3132332e302f32342d3234203d3e2037303138.roa (raw, json) Hash identifier: xkFzneMGT8RsXohjN+MbEUzdQmjg1WgwzW8MyLBfU0E= Subject key identifier: 68:B8:FD:CA:06:D7:C8:62:DF:AD:1E:97:45:82:ED:3A:50:28:93:91 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 1E11736D3913968154A8405C57C7E7341505EE29 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e2037303138.roa Signing time: Thu 12 Feb 2026 19:21:12 +0000 ROA not before: Thu 12 Feb 2026 19:16:12 +0000 ROA not after: Thu 11 Feb 2027 19:21:12 +0000 asID: 7018 IP address blocks: 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:11:73:6d:39:13:96:81:54:a8:40:5c:57:c7:e7:34:15:05:ee:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:16:12 2026 GMT Not After : Feb 11 19:21:12 2027 GMT Subject: CN=68B8FDCA06D7C862DFAD1E974582ED3A50289391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:82:42:d5:21:a7:3d:54:46:b5:ff:e6:29: b0:25:cb:12:7c:76:7d:47:14:a6:3f:5a:90:2f:09: 69:40:18:03:23:8c:e8:8a:7a:f3:b5:4d:9b:14:84: 44:e6:c8:57:5b:f6:9a:0c:32:65:60:f0:af:03:aa: 82:09:6e:34:ab:57:f8:3f:7b:1f:da:85:37:70:8a: 23:8a:c5:4e:25:f1:d6:20:69:b9:c4:c6:84:3b:bd: 42:d4:cc:eb:b6:8b:41:8b:5a:d0:60:24:06:a7:b7: d6:ca:16:3b:16:c5:51:62:87:74:12:9e:d7:3b:74: 18:c6:5c:d1:88:d0:fc:f8:29:86:6b:e8:94:73:b0: 1e:61:90:8e:77:20:59:dd:88:72:59:f7:28:84:05: b3:ee:58:d5:43:4b:25:20:4c:2d:f3:3d:af:9b:75: f5:c0:61:ab:a1:b3:15:22:fa:f7:1c:8d:a8:72:a3: 54:0b:3d:f4:2b:21:ed:c4:75:01:2c:00:13:ad:ab: e5:ee:a5:d7:6a:af:24:80:78:92:e8:36:b4:9e:9f: 3d:6c:d7:e8:e7:23:5e:9c:03:65:3c:d7:99:0e:9a: 9f:e5:7c:81:81:4c:5d:c0:98:8d:e5:58:61:a0:16: 8d:5a:53:24:2e:1e:cb:7e:4f:05:3a:6b:54:7e:83: cc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B8:FD:CA:06:D7:C8:62:DF:AD:1E:97:45:82:ED:3A:50:28:93:91 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:41:e7:77:e4:c6:b3:00:51:ef:e0:7d:c7:ae:ca:8f:46:b1: 65:86:5a:ba:79:3e:fc:18:2c:34:95:39:91:b4:59:02:37:57: cb:c3:3f:d2:f0:33:aa:1d:58:51:a8:e6:0d:c8:85:7a:bf:02: 20:fe:59:14:df:3e:36:64:f8:14:b0:5d:cc:ed:a6:00:0e:d6: 13:16:54:6e:ad:5c:99:93:b3:f2:fa:75:fe:c4:45:58:75:60: 60:58:df:a1:31:88:d0:dc:4a:31:0e:f0:07:0c:a4:7e:7f:17: 7c:0d:bd:95:18:49:42:a4:fb:e9:fc:0c:24:95:c8:ae:0f:47: 97:0f:ff:24:00:93:d7:44:f3:34:56:54:9d:58:49:a0:9a:85: 4b:60:44:62:6d:1e:b7:7e:32:a3:19:aa:68:5f:63:7f:c1:7a: 05:f9:d4:60:42:c9:90:08:7b:09:6b:eb:d7:fa:89:74:ba:9d: c8:3a:e0:0a:e4:cb:2c:33:11:0d:ea:c1:40:e0:99:96:3c:87: 07:df:24:17:20:74:1e:73:b6:4f:c4:9d:68:05:30:e0:cb:28: 76:12:7b:de:77:b2:e2:ee:0b:50:fa:0e:7a:17:ad:78:17:f5: 19:55:20:27:43:a5:05:2d:1a:d0:a9:00:fa:82:b4:29:5e:27: d1:84:9e:3a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUHhFzbTkTloFUqEBcV8fnNBUF7ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE2MTJaFw0yNzAyMTExOTIxMTJaMDMxMTAvBgNV BAMTKDY4QjhGRENBMDZEN0M4NjJERkFEMUU5NzQ1ODJFRDNBNTAyODkzOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk04JC1SGnPVRGtf/mKbAlyxJ8 dn1HFKY/WpAvCWlAGAMjjOiKevO1TZsUhETmyFdb9poMMmVg8K8DqoIJbjSrV/g/ ex/ahTdwiiOKxU4l8dYgabnExoQ7vULUzOu2i0GLWtBgJAant9bKFjsWxVFih3QS ntc7dBjGXNGI0Pz4KYZr6JRzsB5hkI53IFndiHJZ9yiEBbPuWNVDSyUgTC3zPa+b dfXAYauhsxUi+vccjahyo1QLPfQrIe3EdQEsABOtq+XupddqrySAeJLoNrSenz1s 1+jnI16cA2U815kOmp/lfIGBTF3AmI3lWGGgFo1aUyQuHst+TwU6a1R+g8wTAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUaLj9ygbXyGLfrR6XRYLtOlAok5EwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMy MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1I ezANBgkqhkiG9w0BAQsFAAOCAQEATUHnd+TGswBR7+B9x67Kj0axZYZaunk+/Bgs NJU5kbRZAjdXy8M/0vAzqh1YUajmDciFer8CIP5ZFN8+NmT4FLBdzO2mAA7WExZU bq1cmZOz8vp1/sRFWHVgYFjfoTGI0NxKMQ7wBwykfn8XfA29lRhJQqT76fwMJJXI rg9Hlw//JACT10TzNFZUnVhJoJqFS2BEYm0et34yoxmqaF9jf8F6BfnUYELJkAh7 CWvr1/qJdLqdyDrgCuTLLDMRDerBQOCZljyHB98kFyB0HnO2T8SdaAUw4MsodhJ7 3ney4u4LUPoOeheteBf1GVUgJ0OlBS0a0KkA+oK0KV4n0YSeOg== -----END CERTIFICATE-----Generated at Sat Feb 14 19:54:17 2026 by rpki-client