This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e2037303239.roa File: 3130392e37322e3132332e302f32342d3234203d3e2037303239.roa (raw, json) Hash identifier: D/RDFbmPJiHo9MCGMpjjvCanM4PSDR5JSv1NdoZ0SaY= Subject key identifier: D8:19:D4:17:4C:38:DA:19:D4:A7:0A:CB:5B:76:55:32:E4:89:5A:9C Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 0517C6D1276119952D003E8373333F461AD2F6F8 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e2037303239.roa Signing time: Thu 12 Feb 2026 19:05:46 +0000 ROA not before: Thu 12 Feb 2026 19:00:46 +0000 ROA not after: Thu 11 Feb 2027 19:05:46 +0000 asID: 7029 IP address blocks: 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:17:c6:d1:27:61:19:95:2d:00:3e:83:73:33:3f:46:1a:d2:f6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:00:46 2026 GMT Not After : Feb 11 19:05:46 2027 GMT Subject: CN=D819D4174C38DA19D4A70ACB5B765532E4895A9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f4:23:e4:b9:15:82:7c:f6:31:38:92:34:ca: d8:51:97:be:3d:09:eb:6f:1f:f2:eb:b2:37:1c:4d: 15:d6:f7:a5:fb:d6:43:d6:74:f7:60:b9:01:96:67: 6c:be:45:17:67:35:94:21:cf:5d:3e:28:ba:c2:45: 16:06:3a:ff:3c:63:90:67:ac:32:1c:fc:3f:e0:40: 3f:34:39:4d:4f:78:24:62:5a:00:7c:9d:f9:fa:bb: 7d:cc:81:31:a1:36:b1:d3:78:74:c8:58:9e:59:23: 0d:5d:44:08:ac:bf:2a:f2:78:bb:20:60:7e:9c:d4: 90:34:36:62:f5:59:41:c4:56:33:b9:d3:69:22:91: c9:bc:fa:b2:c8:63:d4:74:48:a4:82:c8:32:dc:6b: 5f:c3:ca:f1:c7:81:10:8b:cd:82:98:fb:d8:48:09: 00:7f:72:62:bc:a7:ee:54:20:50:2a:f6:f3:54:6e: db:ac:00:f0:1b:5e:be:f1:28:96:67:20:4e:b7:bd: a5:04:5e:ac:2e:91:02:2f:e0:7c:45:a5:4b:5a:46: 98:d5:8a:ac:a7:2f:43:1b:c5:3a:a4:c4:dd:31:38: ce:20:e6:02:f0:62:db:5b:6c:6c:ff:1d:f1:c0:10: 53:11:c2:29:10:42:af:2b:49:65:40:99:61:a7:0d: c5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:19:D4:17:4C:38:DA:19:D4:A7:0A:CB:5B:76:55:32:E4:89:5A:9C X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132332e302f32342d3234203d3e2037303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 81:8a:1f:84:54:87:50:5d:82:74:31:10:51:76:83:87:ee:e1: 7b:26:6d:08:5e:90:35:e1:7c:bc:98:0f:ac:84:97:0b:9a:80: 8e:42:97:83:8b:3a:0f:2b:22:83:d2:74:01:2c:88:3c:80:ec: 48:ac:79:b5:3d:44:50:bb:b2:64:2b:73:4b:f2:b5:4f:2e:f5: c0:71:be:16:66:1e:db:f1:30:6e:f4:09:70:7e:86:52:2e:36: 5a:8a:a3:52:20:61:66:2b:aa:c6:65:35:5f:88:3a:42:e8:f1: 0a:d5:73:52:b3:b1:42:e6:f5:69:fc:0a:c8:d7:61:65:80:34: 4b:cb:2d:7d:c8:da:76:ff:56:dc:6b:fe:31:a4:ff:0c:05:a8: a0:e7:25:70:53:8b:b3:85:f7:50:5b:df:84:de:ba:63:8e:34: f5:78:e0:c3:1e:ca:eb:1f:bd:0b:b0:08:52:7a:b8:da:33:03: bf:d0:4f:1c:55:4b:98:04:0f:b1:38:ea:df:e1:53:fd:e0:03: a8:de:9a:c9:4e:b6:cf:46:9c:fd:df:83:29:7c:9a:57:c0:91: 55:74:99:9e:2d:2b:68:3f:0b:42:77:9b:0e:f9:3c:6f:1d:29: 30:f0:48:04:e9:38:bb:35:7c:4d:1c:4f:90:09:74:24:c1:a7: 9d:d6:46:d5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBRfG0SdhGZUtAD6DczM/RhrS9vgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTAwNDZaFw0yNzAyMTExOTA1NDZaMDMxMTAvBgNV BAMTKEQ4MTlENDE3NEMzOERBMTlENEE3MEFDQjVCNzY1NTMyRTQ4OTVBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV9CPkuRWCfPYxOJI0ythRl749 CetvH/LrsjccTRXW96X71kPWdPdguQGWZ2y+RRdnNZQhz10+KLrCRRYGOv88Y5Bn rDIc/D/gQD80OU1PeCRiWgB8nfn6u33MgTGhNrHTeHTIWJ5ZIw1dRAisvyryeLsg YH6c1JA0NmL1WUHEVjO502kikcm8+rLIY9R0SKSCyDLca1/DyvHHgRCLzYKY+9hI CQB/cmK8p+5UIFAq9vNUbtusAPAbXr7xKJZnIE63vaUEXqwukQIv4HxFpUtaRpjV iqynL0MbxTqkxN0xOM4g5gLwYttbbGz/HfHAEFMRwikQQq8rSWVAmWGnDcUhAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU2BnUF0w42hnUpwrLW3ZVMuSJWpwwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMy MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzMwMzIzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1I ezANBgkqhkiG9w0BAQsFAAOCAQEAgYofhFSHUF2CdDEQUXaDh+7heyZtCF6QNeF8 vJgPrISXC5qAjkKXg4s6Dysig9J0ASyIPIDsSKx5tT1EULuyZCtzS/K1Ty71wHG+ FmYe2/EwbvQJcH6GUi42WoqjUiBhZiuqxmU1X4g6QujxCtVzUrOxQub1afwKyNdh ZYA0S8stfcjadv9W3Gv+MaT/DAWooOclcFOLs4X3UFvfhN66Y4409Xjgwx7K6x+9 C7AIUnq42jMDv9BPHFVLmAQPsTjq3+FT/eADqN6ayU62z0ac/d+DKXyaV8CRVXSZ ni0raD8LQnebDvk8bx0pMPBIBOk4uzV8TRxPkAl0JMGnndZG1Q== -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:51 2026 by rpki-client